GRIOT GMBH
Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website is:
GRIOT GmbH
Jägerhaus 1
24321 Helmstorf
Germany
E-mail: wulf@griot.de
Phone: +49 (0) 170 73 555 74
Managing Director: Wulf von Gaudecker
2. General information
We take the protection of personal data seriously. Personal data is information that can be used to identify an individual, directly or indirectly. We process personal data where necessary to operate this website, respond to enquiries, provide a service you have requested or comply with legal obligations. The relevant legal framework includes the General Data Protection Regulation (GDPR).
3. Hosting and server log files
When you visit this website, your browser transmits technical information to the hosting server. This may include your IP address, date and time of access, requested page or file, browser type and version, operating system, referrer URL and amount of data transferred.
This information is processed where necessary to ensure secure and reliable operation. The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in the technical security, stability and functionality of the website. We do not use server log data to create user profiles.
The public GRIOT website is hosted by one.com. Technical hosting and email providers may process data on our behalf where needed to provide their services. Data may also be disclosed where we are legally required to do so.
4. Contact by e-mail or telephone
If you contact us by e-mail or telephone, we process the information you provide to respond to your enquiry and, where applicable, prepare or perform a contractual relationship. Depending on the enquiry, the legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR.
Booking enquiry fields, where offered, only prepare a draft in your email application. This website does not send or store these messages. You decide whether to send the email.
5. YouTube videos
Some pages contain links or preview elements for YouTube videos. Video previews are hosted locally. YouTube content is not loaded automatically when the page opens.
Only after you actively start a video or follow a video link is a connection established to YouTube or Google. Embedded playback uses YouTube’s privacy-enhanced mode. Starting an embedded video constitutes consent to loading that external content under Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG.
From that point, data may be transmitted to Google, including to servers outside the EU, and cookies or similar technologies may be used. If you are logged into a Google or YouTube account, your use may be associated with it. Closing the page stops further embedded playback; withdrawing consent does not affect the lawfulness of earlier processing.
For details about Google’s data processing and international transfer safeguards, see Google’s Privacy Policy and Google’s transfer frameworks.
6. Cookies and similar technologies
The GRIOT website code contains no analytics or advertising trackers and does not set marketing cookies. Technically necessary storage or access may occur where required to provide a function you explicitly request.
Under § 25 TDDDG, consent is generally required for storing or accessing information on your device unless this is strictly necessary for transmitting a communication or providing a digital service explicitly requested by you.
If additional analytics, advertising or tracking services are introduced, this policy and any required consent mechanism will be updated.
8. Retention
We keep personal data only as long as needed for the stated purpose, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage. Enquiry data is deleted when the matter has been completed and no such reason for retention remains. Technical logs are kept only as long as necessary for operation, security and the investigation of incidents.
9. External links
This website contains links to external websites and services. When you follow a link, the external provider’s privacy policy applies. We have no control over its processing of personal data.
10. Your rights
Subject to the applicable legal requirements, you have the right to access your personal data, correct inaccurate data, request erasure, restrict processing and receive data in a portable format. You may object to processing based on legitimate interests, particularly direct marketing, and withdraw consent at any time where processing relies on it.
You can lodge a complaint with a competent supervisory authority. In Schleswig-Holstein, this is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.
11. Changes to this Privacy Policy
We may update this policy if the website, services or legal requirements change. The version published on this website is the current version.
Last updated: 29 September 2026.