PRIVACY POLICY

Across the Board GbR · Last updated: [07.09.2026]

This English text is a translation provided for convenience. In the event of any discrepancy, the German version shall prevail.

1. Data protection at a glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

2. Controller

The controller responsible for data processing on this website is:

Across the Board GbR

Landsbergerstr. 48

50858 Köln Cologne, Germany

Represented by: Christian Mario Löhr, Poutiaire Lionel Somé

Email: info@across-the-board.de

3. Hosting

This website is hosted by an external service provider (hoster):

[Serverprofis, 

Otto-Lilienthal-Ring 34-36
D-85622 Feldkirchen

The hoster processes personal data transmitted via this website, in particular IP addresses, on our behalf. This is done on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in the reliable presentation of our website. We have concluded a data processing agreement with our hoster pursuant to Art. 28 GDPR.

4. Data collection on this website

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address.

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR.

5. Contact by email

If you contact us by email, your details, including the contact data you provide, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on without your consent. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest).

6. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies and consent

Our website itself does not set cookies. However, embedded third-party content (see section 8) may store cookies or similar technologies on your device.

Such content is blocked until you give your consent. We obtain this consent via a consent banner when you first visit the site. The legal basis for storing and reading information on your device is § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by changing your selection in the consent settings on this website or by deleting the corresponding cookies in your browser.

8. YouTube video embeds

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

YouTube videos are embedded in extended data protection mode. According to the provider, this means YouTube does not store information about visitors before they play a video. Nevertheless, a connection to Google’s servers is established when playback begins, and Google is informed which of our pages you have visited. If you are logged into your YouTube account, Google can assign your browsing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.

Videos are blocked until you consent to their loading. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.

Data may be transferred to servers of Google LLC in the United States. Google relies on the EU-US Data Privacy Framework for such transfers.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy

9. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it, such as statutory retention periods under commercial or tax law. In the latter case, deletion takes place once those grounds cease to apply.

10. Your rights

You have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to have this data corrected or deleted (Art. 15 to 17 GDPR). You also have the right to request the restriction of processing (Art. 18 GDPR) and the right to receive data you have provided to us in a common, machine-readable format (Art. 20 GDPR).

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before withdrawal remains unaffected.

You may contact us at any time regarding these rights and any further questions on the subject of data protection.

11. Right to object (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to any profiling based on these provisions. Should you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

12. Complaint to the competent supervisory authority

You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the state data protection commissioner of the federal state in which our company is based. For North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW, www.ldi.nrw.de

Sets a technical cookie recording you deny consent, you won't be asked again.

Removes the consent cookie from your browser.