Privacy Policy

We appreciate your interest in our website. Protecting your personal data is important to us. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website, contact us, subscribe to our newsletter, or interact with our online services.

1. Controller

The controller responsible for data processing on this website is:

91 Barrio UG (haftungsbeschränkt)
Kantstraße 38
97074 Würzburg
Germany

Managing Director: Calvin Gosselke
Email: calvin.gosselke@91barrio.de
Website: 91barrio.de

2. General Information on Data Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

Personal data means any information relating to an identified or identifiable natural person. We process personal data only to the extent necessary to provide a functional website, respond to inquiries, provide our services, improve our website, send newsletters where requested, and comply with legal obligations.

The legal bases for processing may include:

  • Article 6(1)(a) GDPR, where you have given consent
  • Article 6(1)(b) GDPR, where processing is necessary for pre-contractual steps or contract performance
  • Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation
  • Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. As part of the hosting services, IONOS may process personal data on our behalf, in particular connection data, log data, and technical usage data necessary for the secure and stable operation of the website.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, efficient, and reliable provision of our website.

4. Server Log Files

When you visit our website, the web server automatically collects and stores information in server log files. This may include:

  • IP address
  • date and time of access
  • requested page or file
  • browser type and browser version
  • operating system
  • referrer URL
  • hostname of the accessing device
  • amount of data transferred
  • HTTP status code

These data are processed for the purpose of ensuring the technical operation, security, and stability of the website and to detect and prevent misuse.

The legal basis is Article 6(1)(f) GDPR.

5. Contact by Email or Contact Form

If you contact us by email or through a contact form, we process the data you provide to handle your request. This may include your name, email address, phone number, company details, and the content of your message.

If your request is related to a contract or pre-contractual communication, the legal basis is Article 6(1)(b) GDPR. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in responding to inquiries efficiently.

We store such data only for as long as necessary to process your request and any related follow-up, unless statutory retention obligations apply.

6. Newsletter

If you subscribe to our newsletter, we process your email address and, where applicable, additional information you voluntarily provide in order to send you our newsletter and related communications.

We use Klaviyo for newsletter management and email marketing. Klaviyo may process your contact data, subscription data, device information, and interaction data, such as whether you opened an email or clicked a link.

The legal basis for newsletter processing is your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in each newsletter or by contacting us directly.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some of these technologies are strictly necessary to provide the website and its core functions. Others are used for analytics, marketing, personalization, or communication features.

Strictly necessary technologies are used on the basis of Article 6(1)(f) GDPR and, where applicable, Section 25(2) TDDDG.

Analytics, marketing, and other non-essential technologies are used only on the basis of your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.

You can give, refuse, or withdraw your consent at any time through our cookie or consent settings.

8. Google Analytics

We may use Google Analytics, a web analytics service provided by Google. Google Analytics helps us understand how visitors use our website, for example which pages are visited, how long users stay on pages, and how users interact with our content.

In this context, information such as device information, browser information, approximate location, usage data, and interactions with the website may be processed. According to Google, IP addresses collected from EU users are not logged or stored by Google Analytics and are dropped before logging.

Google Analytics is used only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

We use Google Analytics with privacy-focused settings where available. Analytics data may be retained for a limited period set within the Google Analytics account and then deleted or aggregated.

9. HubSpot

We may use HubSpot, a customer relationship management and marketing platform, for contact management, forms, communication, lead management, and analysis of user interactions with our website and communications.

If you submit a form, contact us, or otherwise interact with our website, HubSpot may process contact details, communication content, technical usage data, and interaction data.

HubSpot is used:

  • under Article 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual communication
  • under Article 6(1)(f) GDPR for efficient customer communication and business organization
  • under Article 6(1)(a) GDPR where consent is required, for example for certain tracking or marketing-related features

10. Meta Pixel

We may use Meta Pixel, a service provided by Meta, to measure the effectiveness of our advertising and to better understand user interactions with our website after users have viewed or clicked on ads on Meta platforms.

Meta Pixel may process information such as page views, visited pages, button clicks, device information, browser information, and certain identifiers.

Meta Pixel is used only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

11. Recipients of Personal Data

We share personal data only where this is legally permitted and necessary for the purposes described in this Privacy Policy.

Recipients may include:

  • hosting providers, in particular IONOS
  • email and communication providers
  • Klaviyo for newsletter delivery and email marketing
  • HubSpot for forms, contact management, and customer communication
  • Google for analytics services
  • Meta for marketing measurement and advertising-related services
  • IT and website service providers who support the operation and maintenance of our website
  • public authorities or courts where we are legally required to do so

Where service providers process personal data on our behalf, we conclude data processing agreements where required by law.

12. International Data Transfers

Some of the services we use may involve the transfer of personal data to countries outside the European Economic Area, in particular to the United States.

Where such transfers occur, we ensure that an appropriate legal safeguard is in place. Depending on the provider and the specific processing, this may include an adequacy decision, participation in the EU-U.S. Data Privacy Framework, or the use of Standard Contractual Clauses together with supplementary safeguards. Google LLC, HubSpot, and Klaviyo publicly state participation in the EU-U.S. Data Privacy Framework.

13. Storage Period

We store personal data only for as long as necessary for the purposes for which the data were collected, or as long as required by law.

In particular:

  • server log data are stored for a limited period necessary for security and technical administration
  • contact requests are stored for as long as needed to process the inquiry and any resulting business communication
  • newsletter data are stored until you unsubscribe or withdraw your consent
  • consent records may be stored as long as necessary to demonstrate compliance with applicable legal obligations
  • analytics and marketing data are stored in accordance with the settings and retention periods of the respective tools, unless deleted earlier

Where statutory retention periods apply, we retain the relevant data for the legally required period.

14. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability
  • the right to object to processing
  • the right to withdraw consent at any time with effect for the future

To exercise your rights, you can contact us using the contact details above.

15. Right to Lodge a Complaint

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for private-sector businesses in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: lda.bayern.de

16. Data Security

We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

17. External Links

Our website may contain links to external websites. We have no influence over the content or data processing practices of those external websites. The respective provider or operator is solely responsible for the content and privacy practices of those websites.

18. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time in order to reflect legal, technical, or business developments. The current version published on our website shall apply.

Last updated: April 2026

Wir benötigen Ihre Zustimmung zum Laden der Übersetzungen

Wir nutzen einen Drittanbieter-Service, um den Inhalt der Website zu übersetzen, der möglicherweise Daten über Ihre Aktivitäten sammelt. Bitte überprüfen Sie die Details in der Datenschutzerklärung und akzeptieren Sie den Dienst, um die Übersetzungen zu sehen.