This is a translation. Only the German version is legally binding.
Privacy Policy
Last updated: 7 October 2026
This privacy policy informs you about which personal data we process when you use www.afterwork-stuttgart.de, for what purposes, and what rights you have.
1. Controller
OMC Events-Marketing & e-Communications UG (haftungsbeschränkt)
AFTERWORK Region Stuttgart business unit
Managing Director: Denis Bernard
Tränkestraße 17, 70597 Stuttgart, Germany
Phone: +49 711 72202740
Email: info@afterwork-business.de
2. Legal bases
We process personal data on the basis of the General Data Protection Regulation (GDPR), in particular:
- Art. 6(1)(a) GDPR – your consent,
- Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures,
- Art. 6(1)(c) GDPR – legal obligations,
- Art. 6(1)(f) GDPR – legitimate interests.
In addition, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies to storing information on, or accessing information from, your device: strictly necessary storage is carried out under Section 25 (2) No. 2 TDDDG; all other storage only with your consent under Section 25 (1) TDDDG.
3. Hosting and provision of the website
The website is provided via the platform of Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden. The database, user accounts and file storage (Lovable Cloud) run on Supabase infrastructure. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
When you access the website, technically necessary access data is processed: IP address, date and time, page requested, referrer URL, browser and operating system. This serves the secure and stable delivery of the website and the defence against attacks (Art. 6(1)(f) GDPR). The data is stored only for as long as necessary for these purposes.
Lovable and its sub-processors also process data in part in third countries, in particular the USA. Transfers are based on the EU Standard Contractual Clauses (Art. 46 GDPR).
4. Audience measurement
The hosting provider compiles aggregated visitor statistics for us (e.g. number of visits and page views, referring page, device type, country). We receive only aggregated figures and cannot identify individual persons from them. The purpose is to design our service according to demand (Art. 6(1)(f) GDPR). We do not use any advertising or tracking services.
5. Storage in your browser
Some features store information exclusively locally in your browser (local storage or session storage) without us accessing it:
- favourites you create,
- display (light or dark mode), accessibility and language settings,
- your choice in the consent banner,
- your location if you use the location search (for the current session only).
This storage is strictly necessary for the features you request (Section 25 (2) No. 2 TDDDG, Art. 6(1)(f) GDPR). You can delete the data at any time via your browser settings.
6. Location search
When you click “Use my location”, your browser asks for your permission. If you grant it, your approximate location is stored only in your browser and used there to calculate distances and show businesses near you. Your location is not transmitted to our server and is deleted when you close the browser window. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your browser settings.
7. Contacting us
If you contact us by email or phone, we process your details in order to handle your enquiry. The contact form on our website does not store any data: it merely opens your email program with a prepared message that you send yourself. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the data once the enquiry has been fully dealt with and no statutory retention obligations apply.
9. Partner and administration accounts
Partner businesses can create an account to maintain their listing. In doing so, we process the email address, a securely encrypted password and the information you provide about your business. The login is maintained via a technically necessary session token in your browser. The legal basis is Art. 6(1)(b) GDPR. We store the data for as long as the account exists; information we must retain for tax or commercial law reasons is kept beyond that for the statutory period.
10. Chat assistant “AFTERWORK Guide”
Our chat assistant answers questions about businesses and events in the region. To generate a response, your input is transmitted via our server to the AI gateway of Lovable Labs Sweden AB and from there to a language model by OpenAI. The assistant only accesses the public content of our guide. We do not store chat histories; they are only available in your browser during your visit.
The legal basis is our legitimate interest in providing a user-friendly information service (Art. 6(1)(f) GDPR). Processing by OpenAI may involve a transfer to the USA; this is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Please do not enter any personal or sensitive data in the chat.
11. Google Maps
For map views we use Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Maps load automatically when you open the relevant page. In particular, your IP address and information about your browser and device are transmitted to Google; Google may also derive approximate location information from this data. Data may be transferred to servers of Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. We base the integration on our legitimate interest in providing an immediately usable map and orientation service (Art. 6(1)(f) GDPR). Google may also store or access information on your device when the map loads. Further information: https://policies.google.com/privacy
The “Use my location” function is separate from this. It is only activated after you click it and explicitly grant permission in your browser. Your approximate location is stored solely in your browser for the current session and is not transmitted to our server.
12. Google reviews, business data and weather
We retrieve reviews, opening hours and price levels of partner businesses, as well as the weather display for Stuttgart, server-side via interfaces provided by Google (or Open-Meteo for the weather). No data about you is transmitted to Google when this content is displayed. Only when you click a link to Google, such as “Read more reviews”, do you leave our website; Google’s privacy policy then applies.
13. Videos and 360-degree tours
Partner pages may include videos from YouTube (Google Ireland Limited) and 360-degree tours from the providers Matterport and Kuula. This content is only loaded once you consent to external media in the consent banner or load the individual item with a click. Only then are your IP address and browser data transmitted to the respective provider, possibly also to the USA. We embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25 (1) TDDDG), which you can withdraw at any time via “Cookie settings”.
15. Fonts
The fonts used on this website are embedded locally. No connection to servers of Google or other font providers is established when a page is loaded.
16. Consent management
On your first visit we ask whether you would like to allow external media such as YouTube videos and 360-degree tours. We store your choice in your browser (Section 25 (2) No. 2 TDDDG). You can change or withdraw it at any time via the “Cookie settings” link in the footer. Withdrawal takes effect for the future. Google Maps loads automatically regardless of this choice; details are provided in the “Google Maps” section.
17. Storage period
Unless a specific period is stated in this policy, we store personal data only for as long as necessary for the respective purpose. Statutory retention periods, for example under commercial and tax law (up to ten years), remain unaffected.
18. Your rights
You have the right to
- access the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw any consent given, with effect for the future (Art. 7(3) GDPR).
An email to info@afterwork-business.de is sufficient for any request.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds. You may object to processing for direct marketing purposes at any time without giving reasons.
Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.
19. Further information
Providing your data is not required by law or contract; without it, you simply cannot use certain features (e.g. newsletter, partner account). No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Data transmission on this website is protected by TLS encryption.
20. Changes
We update this privacy policy when our service or the legal situation changes. The version published here applies.
14. Social media posts and profiles
On the homepage we show previews of our latest posts on Instagram and Facebook. We load the texts and images of these previews server-side via Meta’s interface and deliver them from our own server. No data about you is therefore transmitted to Meta when they are displayed. Only when you click on a post or one of our profiles are you taken to the respective network; its privacy policy then applies.
For our Facebook page, we are jointly responsible with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, for the page insights (Art. 26 GDPR). The agreement is available at https://www.facebook.com/legal/controller_addendum.