Privacy policy

The controller responsible for data processing on this website and at the BowTime venue is:

JOLOS Kinder-Welt-Berlin GmbH
Managing director: Anke Bentler
BowTime, Am Tempelhofer Berg 7d, 10965 Berlin, Germany
Email: info@bowtime-berlin.de
Phone: +49 151 29767526
Commercial register: Amtsgericht Charlottenburg, HRB 90665 B
VAT ID: DE230027960

BowTime is not an independent company but an offering of JOLOS Kinder-Welt-Berlin GmbH (hereinafter “we”).

Data protection officer: We are not obliged to appoint a data protection officer. If you have any questions about data protection, you can reach us at info@bowtime-berlin.de.

We only process personal data insofar as this is necessary for our website, bookings and the operation of the venue, or if you have given your consent. The applicable laws are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

You can withdraw your consent at any time with effect for the future, for example by email to info@bowtime-berlin.de.

Hosting and server log files

Our website and our booking system are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When the site is accessed, the server automatically stores: IP address, date and time, page accessed, referrer URL, browser and operating system. This serves the secure and stable provision of the site (Art. 6(1)(f) GDPR). The log files are deleted after 7 days. We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR.

The website is encrypted via SSL/TLS.

Cookies and consent banner

We use technically necessary cookies (for example for the shopping basket and the booking process) without consent (§ 25(2) TDDDG). We only use all other cookies and similar technologies with your consent via our self-developed cookie banner. You can change your selection at any time via the “Cookie settings” link in the footer of our website.

Analytics and embedded services

We only load the following Google services after you have given your consent in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The provider in each case is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. More information can be found in Google’s privacy policy: https://policies.google.com/privacy.

Google Analytics: We analyse how visitors use our website in order to improve it. Usage data such as pages visited, time spent, device, browser and approximate location is recorded via a cookie. IP addresses are shortened within the EU. The data is deleted after 14 months.

Google Maps: We embed a Google Maps map for directions. When the map loads, your browser transmits, among other things, your IP address to Google.

YouTube: We embed videos via YouTube in privacy-enhanced mode. Data such as your IP address is only transmitted to YouTube once you play a video.

You can withdraw your consent at any time via the cookie settings.

Chat assistant (BotparkAI)

We offer an AI-powered chat assistant on our website. The provider is BotparkAI (Nils Oborny, Rippoldsauer Str. 3, 70372 Stuttgart, Germany). BotparkAI processes the data on our behalf (Art. 28 GDPR).

When the page loads, the chat button is loaded from chat.botparkai.com. For technical reasons, your IP address is transmitted in the process. No cookies are set.

If you use the chat, we process:

• your messages and the replies,
• a random identifier stored in your browser’s local storage,
• where applicable, details you enter in a form within the chat.

To answer you, your messages are transmitted to AI services in France: to Scaleway SAS and, if Scaleway is unavailable, to OVH SAS. The replies are generated automatically and may contain errors.

The legal basis is our legitimate interest in answering enquiries quickly (Art. 6(1)(f) GDPR). For enquiries about contracts, it is Art. 6(1)(b) GDPR. Conversations are deleted after 90 days.

Further information: https://botparkai.com/legal/privacy

Online booking

All BowTime services are booked and paid for online in advance. For this we process: name, email address, phone number, booked service, date and time and the number of participants (adults and children). The legal basis is Art. 6(1)(b) GDPR. We developed the booking system ourselves; it runs on IONOS servers (see section 3).

Anyone booking for a group or club ensures that the participants are informed about the disclosure of their data.

Payment

Payment is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (Stripe). You can use all payment methods offered by Stripe except PayPal. We also process refunds, for example after a cancellation, via Stripe. For this we pass the data required for payment (name, amount, booking reference, email) to the service provider. You enter payment data such as your card number or IBAN directly with the payment service provider; we do not store it. Stripe’s privacy policy also applies to the payment: https://stripe.com/de/privacy. Stripe may also transfer data to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. Stripe processes some data under its own responsibility for fraud prevention.

Vouchers

When you buy a voucher online, we process the buyer’s data in the same way as for a booking, as well as the voucher code and its redemption status. We only process data of the recipient if you provide it voluntarily (for example for a dedication or direct delivery).

Contact by email, phone or form

If you contact us, we process your details in order to answer your enquiry (Art. 6(1)(b) GDPR for booking enquiries, otherwise point (f)). We delete the data once the enquiry has been dealt with and no retention obligation applies.

Photos and videos may be taken at events, courses, children’s birthday parties and club sessions at the venue. We distinguish between three cases.

Recordings by BowTime

1. Overview recordings at events: At publicly announced events we make recordings that show the event as a whole, not individual people in the foreground. We use them for documentation and for our public relations (website, social media). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is presenting our offering. We point this out at the entrance and in the invitation.

2. Recognisable individual and group recordings: If we publish recordings in which individual people are recognisably in the foreground, we obtain consent beforehand (Art. 6(1)(a) GDPR). For children under 16, the persons with parental responsibility give their consent.

3. No recordings wanted: If you do not want to be photographed, please tell the team on site. We will then make sure not to show you or to make you unrecognisable.

You can object to processing under case 1 at any time (Art. 21 GDPR) and withdraw consent under case 2 at any time. We will then remove the recordings concerned from our own channels as far as technically possible. We cannot recall materials that have already been printed. We store recordings for a maximum of 3 years unless consent permits longer use.

Recordings by guests

Guests may take private souvenir photos of their own group. Guests are themselves responsible for recordings of other guests and their publication; we ask that others are only photographed with their consent. In the archery cinema and on the shooting lane, the safety rules also apply, which may restrict photography.

Video recordings in the archery cinema and video surveillance

Camera in the archery cinema: The archery cinema captures players and arrows by camera so that hits on the screen can be detected and the game controlled. The legal basis is Art. 6(1)(b) GDPR, because the camera is necessary for the booked service. The images are only processed live and are not stored.

Video surveillance: Parts of the venue are under video surveillance to protect guests, staff and equipment and to be able to investigate incidents. The legal basis is Art. 6(1)(f) GDPR. The monitored areas are marked by signs. The recordings are deleted automatically after 72 hours unless they are needed to investigate a specific incident. Toilets and changing rooms are not monitored.

Social media

We have our own pages on Instagram, Facebook and TikTok. We are jointly responsible with the respective platform operator for data you leave there and for the visitor statistics of our pages (Art. 26 GDPR). The operators are Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (Instagram, Facebook) and TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. The platforms may also transfer data to third countries such as the USA. On our website we only link to these pages; data only flows to the platform when you click.

Job applications (mini-job)

We process applications, for example for mini-jobs at the venue, in order to decide on the employment relationship (Art. 6(1)(b) GDPR, § 26 BDSG). If we decline an application, we delete the documents after 6 months, unless you consent to longer inclusion in our applicant pool.

Recipients and third countries

We only pass data on to service providers we use for hosting, payment, website analytics and accounting (tax advice: Dr. Münch Steuerberatungsgesellschaft mbH, Berlin). They are contractually bound by our instructions. If a service provider is based outside the EU or EEA, the transfer only takes place on the basis of an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses. We do not sell any data.

Storage period

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time (Art. 7(3)). To do so, write to info@bowtime-berlin.de.

Right to object: If we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to direct marketing without giving reasons.

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

Obligation to provide data, no automated decision-making

Without the details required for a booking, we cannot conclude a contract. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

This privacy policy is as of October 2026. We will update it if our offering or the legal situation changes.