Privacy Policy

Privacy Policy – circled.club

Effective Date: [25.05.2025]

Last Updated: [25.05.2025]

1. Introduction

Circled.Club, is a project operated by high-bau GmbH.

high-bau GmbH is committed to protecting your personal data, maintaining, and developing this platform. This Privacy Policy explains how we collect, use, and protect your information in line with the GDPR, CPRA, and other international data protection laws.

2. Who We Are

  • Controller: high-bau GmbH
  • Address: Schwindstraße 32, 80798 München, Germany
  • Email: hello[at]circled[dot]club

If you have any questions about this policy or your rights, contact us or our Data Protection Officer from our contact forms in the footer.

3. What Data We Collect

We collect personal data when you:

  • Register on the platform or fill out forms
  • Subscribe to newsletters or surveys
  • Contact us by email or phone

This may include: name, email, phone, birthdate, address, payment info, and usage or geolocation data.

4. Why We Collect Your Data

We use your data to:

  • Provide and improve our services
  • Authenticate users and personalise content
  • Communicate updates, offers, or events
  • Process payments securely
  • Ensure safety and legal compliance
  • Conduct research and analytics

We may also use anonymised data for statistics or service improvements.

5. Legal Basis for Processing

Your data is processed based on:

  • Your consent
  • The performance of a contract
  • Our legitimate interest
  • Legal obligations

You may withdraw your consent at any time.

6. Data Sharing and Third Parties

We do not sell your data. We may share data only with:

  • Service providers under strict confidentiality
  • Payment processors (e.g. Stripe, PayPal)
  • Legal authorities when required
  • Trusted tools like Google Maps, YouTube, Facebook, etc.

Your data may be processed outside the EU under appropriate safeguards.

7. Your Rights

You have the right to:

  • Access or request a copy of your data
  • Correct or delete your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with a data protection authority

8. Data Retention

We retain your data only as long as necessary — typically 24 months after inactivity or as required by law.

9. Security

We implement technical and organisational measures to protect your data. Sensitive information (e.g., payment data) is encrypted and never stored on our servers. However, we cannot guarantee absolute security on the internet.

10. Children’s Privacy

Users must be at least 18 years old (17 with guardian consent). If we learn that we’ve collected data from a child without proper consent, we will delete it.

11. Cookies

We use cookies to enhance your experience and collect anonymous traffic data. You may manage cookie preferences through your browser or our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy. Changes take effect once posted here. Continued use of the platform implies acceptance of the updated terms.

13. Contact

For data access, deletion, or any privacy concerns, please use our contact forms at the footer.