The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
The party responsible for data processing on this website is:
Women's High Society
Ilham Schnell
Schöneberger Straße 96, 22149 Hamburg, Germany
Phone: +49 176 70478927
E-mail: info@womenhighsociety.com
Instagram · @whs.travel.group
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.
Our host is Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Use is for the purpose of fulfilling our contract with potential and existing guests (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR). Where data is transferred to the USA, this is based on appropriate safeguards (EU Standard Contractual Clauses or the EU-US Data Privacy Framework). A data processing agreement (DPA) has been concluded with the host.
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless there are statutory retention obligations.
Depending on the case, we process your data on the basis of your consent (Art. 6 (1) (a) GDPR), to fulfil a contract or pre-contractual measures (Art. 6 (1) (b) GDPR) or to safeguard our legitimate interests (Art. 6 (1) (f) GDPR).
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected.
If data is processed on the basis of Art. 6 (1) (f) GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation.
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority is, among others, the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, as well as a right to rectification or deletion of this data, a right to restriction of processing and a right to data portability.
For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.
This website does not use tracking or marketing cookies. We use only technically necessary mechanisms. Your choice in the cookie notice (consent or rejection) is stored locally in your browser (localStorage) so that the notice does not appear again. This storage is necessary for the function (Art. 6 (1) (f) GDPR); no personal data is transferred to third parties.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR for the purpose of technically error-free and secure operation.
If you send us enquiries via the contact or gift-card form, your details from the form (e.g. name, e-mail address, phone number, message) are stored by us for the purpose of processing the enquiry and in case of follow-up questions. The form submission is technically handled via the service Netlify Forms (Netlify, Inc., USA); the transmitted data is stored there for us. Processing is based on Art. 6 (1) (b) GDPR (initiation/fulfilment) or Art. 6 (1) (f) GDPR. Any transfer to a third country is secured by appropriate safeguards.
For the uniform display of fonts, this website uses the privacy-friendly service Bunny Fonts by BunnyWay d.o.o., Dunajska cesta 121, 1000 Ljubljana, Slovenia. The fonts are loaded from servers within the EU. No cookies are set and no personal data is stored for advertising or tracking purposes; no transfer to Google takes place. The legal basis is Art. 6 (1) (f) GDPR (uniform, privacy-friendly presentation of the online offering). Further information: bunny.net/privacy.
For registration to the Club, we redirect you to an external form provided by Tally (Tally B.V., Belgium). Only when you submit this form is the data entered there transmitted to Tally and processed on our behalf. The privacy notices of Tally apply additionally: tally.so/help/privacy-policy.
On our website you will find a link to WhatsApp. If you contact us via WhatsApp, the privacy terms of WhatsApp/Meta also apply. For communication via WhatsApp, we process the details you transmit in order to answer your enquiry.
Last updated: June 2026. The German version is the legally binding text — Deutsche Fassung.
