Last updated · October 2026
This privacy policy explains which personal data we process when you visit this website or contact us through it, for what purposes, on which legal basis, and which rights you have.
01Controller
SPARK Europe GmbH & Co. KG JUNGHOF PLAZA Junghofstraße 16 60311 Frankfurt am Main GermanyRepresented by its general partner SPARK Verwaltung GmbH, managing director Patrick Oliver Soschinski.
Phone: +49 69 9999 233 88 · Email: privacy@sparkplaces.com
For all data protection questions and requests, please contact us at the address above.
02Hosting and server log files
This website is hosted by Netlify, Inc., San Francisco, USA. When you open a page, your browser automatically transmits technical information, which is processed in server log files: IP address, date and time of the request, requested page or file, referring website, browser type and version, and operating system.
We use this data only to deliver the website, keep it secure and stable, and detect misuse. The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Log data is stored by Netlify for a limited period and then deleted. We have concluded a data processing agreement with Netlify. Netlify may process data in the USA; see section 09.
All fonts and scripts used on this website are served from our own server. No third-party content is loaded when you simply view a page, with the exception of the videos described in section 05, which are only loaded with your consent.
03Enquiry and contact forms
When you send us an enquiry through a form on this website (for example the event enquiry or the Sky Residence concierge request), we process the information you enter: typically name, email address, phone number, company, preferred location and dates, number of guests and your message.
Form submissions are received through Netlify Forms and forwarded by email to our sales team. We store and process your enquiry in our email system and our internal customer relationship management system in order to answer it, prepare offers and handle any resulting booking.
The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete enquiry data when it is no longer needed for these purposes. If a contract results, statutory retention periods under commercial and tax law apply (generally six or ten years).
After you submit a form, you automatically receive a confirmation by email, and our sales team receives a copy of your enquiry. These emails are sent via our email service provider Resend (Resend, Inc., San Francisco, USA), with which we have concluded a data processing agreement; see section 09. A copy of each email is stored for up to 180 days so that it can be opened in the browser via a private, non-guessable link.
You can also contact us directly by email or phone. In that case we process the data you share with us for the same purposes and on the same legal basis.
04Newsletter
If you subscribe to our newsletter, we process your email address in order to send you news about SPARK, our locations and events. Your sign-up is transmitted through Netlify Forms and forwarded to our marketing team.
We only send the newsletter after you have confirmed your subscription through the link in a confirmation email (double opt-in). We record the time of sign-up and confirmation as proof of your consent. The newsletter is sent using Mailchimp, a service of The Rocket Science Group LLC (Intuit), Atlanta, USA, with which we have concluded a data processing agreement; see section 09 for transfers to the USA.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time through the unsubscribe link in every newsletter or by email to us. Your email address is then removed from the mailing list.
05Videos (Vimeo) and your consent
Some pages show videos hosted by Vimeo (Vimeo.com, Inc., New York, USA). These videos are only loaded after you have given your consent via our cookie banner (“Allow videos”) or by clicking “Load video” on an individual video. Before that, no connection to Vimeo is established.
Once a video is loaded, Vimeo receives your IP address and technical information about your device and may set cookies or similar technologies on your device. Vimeo may process this data in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).
You can withdraw or change your choice at any time with effect for the future under Cookie Settings.
06Storage on your device
We do not use analytics, tracking or advertising cookies. This website only stores the following information in your browser’s local storage, which is necessary to provide the functions you use (§ 25(2) TDDDG):
- your cookie and video consent choice (spark-cookie-consent)
- your language selection and display preferences
- during a visit, the location and occasion you selected, so that forms can be pre-filled
This information stays on your device and is not transmitted to us. You can delete it at any time in your browser settings.
07Links to other websites
This website contains links to other websites, for example to maps, hotels, restaurants and our social media profiles (LinkedIn, Instagram, YouTube, Facebook), and to a 3D tour hosted by Matterport. These services are only contacted when you click such a link or start the 3D tour. Their own privacy policies then apply.
08Recipients
Within our company, only the staff who need your data for the purposes described above have access to it. We use the following categories of service providers, who process data on our behalf and on the basis of data processing agreements: website hosting (Netlify), email services including email delivery (Resend), our customer relationship management system, and our newsletter service (Mailchimp). We do not sell your data.
09Transfers to countries outside the EU
Some of the service providers named above are based in the USA. Transfers take place on the basis of the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework, where the provider is certified under it, and otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
10Your rights
Under the GDPR, you have the right to:
- access your personal data (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict processing (Art. 18)
- data portability (Art. 20)
- withdraw any consent you have given, with effect for the future (Art. 7(3))
Right to object: Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
11Security
This website is transmitted exclusively over an encrypted connection (HTTPS/TLS). We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
12Changes
We update this privacy policy when our website or the legal requirements change. The current version is always available on this page.