Work Surf Balance GmbH
Westring 99
33154 Salzkotten
Germany
VÆRIAL Kiteboarding is a brand of Work Surf Balance GmbH
Contact:
Email: info@vaerial-kitebaording.com
Commercial Register:
Registered with the Commercial Register of the Local Court of Paderborn
Registration number: HRB 15604
VAT Identification Number pursuant to Section 27a of the German VAT Act:
DE351000942
We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.
The content, photographs, graphics, designs, logos and other works published on this website are subject to German copyright law and/or the respective intellectual property rights of their owners.
Any reproduction, modification, distribution or other use beyond the limits permitted by law requires the prior consent of the respective rights holder.
The name VÆRIAL as well as associated logos, product names and designs may be protected by trademark and/or copyright law.
The protection of your personal data is important to us. The following information explains which personal data is processed when you use the VÆRIAL Kiteboarding website, for what purposes such processing takes place and which rights you have.
Personal data means any information relating to an identified or identifiable natural person.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Work Surf Balance GmbH
VÆRIAL Kiteboarding is a brand of Work Surf Balance GmbH.
This website is hosted by:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you visit our website, technically necessary data may be processed by the hosting provider. This may include in particular:
The processing is carried out in order to ensure the secure, stable and technically reliable operation of the website and to protect the website against misuse and unauthorised access.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
Where IONOS processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
An encrypted connection can generally be recognised by the fact that the browser address begins with “https”.
Encryption helps prevent data transmitted to us from being easily read by third parties.
If you contact us by email, telephone or through another communication channel, we process the personal data you provide in order to handle and respond to your enquiry.
This may include in particular:
If your enquiry relates to the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.
For other enquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to enquiries.
The data will be deleted once it is no longer required for the purpose for which it was collected, unless statutory retention obligations require us to retain it for a longer period.
We provide a contact form on our website.
The contact form is technically provided via WordPress and Elementor.
If you use the contact form, we process the information you enter, in particular your name, email address, your message and any other information you voluntarily provide.
The processing is carried out solely for the purpose of handling and responding to your enquiry.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is related to the initiation of a contractual relationship.
In all other cases, the processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in efficiently handling enquiries.
Form data may technically be stored on the web server or within the WordPress system and may also be forwarded to us by email.
We delete this data once it is no longer required to process your enquiry, unless statutory retention obligations apply.
We use Google reCAPTCHA to protect our contact form against automated submissions, spam and misuse.
For users within the European Economic Area, the provider is generally:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
reCAPTCHA is used to determine whether input on our website is made by a human user or by an automated program.
For this purpose, technical information may be processed, including in particular:
Google uses this information to perform security and risk assessments.
The processing is carried out to protect our website and, in particular, to prevent automated spam and misuse.
The legal basis for processing personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and communication systems against abusive and automated use.
Google may also process data on servers located outside the European Union or the European Economic Area. Where such transfers take place, the appropriate safeguards provided for under applicable data protection law apply.
Further information on how Google processes personal data can be found in Google’s privacy policy.
Our website contains a link that allows users to contact us via WhatsApp.
For users in the European region, the WhatsApp service is provided by:
WhatsApp Ireland Limited
The WhatsApp link used on our website is not a permanently embedded WhatsApp application.
Only when you actively click on the WhatsApp link will you be redirected to WhatsApp. From that point onwards, WhatsApp may process personal data.
Such data may include, for example:
If you subsequently contact us via WhatsApp, we process in particular:
Use of WhatsApp is voluntary. You may alternatively contact us by email or through our contact form.
The processing of information you send to us via WhatsApp is based on Art. 6(1)(b) GDPR where the communication relates to the initiation or performance of a contract.
In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing fast and user-friendly communication with interested parties and business partners.
The privacy policy of WhatsApp applies to any independent processing of personal data carried out by WhatsApp.
Our website may contain links to websites and services provided by third parties.
When you click such a link, you leave our website. From that point onwards, the respective third-party provider may process personal data in accordance with its own privacy policy.
We generally have no influence over the processing of personal data by external providers.
Our website may use technically necessary cookies or comparable technologies that are required for the operation, functionality and security of the website.
These may include information required for the technical functionality, security or correct display of the website.
Where access to information stored on the user’s device is strictly necessary to provide a digital service expressly requested by the user, such access may take place without separate consent in accordance with applicable law.
Where personal data is processed in this context, processing is generally based on Art. 6(1)(f) GDPR unless another legal basis applies.
Unless a more specific storage period is stated in this Privacy Policy, we retain personal data only for as long as it is necessary for the purpose for which it was collected.
Where statutory retention obligations apply, the relevant personal data will be retained for the duration of the applicable statutory period.
The data will then be deleted unless there is another legal basis for its continued storage.
Personal data is only disclosed where this is necessary for the relevant purpose, where we are legally required to do so, where you have provided your consent or where another legal basis applies.
Recipients or processors may include, in particular, IT service providers, hosting providers and communication service providers.
Where service providers process personal data on our behalf, they are engaged in accordance with Art. 28 GDPR.
Under the General Data Protection Regulation, you have the following rights in particular:
Right of Access
You may request information as to whether and which personal data concerning you is being processed.
Right to Rectification
You may request that inaccurate personal data be corrected or incomplete data be completed.
Right to Erasure
Under the statutory conditions, you may request the deletion of your personal data.
Right to Restriction of Processing
Under the statutory conditions, you may request that the processing of your personal data be restricted.
Right to Data Portability
Where the statutory requirements are met, you may request to receive personal data in a structured, commonly used and machine-readable format or to have the data transmitted to another controller.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out prior to the withdrawal remains unaffected.
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
If you believe that the processing of your personal data infringes the General Data Protection Regulation, you have the right to lodge a complaint with a data protection supervisory authority.
You may in particular contact the supervisory authority responsible for our registered office or the supervisory authority at your place of residence or habitual stay.
We reserve the right to amend this Privacy Policy if legal requirements, technical features of our website or the services we use change.
The version currently published on this website shall apply.
Last updated: September 2026
