Privacy policy

Last updated: August 2026 The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you use meetreet, for which purposes this is done, and what rights you have. meetreet is a B2B platform for searching, requesting, and booking hotels and locations for team offsites, meetings, management events, and other business events.

The controller responsible for the processing of personal data is: meetreet GmbH Langemarckstraße 122 28199 Bremen Germany Represented by: Saskia Klinder E-mail: datenschutz@meetreet.com Phone: +49 (0)421 98964202

Which personal data we process depends on how you use meetreet. When visiting our website When you access our website, technical data may be processed automatically, in particular: • IP address • date and time of access • pages and files accessed • referrer URL • browser type and version • operating system • device information We need this data to provide our website and platform in a secure, stable, and technically functional manner. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our online offering. When making an inquiry or booking When you request or book a hotel or location via meetreet, we process in particular: • first and last name • business e-mail address • phone number • company • position or role, where applicable • desired location or region • event period • number of participants • number of rooms required • meeting and event requirements • catering preferences • budget information • desired additional services • other details about the planned event • communication relating to the inquiry, offer, and booking This data is required to process your inquiry, request suitable locations, obtain offers, and prepare or carry out a booking. The legal basis is Art. 6(1)(b) GDPR.

meetreet connects companies and teams with suitable hotels, locations, and other providers for business events. When you submit a location request via meetreet, we use your information to: • understand your requirements, • select suitable locations, • obtain availability and offers, • compare and prepare offers, • coordinate communication with the locations, and • prepare a possible booking. For this purpose, we transmit the information required for the respective inquiry to the requested or selected location partners. This may include, in particular, your name, your company, your contact details, and information about your planned event. Data is only disclosed to the extent necessary to process your inquiry or booking. If a booking is concluded, we process the data required to carry out and document the booking and, where applicable, to invoice our services. The legal basis for this is Art. 6(1)(b) GDPR. Where statutory retention or documentation obligations apply, further processing is based on Art. 6(1)(c) GDPR.

Certain features of meetreet may require creating a user account. During registration, we process the information necessary for this purpose, in particular: • name • business e-mail address • company • login and account information This data is used to provide the user account and to enable the use of the corresponding platform features. The legal basis is Art. 6(1)(b) GDPR. Location partners Hotels, event locations, and other providers can use meetreet as location partners. In this context, we process in particular: • names and contact details of the contact persons • company and location information • offer and booking information • contract and billing data • communication between the location partner and meetreet This processing is necessary to carry out our collaboration with the respective partner and to facilitate booking inquiries. The legal basis is Art. 6(1)(b) GDPR.

As part of an inquiry or booking, users, meetreet, and location partners communicate with one another. Messages and the personal data they contain may be processed and stored in this context. This serves, in particular: • the processing of inquiries, • the creation and coordination of offers, • the organization of bookings, • the coordination of changes, • customer service, and • the documentation of the respective business transaction. The legal basis is Art. 6(1)(b) GDPR. Where further storage is required for documentation, quality assurance, or the assertion or defense of legal claims, this is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

If you contact us via the contact form, e-mail, or phone, we process the data you provide in order to handle your inquiry. If your contact relates to a specific location request, a booking, or another potential business relationship, processing is based on Art. 6(1)(b) GDPR. For general inquiries, processing is based on our legitimate interest in handling and responding to your inquiry pursuant to Art. 6(1)(f) GDPR.

We use external IT and hosting service providers to operate our website and platform. According to our current technical setup, these include in particular: STRATO AG Otto-Ostrowski-Straße 7 10249 Berlin Germany IONOS SE Elgendorfer Straße 57 56410 Montabaur Germany Our applications and databases are operated on servers provided by these providers in Germany. In addition, we use: Amazon Web Services EMEA SARL (AWS) 38 Avenue John F. Kennedy L-1855 Luxembourg AWS is used, among other things, for technical infrastructure and API services. We may also use Cloudflare for DNS, security, and performance functions. As part of these services, IP addresses, technical connection data, and information required to provide the platform may be processed. Processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in a secure, fast, and reliable technical infrastructure and — where necessary for our services — on Art. 6(1)(b) GDPR. Where service providers process personal data on our behalf, we conclude the necessary data processing agreements pursuant to Art. 28 GDPR.

HubSpot We use HubSpot to manage our customer and partner relationships. In this context, the following information may be processed, in particular: • name • business contact details • company • inquiries and bookings • communication history • information about the customer or partner relationship The provider is: HubSpot Ireland Limited One Dockland Central Guild Street Dublin 1 Ireland Processing is carried out to perform pre-contractual and contractual measures pursuant to Art. 6(1)(b) GDPR, as well as based on our legitimate interest in efficient customer and partner management pursuant to Art. 6(1)(f) GDPR. Brevo We use Brevo to send e-mails. The provider is: Sendinblue GmbH (Brevo) Köpenicker Straße 126 10179 Berlin Germany Brevo may be used to send transactional messages, for example: • information about inquiries • booking confirmations • changes to a booking • platform notifications • other e-mails required for the use of meetreet Processing is generally based on Art. 6(1)(b) GDPR. The provisions below apply to newsletters and marketing communications. YouTube Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Google LLC is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection for data transfers to the USA. Google Web Fonts This site uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This allows Google to learn that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

If you subscribe to our newsletter or other marketing communications, we process in particular your e-mail address and, where applicable, your name and company affiliation. Processing is generally based on your consent pursuant to Art. 6(1)(a) GDPR, unless another legal basis applies to the respective communication. You can revoke your consent at any time with effect for the future, for example via the unsubscribe link in our e-mails. The revocation does not affect the lawfulness of the processing carried out until the revocation.

meetreet uses cookies and similar technologies. Some of these are technically necessary for our website and platform to function. Others help us understand how our website is used, improve our offering, or evaluate marketing measures. Technically necessary cookies and similar technologies may be used to the extent required to provide our website and the functions you request. Non-essential cookies and technologies — in particular for analytics and marketing — are only used if you have previously given your consent via our consent management system. Where consent is required, the storage of, or access to, information on your device is based on Section 25(1) TDDDG. The related processing of personal data is based on Art. 6(1)(a) GDPR. You can change or revoke your consent at any time with effect for the future via our cookie settings.

Provided you have given consent via our consent management system, we may use analytics and marketing technologies to understand the use of our website and optimize our offerings and marketing measures. These may include, where currently used by meetreet, in particular: • Google Analytics • Google Ads and Conversion Tracking • Meta Pixel This may involve processing information such as page views, interactions, technical device information, IP addresses, and information about the origin of a website visit. These services are only used for analytics and marketing purposes if the necessary consent has been given. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, insofar as information is stored on or read from your device. You can revoke your consent at any time via our cookie settings. The specific technologies, providers, purposes, and retention periods used are additionally presented transparently via our consent management system.

Where invoicing or billing information is processed in connection with a booking, we use this data to carry out and document the respective business transaction. The legal basis is Art. 6(1)(b) GDPR. Where we are required to retain invoicing or booking records due to commercial or tax law obligations, processing is based on Art. 6(1)(c) GDPR. meetreet does not currently process credit card or comparable payment data via the platform itself, to the extent this reflects the current technical setup. Should meetreet integrate a payment service provider for direct online payments in the future, this privacy policy will be updated to include the respective provider and the associated data processing before that function is put into operation.

We do not sell personal data. Personal data is only disclosed if this is necessary for our services or another legal basis applies. Recipients may include, in particular: • requested or booked hotels and locations, • IT and hosting service providers, • CRM and communication service providers, • e-mail service providers, • analytics and marketing service providers, subject to corresponding consent, • payment service providers, if used in the future, • tax advisors and other professional advisors, and • authorities or public bodies, insofar as there is a legal obligation to do so. For location requests, only the information required to process the respective inquiry or booking is disclosed.

Some of the service providers we use, or their affiliated companies, may be based outside the European Union or the European Economic Area. Where personal data is transferred to a third country in this context, we ensure that the legal requirements of Art. 44 et seq. GDPR are met. A transfer may be based, in particular, on an adequacy decision of the European Commission, the EU-US Data Privacy Framework, or appropriate safeguards such as the European Commission's standard contractual clauses.

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Inquiry and booking data may in particular be stored for as long as necessary to process the inquiry, carry out the booking, maintain the customer relationship, and assert or defend against possible claims. Documents relevant for tax or commercial law purposes are stored in accordance with the applicable statutory retention periods. Account data is generally stored for the duration of the user account. After an account is deleted, personal data is deleted or anonymized, unless there are legal or contractual reasons for further storage.

We implement appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and other unlawful processing. Data transmission between your browser and our website or platform is encrypted via SSL/TLS. Our security measures are regularly reviewed and adapted to reflect technical developments.

Subject to the applicable statutory requirements, you have in particular the following rights: Access You can request information about which personal data we process about you. Rectification You can request the correction of inaccurate data or the completion of incomplete data. Erasure Subject to the statutory requirements, you can request the erasure of your personal data. Restriction of processing Under certain conditions, you can request that the processing of your data be restricted. Data portability Where the statutory requirements are met, you can receive the data you have provided to us in a structured, commonly used, machine-readable format. Withdrawal of consent You can withdraw any consent you have given at any time with effect for the future. Objection Insofar as we process personal data based on a legitimate interest pursuant to Art. 6(1)(f) GDPR, you can object to the processing under the conditions set out in Art. 21 GDPR. You can object at any time to the processing of personal data for direct marketing purposes. To exercise your rights, you can contact us at the following address: datenschutz@meetreet.com

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The supervisory authority responsible for meetreet is, in particular, the data protection authority of the State of Bremen: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen You may also contact any other data protection supervisory authority responsible under the GDPR.

meetreet may use technologies to automate internal processes, improve the platform, and support the search for and selection of suitable locations. A decision based solely on automated processing that has a legal effect on you or similarly significantly affects you does not currently take place, to the extent this reflects the actual technical setup. Should AI systems or other automated processes process personal data for purposes beyond this in the future, we will review the data protection requirements before their use and update this privacy policy accordingly.

We continuously develop meetreet and our technical infrastructure. It may therefore become necessary to update this privacy policy, for example when new platform features, service providers, or technologies are introduced, or when legal requirements change. The version published on our website at any given time shall apply. Last updated: August 2026