data protection

The operator of this website - hereinafter referred to as the operator - attaches great importance to the protection of the privacy of its website visitors - hereinafter referred to as users. The processing of all data made available to the operator takes place exclusively in strict compliance with the General Data Protection Regulation (EU GDPR) as well as all other data protection laws or provisions of a data protection nature applicable in the member states of the EU. This applies in particular to the processing of personal data.

This data protection declaration uses legal terms that are defined in Art. 4 GDPR. According to this, personal data is all information that relates to at least an identifiable natural person (Art. 4 No. 1 GDPR). The term processing includes every practically conceivable type of use in connection with personal data (Art. 4 No. 2 GDPR), ie from collection to destruction.

Data processing when the website is accessed

This website is operated by a German web host, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. The web host must also comply with the EU GDPR and all other data protection laws or provisions of a data protection nature that apply in the member states of the EU. The operator of this website has also concluded a contract for data processing on behalf of the web host (see Art. 28 GDPR). This is a contract in which the web host undertakes to protect the transmitted data, to process it on behalf of the operator in accordance with the data protection regulations and, in particular, not to pass it on to third parties. Users can obtain further information on further data processing by the web host at

https://wiki.hetzner.de/index.php/Datenschutz-FAQ .

Each time the website is accessed, data is recorded that is stored in the log files of the server and the web application. The following usage data is collected: Internet protocol address (IP address) of the user, date and time of the call, the call (request), the response status (HTTP status code), the URL of the website via which the call was made came to the current website or file (referrer), browser type and version as well as the operating system of the user.

The log files are saved to ensure the functionality of the website and the web application. In addition, the data is used for statistical evaluations to optimize the website in the interests of the user and to ensure the security and stability of the information technology systems. The data processing takes place on the basis of legitimate interests within the meaning of Art. 6 Para. 1 S. 1 f.) GDPR. The operator of this website guarantees that the data will not be merged with other data sources. The log files are stored separately from the personal data of the user, which is collected via form entries. The log files are deleted according to general principles (see "General information on the deletion of data").

Data processing through cookies

This website uses so-called "cookies". Cookies are small text files that are stored on the operator's web server or the user's platform (PC, tablet, smartphone, etc.) and contain data that enable the website to recognize and identify the user's internet browser.

This website uses cookies that are stored on the user's platform for the duration of the visit to the website and are automatically deleted as soon as the user closes the browser (so-called session cookies). The only information stored in such a cookie is a characteristic string of characters that enables the browser to be clearly identified when the website is called up again (so-called session ID). This website also uses cookies that are temporarily stored on the user's platform. Cookies that have already been saved can be deleted at any time via the internet browser.

The use of cookies makes it easier for the user to use this website. The data processing takes place on the basis of legitimate interests within the meaning of Art. 6 Para. 1 S. 1 f.) GDPR. The user can prevent or restrict the storage of cookies at any time using the appropriate settings in their Internet browser. Cookies that have already been saved can be deleted at any time via the internet browser. The operator points out that this option can limit the usability of the website.

Data processing through JavaScript libraries

This website uses Java script libraries from external providers. It is through the use of the JavaScript libraries that the usability of individual functions of this website is made possible in the first place, which in turn makes it easier for the user to use this website. It cannot be ruled out that when you access the website, personal data will be transferred to the external provider. The data processing takes place on the basis of legitimate interests within the meaning of Art. 6 Para. 1 S. 1 f.) GDPR. Users can prevent the transmission by installing a JavaScript blocker such as the browser plug-in “NoScript” ( https://noscript.net/ ) or by deactivating JavaScript through browser settings. The operator points out that this option can limit the usability of the website.

Registration

The placement of advertisements on Facebook and Instagram requires registration. When requesting a form in connection with registration, the following data is required: Facebook login name, email address. In addition, the date and time of registration as well as the general data registered when the website is accessed (see “Data processing when the website is accessed”) is also collected. The data is processed exclusively for the purpose of processing the registration and to fulfill the (pre-) contractual obligations.

The operator of the website uses functions of the online service Facebook login to register. The provider is Facebook Inc., the company Facebook Inc., Menlo Park, CA (USA) - hereinafter referred to as Facebook. Facebook login also uses so-called “cookies”, which are stored on the user's platform and enable an analysis of the website visit. The data generated by the cookie are usually transferred to a Facebook server in the USA and stored there. The processing of the data by Facebook takes place within the framework of Facebook's data usage guidelines. Accordingly, general information on the presentation of Facebook ads in Facebook's data usage guidelines: https://www.facebook.com/policy.php .

The operator needs the login data in order to read out the public profile of the user, in particular for the marketing of the user's event data in accordance with the order. Data will only be passed on to third parties if and to the extent that this is necessary to fulfill the operator's (pre-) contractual obligations.

The sending of e-mails after registration takes place via "Mailchimp" / "Mandrill" or "Intercom". "Mailchimp" and "Mandrill" are shipping platforms of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308. "Intercom" is a shipping platform of the US provider INTERCOM, INC. 98 Battery Street, Suite 402, San Francisco, CA 94111 USA. Both providers are certified as Privacy Shield ( https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active and https://www.privacyshield.gov/participant?id=a2zt0000000TNQvAAO ), which guarantees compliance with the EU GDPR and all other data protection laws or provisions of a data protection nature applicable in the member states of the EU. In addition, the operator has concluded a contract for data processing on behalf of the providers. This is a contract in which the respective provider undertakes to protect the transmitted data, to process it in accordance with the data protection regulations on behalf of the operator of this website and, in particular, not to pass it on to third parties https://mailchimp.com/legal/privacy respectively. https://www.intercom.com/terms-and-policies#privacy .

The data processing of the compulsory requested data takes place on the basis of Art. 6 Abs. 1 S. 1 b.) And Art. 6 Abs. 1 S. 1 f.) GDPR, otherwise also from Art. 6 Abs. 1 S. 1 a.), 7 GDPR. The transfer of data to third parties takes place on the basis of Art. 6 Para. 1 S. 1 b.) And Art. 6 Para. 1 S. 1 f.) GDPR. The deletion of the data takes place according to general principles (see "General information on the deletion of data").

Use of dashboard functions

Via the website's dashboard, the user has the option, among other things, of creating or editing advertisements on Facebook and Instagram. With the various functions in connection with the use of the dashboard, in addition to the voluntary information, the date and time of the user action as well as the general data registered when the website is accessed (see “Data processing when the website is accessed”). In addition to the information provided voluntarily, this data is stored exclusively for the purpose of implementing the selected user action.

For booking and billing in connection with the placement of advertisements, in addition to the address, booking and payment data of the user are collected and processed. Data will only be passed on to third parties if and to the extent that this is necessary to fulfill the (pre-) contractual obligations of the operator or on the basis of the operator's legitimate interests in the economic and effective processing of the booking and payment process. To process the payment process, the data is passed on to the payment service provider Stripe, 185 Berry Street, Suite 550
San Francisco, CA 94107 (USA) or PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 (Luxembourg). Reference is also made to the data protection declarations from Stripe and PayPal: https://stripe.com/de/privacy , https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

The data processing takes place on the basis of Art. 6 Para. 1 f.) GDPR, otherwise also according to Art. 6 Para. 1 a.), 7 GDPR. The deletion of the data takes place according to general principles (see "General information on the deletion of data").

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA - hereinafter referred to as Google. Google Analytics also uses so-called “cookies”, which are stored on the user's platform and enable an analysis of the website visit. The data generated by the cookie are usually transferred to a Google server in the USA and stored there.

Google uses the data on behalf of the operator of this website to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of this website. The Internet protocol address (IP address) transmitted by Google Analytics will not be merged with other Google data.

Google is designated as Privacy Shield certified ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI ), which guarantees compliance with the EU GDPR and all other data protection laws or provisions of a data protection nature in the member states of the EU . In addition, the operator has concluded an order processing contract with Google. This is a contract in which Google undertakes to protect the transmitted data, to process it on behalf of the operator in accordance with data protection regulations and, in particular, not to pass it on to third parties.

The operator only uses Google Analytics with activated IP anonymization. This means that the transmitted Internet protocol address (IP address) is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. The unabridged IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases.

The data processing takes place on the basis of legitimate interests within the meaning of Art. 6 Para. 1 S. 1 f.) GDPR. The data is required to enable the website to be displayed correctly and to continuously optimize the website for the benefit of the user.

The user can prevent or restrict the storage of cookies at any time using the appropriate settings in their Internet browser. The operator points out that this option can limit the usability of the website. The user can also prevent data processing by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de . Further information on data processing can be found at http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/ .

Meta pixels

This website uses functions of the web analysis service Facebook-Pixels. The provider is Meta Platforms, Inc.,

Menlo Park, CA (USA) - hereinafter referred to as Facebook. Facebook-Pixels also uses so-called “cookies”, which are stored on the user's platform and enable an analysis of the website visit. The data generated by the cookie are usually transferred to a Facebook server in the USA and stored there. Facebook Pixel is not used with the “Advanced Matching” or “Custom Audience from File” option.

The processing of the data by Facebook takes place within the framework of Facebook's data usage guidelines. Accordingly, general information on the presentation of Facebook ads in Facebook's data usage guidelines: https://www.facebook.com/policy.php . Users can find special information and details about the Facebook pixel and how it works at https://www.facebook.com/business/help/651294705016616 .

Youtube videos

The operator of this website uses videos from the “YouTube” platform of the third-party provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The integration takes place via a server call to Google, which requires the transmission of the user's IP address. The data processing takes place on the basis of legitimate interests within the meaning of Art. 6 Para. 1 S. 1 f.) GDPR. Using the videos makes it easier for the user to use this website and optimizes the presentation of the website. Google is designated as Privacy Shield certified ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI ), which guarantees compliance with the EU GDPR and all other data protection laws or provisions of a data protection nature in the member states of the EU . Users can find further information on data processing at https://www.google.com/policies/ .

General information on the deletion of data

Personal data are generally deleted immediately after the storage purpose has been fulfilled, unless the statutory retention periods stipulate any extended storage (cf. §§ 257 (1) HGB: 6 years, 147 (1) AO: 10 years) or storage is necessary for evidence purposes. Proper deletion is checked on an annual basis. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted.

Operator safety measures

In accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the data processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of the data subjects, ongoing appropriate organizational, contractual and technical measures to ensure that the data protection regulations are complied with and that the data that is the subject of data processing are protected against accidental or deliberate manipulation, loss, destruction or against access by unauthorized persons. The operator has already taken the protection of personal data into account during the technical development and design of the website (Art. 25 GDPR) The security measures include, in particular, the encrypted transmission of data between the user's browser and the operator's server.

User rights

The user has the right to request information at any time as to whether and which personal data of the user is being processed (Art. 15 GDPR). On request, the user's personal data must be released in a structured, commonly used and machine-readable format (Art. 20 GDPR).

Furthermore, the user has the right to correct incorrect or incomplete personal data (Art. 16 GDPR) and - under the conditions of Art. 18 GDPR - the right to restrict processing.

Unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest

or is required to assert, exercise or defend legal claims, the user can also request the deletion of his personal data (Art. 17 GDPR).

Consent to data processing within the meaning of Art. 6 Para. 1 S. 1 a.), 7 GDPR can be revoked by the user at any time with effect for the future. If the data processing takes place on the basis of Art. 6 Para. 1 S. 1 f.) GDPR, the user can object to the data processing with effect for the future, unless the operator can prove compelling reasons worthy of protection for the processing, which the interests , Rights and freedoms of the user prevail, or the processing serves to assert, exercise or defend legal claims of the operator of the website (Art. 21 GDPR).

If the user is of the opinion that the processing of their personal data violates data protection regulations, they can lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The supervisory authority responsible for the operator is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.

- END OF PRIVACY POLICY -