Source: https://www.theleagues.eu/zeppelinstore/index.php?p=QFh5LQQBfxcgK0xNWS8dLV4RDEoUWVleXUclPFFGVzR3
Timestamp: 2019-04-19 05:04:30+00:00

Document:
In this data protection statement we inform you of the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering. For further information on the terms used such as “processing” or “controller”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Where we disclose, transmit or otherwise grant access to data to persons and companies (contract data processors or third parties) in the course of our processing, this will be on the basis of a statutory regulation (e.g. transfer of data for the fulfilment of the order or to financial service providers, Art. 6 Para. 1 Letter b GDPR), your consent, a legal obligation or a legitimate interest (e.g. when agents are used, web hosting, etc). Where we engage third parties to process data on the basis of a “data processing contract”, this will be on the basis of Art. 28 GDPR. If data is transmitted to third countries (countries outside of the EU / EEA) for the fulfilment of our (pre-)contractual obligations, this will be done provided there are recognised guarantees of a level of protection equivalent to those in the EU (e.g. the "Whitelist" of the EU, "Privacy Shield" of the USA, etc) or in observance of recognised contractual obligations (“standard contractual clauses of the EU”).
You can withdraw consent given pursuant to Art. 7 Para. 3 GDPR with effect for the future. You can also object at any time to the future processing of data in accordance with Art. 21 GDPR. You can object in particular to processing for purposes of direct marketing. The lawfulness of the processing that has taken place up until the withdrawal will not be affected by the withdrawal.
Cookies are small files which are stored on your device when you visit our website. Cookies are used primarily to recognise you when you use our online offering. Our online offering uses exclusively a special type of cookie which is deleted after your browser session has finished and is therefore only active as long as you use our online offering. Such cookies are also called “session cookies”. You can manage and prevent the storage of such cookies via your browser. Please note that without “session cookies” our ordering system will have limited functionality and these cookies are therefore necessary for the ordering system to work. The cookies are stored on the basis of Art. 6 Para. 1 Letter f GDPR.
The data processed by us is deleted or the processing of the data is restricted (e.g. blocked) pursuant to Art. 17 and 18 GDPR as soon as it is no longer needed for the intended purpose or for the services to be performed and there is no statutory requirement to retain the data. In accordance with statutory requirements in Germany, data is retained for 10 years pursuant to §§ 147 Para. 1 of the German Tax Code (AO), 257 Para. 1 Nos. 1 and 4, Para. 4 of the German Commercial Code (HGB) (accounts, records, management reports, vouchers, trading books, for the taxation of relevant documentation, etc.) and 6 years pursuant to § 257 Para. 1 Nos. 2 and 3, Para. 4 HGB (commercial letters).
We also process contract data (e.g., object of contract, term, customer category), payment data (e.g. bank account, payment history) and booking data (e.g. hotel bookings, booking of participation) of our customers, potential customers and business partners for the purpose of performing the contractually-agreed services, service and customer care.
The hosting services used by us serve the provision of our online offering. Here we, or our hosting provider, process master data, contact data, content data, contract data, usage data, meta and communication data of customers, potential customers and visitors to this online offering on the basis of our legitimate interests of ensuring the efficient and secure provision of this online offering pursuant to Art. 6 Para. 1 Letter f GDPR in conjunction with Art. 28 GDPR (conclusion of data processing contract). We, or our hosting provider, collect on the basis of our legitimate interests in accordance with Art. 6 Para. 1 Letter f. GDPR data about every access to the server upon which this service is located (so-called server log files). The access data includes the name of the website or file retrieved, the date and time of retrieval, the data volume transferred, report on successful retrieval, browser type and version, the operating system of the user, referrer URL (the last visited website), IP address and the requesting provider. Log file information is stored for security reasons (e.g. to clear up cases of misuse and fraud) for a maximum of 30 days and then deleted. Data which needs to be retained for longer as evidence will not be deleted until the incident has been finally cleared up.
We process data in administrative activities, the organisation of our business, financial accounting and compliance with statutory obligations, e.g. archiving. Here we process the same data that we process in the performance of our contractual services. The data is processed on the basis of Art. 6 Para. 1 Letter c. GDPR, Art. 6 Para. 1 Letter f. GDPR. The purpose of and our interest in the processing lie in the financial accounting, office organisation, archiving of data, i.e. tasks which serve the maintenance of our business activities and the performance of our duties and services. The deletion of data in respect of contractual services and the contractual communication corresponds with the information referred to for these processing activities. We disclose or transmit data here to the tax authorities, consultants such tax consultants, auditors, other billing offices and payment service providers. We also store on the basis of our business interests information about suppliers, event organisers and other business partners, e.g. for the purpose of contact at a later date. We store this mostly business-related data on a permanent basis.
For security reasons and to protect the transmission of confidential content which you send to us as the site operator, our website uses SSL or TLS encryption. This ensures that data which you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" address bar in your browser and by the padlock icon in the browser line.

References: Art. 6
 Art. 28
 Art. 7
 Art. 21
 Art. 6
 Art. 17
 § 257
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6