Source: http://www.main-matsuri.com/EN/data-protection/
Timestamp: 2019-04-23 02:02:27+00:00

Document:
We are very pleased about your interest in our company. Data protection is of particular importance for the management of Main Matsuri Event GmbH . A use of the web pages of the Main Matsuri Event GmbH is basically possible without any indication of personal data. However, if a data subject wishes to use our company’s special services through our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.
Main Matsuri Event GmbH, as controller, has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security holes, so that absolute protection can not be guaranteed. For this reason, every person concerned is free to submit personal data to us by alternative means, for example by telephone.
By using cookies, Main Matsuri Event GmbH can provide users of this website with more user-friendly services that would not be possible without cookies.
When using this general data and information, the Main Matsuri Event GmbH does not draw any conclusions about the person concerned. Rather, this information is required in order to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and ( 4) to provide law enforcement authorities with the necessary information for prosecution in case of a cyberattack. This anonymously collected data and information are evaluated by the Main Matsuri Event GmbH on the one hand statistically and further with the aim to increase the privacy and data security in our company, to ultimately ensure an optimal level of protection of the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) of the data subject, the date and time of registration are also stored. The storage of this data takes place against the background that only so the misuse of our services can be prevented, and this data if necessary to clarify committed offenses. In this respect, the storage of this data is required to secure the controller. A disclosure of this data to third parties is not, as long as there is no legal obligation to disclose or the disclosure of law enforcement serves.
The controller shall, at any time upon request, provide information to each data subject as to which personal data about the data subject is stored. In addition, the data controller corrects or deletes personal data at the request or notice of the data subject, insofar as this does not conflict with any statutory retention requirements. All data subjects of the controller are available to the data subject as a contact person in this context.
On the website of the Main Matsuri Event GmbH the users are given the opportunity to subscribe to the newsletter of our company. Which personal data are transmitted to the data controller when ordering the newsletter results from the input mask used for this purpose.
The Main Matsuri Event GmbH informs its customers and business partners at regular intervals by way of a newsletter about offers of the company. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by an affected person for the first time for the newsletter dispatch in the double-opt-in procedure. This confirmation email serves to check whether the owner of the e-mail address as the person concerned has authorized the receipt of the newsletter.
When registering for the newsletter, we also store the IP address of the computer system used by the person concerned at the time of registration, as well as the date and time of registration, as assigned by the Internet Service Provider (ISP). The collection of this data is necessary in order to be able to understand the (possible) misuse of the data subject’s e-mail address at a later date and therefore provides the legal safeguards for the data controller.
The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. In addition, subscribers of the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or registration, as may be the case in the event of changes to the newsletter offer or technical changes. There is no transfer of the personal data collected in the context of the newsletter service to third parties. Subscription to our newsletter may be terminated by the person concerned at any time. The consent to the storage of personal data that the data subject has given us for the newsletter can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time, directly on the controller’s website, or to inform the controller in a different way.
The newsletters of Main Matsuri Event GmbH contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in those emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. With the help of the embedded pixel, Main Matsuri Event GmbH can recognize if and when an e-mail was opened by an affected person and which links in the e-mail were called by the person concerned.
Such personal data collected via the counting pixels contained in the newsletters will be stored and evaluated by the controller in order to optimize the delivery of the newsletter and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Affected persons are at any time entitled to revoke the separate declaration of consent issued via the double-opt-in procedure. After revocation, this personal data will be deleted by the controller. A cancellation of the receipt of the newsletter, the Main Matsuri Event GmbH automatically interpreted as a revocation.
Due to legal regulations, the website of Main Matsuri Event GmbH contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person contacts the data controller by e-mail or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal information provided on a voluntary basis by a data subject to the controller is stored for the purposes of processing or contacting the data subject.
the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations.
the existence of a right to rectification or erasure of the personal data concerning them, or to the limitation of the processing by the controller or a right to object to such processing.
if the personal data are not collected from the data subject: All available information about the origin of the data.
If one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored at Main Matsuri Event GmbH, they may, at any time, contact an employee of the controller. The employee of the Main Matsuri Event GmbH will arrange that the deletion request be fulfilled immediately.
If the personal data have been made public by the Main Matsuri Event GmbH and if our company is responsible for the deletion of personal data as the person responsible pursuant to Art. 17 para. 1 DS-GVO, the Main Matsuri Event GmbH takes into account the available technology and the implementation costs appropriate measures, including of a technical nature, to inform other data controllers processing the personal data published that the data subject has been obliterated by these other data controllers to delete all links to such personal data or to copies or Has requested replicas of such personal data, as far as the processing is not required.The employee of the Main Matsuri Event GmbH will arrange the necessary in individual cases.
If one of the above conditions is met and an affected person wishes to request the restriction of personal data stored at Main Matsuri Event GmbH, they may at any time contact an employee of the controller. The employee of Main Matsuri Event GmbH will initiate the restriction of processing.
To assert the right to data portability, the data subject may at any time contact an employee of Main Matsuri Event GmbH.
In the event of an objection, Main Matsuri Event GmbH no longer processes the personal data unless we can prove compelling reasons for the processing which are worthy of protection, which outweigh the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defense of legal claims.
If Main Matsuri Event GmbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the data subject objects to Main Matsuri Event GmbH for the purposes of direct marketing, Main Matsuri Event GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his / her particular situation, against the processing of personal data relating to him or her at Main Matsuri Event GmbH for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DS-GMOs are objecting to opposition unless such processing is necessary to fulfill a public interest task.
In order to exercise the right of opposition, the data subject may directly contact any employee of Main Matsuri Event GmbH or any other employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.
Any person concerned by the processing of personal data shall have the right, as granted by the European legislature and the legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) under Union or Member State legislation to which the controller is subject,is permitted and that such legislation contains appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject; or (3) with the express consent of the data subject.
If the decision (1) is required for the conclusion or performance of a contract between the data subject and the controller or (2) it is done with the express consent of the data subject, the Main Matsuri Event GmbH shall take appropriate measures to safeguard the rights and freedoms as well as to safeguard the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his or her own position and to contest the decision.
The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the applicant by the controller, For example, the application documents will be automatically deleted two months after notification of the rejection decision, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).
A social network is an Internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing views and experiences, or allows the Internet community to provide personal or business information. Facebook allows social network users to create private profiles, upload photos and socialize via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The person responsible for the processing of personal data, if an affected person lives outside the US or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
Each time one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Facebook Component causes a representation of the corresponding Facebook component of Facebook to download. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the person concerned.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is simultaneously logged in to Facebook at the time of access to our website; this happens regardless of whether the person clicks on the Facebook component or not. If such a transfer of this information to Facebook is not wanted by the person concerned, it can prevent the transfer by logging out of their Facebook account before calling our website.
The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos, as well as to redistribute such data across social networks.
Each time one of the individual pages of this website is called up by the controller and an Instagram component (Insta-Button) has been integrated, the internet browser on the information technology system of the person concerned automatically becomes the respective Instagram component causes to download a representation of the corresponding component of Instagram. As part of this technical process, Instagram is aware of which specific bottom of our website is visited by the person concerned.
If the person concerned is simultaneously logged into Instagram, Instagram recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website, which specific subpage the person concerned visits. This information is collected through the Instagram component and assigned through Instagram to the affected person’s Instagram account. If the person concerned activates one of the Instagram buttons integrated on our website, the data and information transmitted with it are assigned to the personal Instagram user account of the person concerned and saved and processed by Instagram.
Instagram always receives information via the Instagram component that the person concerned has visited our website if the person concerned is simultaneously logged in to Instagram at the time of accessing our website; this happens regardless of whether the person clicks on the Instagram component or not. If such information is not intended to be transmitted to Instagram by the person concerned, the latter can prevent the transmission by logging out of her Instagram account before calling our website.
The controller has integrated the Shariff component on this website. The Shariff component provides social media buttons that are privacy-compliant. Shariff was developed for the German computer magazine c’t and is published by GitHub, Inc.
If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
The personal data transmitted to PayPal are usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract also necessary personal data, which are in connection with the respective order.
The purpose of the transmission of the data is payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, in particular if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the controller may be transmitted by PayPal to credit reporting agencies. This transmission aims at the identity and credit check.
PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of it.
The data subject has the option to revoke the consent to the handling of personal data against PayPal at any time. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.
Art. 6 I lit. A DS-GMO serves our company as the legal basis for processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 I lit. b DS-GMO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS-GMO. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DS GMOs are based. Ultimately, processing operations could be based on Art. 6 I lit. f DS GMOs are based. Processing operations that are not covered by any of the above legal bases are based on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DS-BER). if processing is necessary to safeguard the legitimate interests of our company or a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DS-BER). if processing is necessary to safeguard the legitimate interests of our company or a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DS-BER).
We clarify that the provision of personal data is partly required by law (eg tax regulations) or can also result from contractual regulations (eg information about the contracting party). Sometimes it may be necessary for a contract to be concluded that an affected person provides us with personal data that must subsequently be processed by us. For example, the data subject is required to provide us with personal information when our company concludes a contract with her. Failure to provide the personal data would mean that the contract with the person concerned could not be closed. Prior to any personal data being provided by the person concerned, the person concerned must contact one of our employees.

References: Art. 17
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6