Source: https://www.reeperbahnfestival.com/en/privacy-code
Timestamp: 2019-04-22 08:30:18+00:00

Document:
"Personal data" means any information relating to an identified or identifiable person (Article 4 (1) GDPR). Information of an identified person can e.g. the name or email address. But personal are also data in which the identity is not immediately apparent, but can be determined by combining own or third-party information and thus learns who it is. A person is e.g. identifiable by providing their address or bank details, date of birth or username, IP addresses and / or location data. Relevant here are all information that in some way allow conclusions about a person.
By "processing", Art. 4 No. 2 DSGVO means any procedure in connection with personal data. In particular, this includes, but is not limited to, collection, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure, transmission, dissemination, or any other form of provisioning, matching, or linking , the restriction, deletion or destruction of personal data.
In the context of the website with the URL www.reeperbahnfestival.com, we process the personal data listed below in sections 6 - 19 in detail. We only process data from you that you actively indicate on our website (for example by filling out forms) or that you provide automatically when using our offer.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers for the processing of your personal data, this takes place within the framework of a so-called order processing, in which we as the client are authorized to give instructions to our contractors. To operate our website, we use external service providers for hosting, maintenance, care and development. If further external service providers are used in individual processing operations listed in sections 6 - 19, they will be named there.
Data transfer to third countries does not take place and is not planned. We will inform you about exceptions to this principle in the processing described below.
The temporary storage of your IP address by the system is necessary to be able to deliver our website to a user's device. To do this, the user's IP address must be kept for the duration of the session. Your IP address will not be recorded in our logfiles.
The processing takes place in order to enable the website to be accessed as well as to ensure its stability and security. In addition, the processing is used for the statistical evaluation and improvement of our online offer.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose named in section 6.2.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. A deletion of the log files takes place after 30 days.
Processing takes place in order to provide you with the functions of our website for registered users.
The processing is required to conclude and fulfill the contract of use (Art. 6 (1) (b) GDPR). Without providing your personal data in the context of the registration we can not provide our contractually owed services.
The data will be automatically deleted by us upon termination of your contract of use. You can terminate the user agreement independently by selecting the function "Delete profile" in the settings of your user account. Alternatively, you can also contact us by e-mail to contact@reeperbahnfestival.com, by post to Reeperbahn Festival GbR, Neuer Pferdemarkt 1, 20359 Hamburg or by fax to 040 - 431 79 59 26 to inform that you are no longer a registered user of our website want. We will delete your user account immediately. In addition, as a logged in user, you can edit and remove your own contributions, information and information at any time.
The buttons shown on our website for the purchase of festival or conference tickets as well as merchandising products are linked to external websites of Shopsystem.
For the purchase of conference tickets we link to Eventbrite of the company Eventbrite, Inc. for the payment processing and the purchase of conference tickets at our shareholder of Inferno Events GmbH & Co. KG. Hereby, data relevant to participation, such as e.g. Name, e-mail address, company, industry, etc. queried and stored. For paid tickets, Eventbrite asks for the data needed for payment.
here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de. For information about the Privacy Shield Agreement, see "Privacy Shield List" on the U.S. Homepage. Department of Commerce ().
You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted by e-mail will be processed by us.
The data submitted with your e-mail will be used solely for the purpose of processing and responding to your request.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 9.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the processing of the data is carried out in order to fulfill the contract (Article 6 (1) (b) GDPR).
The data will be deleted by us as soon as they are no longer necessary for the purpose of their collection. This is usually the case when communication with you is over. The communication ends when it can be inferred from the circumstances that your concern has finally been clarified. Insofar as statutory retention periods preclude deletion, deletion takes place immediately after expiry of the statutory retention period.
Identify your session on the server. It contains an alphanumeric string. This is a so-called first-party cookie, ie a cookie, which is controlled from our website.
Google Analytics cookies are used to collect information about how visitors use our website. We use the information to generate reports that help us improve the site. The cookies collect the information anonymously, including the number of visitors to the site from where the visitors came to the site and the pages they visited. In detail, the following applies.
For the deletion periods see below.
This cookie is used to identify a user. It contains a number sequence. The cookie is a so-called first-party cookie, ie a cookie, which is controlled from our website.
He is saved for two years.
This cookie is used to control the webpage usage query rate. It typically contains a number. The cookie is a so-called first-party cookie, ie a cookie, which is controlled from our website.
It is saved for 10 minutes.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 10.2.
We send a newsletter at irregular intervals. With the newsletter we inform you about our events and activities around the Reeperbahn Festival. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by completing and submitting a newsletter registration form on our website.
For the newsletter registration you only need to enter your e-mail address. All other information (such as your first name and last name) are voluntary and are used solely for the personalization of emails.
For the implementation and verification of newsletter applications, we use the so-called double opt-in procedure. Registration takes place in several steps. First, sign up for our newsletter on our website. You will receive an e-mail from us at the e-mail address you provided. With this e-mail we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it . Confirmation is made by clicking on a confirmation link in the e-mail. Only after a successful confirmation, we will include you in our newsletter mailing list and send you e-mails in the future. As part of the double-opt-in procedure, we save the date, time and your IP addresses both during registration and when confirming.
The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers. The collection and storage of date, time and IP addresses during the newsletter registration serves the documentation of granted consent and the protection against the abusive registration of e-mail addresses.
The processing takes place in our subscriber newsletter on the basis of a consent in accordance with Art. 6 para. 1 lit. a GDPR. Your consent is voluntary. The collection and storage of date, time and IP addresses when registering for the newsletter is required to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose stated in section 11.2.
If you do not confirm your registration for our newsletter within 24 hours after receiving the corresponding registration email, your data will be automatically deleted. Incidentally, we process your personal data for the duration of your newsletter subscription. You can terminate the subscription to our newsletter at any time by revoking your consent. For a simple explanation is sufficient (by e-mail to contact@reeperbahnfestival.com, by mail to Reeperbahn Festival GbR, Neuer Pferdemarkt 1, 20359 Hamburg or by fax to 040 - 431 79 59 26). Unsubscribing from the newsletter is also possible by clicking on the unsubscribe link in each newsletter e-mail or here (http://mailings.infernoevents.com/f/19984-99821/wwu/160529-3f66984d8b2a-12467003). With the revocation of your consent you will no longer receive any newsletters and your personal data will be removed from our active mailing list. We will use your e-mail address to enforce your revocation restricted in our so-called black list. This will ensure that you will not receive newsletters from us in the future and that your email address will not be misused by third parties.
We use the services of the newsletter provider Clever Reach to administer our newsletter mailing list and to send e-mails. This is done as part of a job processing. Clever Reach is an offer by CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, Germany.
Our website does not use so-called social media plugins. The logos of the social networks Facebook, Twitter and Instagram displayed on our website are linked only to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.
Our website uses "YouTube" services on a video sharing platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereafter referred to as "Youtube"). YouTube is represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. The videos are included in the "advanced privacy mode" offered on YouTube, d. H. no personal information will be transferred from you to Google as long as you do not play the videos. Only by playing a video is a data transfer to Google, on which we have no influence. When you play an embedded video on a subpage of our website, Google will tell you which subpage you've visited and which video you've viewed. Possibly. Your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.
Processing takes place in order to be able to show you videos on our website.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 13.2.
Including YouTube may transfer personal information to YouTube LLC or Google. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
Our website uses "Vimeo" services on a video-sharing platform operated by Vimeo LCC, 555 West 18th Street, NY, New York 10011, USA (hereafter referred to as "Vimeo"). We use Vimeo by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. When you visit a sub-page of our website that has a video embedded on it, it will connect to the Vimeo servers and display the video within our website. This will tell Vimeo which website you have visited. Possibly. Your IP address will also be transmitted to Vimeo. When you play an embedded video, this information is also passed to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. For more information about privacy at Vimeo, visit http://vimeo.com/privacy.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 14.2.
Vimeo also processes data in the USA.
Our website uses services provided by "Soundcloud" a platform for audio material operated by SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany. We use Soundcloud by embedding individual audio files from the platform on our website as so-called iFrames so that they can be played directly on our website. When you visit a subpage of our website that has an audio file embedded on it, it will connect to the Soundcloud servers, displaying the audio within our website. This will tell Soundcloud which web page you visited. Possibly. Your IP address will also be transferred to Soundcloud. When you play an embedded audio file, this information is also passed to Soundcloud. If you are logged in as Soundcloud user, Soundcloud assigns this data to your user account. For more information about privacy at Soundcloud, visit https://soundcloud.com/pages/privacy.
Processing takes place in order to be able to display and play audio files on our website.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 15.2.
By using the service Soundcloud personal data may be transmitted to the company SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 16.2.
The use of the Deezer service may transfer personal data to Deezer, 12 Rue d'Athènes, 75009 Paris, France.
The processing takes place in order to be able to display page-ready e-paper on our website.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 17.2.
Issuu also processes data in the USA.
Our website uses "Google Maps," a map display service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, US ("Google"). We use Google Maps by including a map with our business address on our website. The map is loaded directly from a Google server. For this to happen, your browser sends a request to a Google server. As a result, we may also submit your IP address in connection with the address of our website to Google. Google Maps does not deposit cookies on your device. If you are logged into Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.
The processing is done to show you an interactive map on our website.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 18.2.
Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
Processing takes place in order to evaluate the use of our website. The information gained thereby serves to improve and tailor the design of our online presence.
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 19.2.
Google Analytics acts as a service provider for us as part of order processing. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
Our website uses "Webflow", a responsive web design tool and hosting platform, Webflow, Inc., 208 Utah St, Ste 210, San Francisco, CA 94103, United States (hereinafter referred to as "Webflow").
Processing takes place in order to be able to display and play media content on our website.
The storage period, as well as your control and setting options for cookies, we have explained in paragraph 10. You may object to Webflow data processing at any time by disabling the appropriate option in your browser's system settings.
Webflow acts as a service provider for us as part of order processing. Webflow also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
In order to protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's device. You can recognize the active SSL or TLS encryption by a small lock logo, which is displayed on the far left in the address bar of the browser.
You have the right to ask us to confirm that we are processing personal information concerning you. If this is the case, you are entitled to information about these personal data and to the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 DSGVO.
You have the right to demand immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
You have the right to demand that personal data relating to you be deleted without delay if one of the reasons listed in detail in Art. 17 GDPR is applicable, eg. For example, if your data is no longer needed for the purposes we are pursuing.
You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is fulfilled, eg. For example, if you deny the accuracy of your personal information, data processing will be restricted for the duration that allows us to verify the accuracy of your information.
You have the right to demand the publication of your data in a structured, common and machine-readable format under the conditions set out in Art. 20 DSGVO.
You have the right to revoke your consent at any time in the case of processing based on consent. The revocation is valid from the time of its assertion. He works in other words for the future. The processing is thus not retroactively unlawful by the revocation of the consent.
If you believe that the processing of your personal data in violation of the GDPR, you have the right to complain to a supervisory authority. You may assert this right with a supervisory authority in the EU Member State of your residence, place of work or place of alleged infringement.
Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision making, including profiling, in relation to your personal information.
If we collect personal data from you on the basis of Art. 6 para. 1 lit. f DSGVO (for the protection of predominant legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies if there are reasons that arise from your particular situation. Following an appeal, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case, irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct mail.

References: Art. 4
 Art. 6
 Art. 15
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 21