Introduction and concepts
2.1 Personal data
“Personal data” means any information relating to an identified or identifiable person (Article 4 (1) GDPR). Information of an identified person can e.g. the name or email address. But personal are also data in which the identity is not immediately apparent, but can be determined by combining own or third-party information and thus learns who it is. A person is e.g. identifiable by providing their address or bank details, date of birth or username, IP addresses and / or location data. Relevant here are all information that in some way allow conclusions about a person.
By “processing”, Art. 4 No. 2 DSGVO means any procedure in connection with personal data. In particular, this includes, but is not limited to, collection, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure, transmission, dissemination, or any other form of provisioning, matching, or linking , the restriction, deletion or destruction of personal data.
3. Responsible company and data protection officer
Responsible for the data processing on www.digital.international.reeperbahnfestival.com and international.reeperbahnfestival.com is
Company: Inferno Events GmbH & Co KG („we“ or individually „Inferno“)
Legal representative: Inferno Events Verwaltungs GmbH, diese vertreten durch Alexander Schulz und Detlef Schwarte (Geschäftsführer)
Address: Neuer Pferdemarkt 1, 20359 Hamburg
Telephone: + 49 (0) 40 43 17 959-00
Fax: +49 (0) 40 43 17 959- 26
E-Mail: [email protected]
For all other data processing on the website is responsible:
Company: Reeperbahn Festival GmbH i. G. (“we” or individually „RBF“)
Legal representative: Inferno Events GmbH & Co. KG & Karsten Jahnke Konzertdirektion GmbH
Address: Neuer Pferdemarkt 1, 20359 Hamburg
Telephone: + 49 (0) 40 43 17 959-17
Fax: +49 (0) 40 43 17 959- 26
E-Mail: [email protected]
For further procedures the responsible person is subsequently marked either with “Inferno” or “RBF”, as far as the processing does not take place via the websites.
4. Data Protection Officer
We have appointed an external data protection officer for our company. You can reach him under:
Name: Reinher Karl
Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg
Telephone: 040/ 18189800
Fax: 040/ 181898099
E-Mail: [email protected]
5. Processing framework: Website
In the context of the website with the URL www.reeperbahnfestival.com, we process the personal data listed below in sections 6 – 19 in detail. We only process data from you that you actively indicate on our website (for example by filling out forms) or that you provide automatically when using our offer.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers for the processing of your personal data, this takes place within the framework of a so-called order processing, in which we as the client are authorized to give instructions to our contractors. To operate our website, we use external service providers for hosting, maintenance, care and development. If further external service providers are used in individual processing operations listed in sections 6 – 19, they will be named there.
Data transfer to third countries does not take place and is not planned. We will inform you about exceptions to this principle in the processing described below.
The PROCESSES In detail
6. Provision of website and server log files
6.1 Description of the processing
Every time the website is accessed, we automatically collect information that your browser transmits to our server. These are also stored in the so-called log files of our system. These are the following data:
Your IP address
The browser software you use, as well as its version and language
the operating system you are using
the website from which you came to our website (so-called referrer)
the subpages you visit on our website
the date and time of your visit to our website
Transferred amount of data
The temporary storage of your IP address by the system is necessary to be able to deliver our website to a user’s device. To do this, the user’s IP address must be kept for the duration of the session. Your IP address will not be recorded in our logfiles.
The processing takes place in order to enable the website to be accessed as well as to ensure its stability and security. In addition, the processing is used for the statistical evaluation and improvement of our online offer.
6.3 Legal basis
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose named in section 6.2.
6.4 Storage duration
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. A deletion of the log files takes place after 30 days.
7. Contact by e-mail
7.1 Description of the processing
You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted by e-mail will be processed by us.
The data submitted with your e-mail will be used solely for the purpose of processing and responding to your request.
7.3 Legal basis
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 7.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the processing of the data is carried out in order to fulfill the contract (Article 6 (1) (b) GDPR).
7.4 Storage duration
The data will be deleted by us as soon as they are no longer necessary for the purpose of their collection. This is usually the case when communication with you is over. The communication ends when it can be inferred from the circumstances that your concern has finally been clarified. Insofar as statutory retention periods preclude deletion, deletion takes place immediately after expiry of the statutory retention period.
8.1 Description of the processing
You can change your Cookie Settings here:Cookie-Einstellungen anpassen.
8.3 legal basis
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 8.2.
8.4 storage duration
9. YouTube videos
9.1 Description of processing
Our website uses “YouTube” services on a video sharing platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereafter referred to as “Youtube”). YouTube is represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. The videos are included in the “advanced privacy mode” offered on YouTube, d. H. no personal information will be transferred from you to Google as long as you do not play the videos. Only by playing a video is a data transfer to Google, on which we have no influence. When you play an embedded video on a subpage of our website, Google will tell you which subpage you’ve visited and which video you’ve viewed. Possibly. Your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.
Processing takes place in order to be able to show you videos on our website.
9.3 Legal basis
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 9.2.
9.4 Consignee and transfer to third countries
Including YouTube may transfer personal information to YouTube LLC or Google. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
10. Google Analytics
10.1 Description of the processing
Processing takes place in order to evaluate the use of our website. The information gained thereby serves to improve and tailor the design of our online presence.
10.3 Legal basis
Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 8.2.
10.4 Storage duration and right of objection
10.5 Consignee and transfer to third countries
Google Analytics acts as a service provider for us as part of order processing. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.
11. security measures
In order to protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s device. You can recognize the active SSL or TLS encryption by a small lock logo, which is displayed on the far left in the address bar of the browser.
12. Affected rights
With respect to the above-described data processing by our company, you are entitled to the following data subject rights:
12.1 Information (Art. 15 GDPR)
You have the right to ask us to confirm that we are processing personal information concerning you. If this is the case, you are entitled to information about these personal data and to the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 DSGVO.
12.2 Correction (Art. 16 GDPR)
You have the right to demand immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
12.3 Cancellation (Art. 17 GDPR)
You have the right to demand that personal data relating to you be deleted without delay if one of the reasons listed in detail in Art. 17 GDPR is applicable, eg. For example, if your data is no longer needed for the purposes we are pursuing.
12.4 Restriction of data processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is fulfilled, eg. For example, if you deny the accuracy of your personal information, data processing will be restricted for the duration that allows us to verify the accuracy of your information.
12.5 Data transferability (Art. 20 GDPR)
You have the right to demand the publication of your data in a structured, common and machine-readable format under the conditions set out in Art. 20 DSGVO.
12.6 Revocation of consent (Article 7 (3) GDPR)
You have the right to revoke your consent at any time in the case of processing based on consent. The revocation is valid from the time of its assertion. He works in other words for the future. The processing is thus not retroactively unlawful by the revocation of the consent.
12.7 Complaint (Article 77 GDPR)
If you believe that the processing of your personal data in violation of the GDPR, you have the right to complain to a supervisory authority. You may assert this right with a supervisory authority in the EU Member State of your residence, place of work or place of alleged infringement.
12.8 Prohibition of automated decisions / profiling (Art. 22 GDPR)
Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision making, including profiling, in relation to your personal information.
12.9 Opposition (Art. 21 GDPR)
If we collect personal data from you on the basis of Art. 6 para. 1 lit. f DSGVO (for the protection of predominant legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies if there are reasons that arise from your particular situation. Following an appeal, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case, irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct mail.
As of July 2020