Privacy Policy

Introduction and concepts

1. Introduction

With the operation of our website www.reeperbahnfestival.com including www.magazine.reeperbahnfestival.com; www.digital.international.reeperbahnfestival.com and www.international.reeperbahnfestival.com (hereinafter referred to as “Website”) we process personal data. These are treated confidentially and processed according to the applicable laws – in particular the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG-neu). With our privacy policy we want to inform you, which personal data we collect from you, for what purposes and on which legal basis we use them and, where appropriate, to whom we disclose them. In addition, we will explain to you what rights you have to protect and enforce your privacy.

2. Terms

Our privacy policy contains technical terms that are new to the DSGVO and the BDSG. For your better understanding we want to explain these terms in simple words in advance:

2.1 Personal data

“Personal data” means any information relating to an identified or identifiable person (Article 4 (1) GDPR). Information of an identified person can e.g. the name or email address. But personal are also data in which the identity is not immediately apparent, but can be determined by combining own or third-party information and thus learns who it is. A person is e.g. identifiable by providing their address or bank details, date of birth or username, IP addresses and / or location data. Relevant here are all information that in some way allow conclusions about a person.

2.2 Processing

By “processing”, Art. 4 No. 2 DSGVO means any procedure in connection with personal data. In particular, this includes, but is not limited to, collection, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure, transmission, dissemination, or any other form of provisioning, matching, or linking , the restriction, deletion or destruction of personal data.

3. Responsible company and data protection officer

Responsible for the data processing on www.digital.international.reeperbahnfestival.com and international.reeperbahnfestival.com is

Company: Inferno Events GmbH & Co KG („we“ or individually „Inferno“)

Legal representative: Inferno Events Verwaltungs GmbH, diese vertreten durch Alexander Schulz und Detlef Schwarte (Geschäftsführer)

Address: Neuer Pferdemarkt 1, 20359 Hamburg

Telephone: + 49 (0) 40 43 17 959-00

Fax: +49 (0) 40 43 17 959- 26

E-Mail: [email protected]

For all other data processing on the website is responsible:

Company: Reeperbahn Festival GmbH i. G. (“we” or individually „RBF“)

Legal representative: Inferno Events GmbH & Co. KG & Karsten Jahnke Konzertdirektion GmbH

Address: Neuer Pferdemarkt 1, 20359 Hamburg

Telephone: + 49 (0) 40 43 17 959-17

Fax: +49 (0) 40 43 17 959- 26

E-Mail: [email protected]

For further procedures the responsible person is subsequently marked either with “Inferno” or “RBF”, as far as the processing does not take place via the websites.

4. Data Protection Officer

We have appointed an external data protection officer for our company. You can reach him under:

Name: Reinher Karl

Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg

Telephone: 040/ 18189800

Fax: 040/ 181898099

E-Mail: [email protected]

Processing Frames

5. Processing framework: Website

In the context of the website with the URL www.reeperbahnfestival.com, we process the personal data listed below in sections 6 – 19 in detail. We only process data from you that you actively indicate on our website (for example by filling out forms) or that you provide automatically when using our offer.

Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers for the processing of your personal data, this takes place within the framework of a so-called order processing, in which we as the client are authorized to give instructions to our contractors. To operate our website, we use external service providers for hosting, maintenance, care and development. If further external service providers are used in individual processing operations listed in sections 6 – 19, they will be named there.

Data transfer to third countries does not take place and is not planned. We will inform you about exceptions to this principle in the processing described below.

The PROCESSES In detail

6. Provision of website and server log files

6.1 Description of the processing

Every time the website is accessed, we automatically collect information that your browser transmits to our server. These are also stored in the so-called log files of our system. These are the following data:

Your IP address
The browser software you use, as well as its version and language
the operating system you are using
the website from which you came to our website (so-called referrer)
the subpages you visit on our website
the date and time of your visit to our website
Transferred amount of data

The temporary storage of your IP address by the system is necessary to be able to deliver our website to a user’s device. To do this, the user’s IP address must be kept for the duration of the session. Your IP address will not be recorded in our logfiles.

6.2 Purpose

The processing takes place in order to enable the website to be accessed as well as to ensure its stability and security. In addition, the processing is used for the statistical evaluation and improvement of our online offer.

6.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose named in section 6.2.

6.4 Storage duration

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. A deletion of the log files takes place after 30 days.

7. Contact by e-mail

7.1 Description of the processing

You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted by e-mail will be processed by us.

7.2 Purpose

The data submitted with your e-mail will be used solely for the purpose of processing and responding to your request.

7.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 7.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the processing of the data is carried out in order to fulfill the contract (Article 6 (1) (b) GDPR).

7.4 Storage duration

The data will be deleted by us as soon as they are no longer necessary for the purpose of their collection. This is usually the case when communication with you is over. The communication ends when it can be inferred from the circumstances that your concern has finally been clarified. Insofar as statutory retention periods preclude deletion, deletion takes place immediately after expiry of the statutory retention period.

8. Cookies

8.1 Description of the processing

Our website uses cookies. Cookies are small text files that are stored when visiting a website on the user’s device. Cookies contain information that enables the recognition of a device and, if necessary, certain functions of a website. In most cases, we only use so-called “session cookies”. These are automatically deleted when you quit your Internet session and close the browser. Other cookies are stored on your device for a longer period of time.

You can change your Cookie Settings here:

Cookie-Einstellungen anpassen.

8.2 Purpose

We use cookies to make our website more user-friendly and to provide the features described in Section 8.1.

8.3 legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 8.2.

8.4 storage duration

Cookies are automatically deleted at the end of a session or at the end of the specified retention period. Since cookies are stored on your device, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website can not be used or only used to a limited extent.

9. YouTube videos

9.1 Description of processing

Our website uses “YouTube” services on a video sharing platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereafter referred to as “Youtube”). YouTube is represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. The videos are included in the “advanced privacy mode” offered on YouTube, d. H. no personal information will be transferred from you to Google as long as you do not play the videos. Only by playing a video is a data transfer to Google, on which we have no influence. When you play an embedded video on a subpage of our website, Google will tell you which subpage you’ve visited and which video you’ve viewed. Possibly. Your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.

9.2 Purpose

Processing takes place in order to be able to show you videos on our website.

9.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 9.2.

9.4 Consignee and transfer to third countries

Including YouTube may transfer personal information to YouTube LLC or Google. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

10. Google Analytics

10.1 Description of the processing

Our website uses “Google Analytics,” a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter “Google”). Google Analytics uses cookies (see paragraph 8) to analyze your use of our offer. The information generated by the cookie is usually transmitted to a Google server in the US and stored there. However, we only use Google Analytics with an IP anonymization. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. The statistics generated by Google Analytics record in particular how many users visit our website, from which country or location the access is made, which subpages are accessed and which links or search terms visitors use to access our website. Google Analytics user terms can be found at http://www.google.com/analytics/terms/en.html. An overview of Google Analytics privacy is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google’s privacy policy can be viewed at http://www.google.com/intl/en/policies/privacy.

10.2 Purpose

Processing takes place in order to evaluate the use of our website. The information gained thereby serves to improve and tailor the design of our online presence.

10.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 8.2.

10.4 Storage duration and right of objection

The storage period, as well as your control and setting options for cookies, we have explained in paragraph 8. You may object to Google Analytics data processing at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=en. Alternatively you can click on the following link. This will set an opt-out cookie on your device that will prevent your data from being collected on future visits to this website: Disable Google Analytics (LINK: “javascript: gaOptout ()”). The analytic data processed and stored with Google Analytics will be automatically deleted after 14 months.

10.5 Consignee and transfer to third countries

Google Analytics acts as a service provider for us as part of order processing. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

Safety Measures

11. security measures

In order to protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s device. You can recognize the active SSL or TLS encryption by a small lock logo, which is displayed on the far left in the address bar of the browser.

Your rights

12. Affected rights

With respect to the above-described data processing by our company, you are entitled to the following data subject rights:

12.1 Information (Art. 15 GDPR)

You have the right to ask us to confirm that we are processing personal information concerning you. If this is the case, you are entitled to information about these personal data and to the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 DSGVO.

12.2 Correction (Art. 16 GDPR)

You have the right to demand immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.

12.3 Cancellation (Art. 17 GDPR)

You have the right to demand that personal data relating to you be deleted without delay if one of the reasons listed in detail in Art. 17 GDPR is applicable, eg. For example, if your data is no longer needed for the purposes we are pursuing.

12.4 Restriction of data processing (Art. 18 GDPR)

You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is fulfilled, eg. For example, if you deny the accuracy of your personal information, data processing will be restricted for the duration that allows us to verify the accuracy of your information.

12.5 Data transferability (Art. 20 GDPR)

You have the right to demand the publication of your data in a structured, common and machine-readable format under the conditions set out in Art. 20 DSGVO.

12.6 Revocation of consent (Article 7 (3) GDPR)

You have the right to revoke your consent at any time in the case of processing based on consent. The revocation is valid from the time of its assertion. He works in other words for the future. The processing is thus not retroactively unlawful by the revocation of the consent.

12.7 Complaint (Article 77 GDPR)

If you believe that the processing of your personal data in violation of the GDPR, you have the right to complain to a supervisory authority. You may assert this right with a supervisory authority in the EU Member State of your residence, place of work or place of alleged infringement.

12.8 Prohibition of automated decisions / profiling (Art. 22 GDPR)

Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision making, including profiling, in relation to your personal information.

12.9 Opposition (Art. 21 GDPR)

If we collect personal data from you on the basis of Art. 6 para. 1 lit. f DSGVO (for the protection of predominant legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies if there are reasons that arise from your particular situation. Following an appeal, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case, irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct mail.

As of July 2020