Eventfeed Data Privacy Policy
Date (01.12.2023)Name and Address of the Controller
The Controller in the sense of the European General Data Privacy Regulation, other nationaler data protection acts of the member states as well as further data protection regulations is:
Eventfeed GmbH
Wartburgstraße 47
10823 Berlin
Deutschland
Tel.: 030 31017127
E-Mail: privacy@eventfeed.me
Website: https://eventfeed.meScope of Application
This data privacy policy applies to the use of our website and to the installation and use of our progressive web app (PWA). If data processing on our websites is mentioned below, this shall include our PWA.
General Information about the Data Processing
Scope of the Processing of personal data
We collect and use the personal data of our users in general only as far as this is necessary to provide a functional website and our contents and services. We usually collect and use the personal data of our users with the user’s consent. Exceptions apply in cases where a prior consent cannot be obtained for factual reasons and where the processing of the data is permitted by law.
Legal Basis for the Processing of Personal Data
Where the processing of personal data is based on your consent, Art. 6 Para. 1 (a) GDPR is the legal basis for the processing of personal data. Where the processing is necessary for the performance of a contract to which you are party, Art. 6 Para. 1 (b) GDPR is the legal basis. This applies also where the processing is necessary in order to take steps at the request of you prior to entering into a contract. Where the processing is necessary for compliance with a legal obligation to which we are subject, Art. 6 Para. 1 (c) GDPR is the legal basis.
Where the processing is necessary in order to protect the vital interests of you or of another natural person, Art. 6 Para. 1 (d) GDPR is the legal basis. Where the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, and such interests are not overridden by your interests or fundamental rights and freedoms, Art. 6 Para. 1 (f) GDPR is the legal basis for the processing.Where the processing of personal data is based on your consent, Art. 6 Para. 1 (a) GDPR is the legal basis for the processing of personal data. Where the processing is necessary for the performance of a contract to which you are party, Art. 6 Para. 1 (b) GDPR is the legal basis. This applies also where the processing is necessary in order to take steps at the request of you prior to entering into a contract. Where the processing is necessary for compliance with a legal obligation to which we are subject, Art. 6 Para. 1 (c) GDPR is the legal basis.
Where the processing is necessary in order to protect the vital interests of you or of another natural person, Art. 6 Para. 1 (d) GDPR is the legal basis. Where the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, and such interests are not overridden by your interests or fundamental rights and freedoms, Art. 6 Para. 1 (f) GDPR is the legal basis for the processing.Erasure of data and Storage Periods
Your personal data will be erased or restricted when they are no longer necessary in relation to the purposes for which they were collected. Data may also be collected where this is necessary to comply with a legal obligation by Union or Member State law to which we are subject. We restrict or erase the data also where such statutory storage periods expire, unless the storage is necessary in order to enter into a contract or for the performance of a contract.
Website operation and Creation of Logfiles
Description and Scope of Data Processing
Every time you access our website or you install or use our PWA, the data and information transmitted to us by the computer system of the calling computer which your internet browser or your device transmits to us or to our web space provider (so-called server log files) will be automatically stored by our system.
This concerns the following data:
- Information on the browser type and the used version
- The user’s operating system
- The user’s internet service provider
- The Internet Protocol (IP) address of the user or another identifier
- Installation ID
- Operating system
- Platform (iOS, Android, Windows)
- Date and time of access
- Websites through which the user’s system accesses our website
- Websites which are accessed by the usere’s system through our website
These data are stored in the logfiles of our system. This does not affect the user's IP addresses or other data that enable the data to be assigned to a user. These anonymous data are not stored together with other personal data of the user and do not allow any conclusions to be drawn about a specific person. They are evaluated for statistical purposes in order to be able to optimize our website and our offers.
Legal Basis for the Data Processing
Legal basis for the temporary storage of data and logfiles is Art. 6 Para. 1 (f) GDPR.
Purpose of the Data Processing
The temporary storage of the IP-address by our system is necessary in order to deliver the website to the user’s computer. Therefore, the user‘s IP-address needs to be stored for the duration of the session. We use the data in order to ensure the functionality of the website and to optimize the website and to ensure the safety of our IT systems.
These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 Para. 1 (f) GDPR.
Storage Period
The data are erased when they are no longer necessary in relation to the purposes for which they were collected. With regard to the website operation this is the time when the respective session has ended.
Possibility to Object or Erase
The collection of data for operational purposes of the website and the storage in logfiles is absolutely necessary for the website operation. Therefore, there is no objection possibility for the user.
Use of technically necessary Cookies
Description and Scope of Data Processing
Our webseite uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored in the user’s operating system. Cookies contain a distinctive character string that allows a clear identification of the browser in case the website is repeatedly accessed.
We use technically necessary Cookies to make our website more user-friendly. Several elements of our website require the identification of the user by the calling browser also after a page change.
In the cookies the following data are stored and transmitted:
- IP address or another identifier
- Language settings
- Cookie settings
- Log-in information
- In-website searches
Legal Basis for the Data Processing
Legal basis for the processing of personal data through use of technically necessary cookies is Art. 6 Para. 1 (f) GDPR.
Purpose of the Data Processing
The purpose of the use of technically necessary cookies is to facilitate the use of websites for the user. Several functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser can be recognized also after a page change.
We use cookies for the following applications:
- Application of language settings
- Application of cookie settings
- Remembering search terms
These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 Para. 1 (f) GDPR.
We do not use user data collected by technically necessary cookies for the creation of user profiles.
Storage Period, Possibility to Object or Erase
Cookies are stored on the computer of the user and transmitted by it to our website. Therefore, you are in full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, you possibly may no longer use all features of our website in full.
Registration of a User Profil
Description and Scope of Data Processing
On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The following data is collected during the registration process:
- User name
- Email address
- Password
At the time of registration, the following data is also stored:
- The user's IP address or another identifier
- Date and time of registration
- Confirmation email as part of the double opt-in procedure
As part of the registration process, the user's consent to the processing of this data is obtained.
Legal Basis for the Data Processing
If the user has given his / her consent, the legal basis for processing the data is Article 6 Para. 1 (a) GDPR.
The legal basis is also the initiation or fulfillment of the user contract in accordance with Article 6 Para. 1 (b) GDPR, which you conclude with us when you register.
Purpose of the Data Processing
A registration of the user is necessary for the availability of certain content and functions on our website. Registered users can note events and channels / venues in their user profile in which they want to participate or in which they are interested. In addition, registered users can use the search function to find each other and add them as friends. Detailed information on the user profiles can be found in Section VII.
Your data may also be required to fulfill a contract with Eventfeed or to carry out pre-contractual measures.
Storage Period, Possibility to Object or Erase
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process if your user account is deleted or you change the data contained therein. You have the option of deleting your user account in the personal area of your user profile, changing the privacy settings or changing or deleting individual data stored about you at any time.
If the data is (also) used to fulfill a contract or to carry out pre-contractual measures, it will only be deleted when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.
Use as a User
Description and Scope of Data Processing
We collect the content, communications and other information that you provide in your user profile and that you generate when using the Eventfeed Objects; this includes in particular:
Further optional informationOnce you have registered (Section VI), you can log into your user account at any time and enter further optional information there. This includes the following information:
- Profile picture
- City (place of residence)
- Country (of residence)
- Date of birth
- Gender
- A description of yourself ("About-me")
- Links to your social media profiles
- A preference for certain events
- Setting whether your user account should be in private mode or in friends mode
We also record your actions and interactions in the context of the Eventfeed Objects, if applicable, even without prior registration. This includes:
- Which events you prefer
- Which channels / venues you prefer
- Which events you share with others
- Which channels / venues you share with others
- Which events you add to your calendar
- Add or confirm which friends you have
- Which links you click on (streaming links, external event / channel / venue links, etc.)
- The content that you watch
- The functions you use
- The actions you have taken
- The time, frequency and duration of your activities
- The type of device with which you use the Eventfeed objects
All registered users can use the search function to search and find each other under their user names.
Other registered users who view your user profile can see the following data contained in your user profile, provided that you have specified them:
- User name
- Profile picture
- City (place of residence)
- Country (of residence)
You have the option of adding other registered users as friends and being added as a friend by other registered users. In this case, the friendship will only become active when the user or you have confirmed the friendship.
Your confirmed friends can also see the following data contained in your user profile, provided you have specified them:
- Date of birth
- Gender
- A description of yourself ("About-me")
- Links to your social media profiles
- A preference for certain events
If your user profile is in friends mode, your confirmed friends can also see which events you want to participate in. If your user profile is in private mode, your friends cannot see this additional information.
You can change the mode of your user profile at any time and as often as you want via your user account.
Legal Basis for the Data Processing
All additional data entered in the user profile are optional and voluntary. The legal basis for the processing of the data is the consent of the user in accordance with Article 6 Para. 1 (a) GDPR.
Purpose of the Data Processing
By using the Eventfeed Services via your user profile, certain content and functions are available to you on our website. This means that you can note events and channels / venues in your user profile in which you want to participate or in which you are interested. You can also use the search function to find other registered users and add them as friends or be found by other registered users and added as a friend.
Storage Period, Possibility to Object or Erase
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process if your user account is deleted or you change the data contained therein. You have the option of deleting your user account in the personal area of your user profile, changing the privacy settings or changing or deleting individual data stored about you at any time.
Registration of a Promoter Profile
Description and Scope of Data Processing
On our website, we offer users the opportunity to register as a promoter by providing personal data. The data is entered in an input mask and transmitted to us and stored. The following data is collected during the registration process:
- First name
- Surname
- Company
- Position
- Username (Channel / Venue Name)
- Email address
- Password
At the time of registration, the following data is also stored:
- The IP address of the user or another identifier
- Date and time of registration
- Confirmation email as part of the double opt-in procedure
As part of the registration process, the user's consent to the processing of this data is obtained.
Legal Basis for the Data Processing
If the user has given his / her consent, the legal basis for processing the data is Article 6 Para. 1 (a) GDPR.
If the registration serves to fulfill a contract between Eventfeed and the Promoter or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.
Purpose of the Data Processing
Registration as a Promoter is required in order to have certain content and functions available on our website. The promoter profile is required in order to regularly set events on the Eventfeed objects via a promoter channel / venue and to manage them. In addition, your channel / venue and your events are then visible to all Eventfeed users. Detailed information on use as a promoter can be found in the Terms & Conditions for Promoters.
Your data may also be required to fulfill a contract between Eventfeed and the Promoter or to carry out pre-contractual measures.
Storage Period, Possibility to Object or Erase
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process if your Promoter account is deleted or you change the data contained therein. You have the option to delete your Promoter account in the personal area of your Promoter profile or to change or delete individual data stored about you.
If the data is (also) used to fulfill a contract or to carry out pre-contractual measures, it will only be deleted when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.
Use as a Promoter
Description and Scope of Data Processing
Promoter Channel / VenueOnce you have registered as a promoter (Section VIII), you can log into your promoter profile at any time and provide additional optional information about your promoter channel / venue. This includes the following information:
- Profile picture
- City
- Country
- Homepage
- A description of your company
- The category of organizer to which you belong
- Payment details
All users can view your channel / venue, including all information provided, both via the global Eventfeed channel / venue page and search for and find it using the search function with and without search filters (e.g. using your channel / venue name or the channel / venue category). The link to your channel / venue page can be shared by users with other users via different channels both inside and outside the Eventfeed Objects. In addition, registered users can add their channel / venue to the list of their favorite channels / venues.
EventsIf you post an event in the Eventfeed Objects via your promoter profile or an event submit form, the following information is collected:
- Event image
- Place, date, time and duration of the event
- Indication of whether it is a face-to-face or online event
- Indication of whether it is a live or on-demand event
- Ticket price or information on whether the event is free of charge
- Age rating
- Category and sub-category of the event
- A link through which the user can either access the event directly via stream or through which you can obtain further information on participation
You can also provide the following additional optional information:
- Brief description of the event
- Donation Link
All users can view your events, including all information provided about them, both on the global Eventfeed event page and search for and find them using the search function with and without search filters (e.g. using your channel / venue name or the event category). The link to your event page can be shared by users with other users via different channels both inside and outside the Eventfeed Objects. In addition, registered users can add your event to the list of their favorite events and export your event to their calendar.
Legal Basis for the Data Processing
If the user has given his / her consent, the legal basis for processing the data is Article 6 Para. 1 (a) GDPR.
If the registration serves to fulfill a contract between Eventfeed and the Promoter or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.
Purpose of the Data Processing
By using the Eventfeed services via your Promoter profile, certain content and functions are available to you on our website. This includes that you can regularly post events on the Eventfeed Objects via your promoter channel / venue and manage them. In addition, your channel / venue and your events are then visible to all Eventfeed users.
Your data may also be required to fulfill a contract between Eventfeed and the Promoter or to carry out pre-contractual measures.
Storage Period, Possibility to Object or Erase
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process if your Promoter account is deleted or you change the data contained therein. You have the option to delete your Promoter account in the personal area of your Promoter profile or to change or delete individual data stored about you.
If the data is (also) used to fulfill a contract or to carry out pre-contractual measures, it will only be deleted when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.
Feedback form and Email Contact
Description and Scope of Data Processing
On our website there is a feedback form which may be used to contact us electronically. If the user makes use of this possibility, the data filled from the input mask will be transmitted to us and stored. These data are:
- User name
- Email address
- Text of the message
At the time the message is sent, the following data is also stored:
- The user's IP address or another identifier
- Date and time of communication
We will seek your consent to the data processing during the sending process and refer to this data privacy policy.
Alternatively, you can contact us via email to the email address provided by us. In this case, the user’s personal data that are transmitted with the email will be stored.
The data will solely be used for the processing of communication.
Legal Basis for the Data Processing
Legal basis for the processing of personal data with the user’s consent is Art. 6 Para. 1 (a) GDPR.
Legal basis for the processing of personal data which are transmitted in the context of email submission is Art. 6 Para. 1 (f) GDPR.
If the purpose of the contacting is the conclusion of a contract between Eventfeed and the user or if it serves precontractual measures, also Art. 6 Para. 1 (b) GDPR serves as legal basis for the processing.
Purpose of the Data Processing
The processing of personal data from the input mask serves only to process the contacting. In case of contacting via email, this also constitute the necessary legitimate interest in the data processing.
The other data processed during the submission process serve to prevent an abuse of the feedback form and to ensure the safety of our IT systems.
Your data may also be required to initiate a contract or to clarify other matters in the context of a contractual relationship between Eventfeed and the user.
Storage Period
The data are erased when they are no longer necessary in relation to the purposes for which they were collected. Therefore, the user’s personal data from the input mask of the feedback form and the ones submitted with the email will be erased when the conversation with the user has ended. The conversation has ended when the circumstances are clear that the respective matter has been solved permanently.
If the data is (also) used to fulfill a contract or to carry out pre-contractual measures, it will only be deleted when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.
Possibility to Object or Erase
The user may at any time withdraw his or her consent to the processing of personal data. If the user contacts us via email, the user may object to the processing of personal data at any time. In this case the conversation cannot be continued. All personal data that have been stored in the course of contacting will be erased in this case.
If the data is (also) used to fulfill a contract or to carry out pre-contractual measures, it will only be deleted when the data is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.
Access to device functions
Description and Scope of Data Processing
When installing or using our PWA, we ask for your consent to access certain device functions. These include in detail:
- Location data
- Time zone
- Camera
- Device memory
The following device functions are also accessed:
- Accelerometer
- Browser gyroscope
Legal Basis for the Data Processing
In case of consent of the user, the legal basis for access to the location data, time zone, camera and device memory is Article 6 Para. 1 (a) GDPR.
The legal basis for access to the accelerometer and the browser gyroscope is our legitimate interest in accordance with Article 6 Para. 1 (f) GDPR.
Purpose of the Data Processing
We need access to the device functions for the following purposes:
- Location data: To present you with events that are in your area.
- Time zone: To remind you in good time of events that interest you and to give you time information in your time zone.
- Camera: So that you can upload photos (e.g. profile photo, event photo) to your user or promoter profile or in another way and scan QR codes.
- Device memory: So that you can upload photos (e.g. profile photo, event photo) and documents stored in your device to your user or promoter profile or in another way.
- Accelerometer: To correctly display our PWA on your device.
- Browser gyroscope: To correctly display our PWA on your device.
If the access to the device functions is in our legitimate interest, in these purposes also lies our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR.
Storage Period, Possibility to Object or Erase
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If access to the device functions is based on your consent, the user can revoke his consent to access at any time by submitting an E-Mail to privacy@eventfeed.me.
Use of Third Party Analysis and Tracking Cookies
Description and Scope of Data Processing
Our website uses cookies and similar technologies that enable analysis and tracking of users' surfing behavior. Cookies are small text files that are stored and stored in the internet browser or by the internet browser on the user's computer. When a user calls up a website, cookies can be stored on the user's operating system. Cookies contain a characteristic string of characters that enables the browser to be clearly identified when the website is called up again and thus enable to recognize multiple use of our offers by the same user or internet connection owner. Analysis and tracking cookies provide information in order to automatically recognize you. This recognition takes place on the basis of the IP address stored in the cookies.
In this way, the following data can be transmitted:
- IP address or another identifier
- Entered search terms
- Frequency of page views
- Use of website functions
- Time, place and frequency of your website visit
A description of the individual analysis and tracking cookies from third-party providers used by us is given below in the context of the description of the integration of third-party providers.
The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.
When you visit our website, an information banner informs you about the use of analysis and tracking cookies and your consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration. Analysis and tracking cookies only become active with your consent.
Legal Basis for the Data Processing
If the user has given his / her consent, the legal basis for the processing of personal data using analysis and tracking cookies is Article 6 Para. 1 (a) GDPR.
Purpose of the Data Processing
The purpose of using analysis cookies is to analyze general surfing behavior on our site, to compile statistics and, on the basis of this, to optimize our offers and to enable you to access our site more easily.
The purpose of using tracking cookies is to analyze the surfing behavior of the respective users on our site and to offer users a website visit that is more pleasant for you and tailored to your needs, as well as to show you personalized marketing offers.
The exact purpose of the third-party cookies used by us is contained in the following sections on the respective cookies in this data protection declaration in the description of the integration of third-party providers.
Storage Period, Possibility to Object or Erase
Cookies are stored on the user's computer and transmitted from there to our site or the third-party provider. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
Further information on how the storage of the respective third-party cookies we use can be prevented or how these can be deactivated can be found below in the description of the integration of third-party providers.
Use of Google Analytics
Ever since the Hamburg delegate for data protection and freedom of information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit) has come to an agreement with Google on the basis of the decision of the Düsseldorf Circle (Düsseldorfer Kreis) on the data protection compliant design of analytical methods for range measurements of internet services, a data protection compliant and acceptable use of Google Analytics is possible under certain preconditions. Of course, we adhere to these requirements. In particular, we indicate that on this website the code „gat._anonymizeIp();“ has been added Google Analytics in order to ensure an anonymised collection of IP addresses (so called IP masking).
Please also note the following information on the use of Google Analytics: This website uses Google Analytics, a a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", small text files which are being saved on your computer and which make it possible to analyze your website use. The information created by the cookie concerning the use of this website will be transferred to a server of Google in the USA and will be saved there.
In case of activation of the IP anonymization on this website, within the European Union or in other states that are party to the Agreement on the European Economic Area, Google will shorten your IP address beforehand. On behalf of the service provider of this website, Google will use this information to evaluate how you use this website, to compile reports on the website activities and to offer further services related to the use of the website and the internet for the website operators.
The IP address transferred by Google Analytics from your browser will not be linked with other data of Google. You can prevent recording of your data through the cookies used by Google Analytics by adjusting your browser settings correspondingly; please note that in this case you might not be able to completely use all functions of this website. You can, in addition, prevent the recording of your data relating to the use of this website through the cookies (incl. your IP address) as well as processing of your data through Google by downloading and installing the browser plugin available under the following link (https://tools.google.com/dlpage/gaoptout?hl=en).
You may prevent the collection by Google Analytics by clicking on the following link. In this case an opt-out cookie is placed that prevents the future collection of your data when visiting this website: deactivate Google Analytics
Further information on terms of use and data protection is available on http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.
Use of Google Maps
We use the "Google Maps" component from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google", on our website. Each time the "Google Maps" component is called up, Google sets a cookie in order to process user settings and data when the page on which the "Google Maps" component is integrated is displayed. As a rule, this cookie is not deleted when you close the browser, but expires after a certain period of time, unless you delete it manually beforehand.
If you do not agree to this processing of your data, you have the option of deactivating the "Google Maps" service and thereby preventing the transmission of data to Google. To do this, you have to deactivate the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use "Google Maps" or only to a limited extent.
"Google Maps" and the information obtained via "Google Maps" are used in accordance with the Google Terms of Use http://www.google.de/intl/de/policies/terms/regional.html as well as the additional terms and conditions for "Google Maps" https://www.google.com/intl/de_de/help/terms_maps.html.
Use of reCAPTCHA
To protect input forms on our site, we use the “reCAPTCHA” service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. By using this service, a distinction can be made as to whether the relevant input is of human origin or whether it is improperly made through automated machine processing.
To our knowledge, the referrer URL, the IP address, the behavior of the website visitors, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the input behavior of the user and mouse movements in the area of the “reCAPTCHA” checkbox are sent to “Google " transfer.
The IP address transmitted as part of “reCAPTCHA” will not be merged with other Google data, unless you are logged into your Google account at the time of using the “reCAPTCHA” plug-in. If you want to prevent this transmission and storage of data about you and your behavior on our website by “Google”, you must log out of “Google” before you visit our site or use the reCAPTCHA plug-in.
The use of the "reCAPTCHA" service is based on the Google Terms of Use: https://www.google.com/intl/de/policies/privacy/.
Use of Hotjar web analysis
We use Hotjar on our website. This is a web analysis service from Hotjar Ltd., Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, hereinafter referred to as "Hotjar".
We use Hotjar to analyze the usage behavior of our website. With Hotjar, we can log and evaluate your usage behavior on our website, such as your mouse movements or mouse clicks. Your visit to our website will be anonymized. In addition, Hotjar evaluates information about your operating system, your Internet browser, incoming or outgoing references ("links"), the geographical origin and the type and triggering of the device you are using and processes it for statistical purposes. Hotjar can also obtain direct feedback from you. In addition, Hotjar offers further data protection information at https://www.hotjar.com/privacy.
You also have the option of stopping the analysis of your usage behavior by means of the so-called opt-out. By confirming the link https://www.hotjar.com/opt-out, a cookie is saved on your device via your internet browser, which prevents further analysis. Please note, however, that you have to click the above link again if you delete the cookies stored on your device.
Use of recommendation components (social media buttons and others) with a two-click solution
Our website offers the possibility to share, like or otherwise link individual pages or content in social networks to external providers using a button. Static links are stored behind the buttons so that no data is transmitted to the social networks when you simply visit our website.
After clicking the buttons, you will receive a brief note that you are about to transmit your data to the operator of the respective recommendation component, as well as a link to the operator's data protection declaration. Only after your confirmation will data (including personal data) be transmitted to the respective external provider and can be used by them. If you actively click the respective button in this way, certain information is transmitted directly from your browser to a server of the respective external provider (also in the USA) and stored there. In this way, the relevant external provider is informed which specific page of our website you are currently visiting. Your IP address and other browser-related information can also be recorded. If you are logged into the respective external provider during this time, this information can be assigned to your personal account with the respective external provider. For example, if you click on a "Like" button or "Share on" button, this information can be transmitted to your personal user account with the respective external provider, stored there and made publicly accessible. Your interaction with the respective button can also be displayed as a note together with other data stored in your personal account in search results or in your respective account or in other places, such as on websites and advertisements on the Internet. The external providers can also record this information in order to further improve their services.
We have no influence on whether and to what extent, for what duration and for what purpose the external providers collect personal data. When using the corresponding buttons, we do not process any personal data of the user. You can prevent such an exchange with the external providers by not clicking the buttons or by logging out of your respective member account before clicking the button.
The external providers we have integrated and further information on the handling of data protection at the external providers can be found here:
- Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, ein Tochterunternehmen der Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA https://www.facebook.com/policy.php
- Twitter: Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA https://twitter.com/privacy
- Instagram: Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA https://help.instagram.com/519522125107875
- WhatsApp: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland https://www.whatsapp.com/legal/#privacy-policy
- Google maps: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA http://www.google.de/intl/de/policies/terms/regional.html sowie https://www.google.com/intl/de_de/help/terms_maps.html
Linking to social media
We offer users on our website the opportunity to offer links to their social networks listed below. These links are made via a graphic of the respective network, which prevents a connection to the respective server of the social network from automatically being established when a website that has such a link is called up. The user is only forwarded to the service of the respective social network by clicking on the corresponding graphic.
Information about the user is only recorded by the respective network after the user has been forwarded. It cannot be ruled out that the data collected in this way will be processed in the USA.
This is initially data such as the IP address, date, time and page visited. If the user is logged into their user account of the respective network during this time, the network operator can, if necessary, assign the information collected from the specific visit of the user to the user's personal account. If the user interacts via a “share” button on the respective network, this information can be saved in the user's personal user account and, if necessary, published. If the user wants to prevent the information collected from being directly assigned to his user account on social media, he must log out before clicking on the graphic. In addition, there is usually the option of configuring the respective user account on social media accordingly.
The following social networks can be linked on our website:
- Facebook: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, ein Tochterunternehmen der Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA https://www.facebook.com/policy.php
- Twitter: Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA https://twitter.com/privacy
- Instagram: Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA https://help.instagram.com/519522125107875
- Pinterest: Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA https://policy.pinterest.com/de/privacy-policy
- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, ein Tochterunternehmen der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA https://policies.google.com/privacy
- LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, ein Tochterunternehmen der LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA https://www.linkedin.com/legal/privacy-policy
- Instagram: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, ein Tochterunternehmen der Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA https://www.facebook.com/policy.php
Affiliate Marketing
Description and Scope of Data Processing
We participate in affiliate partner programs. If you click on a link to an event that takes part in an affiliate program and then make a transaction (e.g. a ticket purchase), we receive a commission from our affiliate partners. For this it is necessary that our affiliate partners can identify you and understand that you came to the respective product via the link placed with us and made the predefined transaction. For this purpose, our affiliate partners use cookies or comparable recognition technologies (e.g. device fingerprinting). However, these cookies do not save any of your personal data. Only our identification number as the intermediary provider and the serial number of the link you have clicked are recorded.
Legal Basis for the Data Processing
The storage and analysis of the data takes place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 (f) GDPR.
Purpose of the Data Processing
We need the information for the purpose of correct payment processing and payment of our commissions. In this purpose also lies our legitimate interest in accordance with Art. 6 Para. 1 (f) GDPR.
Storage Period, Possibility to Object or Erase
If you do not agree to this processing, you have the option of preventing the storage of cookies by setting your Internet browser. You can find more information on this in the section "Use of Technically Necessary Cookies" above.
Newsletter and Push Messages
Description and Scope of Data Processing
Registration
You can subscribe to a free newsletter on our website. The registration takes place either without registration via our website, or as part of the registration process for an Eventfeed account. For the processing of the data, your consent is obtained during the registration process via a so-called double opt-in procedure and reference is made to this data protection declaration. As part of the double opt-in procedure, you must confirm your email address so that we can check whether you are actually the owner of the specified email address or whether the owner has authorized the receipt of the newsletter.
We also use push notifications to inform you about events that may require your special attention or a reaction on your part. Consent to receive push notifications is requested when installing our PWA and / or later when the occasion arises.
When registering for the newsletter or consenting to receive push notifications, the following data is transmitted to us from the input mask:
- Name
- Email address
- Location data
- Time zone
In addition, the following data is collected when you register:
- IP address of the calling computer or another identifier
- Date and time of registration
- Confirmation email as part of the double opt-in procedure
Tracking
Our newsletters and push messages contain so-called tracking pixels (web bugs) with which we can recognize whether and when an e-mail or push notification was opened and which links in the e-mail or push notification were followed by the personalized recipient. You will be expressly informed about the tracking when you register for the newsletter or give your consent to receive push notifications.
Newsletter processing in the USA
We use the MailChimp component to send our newsletter. MailChimp is a service from The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA.
Your data saved when you subscribed to the newsletter will be transferred to a server operated by The Rocket Science Group in the USA and saved there. When registering for the newsletter, you are expressly informed that data processing is carried out by a service provider in the USA and that your data is therefore processed in the USA. Further information on data protection at MailChimp can be found at: http://mailchimp.com/legal/privacy/
Legal Basis for the Data Processing
Legal basis for the processing of personal data in the context of newsletter subscriptions or the reception of push notifications with the user’s consent is Art. 6 Para. 1 (a) GDPR.
Your consent to the newsletter registration is, for example, as follows:
"I have taken note of the data protection declaration, in particular I agree to (i) that the data processing is carried out by a service provider in the USA, and (ii) that my data and my usage behavior are electronically stored by newsletter tracking for me to send individualized newsletters. With the revocation of the consent to receive the newsletter, the consent to the aforementioned tracking is also revoked. "
Your consent to receive push notifications is, for example, as follows:
“Can Eventfeed send you notifications?” To which you agree or which you can refuse.
Purpose of the Data Processing
The collection of data as part of the newsletter registration or the consent to receive push notifications is used to deliver the newsletter or push notifications.
The collection of other personal data as part of the newsletter registration or the consent to receive push notifications serves to prevent misuse of the services or the e-mail address used and to be able to prove your consent. In the event that a third party misuses your data and uses this data to register for our newsletter without your knowledge, they serve as a safeguard on our part.
The tracking data is saved by us so that we can tailor our newsletters or push notifications to the wishes and interests of our subscribers. Accordingly, the data collected is used to send personalized newsletters and push notifications to the respective recipient.
Storage Period
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's data collected as part of the registration or consent and the tracking data are therefore stored for as long as the subscription to the newsletter or push notifications is active.
Possibility to Object or Erase
You can cancel or revoke your subscription to the newsletter and thus your consent to the storage of your data at any time for the future. For this purpose, there is a corresponding unsubscribe link in every newsletter. You can find details on this in the confirmation email and in each individual newsletter.
You can suspend receiving push notifications at any time by deactivating it in the browser or system settings.
Payment Service Providers
If you place an order with us that is subject to payment, we will, depending on which payment service provider you select in the ordering process, pass on the payment data collected for this purpose to the credit institute or payment service provider commissioned with the payment. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The legal basis for the transfer of payment data is Article 6 Para. 1 (b) GDPR, fulfillment of the contract.
Transfer of Data to other Contract Processors
In addition, we pass on the data we collect for the purpose of operating our services to third-party providers who process the data for us as processors. This includes data centers, hosting providers, legal and tax advice as well as internal tools for administration and communication. The legal basis for the transfer of data to these processors is our legitimate interest in accordance with Art. 6 Para. 1 (f) GDPR.
Rights of the data subject
If your personal data are processed, you are a data subject within the sense of the GDPR and you are entitled to the following rights against the controller:
Right of Access
You can obtain from the controller confirmation as to whether or not personal data concerning you are being processed.
Where that is the case, you have the right to the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from you, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22 Para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
You have the right to be informed if personal data concerning you are transferred to a third country or to an international organization and of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
Right to rectification
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to restriction of processing
You shall have the right to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
- you have objected to processing pursuant to Article 21 Para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of you.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing, you shall be informed by the controller before the restriction of processing is lifted.
Right to erasure
Obligation to erase
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw consent on which the processing is based according to point (a) of Article 6 Para. 1 GDPR, or point (a) of Article 9 Para. 2 GDPR, and where there is no other legal ground for the processing;
- you object to the processing pursuant to Article 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 Para. 2 GDPR;
- the personal data have been unlawfully processed;
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
- the personal data have been collected in relation to the offer of information society services referred to in Article 8 Para. 1 GDPR.
Information to third parties
Where the controller has made the personal data public and is obliged pursuant to Article 17 Para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Exceptions
The right to erasure does not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 Para. 2 GDPR as well as Article 9 Para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 Para. 1 GDPR in so far as the right referred to in Article 17 Para. 1 GDPR is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defense of legal claims.
Right to be notified
The controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about those recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
- the processing is based on consent pursuant to Article 6 para. 1 point (a) GDPR or to Article 9 para. 2 point (a) GDPR or on a contract pursuant to Article 6 para 1 point (b) GDPR; and
- the processing is carried out by automated means.
In exercising the right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The right referred to data portability shall not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para. 1 point (e) or (f) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where the you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 Para. 1 GDPR, you, on grounds relating to your particular situation, have the right to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to withdraw the consent to the processing of personal data
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
- is necessary for entering into, or performance of, a contract between you and a data controller;
- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
In the cases referred to in Article 22 Para. 2 point (a) and (c) GDPR, the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Decisions referred to in Article 22 Para. 2 GDPR shall not be based on special categories of personal data referred to in Article 9 Para. 1 GDPR, unless Article 9 Para. 1 point (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.