Privacy Policy

Introduction and concepts

1. Introduction

With the operation of our website www.reeperbahnfestival.com including www.stream.reeperbahnfestival.com and www.international.reeperbahnfestival.com (hereinafter referred to as "Website") we process personal data. These are treated confidentially and processed according to the applicable laws - in particular the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG-neu). With our privacy policy we want to inform you, which personal data we collect from you, for what purposes and on which legal basis we use them and, where appropriate, to whom we disclose them. In addition, we will explain to you what rights you have to protect and enforce your privacy.

2. Terms

Our privacy policy contains technical terms that are new to the DSGVO and the BDSG. For your better understanding we want to explain these terms in simple words in advance:

2.1 Personal data

"Personal data" means any information relating to an identified or identifiable person (Article 4 (1) GDPR). Information of an identified person can e.g. the name or email address. But personal are also data in which the identity is not immediately apparent, but can be determined by combining own or third-party information and thus learns who it is. A person is e.g. identifiable by providing their address or bank details, date of birth or username, IP addresses and / or location data. Relevant here are all information that in some way allow conclusions about a person.

2.2 Processing

By "processing", Art. 4 No. 2 DSGVO means any procedure in connection with personal data. In particular, this includes, but is not limited to, collection, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure, transmission, dissemination, or any other form of provisioning, matching, or linking , the restriction, deletion or destruction of personal data.

3. Responsible company and data protection officer

Responsible for the data processing on www.reeperbahnfestival.com, www.stream.reeperbahnfestival.com and international.reeperbahnfestival.com is

Company: RBX GmbH („we“ or individually „RBX“)

Address: Neuer Pferdemarkt 1, 20359 Hamburg

E-Mail: contact@reeperbahnfestival.com

For further procedures the responsible person is subsequently marked either with "RBX", as far as the processing does not take place via the websites.

4. Data Protection Officer

We have appointed an external data protection officer for our company. You can reach him under:

Name: Reinher Karl

Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg

Telephone: 040/ 18189800

Fax: 040/ 181898099

E-Mail: datenschutz@habewi.de

Processing Frames

5. Processing framework: Website

In the context of the website with the URL www.reeperbahnfestival.com, we process the personal data listed below in sections 6 - 19 in detail. We only process data from you that you actively indicate on our website (for example by filling out forms) or that you provide automatically when using our offer.

Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers for the processing of your personal data, this takes place within the framework of a so-called order processing, in which we as the client are authorized to give instructions to our contractors. To operate our website, we use external service providers for hosting, maintenance, care and development. If further external service providers are used in individual processing operations listed in sections 6 - 19, they will be named there.

Data transfer to third countries does not take place and is not planned. We will inform you about exceptions to this principle in the processing described below.

The PROCESSES In detail

6. Provision of website and server log files

6.1 Description of the processing

Every time the website is accessed, we automatically collect information that your browser transmits to our server. These are also stored in the so-called log files of our system. These are the following data:

Your IP address
The browser software you use, as well as its version and language
the operating system you are using
the website from which you came to our website (so-called referrer)
the subpages you visit on our website
the date and time of your visit to our website
Transferred amount of data

The temporary storage of your IP address by the system is necessary to be able to deliver our website to a user's device. To do this, the user's IP address must be kept for the duration of the session. Your IP address will not be recorded in our logfiles.

6.2 Purpose

The processing takes place in order to enable the website to be accessed as well as to ensure its stability and security. In addition, the processing is used for the statistical evaluation and improvement of our online offer.

6.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose named in section 6.2.

6.4 Storage duration

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. A deletion of the log files takes place after 30 days.

7. Registration and profile

7.1 Description of processing

Individual functions and offers on our website are only available to you as a registered user. By registering, you conclude a free user contract with us. By registering, you will receive your own user account on our website. Registration is done by filling out the registration form on www.digital.international.reeperbahnfestival.com for participation in the digital conference and submitting it to us electronically. To register, you must indicate the delegation you belong to, your name and surname, e-mail address, country of origin, the company you are attending for, your position in the company and the company's website. Optionally, you can provide a photo of yourself, the logo of your company, a short CV and some further information. By clicking the button "Register" you submit the form. You will then receive an automatic welcome e-mail. This contains a link to confirm your e-mail address. Only after successful verification of your e-mail address by clicking the confirmation link, your account will be activated on our website.

Instead of registering directly on our website, you can register with Facebook Connect. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you decide to register with Facebook Connect and click on the "Login with Facebook" / "Connect with Facebook" button, you will be automatically redirected to the Facebook platform. There you can log in with your usage data. This will link your Facebook profile with our website or our services. This link gives us access to your data stored on Facebook. These are above all:

- Facebook name
- Facebook profile and cover picture
- Facebook cover picture
- email address registered with Facebook
- Facebook ID
- Facebook friend lists
- Facebook Likes ("I like-me" information)
- Birthday
- Gender
- Country
- Language

This information is used to set up, provision and personalize your account.
For more information, please see the Facebook Terms of Use and the Facebook Privacy Policy. These can be found at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

7.2 Purpose

Processing takes place in order to provide you with the functions of our website for registered users.

7.3 Legal basis

The processing is required to conclude and fulfill the contract of use (Art. 6 (1) (b) GDPR). Without providing your personal data in the context of the registration we can not provide our contractually owed services.

7.4 Storage duration

The data will be automatically deleted by us upon termination of your contract of use. You can terminate the user agreement independently by selecting the function "Delete profile" in the settings of your user account. Alternatively, you can also contact us by e-mail to contact@reeperbahnfestival.com, by post to RBX GmbH, Neuer Pferdemarkt 1, 20359 Hamburg or by fax to 040 - 431 79 59 26 to inform that you are no longer a registered user of our website want. We will delete your user account immediately. In addition, as a logged in user, you can edit and remove your own contributions, information and information at any time.

7.5 Receiver

On your profile page, your user name (ALTERNATIVE: first name and surname) can be viewed by other logged-in registered users. Other logged-in registered users can also view the other articles, photos and information you have posted. Through the privacy settings of your profile, you can determine and regulate whether and which personal data other registered users can see from your profile.

8. Purchasing

The buttons shown on our website for the purchase of festival or conference tickets as well as merchandising products are linked to external websites of shopsystem.

8.1 Conference Tickets ("RBX")

For the purchase of conference tickets, we link to Universe of Universe Experiences, Inc. for payment processing and the purchase of conference tickets from RBX. In this case, data relevant for participation such as name, e-mail address, company, industry, etc. will be requested and stored. For paid tickets, Eventbrite asks for the data required for payment processing. Universe Experiences, Inc. complies with the data protection principles of the EU-US Privacy Shield. Find more information on data processing by Universe, Inc. as well as on the cookie opt-out option and the general data protection declaration. Information on the Privacy Shield Agreement can be found under "Privacy Shield List" on the homepage of the U.S. Department of Commerce.

8.2 Festival tickets and merchandise products

For the purchase of festival tickets and merchandise we link to the webshop operated by us its provisions on data protection here.

9. Contact by e-mail

9.1 Description of the processing

You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted by e-mail will be processed by us.

9.2 Purpose

The data submitted with your e-mail will be used solely for the purpose of processing and responding to your request.

9.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 9.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the processing of the data is carried out in order to fulfill the contract (Article 6 (1) (b) GDPR).

9.4 Storage duration

The data will be deleted by us as soon as they are no longer necessary for the purpose of their collection. This is usually the case when communication with you is over. The communication ends when it can be inferred from the circumstances that your concern has finally been clarified. Insofar as statutory retention periods preclude deletion, deletion takes place immediately after expiry of the statutory retention period.

10. Cookies

10.1 Description of the processing

10.2 Purpose

We use cookies to make our website more user-friendly and to provide the features described in Section 10.1.

10.3 legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 10.2.

10.4 storage duration

Cookies are automatically deleted at the end of a session or at the end of the specified retention period. Since cookies are stored on your device, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website can not be used or only used to a limited extent.

11. Newsletter ("RBX")

11.1 Description of the processing

We send a newsletter (Reeperbahn Festival / Reeperbahn Festival Conference) at irregular intervals:

Reeperbahn Festival: approx. 1 per month

Reeperbahn Festival Conference: 8-10 per month

With the newsletter we inform you about our events and activities around Reeperbahn Festival, Reeperbahn Festival-related programme announcements, and partner activities by email. For the newsletter registration you only need to enter your e-mail address.

You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by completing and submitting a newsletter registration form on our website. We share your email address only to send you newsletter in cooperation with our newsletter provider, June. June only uses your email address to send our newsletter to you; they will never share your private information with any third party. There are no other conditions.

For the implementation and verification of newsletter applications, we use the so-called double opt-in procedure. Registration takes place in several steps. First, sign up for our newsletter on our website. You will receive an e-mail from us at the e-mail address you provided. With this e-mail we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it. Confirmation is made by clicking on a confirmation link in the e-mail. Only after a successful confirmation, we will include you in our newsletter mailing list and send you e-mails in the future. As part of the double-opt-in procedure, we save the date, time and your IP addresses both during registration and when confirming.

11.2 Purpose

The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers. The collection and storage of date, time and IP addresses during the newsletter registration serves the documentation of granted consent and the protection against the abusive registration of e-mail addresses.

11.3 Legal basis

The processing takes place in our subscriber newsletter on the basis of a consent in accordance with Art. 6 para. 1 lit. a GDPR. Your consent is voluntary. The collection and storage of date, time and IP addresses when registering for the newsletter is required to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose stated in section 11.2.

11.4 Storage period and revocation of consent

If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. A simple declaration is sufficient (by e-mail to contact@reeperbahnfestival.com, by mail to RBX GmbH, Neuer Pferdemarkt 1, 20359 Hamburg or by fax to 040 - 431 79 59 26). Cancellation of the newsletter is also possible by clicking on the cancellation link in every newsletter email. If you revoke your consent, no more newsletters will be sent to you and your personal data will be removed from our active mailing list. To enforce your revocation, we will add your e-mail address to our so-called black list in a restricted manner. In this way we can ensure that you will not receive any newsletters from us in the future and that your e-mail address will not be misused by third parties.

11.5 Recipients and transmission in third countries

For the administration of our newsletter distribution list and the sending of e-mails we use the services of the newsletter provider JUNE - Online Marketing, Große Johannisstraße 3, 20457 Hamburg. This takes place within the framework of order processing.

12. Social networks

Our website does not use so-called social media plugins. The logos of the social networks Facebook, Twitter and Instagram displayed on our website are linked only to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.

13. YouTube videos

13.1 Description of processing

Our website uses "YouTube" services on a video sharing platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereafter referred to as "Youtube"). YouTube is represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. The videos are included in the "advanced privacy mode" offered on YouTube, d. H. no personal information will be transferred from you to Google as long as you do not play the videos. Only by playing a video is a data transfer to Google, on which we have no influence. When you play an embedded video on a subpage of our website, Google will tell you which subpage you've visited and which video you've viewed. Possibly. Your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.

13.2 Purpose

Processing takes place in order to be able to show you videos on our website.

13.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 13.2.

13.4 Consignee and transfer to third countries

Including YouTube may transfer personal information to YouTube LLC or Google. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

14. Vimeo videos

14.1 Description of processing

Our website uses "Vimeo" services on a video-sharing platform operated by Vimeo LCC, 555 West 18th Street, NY, New York 10011, USA (hereafter referred to as "Vimeo"). We use Vimeo by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. When you visit a sub-page of our website that has a video embedded on it, it will connect to the Vimeo servers and display the video within our website. This will tell Vimeo which website you have visited. Possibly. Your IP address will also be transmitted to Vimeo. When you play an embedded video, this information is also passed to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. For more information about privacy at Vimeo, visit http://vimeo.com/privacy.

14.2 Purpose

Processing takes place in order to be able to show you videos on our website.

14.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 14.2.

14.4 Consignee and transfer to third countries

Vimeo also processes data in the USA.

15. Soundcloud

15.1 Description of the processing

Our website uses services provided by "Soundcloud" a platform for audio material operated by SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany. We use Soundcloud by embedding individual audio files from the platform on our website as so-called iFrames so that they can be played directly on our website. When you visit a subpage of our website that has an audio file embedded on it, it will connect to the Soundcloud servers, displaying the audio within our website. This will tell Soundcloud which web page you visited. Possibly. Your IP address will also be transferred to Soundcloud. When you play an embedded audio file, this information is also passed to Soundcloud. If you are logged in as Soundcloud user, Soundcloud assigns this data to your user account. For more information about privacy at Soundcloud, visit https://soundcloud.com/pages/privacy.

15.2 Purpose

Processing takes place in order to be able to display and play audio files on our website.

15.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 15.2.

15.4 recipients

By using the service Soundcloud personal data may be transmitted to the company SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.

16. Deezer

16.1 Description of the processing

Our website uses the music service "Deezer" a platform for audio material. It is operated by Deezer, a limited liability company, registered with the Commercial Register of Paris at 511 716 573. Registered office: 24 rue de Calais 75009 Paris - France (+33 (0) 1 84) 25 25 00 / Contact: support@deezer.com For information on how Deezer handles personal information, see: https://www.deezer.com/en/legal/personal-datas

16.2 Purpose

Processing takes place in order to be able to display and play audio files on our website.

16.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 16.2.

16.4 recipients

The use of the Deezer service may transfer personal data to Deezer, 12 Rue d'Athènes, 75009 Paris, France.

17. Issuu

17.1 Description of the processing

Our website uses services of "Issuu" of a platform for digital publication e.g. magazines, periodicals or catalogs operated by Issuu Inc., 131 Lytton Ave, Palo Alto, California 94301, USA (hereafter referred to as "Issuu"). We use Issuu by uploading our publications to the platform and embedding them on our website as so-called iFrames, so that they are displayed directly on our website as page-turning e-papers. If you visit a subpage of our website that incorporates such a publication, you will be connected to the Issuu servers and the e-paper will be displayed within our website. This will tell Issuu which website you have visited. In addition, your IP address, as well as information on the time and duration of use will be transmitted to Issuu. Issuu uses "cookies" (see paragraph 10) and a JavaScript. Further information on data protection at Issuu can be found at https://issuu.com/legal/privacy.

17.2 Purpose

The processing takes place in order to be able to display page-ready e-paper on our website.

17.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 17.2.

17.4 Storage duration

The storage period, as well as your control and setting options for cookies, we have explained in paragraph 10. You can also prevent Issuu from collecting data by disabling JavaScript in your browser or installing a JavaScript blocker (such as www.noscript.net).

17.5 Consignee and transmission in third countries

Issuu also processes data in the USA.

18. Google Maps

18.1 Description of the processing

Our website uses "Google Maps," a map display service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, US ("Google"). We use Google Maps by including a map with our business address on our website. The map is loaded directly from a Google server. For this to happen, your browser sends a request to a Google server. As a result, we may also submit your IP address in connection with the address of our website to Google. Google Maps does not deposit cookies on your device. If you are logged into Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as usage profiles and uses them for advertising purposes, for market research and / or to tailor the Google web pages as required. You have a right to object to the formation of these user profiles, for the exercise of which you must contact Google directly. For more information about privacy at Google, please visit http://www.google.com/intl/en-US/policies/privacy/.

18.2 Purpose

The processing is done to show you an interactive map on our website.

18.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in section 18.2.

18.4 Recipients and transmission in third countries

Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

19. Google Analytics

19.1 Description of the processing

Our website uses "Google Analytics," a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter "Google"). Google Analytics uses cookies (see paragraph 10) to analyze your use of our offer. The information generated by the cookie is usually transmitted to a Google server in the US and stored there. However, we only use Google Analytics with an IP anonymization. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. The statistics generated by Google Analytics record in particular how many users visit our website, from which country or location the access is made, which subpages are accessed and which links or search terms visitors use to access our website. Google Analytics user terms can be found at http://www.google.com/analytics/terms/en.html. An overview of Google Analytics privacy is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google's privacy policy can be viewed at http://www.google.com/intl/en/policies/privacy.

19.2 Purpose

Processing takes place in order to evaluate the use of our website. The information gained thereby serves to improve and tailor the design of our online presence.

19.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 19.2.

19.4 Storage duration and right of objection

The storage period, as well as your control and setting options for cookies, we have explained in paragraph 10. You may object to Google Analytics data processing at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=en. Alternatively you can click on the following link. This will set an opt-out cookie on your device that will prevent your data from being collected on future visits to this website: Disable Google Analytics (LINK: "javascript: gaOptout ()"). The analytic data processed and stored with Google Analytics will be automatically deleted after 14 months.

19.5 Consignee and transfer to third countries

Google Analytics acts as a service provider for us as part of order processing. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

20. Webflow

20.1 Description of the processing

Our website uses "Webflow", a responsive web design tool and hosting platform, Webflow, Inc., 208 Utah St, Ste 210, San Francisco, CA 94103, United States (hereinafter referred to as "Webflow").
Webflow uses cookies (see paragraph 10). The information generated by the cookie is usually transmitted to a Webflow server in the USA and stored there. Cookies are information transmitted from our web server or third-party web servers to users' web browsers and stored there for later retrieval. The use of cookies in the context of pseudonymous range measurement informs users in the context of this privacy policy. The consideration of this online offer is also possible to the exclusion of cookies. If users do not want cookies stored on their computer, they will be asked to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

· The Cookie Policy of Webflow can be viewed at https://webflow.com/legal/cookie-policy.
· You can find the terms and conditions of Webflow at https://webflow.com/legal/terms
· The privacy policy of Webflow is available at https://webflow.com/legal/eu-privacy-policy.

20.2 Purpose

Processing takes place in order to be able to display and play media content on our website.

20.3 Legal basis

Processing is necessary to safeguard the predominant legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in clause 19.2.

20.4 Storage duration and right of objection

The storage period, as well as your control and setting options for cookies, we have explained in paragraph 10. You may object to Webflow data processing at any time by disabling the appropriate option in your browser's system settings.

20.5 Consignee and transfer to third countries

Webflow acts as a service provider for us as part of order processing. Webflow also processes your personal information in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, visit https://www.privacyshield.gov/EU-US Framework.

21. Reeperbahn Festival App

Visitors of Reeperbahn Festival and Reeperbahn Festival Conference have the possibility to get a better overview of the festival events, place and time of the individual events and other information about the Reeperbahn Festival and to plan their participation in events within the festival and the conference via the Reeperbahn Festival App available for free in the Google and Apple Store.

21.1 Description of processing

The app is provided to us by Appmiral, Stationsstraat 100, 2800 Mechelen, Belgium. For this purpose, data relevant for participation such as name, e-mail address, company, industry, etc. will be requested and stored.

21.2 Purpose

The processing is done to give you a good overview of our offer, to make the organisation of your stay as easy as possible, to get in contact with other participants and to provide them with up-to-date information directly on their smartphones.

21.3 Legal basis

The processing is necessary in order to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose stated in Section 21.2. If you are asked by us within the framework of app activation for consent, which also includes the use of voluntary information and contact, then the legal basis is Art. 6 para. 1 lit. a DSGVO. Such consent is voluntary.

21.4 Storage period and right of objection

You can view the privacy policy of Appmiral, if you follow the respective link. Your data will be deleted at the latest 1 year after installation of the app and when uninstalling the app.

21.5 Recipient and transfer to third countries

Between Aloompa and us there is a contract for processing orders. Aloompa also processes your personal data in the USA and has submitted to the EU-US Privacy-Shield. Further information about the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.

Safety Measures

22. security measures

In order to protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's device. You can recognize the active SSL or TLS encryption by a small lock logo, which is displayed on the far left in the address bar of the browser.

Your rights

22. Affected rights

With respect to the above-described data processing by our company, you are entitled to the following data subject rights:

22.1 Information (Art. 15 GDPR)

You have the right to ask us to confirm that we are processing personal information concerning you. If this is the case, you are entitled to information about these personal data and to the further information listed in Art. 15 GDPR under the conditions specified in Art. 15 DSGVO.

22.2 Correction (Art. 16 GDPR)

You have the right to demand immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.

22.3 Cancellation (Art. 17 GDPR)

You have the right to demand that personal data relating to you be deleted without delay if one of the reasons listed in detail in Art. 17 GDPR is applicable, eg. For example, if your data is no longer needed for the purposes we are pursuing.

22.4 Restriction of data processing (Art. 18 GDPR)

You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is fulfilled, eg. For example, if you deny the accuracy of your personal information, data processing will be restricted for the duration that allows us to verify the accuracy of your information.

22.5 Data transferability (Art. 20 GDPR)

You have the right to demand the publication of your data in a structured, common and machine-readable format under the conditions set out in Art. 20 DSGVO.

22.6 Revocation of consent (Article 7 (3) GDPR)

You have the right to revoke your consent at any time in the case of processing based on consent. The revocation is valid from the time of its assertion. He works in other words for the future. The processing is thus not retroactively unlawful by the revocation of the consent.

22.7 Complaint (Article 77 GDPR)

If you believe that the processing of your personal data in violation of the GDPR, you have the right to complain to a supervisory authority. You may assert this right with a supervisory authority in the EU Member State of your residence, place of work or place of alleged infringement.

22.8 Prohibition of automated decisions / profiling (Art. 22 GDPR)

Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision making, including profiling, in relation to your personal information.

22.9 Opposition (Art. 21 GDPR)

If we collect personal data from you on the basis of Art. 6 para. 1 lit. f DSGVO (for the protection of predominant legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies if there are reasons that arise from your particular situation. Following an appeal, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case, irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct mail.

As of July 2020