DATA PROTECTION INFORMATION OF TEM FESTIVAL GMBH

Data protection

We are pleased that you visit our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. Personal data is individual information about the personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. E.g. name, address, email addresses, user behavior. This is data that we can use to identify you. In addition, you will also occasionally find information about data processing processes outside of this website (e.g. video conferences or newsletters)

Person responsible for data processing

Responsible for the processing of personal data protection declaration within the meaning of the EU General Data Protection Regulation (GDPR):

Festival Technical Event Management GmbH
Kienhorststr. 48
13403 Berlin
DE
Telephone: +49 (0)30 577 02 12-0
Email: info@t-e-m.de
 

 Data Protection Officer

exkulpa gmbh
Waldfeuchterstr. 266
52525 Heinsberg
Telephone: 02452 / 99 33 11
Email: info@t-e-m.de

General

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behavior when visiting a website. Information for which we cannot establish a connection to you personally (or only with disproportionate effort), e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, query, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no lawful reasons for further retention of the data. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. Regardless of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention obligations.

 
Information according to Art. 13 GDPR

This information is aimed at customers, interested parties, suppliers and employees. We process your personal data for the following purposes:
 

  • To fulfill our contractual obligations to which we are obliged to you (Art. 6 Para. 1 lit. b GDPR).

  • To carry out pre-contractual obligations (Article 6 Paragraph 1 Letter b GDPR).

  • To answer inquiries (Art. 6 para. 1 lit. b GDPR).

  • If you have given us your consent to process your personal data for specific purposes (e.g. to receive our newsletter), the data processing takes place on the basis of your consent (Art. 6 Para. 1 Letter a GDPR).

  • To fulfill legal obligations to which our company is subject (Art. 6 Para. 1 lit. c GDPR).

  • To the extent necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, and for direct advertising and market research, provided you have not objected to the use of your data for this purpose, in measures for business management and further development of services and products, in measures for product and sales optimization, in measures for risk management, for preventing or solving criminal offenses (Art. 6 para . 1 lit. f GDPR).

Categories of recipients of personal data

Within our company, only those employees who absolutely need it to fulfill their tasks have access to the data (need-to-know principle). Individual processes and services are carried out by carefully selected and data protection-compliant service providers who are based within the EEA. If service providers commissioned by us receive access to personal data when carrying out their services, order processing contracts have been concluded with them in accordance with Art. 28 Para. 3 GDPR.

Duration of data storage

The data we process will be stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are in particular commercial and tax retention obligations according to the Commercial Code (HGB) and the Tax Code (AO). The regular retention and documentation periods are up to ten years. If there is no contractual relationship, we only process the data for as long as the specific purpose requires.

 

Your data subject rights

As a data subject, you have the following rights with regard to the personal data concerning you:
 

  • Right to information about the data we process about you.

  • Right to correction or deletion if we have collected them incorrectly, out of date or unlawfully.

  • Right to restriction of processing if complete deletion is not possible, for example because we have to comply with legal retention obligations.

  • Right to object to processing if the data processing is based on a balance of interests (the so-called legitimate interest), as described above under “Purpose of processing”. This is the case if the processing is not necessary to fulfill a contract with you. When asserting your right to object, we ask you to explain the reasons why we should not process your data as we do.

Of course, you can also object to the processing of your personal data for advertising purposes at any time. Please send your objection to our address given in the legal notice or write us an email to the address given in the legal notice.

  • Right to withdraw your consent if you have given us your consent to process your data. You can revoke your consent to our company at any time without giving reasons. To do this, please contact the address provided in the legal notice.

  • In addition, you have the right to complain to a data protection supervisory authority about our company's processing of your personal data.

If you have any questions about data protection, please feel free to send an email to the address provided in the legal notice.

Cookies

Cookies are small text files that we send to the browser of your device and stored there when you visit our website. As an alternative to using cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we can, for example, recognize the browser you are using when you visit our website again and transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our Internet offering more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager of this website.

Your rights

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

  • Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;

  • Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;

  • Deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

  • Restriction of processing in accordance with Art. 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse its deletion because you need it to assert, exercise or defend legal claims or you object against the processing in accordance with Art. 21 GDPR.

  • Data portability in accordance with Art. 20 GDPR, insofar as you have provided us with personal data within the scope of your consent in accordance with Art. 6 Paragraph 1 Letter a GDPR or on the basis of a contract in accordance with Article 6 Paragraph 1 Letter b GDPR and this were processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as long as this is technically feasible.

  • Objection in accordance with Art. 21 GDPR against the processing of your personal data, provided that this is based on Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection to direct advertising directed. The right to object does not exist if overriding, compelling legitimate reasons for the processing can be proven or if the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.

  • Revocation of your consent in accordance with Article 7 Paragraph 3 of the GDPR with effect for the future.

  • Complain to a supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

Data processing in detail

Below we will inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer

  • Date and time of access

  • Name and URL of the retrieved file

  • Website from which access is made (referrer URL)

  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 Para . 1 lit. f GDPR).

We use the following host:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin

contact form

Type and extent of processing

If you send us inquiries (e.g. via contact form, email or telephone), we store all the data resulting from this (e.g. name, email address, subject of the inquiry, etc.). We need this data to process your request and to answer follow-up questions. We will not pass on this data without your consent.

Purpose and legal basis

This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if you have given it beforehand have.

Storage period

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

Contact form for applicants
Type and extent of processing

You have the opportunity to apply to us on our website (e.g. by email, post or via the online application form).

Purpose and legal basis

We process the applicants' personal data in accordance with the legal requirements for the purpose of processing the application process and to carry out pre-contractual measures within the meaning of Article 6 Paragraph 1 Letter b. GDPR and Section 26 BDSG under German law (initiation of an employment relationship) and – if you have given your consent – Article 6 Paragraph 1 Letter a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to people who are involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems for the purpose of carrying out the employment relationship on the basis of Section 26 BDSG and Article 6 Paragraph 1 Letter b GDPR.

Storage period

Your data will be stored for a period of 6 months after the application process has ended. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of women or men in applications, number of applications per period, etc.).

If it becomes clear that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Inclusion in the applicant pool

As part of the application, we offer applicants the opportunity to participate in our “talent pool” for a period of 12 months on the basis of consent within the meaning of Article 6 Paragraph 1 Letter a. GDPR to be included.

The application documents in the talent pool will only be processed as part of future job advertisements and job searches and will be destroyed after the deadline at the latest. Applicants are informed that their consent to be included in the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time in the future.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process at least for the duration of the employment relationship.

 

Order form
Processing customer and contract data

We only collect, process and use your personal data to the extent that it is necessary to establish, change or fulfill a legal relationship. This is done to fulfill a contract or pre-contractual measures in accordance with Article 6 Paragraph 1 Letter b GDPR.

The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.

Data transmission when concluding a contract for online shops, retailers and shipping of goods

We only transmit personal data if this is necessary as part of contract processing, for example to shipping service providers or the credit institution responsible for processing payments. The data will not be transmitted beyond this, or will only be transmitted if you have expressly agreed to the transmission.

The basis for data processing is the fulfillment of a contract or pre-contractual measures in accordance with Article 6 (1) (b) GDPR.

 

Presences on social media platforms
Data processing through social networks

We operate publicly accessible profiles on social networks. You can find the social networks we use in detail below.

Social networks such as Facebook, Twitter etc. can usually analyze your user behavior comprehensively. Visiting our social media presence triggers the following data protection-relevant processing operations:

If you are logged in to your social media account and visit our profile, the operator of this social media can track your visit. Regardless of this, the operator may be able to process your data (e.g. IP address) even if you are not logged into your account or if you do not have an account at all.

The operator summarizes this data in user profiles in which your preferences and interests are stored. These profiles are used to place personalized advertising inside and outside the respective social media presence. If you have an account with the respective social network, the personalized advertising can be displayed on all devices on which you are logged in or were logged in.

Depending on the platform, further processing operations may be carried out by the operators of the social media portals; we have no influence on this. Details can be found in the terms of use and data protection regulations of the respective social media portals.

Legal basis

Our social media presence is intended to ensure the most comprehensive presence possible on the Internet within the meaning of Article 6 Paragraph 1 Letter f of the GDPR. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which must be specified by the respective providers.

Responsible person and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered by this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both. us as well as against the operator of the respective social media portal (e.g. Facebook).

Despite our shared responsibility with the social media portal operators, we do not have full influence on the portals' data processing operations. Our options depend largely on the corporate policy of the respective provider.

Storage period

The data we collect directly via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory legal provisions – especially retention periods – remain unaffected.

We have no influence on the storage period of the data collected by social networks. For details, please contact the operators of the social networks directly (e.g. in their data protection declaration, see below).

Facebook site

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data collected is also transferred to the USA and other third countries.

We have concluded a joint processing agreement (Controller Addendum) with Facebook, which specifies which data processing operations we or Facebook are responsible for. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings yourself in your user account.
To do this, click on the following link and log in:
 https://www.facebook.com/settings?tab=ads

Data transfer to the USA is based on the EU Commission's standard contractual clauses.
Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy/

 

Video conferencing
Data processing

We use online conferencing tools to communicate with our customers. The specific tools we use are listed below. If you communicate with us via video or audio conference, your personal data will be collected and processed by us and the provider of the respective tool.

The tools collect the information you provide, including your email address and phone number. They also process the duration of the conference, when you joined the conference, number of participants and other metadata.

In addition, the provider of the tool processes all technical data required to process the conference. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker as well as the type of connection.

If you share content on this service, it will be stored on the providers' servers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service.

Please note that we do not have full influence on the data processing operations of the tools used. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 Para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). If you have previously given your consent to data processing, your data will be processed solely on the basis of Article 6 (1) (a) GDPR; consent can be revoked at any time.

Storage period

The data we collect directly via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

 

Matomo
Type and extent of processing

On this website we use services and functions of the open source web analysis service Matomo (formerly Piwik).

Matomo allows us to analyze the user behavior of our website visitors and, for example, determine at what times and from which location visitors viewed a particular page. We also collect and store data such as IP addresses, browser used and operating systems. This information helps us understand what you have done on our website (e.g. clicked on certain pages, made purchases, etc.).

Matomo uses technologies (e.g. cookies or fingerprinting systems) to recognize visitors when they visit the website again. The information that Matomo collects about how you use this website is stored on our server. Your IP address will be anonymized before it is stored.

Purpose and legal basis

When using Matomo, we rely on Article 6 (1) (f) GDPR as the legal basis for processing personal data, as we have a legitimate interest in analyzing the use of our website. This allows us to optimize our online presence and offers for you. If you have previously given your consent to data processing on this website by Matomo, your data will be processed solely on the legal basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time.

IP anonymization

When using Matomo on this website, we use a function in which your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

 

OpenStreetMap
Type and extent of processing

This website uses OpenStreetMap. The provider is the Open Street Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

Through OpenStreetMap, your IP address and other information about your behavior on this website are forwarded to the OSMF. Cookies or similar recognition technologies may be used in your browser. If you have allowed this in your device settings, your location can be recorded. The provider of this website has no influence on this data transfer.

OpenStreetMap's privacy policy can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Purpose and legal basis

The use of OpenStreetMap is based on our legitimate interest in an attractive presentation of our online offerings and in making the locations we specify easy to find (Art. 6 Para. 1 lit. f GDPR). If appropriate consent has been requested, the data will be processed exclusively on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. This can be revoked at any time.

 

(DOWNLOAD PDF DATA PROTECTION DECLARATION)