Data protection regulations Cologne on pop GmbHThe following Data Protection Regulations inform you regarding the processing of personal data when using the website www.c-o-pop.de.1. Name and contact data of the Controller responsible for processing
cologne on pop GmbH
Email: email@example.com 2. Establishment and storing of personal data as well as type and purpose of usagea) When visiting the website
When accessing our website www.c-o-pop.de, the browser used by your terminal device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. In the process, the following information is recorded without your input and stored up to their automated erasure after 14 days:
- IP address of the accessing computer (data is stored in pseudonymised version),
- Name and URL of accessed file/page,
- Time and date of access,
- Utilised browser and operating system of your computer.
- Ensuring the smooth establishment of connection to the website,
- Ensuring the comfortable usage of our website,
- Analysing the systems security and stability.
b) When ordering festival tickets via our websiteIf you wish to purchase website tickets for the "C/O POP FESTIVAL", it is necessary to come to an agreement that you provide us with your personal data required for the processing of your order, such as your name, address and payment details as well as your email address (to confirm the formation of the agreement). Obligatory information required for the conclusion / fulfilment of the agreement is tagged; all other information can be provided voluntarily. We process the information provided by you exclusively to transact your order. For this purpose, we my transfer your payment data to our house bank. In order to execute your order, your data is also transferred to carefully selected service providers, who take care of the ticketing, process the payment or dispatch of your tickets on our behalf. Legal basis for the above-mentioned data processing is respectively Article 6 (1) s. 1 lit. b GDPR (General Data Protection Regulation), as the data is required for the execution of the agreement. Any further data provided by you on a voluntary basis is processed based on your consent in accordance with Article 6 (1) s. 1 lit. a GDPR. You may revoke this consent effective for the future at any time.c) When ordering conference tickets via our websiteIf you wish to purchase website tickets for the "C/O POP CONVENTION", you are redirected to the external sites of our distribution partner Eventbrite (Eventbrite Inc., 155 5th Street, Floor 7, San Francisco, CA 94103, USA) at a very early stage of the ordering process, namely when pressing the button "REGISTER". Eventbrite is acting as seller of your tickets and becomes your sole contractual partner for the ticket purchase in the event of a concluded order. We, cologne on pop GmbH, are not involved in the data processing procedures in the context of the order. During the transfer from our website to the sites of Eventbrite, merely the data specified under item 2 lit. a) and your ticket selection is transferred. Legal basis for the data processing is Article 6 (1) s. 1 lit. b) GDPR, as this type of data processing is necessary for the conclusion / fulfilment of the agreement. For the execution of your order, also Eventbrite utilises external service providers who process your respective data such as credit card details and your address to process payments and (if necessary) to dispatch the tickets. This also occurs based on Article 6 (1) s. 1 lit. b GDPR. However, we point out that Eventbrite transmits to us the data you provided to them upon the conclusion of your ticket order as we require this information for the for the execution of the conference. This involves the data pertaining to your person, your company, your email address and your tax account data and address. In the context of the order, Eventbrite obtains your explicit consent for this transfer of your data to us. Legal basis for the above-mentioned collection of your data during the order process by Eventbrite is Article 6 (1) s. 1 lit. b GDPR. Further information regarding the handling of your personal data by Eventbrite is available in their data protection regulations under https://www.eventbrite.co.uk/support/articles/en_U...Troubleshooting/eventbrite-privacy-policy?lg=en_GB.
Eventbrite is subject to the EU-US Privacy Shield and thus obligated to comply with the data protection level applicable in the EU:
https://www.privacyshield.gov/EU-US-Framework.d) When registering for our newsletterIf you register for our free newsletter, we use your email address for its transmission.We subsequently supply with regular news regarding the c/o pop Festival and the c/o pop convention, program, ticket and service information as well as partner and cooperation activities. We use the so-called double-opt-in process for the registration for our newsletter. This means, following your registration, we send an email to the specified email address where we ask you for confirmation that you request the transmission of the newsletter. If you do not confirm your registration, your information is blocked and automatically deleted. The provision of data in addition to your email address is voluntary and is used to be able to address you personally. Following your confirmation, we store your email address for the purpose of transmitting the newsletter. In addition, we respectively store your utilised IP addresses, the times of registration, confirmation in order to be able to verify your registration and, if required, clarify a possible misuse of your personal data. Legal basis is your explicit consent (Article 6 (1) s. 1 lit. a GDPR). You may revoke your consent at any time and/or reject the receipt of further newsletters, e.g. via a link at the end of each newsletter. Alternatively, you can send your request for deregistration via email to firstname.lastname@example.org. If you are already one of our customers, we can send you emails regarding our next festival / conference or similar events, also based on Article 6 (1) s. 1 lit. f GDPR in connection with § 7 (3) UWG (Unfair Competition Act). Our legitimate interest lies in the customer retention and promotion of our commercial activities by providing event information based on your previous purchases. You can object to the dispatch of such info mails at any time without incurring any expenses other than the transmission costs according to the base tariffs. A respective email to email@example.com or a click on the link to unsubscribe at the end of each of our info mails is sufficient. e) When you use our newsletter - information regarding the usage of MailChimp
Usage of dispatch service provider MailChimp
We point out that we avail ourselves of the services of "MailChimp", (operated by: Rocket Science Group LLC, 675 Ponce De Leon Ave NE Suite 5000, Atlanta, GA 30308, USA) for the dispatch of our newsletter. For this reason, your email address as well as other data resulting from your usage of our newsletter (see also below) are processed and stored on the MailChimp servers in the USA. MailChimp is subject to the EU-US Privacy Shield and thus obligated to comply with the data protection level applicable in the EU:https://www.privacyshield.gov/EU-US-Framework.
The data protection regulations of MailChimp are available at:
Statistical collection and analysis of user conduct
When you open or interact with the newsletter, your behaviour is evaluated as follows: The emails sent via MailChimp contain so-called web beacons / tracking pixels. These are single-pixel files stored on the MailChimp server which are accessed when you open our newsletter. Initially, the data specified under Item 2 lit.a (technical information, such as information regarding the browser and your system as well as your IP address and the time of access) is collected in the context of this access and used for the technical improvement of the service (the transmission of our newsletter).
The information obtained in the context of the statistical collection (e.g. whether and when a newsletter was opened and which links contained therein are clicked) can be technically allocated to the individual receivers of the newsletter. However, neither we nor MailChimp pursue the objective of observing individual newsletter recipients. Rather, the analysis serves us to recognise the reading habits of our users in general and to adapt our contents to you or send different data in accordance to the interest of various user groups.
We point out that MailChimp, according to their statement, may also use the above-mentioned data for the purpose of improving their own service as well as their commercial purposes. However, MailChimp will not use the data to contact you personally or pass your data on to third parties.
Data processing upon accessing the MailChimp website
In some cases, you may be forwarded to the website of MailChimp when using our newsletter, i.e. if you click on the link (contained in every newsletter) to access the newsletter online or if you wish to correct your email address retrospectively. Also the Data Protection Policy of MailChimp can only be accessed on their website.
In this context, we also point out that Cookies are applied on the MailChimp websites which lead to the processing of personal data by MailChimp, their partners and utilised service providers (e.g. Google Analytics). We have no influence over this data processing. If required, please obtain further information in the MailChimp Data Protection Policy (see above).
Legal bases and options to object
Legal basis for data processing for the usage of MailChimp is Article 6 (1) s. 1 lit. f GDPR. Our legitimate interest in this data processing lies in rendering the newsletter more relevant for our customers and to present our services in a more target-oriented manner.
In order to terminate the above-mentioned data processing, please object to the receipt of our newsletter, e.g. by clicking on the respective link at the end of each newsletter. Alternatively, you can send your request for deregistration via email to firstname.lastname@example.org.
We would like to point out that tracking via the Web Beacon is furthermore not possible if you have deactivated the display of images in your email program. In this case, the newsletter will not be displayed in its entirety and you may possibly not be able to utilise all functions. However, a manual permission to allow the display of images would lead to the above-mentioned tracking.
The respective data processing purposes and data categories can be deduced from the respective tracking tools.Google Analytics This website uses Google Analytics, a web-analytic service of Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA ("Google"). Google analytics uses so-called "Cookies", text files which are stored on your computer and permit the analysis of your usage of the website. The information regarding your usage of this website created with the Cookies is generally transmitted to a server of Google in the USA and stored there. In case of activation of the IP-anonymity on this website, your IP-address is initially limited within the member states of the European Union or in other contracting states of the treaty throughout the European economic area. Your full IP-address is only transmitted to a Google server in exceptional cases and limited there. Google will utilise this information on behalf of the operator of this website in order to evaluate your usage, to compile reports regarding the website activity and to provide further services to the operator of the website related to the usage of the website and the Internet.The IP-address of your browser transmitted in the context of Google analytics is not linked with other data by Google. You can prevent the storing of Cookies with a respective setting of your browser software; however, we would like to inform you that in this case you may not be able to utilise all functions of this website. You can furthermore prevent the compilation of data (incl. your IP-address) created by the Cookies and related to your usage of the website to Google as well as the processing of this data by Google by downloading and installing the browser-Plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=deAlternatively, or when using mobile terminal devices, please click on the following link to place a cookie which prevents the recording by Google Analytics within this website in the future (this opt-out cookie only functions in this browser and only for this domain; if your delete your cookies in this browser, you have to click on this link once again): deactivate Google Analytics https://tools.google.com/dlpage/gaoptout?hl=de
This website uses Google Analytics with the addendum "_anonymizeIp()". Thereby, IP addresses are processed in a truncated form and any personal association can be excluded. If the data collected about you can be allocated to a person, the reference is excluded immediately and the personal data is thus deleted without delay. In the exceptional cases where personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,
https://support.google.com/analytics/answer/600424...5. Use of Facebook-Pixel, Custom Audiences and Facebook-ConversionOn our website, we use "Facebook-Pixel" of the social network Facebook (operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook")). In the event of personal data being transferred also to the server of Facebook in the USA, we point out that Facebook is subject to the EU-US-Privacy-Shield, thus providing a guarantee for the compliance with the European Data Protection Act.
The use of Facebook-Pixel makes it possible to target ads placed by us on Facebook shown specifically to Facebook users who have previously visited our website (where the pixel was placed), or to whom Facebook allocates certain features (based on the data collected by Facebook about these users), which correspond with those features we have reported to Facebook as being relevant for the display of our advertisement (so-called "Custom Audiences").In addition, the Facebook-Pixel allows us to track the effectiveness of our Facebook advertisement for statistical and market research purposes (so-called "conversion"), whereby we can determine when a user arrives at our website after clicking on one of our Facebook advertisements. If you are a member at Facebook and have allowed Facebook this process via the privacy setting of your account, Facebook shall link the information recorded through your visit with us with your membership account and use it for the target-specific placement of Facebook advertisements. However, the collected data remains anonymous for us, i.e. we cannot arrive at any conclusions regarding the identity of the visitor to our website. Information regarding the data preparation by Facebook is available in the Facebook Data Guideline under www.facebook.com/about/privacy. Detailed information regarding Facebook-Pixel and their functionality is available at:https://www.facebook.com/business/help/651294705016616.
As a member of Facebook, you can object to the data acquisition via the Facebook-Pixel or change settings with respect to the type of advertisements accepted by you within facebook via the following link: www.facebook.com/settings?tab=ads. The settings function regardless of the platform, i.e. they are adopted for all computers or mobile terminal devices.
If you are not a Facebook member, you can furthermore object to the application of cookies, which serve to determine the reach and advertising purposes, via the deactivation site of the network advertising initiative (http://optout.networkadvertising.org/) as well as the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/de/praferenzmanagement/).Legal basis for the processing of your personal data through the utilisation of Facebook-Pixels is Article 6 (1) s. 1 lit. f GDPR. Our legitimate interest in the data processing lies in the analysis, optimisation and the commercial operation of our online offer. 6. Further tools and othersa) Incorporation of videos via VimeoFor the incorporation of videos via our website, we use the third-party-supplier Vimeo (Vimeo Inc., 555 West 18th Street New York, New York 10011, USA).
When you access a site of our internet offer where a video is incorporate via Vimeo, a connection is established to the servers of Vimeo in the USA via a plug-in. In the process, the information regarding which of our websites you have visited is transmitted to the Vimeo server. In addition, the data specified under item 2 a) of this declaration is transmitted. If you are logged in at Vimeo as a member, Vimeo allocates this information to your personal user account. In the event of the active usage of the Plug (i.e. through playing the incorporated video)also this information can be allocated to your user account. You can prevent this allocation to your Vimeo user account by logging out of your Vimeo user account prior to using our website and deleting the respective Vimeo Cookies.
The above-described data processing occurs based on our legitimate interests in terms of Article 6 (1) lit. f. GDPR. These interests rest in the activity increase of our online offer by providing graphic information easily accessible for the user, and thus ultimately in the promotion of our business activity.
Further information regarding data processing and information on data protection by Vimeo under https://vimeo.com/privacy
b) Contents and data protection by third-party-suppliers / links to third-party-supplierscologne on pop-profiles is located on the online platforms of some third-party-suppliers (such as Facebook, Twitter, Instagram or Vimeo). The users of the services of these third-party-suppliers have the option of publishing content there with reference to our events (particularly comments). We explicitly refer to the usage conditions applicable for the respective third-party-suppliers, particularly also the respective data protection regulations. We are not responsible for the contents published by the users in these platforms and particularly do not own them.
Our website also contains respective links to our channels / profiles on the online platforms of third-party-suppliers mentioned above. These are not so-called social plug-ins, but simple links. Your mere visit of our website therefore does not generate an exchange of data with the websites of these third-party-suppliers. This only occurs when you decide to access the respective service of the third-party-suppliers by clicking on one of these symbols/links. Please consult the Data Protection Policies of the respective provider regarding the processing of your personal data there.
7. Recipients of your data
We only transmit your data to third parties if it is permitted by law, if you have agreed or if the transmission is necessary for the fulfilment of our commercial purposes.
Thus, personal data is transferred to external ticketing, payment and dispatch service providers in the context of your ticket order or to support marketing measures, e.g. to the newsletter dispatch service provider. In addition, we can also transmit personal data to public authorities and institutions (tax offices, administrative bodies, customs offices) in the event of a legal or regulatory obligation, or to legal advisors and collection agencies to implement contractual rights.
Details regarding the recipient and/or categories of recipients of your data within these data protection regulations are also available in the context of our information regarding individual processing situations.
8. Erasing data and duration of storageYour personal data is deleted as soon as the purpose of the storage is redundant, or if you have revoked your previously granted consent to the storage and if the erasure is not opposed by statutory preservation obligations. If your data is not erased because it is necessary for other and statutorily admissible purposes, the processing is limited. This means, the data is blocked and not processed for other purposes, e.g. if it has to be stored for commercial or tax reasons.
9. Rights of data subjects
If your personal data is being processed, you are the data subject in terms of GDPR and you are entitled to the following rights toward the controller:
- To demand information regarding your personal data processed by us according to Article 15 GDPR. You are particularly entitled to demand information regarding the purposes for processing, the category of the personal data, the categories of recipients to which your data was or will be disclosed, the planned duration of storage, the existence of a right to rectification, erasure, restriction of processing or objection, a right to lodge a complaint, the origin of your data if it was not collected by us, as well as an automated decision-finding including profiling and, if applicable, compelling information regarding its details;
- To demand the immediate rectification of incorrect or the completion of your personal data stored by us based on the prerequisites of Article 16 GDPR;
- To demand the erasure of your personal data stored by us based on the prerequisites of Article 17 GDPR if the processing is not necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims
- or to assert, exercise or defend legal claims;
- To demand the restriction of processing of your personal data according to Article 18 GDPR if you contest the correctness of the data, if the processing is illegal but they refuse the deletion of the data and if we no longer require the data, but if you require the data to assert, exercise or defend legal claims according to Article 21 GDPR against the processing;
- To receive your personal data provided to us in a structured, conventional and machine-readable format or to demand the transfer to a different controller according to Article 20 GDPR;
- To revoke your consent once granted to us at any time according to Article 7 (3) GDPR. Your revocation results in the fact that we have to discontinue the data processing in the future, which was based on your consent up to this time;
- To complain at a supervisory authority according to Article 77 GDPR. As a general rule, you can contact the supervisory authority at your usual place of abode or workplace or our registered company address in this matter.
According to Article 21 (1) GDPR, you have the right to object to the processing of your personal data for reasons resulting from your special situation based on Article 6 (1) lit. f GDPR; this also applies for profiling based on this condition. When exercising this objection, you have to provide us with your personal reasons as to why we should not process your personal data. We shall examine your objection and either cease processing the data and/or show you mandatory reasons worthy of protection on our part as to why we may continue processing.
If your personal data is processed for direct advertising based on Article 6 (1) lit. f GDPR, you are entitled to object to the processing of the personal data concerning you for the purpose of such advertising according to Article 21 (2) GDPR at any time without specifying reasons; this also applies for profiling in connection with such direct advertising. If you object to the processing for purposes of direct advertising, we shall no longer process the personal data concerning you for these purposes.An email to email@example.com is sufficient to exercise your objection.
Specific technical options to exercise your right of revocation or objection may exist for individual types of data processing. If applicable, we have already pointed these out to you in the explanation of the respective data processing measure.
11. Right to revocation of your consent
You are entitled to revoke your once granted declaration of consent according to the Data Protection Act at any time. By revoking the consent, the legitimacy of the processing occurred based on the consent up to the revocation remains unaffected.
12. Data security
We avail ourselves of suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in accordance with the technical development.
Naturally, in order to prevent unauthorised third party access to your personal data, the transmission process in the context of ticket orders on our website / the website of the ticket service provider Eventbrite occurs encrypted.
13. Status of changes to these Data Protection Regulations
These data protection regulations are currently valid and were last updated in May 2018.
Changes to these data protection regulations may become necessary due to the further development of our website as well as based on statutory or official specifications. You can find the respectively current regulations on our website at www.c-o-pop.de.