The following information on data protection informs you about the processing of personal data when you use the website www.c-o-pop.de.
1. name and contact details of the data controller
cologne on pop GmbH
2. collection and storage of personal data as well as type and purpose of their use
a) When visiting the website
When you visit our website www.c-o-pop.de, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion after 14 days:
- IP address of the requesting computer (the storage takes place in pseudonymized form),
- Name and URL of the accessed file/page,
- time and date of access,
- browser used and operating system of your computer.
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website,
- Ensuring a comfortable use of our website,
- Evaluation of system security and stability.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. Due to the pseudonymized storage of your IP address, it is not possible for us to draw conclusions about your person. There is also no merging of this data with others.
b) In case of registration for our newsletter
If you register for our free newsletter, we will use your email address to send it to you. We will then regularly provide you with news about the c/o pop festival and the c/o pop convention, program information, ticket information, service information, partner and cooperation activities.
For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted. Providing additional data besides your email address is voluntary and will be used to address you personally.
After your confirmation, we store your email address for the purpose of sending you the newsletter. In addition, we store your IP addresses used and the times of registration and confirmation in each case in order to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis is your express consent (Art. 6 para. 1 p. 1 lit. a DSGVO).
You can revoke your consent or object to receiving further newsletters at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscribe request by email to firstname.lastname@example.org at any time.
If you are already a customer of ours, we may also send you emails regarding our next festival or conference or similar events on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with. § 7 para. 3 UWG. Our legitimate interest lies in customer loyalty and the promotion of our business activities by providing event information aligned with your previous purchases. You may object to the sending of such information e-mails at any time without incurring any costs other than the transmission costs according to the basic rates. To do so, simply send an email to email@example.com or click on the unsubscribe link at the end of each of our info mails.
c) When you use our newsletter - information on the use of MailChimp
Use of the dispatch service provider MailChimp
We point out that we use the services of "MailChimp", (operated by: Rocket Science Group LLC, 675 Ponce De Leon Ave NE Suite 5000, Atlanta, GA 30308, USA). Based on this, your email address as well as other data accruing during your use of our newsletter (see below) are processed and stored on MailChimp servers in the USA.
Statistical collection and evaluation of user behavior
When you open our newsletter or interact with it, an evaluation of your behavior takes place as follows: The emails sent via MailChimp contain so-called web beacons or tracking pixels. These are single-pixel image files that are stored on MailChimp's server and retrieved from there when you open our newsletter. Within the scope of this retrieval, the data mentioned in section 2 lit. a (technical information, such as information on the browser and your system, as well as your IP address and time of retrieval) are initially collected and used for the technical improvement of the service (the delivery of our newsletter).
The information obtained in the course of statistical collection (e.g. whether or when a newsletter was opened and which links contained therein were clicked) can, for technical reasons, be assigned to the individual recipients of the newsletter. However, neither we nor Mailchimp pursue the goal of monitoring individual newsletter recipients. Rather, the evaluations serve us to recognize reading habits of our users in general and to adapt our content to them or to send different content according to the interests of different user groups.
We would like to point out that MailChimp, according to its own information, may also use the above data for purposes of improving its own service, as well as for its own economic purposes. However, MailChimp will not use the data to write to you personally and will not pass your data on to third parties.
Data processing when calling up the MailChimp website
Legal basis and objection options
The legal basis for data processing when using MailChimp is Art. 6 (1) p. 1 lit. f DSGVO. Our legitimate interest in this data processing is to make the newsletter more relevant for our customers and to be able to present our services in a more targeted manner. The use of MailChimp also means that there is a transfer of personal data to the USA, a "non-secure third country" as defined by the DSGVO. However, we have concluded an order processing agreement with Rocket Science Group LLC, the provider of Mailchimp, incorporating the so-called EU standard contractual clauses. Taking into account the normal need for protection of the data as well as our trust in the IT security measures taken by Mailchimp and their reliability, we consider the level of protection to be adequate, especially with reference to the EU standard contractual clauses. In addition, MailChimp offers us functionalities that service providers from the EU or the EEA unfortunately cannot currently offer.
You can stop the aforementioned data processing at any time by opting out of receiving our newsletter, for example by clicking on the corresponding link at the end of each newsletter. Alternatively, you are welcome to send your unsubscribe request at any time by email to firstname.lastname@example.org.
We would like to point out that tracking by the web beacon is also not possible if you have deactivated the display of images in your email program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. However, manually allowing the images to be displayed would again lead to the tracking described above.
We would also like to draw your attention to the possibility of objecting to the collection of data for advertising purposes at http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European area).
d) Press accreditation
If you wish to register for press accreditation via our website, you will be directed to the external Google Forms page when you click on the link to accreditation.
Google Forms is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA ("Google"). The information generated is usually transferred to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
In the event that personal data is transferred to the USA, we have agreed with Google on the application of so-called EU standard contractual clauses within the meaning of Art. 46 DSGVO in order to thereby provide a guarantee for compliance with the European level of data protection.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help:
e) When ordering festival or conference tickets via our website.
If you wish to purchase tickets for the "c/o pop Festival" concerts or tickets for the c/o pop Convention via our website, you will be redirected to the external pages of our sales partner Universe very early in the ordering process, namely as soon as you press the "Ticketshop" button. Universe is part of Ticketmaster GmbH, Spree Forum, Alt-Moabit 60, 10555 Berlin, Germany.
Universe acts as the seller of your tickets and becomes your sole contractual partner for the ticket purchase in the event of a completed order. We, cologne on pop GmbH, are not involved in the data processing procedures in the context of the order. When you are redirected from our website to the pages of Universe, only the data mentioned under point 2 lit. a) and the ticket selection you have made are transferred. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DSGVO, as this type of data processing is necessary for the conclusion or fulfillment of the contract. Universe also uses external service providers for the execution of your order for payment processing and (if necessary) shipping, which process your corresponding data such as credit card data and your address. This is also done on the basis of Art. 6 para. 1 p. 1 lit. b DSGVO.
However, we would like to point out that Universe will transmit the information you provide there to us after completion of your ticket order, as we need it for the purpose of running the festival and convention. These data are the details of your person, your company, your email address and your tax invoice data and address. Universe obtains your express consent to this transfer of your data to us as part of the order process. The legal basis for the preceding collection of your data in the order process by Universe is Art. 6 para. 1 p. 1 lit. b DSGVO.
Information on the Privacy Shield agreement can be found under "Privacy Shield List" on the homepage of the U.S. Department of Commerce.
b) General information about cookies
- to make the provision of our online offer possible in the first place,
- to find out how our online offer is generally used, in order to be able to optimize the user experience,
- to provide you with personalized functions and content, as well as to optimize our
- optimize our advertising and marketing activities, in particular to be able to place targeted advertising.
Types and activation/deactivation of cookies
The cookies used can be divided into the groups explained in more detail below. Apart from the so-called "essential" cookies that are technically necessary for the provision of our offer, you can activate or deactivate cookies as you wish. For this purpose, please use our https://c-o-pop.de/festival/datenschutz/
(i) Technically necessary ("essential") cookies:
Some cookies are necessary to ensure some of the basic functions of our offer. They are therefore automatically stored when you access our website and cannot be deactivated. These cookies store your preferences when using our website, such as your personal cookie settings. They are also used to distribute the load on our servers, thus keeping our website available, as well as for security purposes.
(ii) Cookies for statistics/analysis:
(iii) Marketing cookies
Marketing cookies are placed on our website by selected marketing partners and social media. These third-party providers act as intermediaries to play our content, news and offers to you on their channels. These third-party providers also collect data through our website with their cookies to create anonymized statistics on our behalf. In addition, cookies are set by social media services to allow you to share our content with your interested friends and networks. These cookies are able to track your browser usage across other websites and profile your interests. This may affect content and messages that are displayed to you on other websites. If you do not allow these cookies, you will not be able to share c/o pop content through these third-party services.
(iv) Cookies from external media
Cookies from external media collect data about users' visits to the Website, such as which pages were read or which videos were played (and up to which point, if any). Playing external media content from Vimeo and YouTube requires your acceptance to the corresponding data processing.
Incidentally, you can also preset your browser so that no cookies at all or only certain types of cookies are stored on your computer or a notice always appears before a new cookie is created. Cookies that have already been stored can also be deleted at any time via the browser settings. We would like to point out that the complete deactivation of cookies may mean that you cannot use all the functions of our online offer.
Further information can also be found in the explanations on the individual technologies used (see below).
When operating technically necessary ("essential") cookies for the provision of our offer, the data processing carried out by these is necessary for the protection of our legitimate interests according to Art. 6 para. 1 p. 1 lit. f DSGVO.
The data processing by other cookies (for statistics, marketing, external media, see below), is based on the consent given by you for this purpose, Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future in our https://c-o-pop.de/festival/datenschutz/.
b) Cookie consent tool
c) Data transfer to so-called third countries
Your consent also includes consent to the processing of your personal data outside the European Economic Area (Art. 49 (1) (a) DSGVO), i.e. in so-called third countries where there may not be a comparable level of data protection, such as in the USA. We would like to point out that, particularly with regard to the USA, there is a risk that the information will be processed by US authorities for monitoring purposes, possibly also without enforceability of your rights and corresponding legal remedies.
4. analysis tools (tracking tools)
With the measures described below, which are used by us, we want to ensure a demand-oriented design and continuous optimization of our offer. The specific data processing purposes and data categories can be found in the information on the respective tools.
All of the following measures are carried out on the basis of your previously given consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating the respective measures in the [https://c-o-pop.de/festival/datenschutz/.
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which means that they cannot be linked to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted. For the exceptional cases in which personal data is transferred to the USA, we have agreed with Google on the validity of so-called EU standard contractual clauses within the meaning of Art. 46 DSGVO in order to offer a guarantee for compliance with the European level of data protection.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help:
5. Facebook / Instagram
a) Use of Facebook Pixel, Custom Audiences and Facebook Conversion.
On our website, we use the "Facebook Pixel" of the social network Facebook (operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook")).
The use of the Facebook pixel makes it possible for advertisements placed by us on Facebook to be played out specifically only to those Facebook users who have previously been on our website (where the pixel was placed) or to whom Facebook assigns certain characteristics (based on the data collected by Facebook about these users) that match the characteristics that we have reported to Facebook as relevant for the playout of our advertisements (so-called "Custom Audiences").
In addition, the Facebook pixel enables us to track the effectiveness of our Facebook ads for statistical and market research purposes (so-called "conversion"), as this allows us to see when a user has also come to our website after clicking on one of our Facebook ads.
If you are a Facebook member and have allowed Facebook to do so via your account's privacy settings, Facebook will also link the information collected about your visit to us to your member account and use it to target Facebook ads. For us, however, the data collected remains anonymous, i.e. we cannot draw any conclusions about the identity of visitors to our website.
Information on data processing by Facebook can be found in the Facebook data policy at www.facebook.com/about/privacy. More detailed information on the Facebook pixel and how it works can be found at: https://www.facebook.com/business/help/651294705016616.
Legal basis / revocation of consent
The legal basis for the processing of your personal data described above is your previously given consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating the respective measures.
Insofar as a transfer of personal data should also take place to Facebook servers in the USA, we point out that Facebook bases such data transfer on EU standard contractual clauses within the meaning of Art. 46 DSGVO in order to thereby provide a guarantee for compliance with the European level of data protection.
Prevention of tracking (alternatives)
As a member of Facebook, you can use the following link to object to data collection via the Facebook pixel or to make settings regarding the types of advertisements you accept within Facebook: www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all computers or mobile devices.
c) Instagram Insights
You can also find us with an account on Instagram (https://www.instagram.com/copopfestival/ , https://www.instagram.com/copopconvention/) also operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). For this account and the content published there, such as posts or stories, Facebook provides us with so-called "Insights". These are aggregated data, i.e. statistical evaluations of the use of our account. We can thus obtain information, for example, about the retrievals of individual contents of our account or the interaction with them. The underlying data processing also takes place using personal data. However, it is not possible for us to draw conclusions about specific individuals (and their behavior on our account) from the aggregated data transmitted to us by Facebook. We, as the provider of our Instagram account, do not process any personal data from your use of our service beyond this.
For more information on the processing of your personal data in the context of the provision of Instagram "Insights" and the exercise of your data subject rights, please refer to Instagram's privacy notices, currently available at https://help.instagram.com/519522125107875.
6. other tools and miscellaneous
a) Integration of videos via YouTube
Since local hosting of videos is not powerful enough, we additionally use the option of integrating videos on our website via the external third-party provider YouTube (YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.). This applies in particular to the provision of (on-demand) content that can be accessed at any time.
YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
The legal basis for the aforementioned processing of your personal data is your previously given consent, Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating the respective measures in the cookie settings.
We would like to point out that as a result of the use of YouTube videos, a transfer of personal data to Google servers in the USA cannot be ruled out. For such cases, we have agreed with Google on the validity of so-called EU standard contractual clauses within the meaning of Art. 46 DSGVO in order to provide a guarantee for compliance with the European level of data protection.
b) Content and data protection with third-party providers / links to third-party providers
On our website, you will also find corresponding links to our channels or profiles on the above-mentioned online platforms of third-party providers. These are not so-called social plug-ins, but simple links. Therefore, your visit to our website alone does not result in any data exchange with the websites of these third-party providers. This is only the case if you decide to call up the corresponding service of the third-party provider by clicking on one of the symbols or links. Please refer to the data protection declarations of the respective provider for information on the processing of your personal data that takes place there.
7. recipients of your data
We only transfer your data to third parties if this is permitted by law, you have consented or the transfer is necessary to fulfill our business purposes.
For example, personal data is transferred to external ticketing, payment and shipping service providers as part of your ticket order or to support marketing measures, e.g. to newsletter mailing service providers. Furthermore, we may transfer personal data to public bodies and institutions (tax offices, authorities, customs offices) if there is a legal or regulatory obligation to do so, or to legal advisors and collection agencies for the purpose of enforcing contractual claims.
Details about recipients, or categories of recipients of your data can also be found within these data protection provisions in the context of our explanations of the individual processing situations.
8. data deletion and storage period
Your personal data will be deleted as soon as the purpose of the storage no longer applies or you revoke your previously given consent to the storage and the deletion does not conflict with any statutory retention obligations. If your data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data will be blocked and not processed for other purposes, e.g. if they must be retained for commercial or tax law reasons.
9. data subject rights
If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the controller:
- In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
- in accordance with Art. 16 DSGVO, to demand the immediate correction of incorrect or completion of your personal data stored by us;
- pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest
or for the assertion, exercise or defense of legal claims;
- pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
- in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
10. right of objection
Pursuant to Art. 21 (1) DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) (f) DSGVO; this also applies to profiling based on this provision. When exercising this objection, you must provide us with your personal reasons why we should not process your personal data. We will consider your objection and either stop or adjust the data processing or show you compelling legitimate grounds on our part on the basis of which we may continue the processing.
If personal data relating to you is processed on the basis of Article 6 (1) (f) DSGVO for the purpose of direct marketing, you have the right, pursuant to Article 21 (2) DSGVO, to object at any time without giving reasons to the processing of personal data relating to you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process the personal data concerning you for these purposes.
To exercise your right to object, simply send an e-mail to email@example.com.
For individual types of data processing, specific technical options may exist for exercising your right of revocation or objection. Where applicable, we have already pointed this out to you in the explanation of the respective data processing measures.
11. right to revoke consent
You have the right to revoke a declaration of consent granted under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
12. data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
In order to prevent unauthorized access to your personal data by third parties, the transmission process in the context of ticket orders on our website or on the website of the ticket service provider Universe is of course encrypted.
13. status and amendment of these data protection provisions
These data protection provisions are currently valid and were last updated in October 2021.
Due to the further development of our website as well as due to changed legal or official requirements, changes to these data protection provisions may become necessary. You can find the current provisions at any time on our website at https://c-o-pop.de/festival/datenschutz/.