ANCHOR - Reeperbahn Festival International Music Award
Privacy Policy
INTRODUCTION AND TERMINOLOGY
1. INTRODUCTION
When operating our website www.anchor-award.com (hereinafter "Website") we process personal data. These will be treated confidentially and processed in compliance with applicable laws – in particular the basic data protection regulation (DSGVO) and the Federal Data Protection Act (BDSG). Our privacy policy is intended to inform you on which personal data we collect, to what purposes use them and what legal basis we use them on, and which third parties we disclose them to if necessary. Furthermore, we will explain which rights you have to maintain and assert protection of your data.
2. TERMINOLOGY
Our privacy policy contains technical terms as employed in DSGVO and BDSG-new. For better understanding we would first like to explain these expressions in simple terms:
1. Personal Data
"Data" means all information that refers to an identified or identifiable person (Para. 4 No. 1 DSGVO). Data of an identified person might be his/her name or e-mail address. However, data also includes information which does not directly hint at an identity but might help establish the identity of a person by combining one's own or third-party information. A person is identifiable by means of his/her address or bank details, date of birth or username, IP address and/or site data. In this context, all information is relevant that allows conclusions in whatever manner concerning a person.
2. Processing
"Processing" according to Para. 4 No. 2 DSGVO refers to any operation in connection with data. In particular, this concerns collection, recording, organisation, ordering, storing, adaptation or modification, selection, query, utilisation, disclosure, transmission, distribution or any other form of provision, comparison or linking, restriction, deleting or destruction of personal data.
RESPONSIBLE ENTERPRISE AND PRIVACY OFFICER
3. PARTY RESPONSIBLE
The enterprise responsible for data protection:
Company: RBX GmbH ("we")
Legal representative: RBX GmbH, represented by Alexander Schulz (managing director)
Address: Neuer Pferdemarkt 1, 20359 Hamburg
Phone: + 49 (0) 40 43 17 959-17
E-Mail: contact@reeperbahnfestival.com
4. PRIVACY OFFICER
For our enterprise, we have appointed an external privacy officer who can be contacted:
Name: HABEWI GmbH & Co. KG
Representative: HABEWI Beteiligungs GmbH represented by Arne Platzbecker (managing director)
Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg
Phone: +49 (0) 40 18 189 80-0
Fax: +49 (0) 40 18 189 80-99
E-Mail: datenschutz@habewi.de
SCOPE OF PROCESSING
5. SCOPE OF PROCESSING: WEBSITE
Within the framework of the Website using the URL www.anchor-award.de we process your personal data listed in detail in the following under items 6 – 8. We only process data which you actively provide on our Website (e.g. by filling in forms) or automatically provide by using our offer.
We only process and never sell, lend or transmit your data to third parties. Should we make use of external service providers when processing your data, this will be done within the framework of so-called contract processing, during which we as contracting party are entitled to issue instructions to our contractors. To operate our Website, we employ external providers for hosting as well as maintenance, care and further development. Should external service providers be employed in some of the processing listed under 6 – 8 they will be named.
In principle, data transmission to third-party states does not take place and is not planned to take place. You will be informed on any exception from this principle in the processings stated hereinafter:
PROCESSINGS IN DETAIL
6. PROVISION OF WEBSITE AND SERVER LOGFILES
1. Description of processing
When our Website is visited, we automatically record information your browser transfers to our server. This is also stored in so-called logfiles of our system. They include the following data:
• IP address of the enquiring computer,
• Date and time of the access,
• Time zone difference on Greenwich Mean Time (GMT),
• Name and URL of the enquiring file,
• Access status/HTTP status code,
• Website from which the access is carried out (Referrer URL),
• Applied browser and, if applicable, the operating system of your computer as well as name of your access provider.
Temporary storage of your IP address by the system is necessary to deliver our Website to the user terminal. To ensure this, the IP address of the user must be stored for the duration of the session. However, your IP address is not stored in our logfiles.
2. Purpose
Processing is executed to allow access to our Website as well as to ensure its stability and security. In addition, processing serves statistical evaluation and improvement of our online offer.
3. Legal basis
Processing is necessary to safeguard the predominantly legitimate interests of the party responsible (Para. 6 Sect. 1 lit. f DSGVO). Our legitimate interest is the purpose stated under item 6.2.
4. Duration of storage
Data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data recorded to provide the Website this will be the case when the session in question is terminated. Logfiles are deleted after 60 days.
7. SOCIAL NETWORKS
7.1 Description of processing
Our Website does not apply any so-called social media plug-ins. The logos of social networks shown on our Website, i.e. Facebook, Twitter, Instagram and Deezer, are merely linked with the corresponding profiles of our enterprise. If you click on these logos, you will be directed to the external website of the corresponding social network.
However, our profiles within social networks are also considered data processing. If, on visiting such a profile in the corresponding social network, you are logged in, this information will be allocated to your user account there. If you interact with our profile, e.g. "share", "like" or "retweet" a post, this information will be stored in your user account. So-called "Insights" of our Facebook site allow us to retrieve statistical data. These statistics are provided by Facebook. The "insights function" cannot be excluded. We cannot decide to activate or deactivate this function. It is available to all Facebook fan book providers, regardless of whether you use the insights function of Facebook or not. We are provided with data for a selectable period and on the following group of people concerned: fans, subscribers, persons reached and interacting persons. This function refers to the following categories of personal data: total number of sites accessed, "likes" including origin, site activities, interaction of posts, scope, scope of posts (broken down into organic, viral and paid interactions), comments, shared contents, replies as well as demographic evaluation, i.e. home country, gender and age. Due to the Facebook user policies – which every user must agree to in order to use Facebook – we are able to identify subscribers and fans of our site and to view their profiles.
Social networks with which you communicate store your data by applying pseudonyms as user profiles and use them for advertising and market research purposes. Thus, you can be shown adverts within the social network and on other third-party websites corresponding to your supposed interests. For this purpose, cookies are usually used which the social network places on your terminal. For further information regarding cookies refer to item 10. You have the right to object to such creation of user profiles; to claim this right you must directly apply to the corresponding social networks.
7.2 Purpose
We maintain profiles with the social networks mentioned above for the purpose of updating and supporting public relations and corporate communication with customers and interested parties.
We use the function "Facebook Insights" to make posts on our Facebook fan page more attractive to our visitors. This enables us to make use of favourite visit times of visitors for optimum planning of our posts in terms of time.
7.3 Legal basis
The legal basis for data processing within the framework of our profiles on social networks is to safeguard our predominantly rightful interests (Para. 6 Sect. 1 lit. f DSGVO). Our rightful interest is the purpose stated in item 7.2. If you are asked for consent by means of a cookie banner or a cookie consent tool, the legal basis is provided in Para. 6 Sect. 1 lit. a DSGVO. Such consent is voluntary. If you are asked for consent by the corresponding provider of a social network, the legal basis is provided in Para. 6 Sect. 1 lit. a DSGVO. Apart from that, data processing in view of our Facebook fan page is carried out on the basis of an agreement on shared responsibility in compliance with Para. 26 DSGVO between us and Facebook which can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum.
7.4 Recipients and transmission in third states
The corresponding social networks are operated by the enterprises listed below. Further information on data protection with regard to our profiles on social networks is available in the linked privacy policies.
• Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. Privacy Policy: http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo.
• Twitter, Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; Privacy Policy: https://twitter.com/privacy.
• Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; Privacy Policy: https://help.instagram.com/155833707900388/.
Social networks also process your personal data in the US and have submitted themselves to the EU-US Privacy Shield. For further information on the EU-US Privacy Shield please refer to https://www.privacyshield.gov/EU-US-Framework.
8. YOUTUBE VIDEOS
8.1 Description of processing
Our Website makes use of the services of "YouTube", a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter called "Youtube"). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our Website as so-called iFrames so that they can be directly viewed on our Website. The videos are integrated in the "enhanced data protection mode" offered by YouTube, i.e. no personal data are transmitted to Google as long as you do not play the video. Only by playing a video, data upon which we have no influence are transmitted to Google. If you play a video embedded on a sub-page of our Website, Google will obtain data on which sub-page you have visited and which video you have viewed. In some cases, your IP address is also transmitted to Google. If, in such a case, you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google will store your data as usage profiles, using them for advertising and market research purposes and/or for need-oriented design of Google websites. You have the right to object to the creation of such usage profiles; to exercise this right you must contact Google direct. For further information on data protection at Google please refer to http://www.google.com/intl/de-DE/policies/privacy/.
8.2 Purpose
Processing is carried out in order to enable us to show videos on our Website.
8.3 Legal basis
Processing is required to safeguard the predominantly rightful interests of the party responsible (Para. 6 Sect. 1 lit. f DSGVO). Our rightful interest is the purpose stated under item 8.2.
8.4 Recipients and transmission in third states
By embedding YouTube, in some cases person-related data are transmitted to YouTube LLC or Google. Google also processes your personal data in the US and has submitted itself to the EU-US Privacy Shield. For further information on the EU-US Privacy Shield please refer to https://www.privacyshield.gov/EU-US-Framework.
9. GOOGLE ANALYTICS
9.1 Description of processing
Our Website applies "Google Analytics", a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter called "Google"). Google Analytics applies cookies (see item 10) that allow analysis of how you use of our offer. We use Google Analytics in the provided "Universal Analytics" version which enables analysis across devices by allocating data to pseudonymous user IDs. As a rule, information collected via cookies is transmitted to the US and stored there. However, we exclusively use Google Analytics with IP anonymisation. Herewith Google previously abbreviates your IP address within member states of the European Union or other contract states to the Agreement on the European Economic Area. Only in exceptions will the full IP address be transmitted to a Google server in the US and then abbreviated. The IP address transmitted by your browser in the course of Google Analytics is not amalgamated with other Google data. Statistics prepared by Google Analytics in particular collect data on how many users visit our Website, from what country or place they access our Website, which sub-pages are accessed and what links or search strings users apply to get to our Website. For information on the user conditions of Google Analytics please refer to https://marketingplatform.google.com/about/analytics/terms/de/.
An overview on data protection at Google Analytics is available on http://www.google.com/intl/de/analytics/learn/privacy.html.
The privacy statement of Google can be viewed under https://policies.google.com/privacy?hl=de-DE.
9.2 Purpose
Processing is carried out to evaluate utilisation of our Website. Information thus derived serves for the improvement and need-oriented design of our online presence.
9.3 Legal basis
Processing is required to safeguard the predominantly rightful interests of the party responsible (Para. 6 Sect. 1 lit. f DSGVO). Our rightful interest is the purpose stated under item 9.2. If by means of a cookie banner or cookie consent tool you are asked for consent that also includes application of Google Analytics, the legal basis is provided in Para. 6 Sect. 1 lit. a DSGVO. Such consent is voluntary.
9.4 Duration of storage and right to object, withdrawal of consent
Duration of storage as well as your control and settings options for cookies are explained in item 10. You can object to data processing by Google Analytics at any time by downloading and installing the browser add-on available under https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you have the possibility to click on the following link. This will place an opt-out cookie on your terminal device, preventing collection of your data during future visits to this Website: deactivate Google Analytics (LINK: "javascript:gaOptout()"). We will automatically delete any analysis data processed and stored by Google Analytics after 14 months. If we seek your consent to apply Google Analytics via a cookie banner or a cookie consent tool, you can withdraw such consent with future effect at any time via the settings of the cookie banners or the cookie consent tools.
9.5 Recipients and transmission in third states
Google Analytics is active for us as a service provider within the framework of order processing. Google also processes your personal data in the US and has submitted itself to the EU-US Privacy Shield. For further information on the EU-US Privacy Shield please refer to https://www.privacyshield.gov/EU-US-Framework.
10. COOKIES
10.1 Recipients and transmission in third states
Our Website applies cookies. Cookies are small text files that are stored on the terminal device of the user on visiting a website. Cookies contain information which allows recognition of a terminal device and sometimes certain functions of a website. We predominantly only apply so-called "session cookies". These are automatically deleted when you end your Internet session and close the browser. Other cookies remain stored on your terminal for an extended period. We use the following cookies on our Website:
• Cookie name: _ga. Purpose/Function: Google Analytics Differentiation of visitors Duration of storage: This cookie expires 2 years after it was placed.
• Cookie name: _gat. Purpose/Function: Google Analytics Reduction of requirement rates Duration of storage: This cookie expires 1 minute after it was placed
• Cookie name: _gid. Purpose/Function: Google Analytics Differentiation of users Duration of storage: This cookie expires 24 hours after it was placed.
10.2 Purpose
We use cookies to make our Website more user-friendly and to offer the functions described in item 10.1.
10.3 Legal basis
Processing is required to safeguard the predominantly rightful interests of the party responsible (Para. 6 Sect. 1 lit. f DSGVO). Our rightful interest is the purpose stated under item 10.2. If by means of a cookie banner or cookie consent tool you are asked for consent, the legal basis is provided in Para. 6 Sect. 1 lit. a DSGVO. Such consent is voluntary.
10.4 Duration of storage, objection to consent
Cookies are automatically deleted at the end of a session or after the stated duration of storage has expired. As cookies are stored on your terminal device, you have full control of the usage of cookies as a user. By adjusting the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be carried out automatically. If cookies for our Website are deactivated, you cannot make use or only limited use of individual functions of our Website. If we seek consent to the application of cookies via a cookie banner or a cookie consent tool, you can object to this consent with future effect at any time via the settings of cookie banners or the cookie consent tool.
11. PRECAUTIONS
In order to protect your personal data from third-party access we have equipped our Website with an SSL and TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security"; they encrypt the communication of data between a website and the user terminal. You will recognise the active SSL or TLS encryption by the small lock symbol on the very left of the address line in the browser.
YOUR RIGHTS
12. RIGHTS OF PERSONS AFFECTED
With regard to data processing by our company as described above, as a person affected you are entitled to the following rights:
12.1 Information (Para. 15 DSGVO)
You are entitled to demand confirmation on whether we process data concerning you. If this is the case, you have the right to obtain information on these data in line with the terms provided in Para. 15 DSGVO and to obtain information listed in Para. 15 DSGVO.
12.2 Correction (Para. 16 DSGVO)
You are entitled to demand immediate correction of incorrect personal data concerning you or, if applicable, completion of incomplete data.
12.3 Deletion (Para. 17 DSGVO)
Should one of the reasons listed in Para. 17 DSGVO apply, e.g. if your data are no longer necessary for the purposes we pursue, you are entitled to demand immediate deletion of personal data concerning you.
12.4 Restrictions to data processing (Para. 18 DSGVO)
You are entitled to demand from us restrictions to data processing provided one of the conditions listed in Para. 18 DSGVO is given, e.g. if you contest the correctness of your personal data, processing will be suspended for the time it takes to verify correctness of your data.
12.5 Data portability (Para. 20 DSGVO)
You are entitled to demand release of data concerning you in a structured, common and machine-readable format under the conditions listed in Para. 20 DSGVO.
12.6 Withdrawal of consent (Para. 7 Sect. 3 DSGVO)
You are entitled to revoke any consent you have given when processing is based on your consent. Withdrawal is valid as from the time of its assertion. In other words, it will be effective in the future. Processing of data will not become unlawful retroactively by withdrawal of your consent.
12.7 Complaint (Para. 77 DSGVO)
Should you be of the opinion that processing of personal data concerning you infringes DSGVO, you are entitled to file a complaint with a supervisory authority. You can assert your right with a supervisory authority in the EU member state of your place of residence, your place of work or the place of the alleged infringement.
12.8 Ban of automated decisions / profiling (Para. 22 DSGVO)
Decisions that will have legal consequences or have a considerable adverse effect for you must not be exclusively based on automated processing of personal data – including profiling. Please be advised that we do not apply automated decision making or profiling regarding your personal data.
12.9 Objection (Para. 21 DSGVO)
If we process your personal data based on Para. 6 Sect. 1 lit. f DSGVO (to safeguard predominantly rightful interests), you are entitled to object under the conditions listed Para. 21 DSGVO. However, this only applies if there are reasons resulting from your special situation. After your objection, we will no longer process your personal data unless we can account for compelling and legitimate reasons for the processing that outweigh your interests, rights and liberties. We do not have to cease processing your data if it serves assertion, exertion and protection of legal claims. In any case and at any time – also independently from a special situation – you are entitled to object to processing of your personal data for direct advertising.
As on June 2020