Arne Platzbecker
HABEWI GmbH & Co. KG, represented by its general partner HABEWI Beteiligungs GmbH, Hamburg (Hamburg Local Court, HRB 132680)
represented by Managing Director Arne Platzbecker
Palmaille 96 / 22767 Hamburg
Register Court: Hamburg Local Court
Registration No.: HRA 117833
F. +49 40 460 089 66
F. +49 40 460 089 77
M. a.platzbecker@habewi.de
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy set out below.
The controller responsible for data processing on this website can be found in the Legal Notice. This entity is the primary point of contact for questions relating to data protection.
Some data is collected when you provide it to us yourself. This may, for example, include data that you enter into a contact form or when subscribing to a newsletter.
Other data is collected automatically by our IT systems when you visit the website. This mainly comprises technical data (e.g. internet browser, operating system or time of the page request). This data is collected automatically as soon as you access our website.
When you visit our website, your browsing behaviour may be statistically analysed. This is carried out primarily using cookies and so-called analytics tools. The analysis of your browsing behaviour is anonymous and cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Details can be found in this Privacy Policy under the heading “Third-Party Modules and Analytics Tools”.
Some data is collected in order to ensure the error-free provision of the website.
Other data may be used to statistically analyse your user behaviour on the internet (e.g. by means of so-called cookies). Such analyses are carried out anonymously and cannot be traced back to you personally. You may object to this analysis. Details can be found in this Privacy Policy under the heading “Third-Party Modules and Analytics Tools”.
You have the right at any time and free of charge to obtain information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification, blocking or erasure of this data. For this purpose, as well as for any further questions regarding personal data, you may contact us at any time using the address stated in the Legal Notice. You also have the right to lodge a complaint with the competent supervisory authority.
Yes. This website uses encryption. This is intended to prevent unauthorised persons from accessing your data.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
When you use this website, various items of personal data are collected. Personal data means data by which you can be personally identified. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website can be found in the Legal Notice. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar data).
If data processing is carried out on the basis of Article 6(1)(e) or (f) GDPR, you have the right, at any time, on grounds relating to your particular situation, to object to the processing of personal data concerning you; this also applies to profiling based on those provisions. The respective legal basis on which processing is based can be found in this Privacy Policy.
If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes.
Many data processing operations are only possible with your consent. We will expressly obtain your consent before commencing such data processing. You may withdraw this consent at any time. An informal notification by email to us is sufficient for this purpose. The lawfulness of data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
Website visitors are advised that, in the event of infringements of data protection law, they have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company has its registered office. A list of data protection commissioners and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or to have such data transmitted to another controller, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out where technically feasible.
For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol displayed in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Within the framework of the applicable statutory provisions, you have the right at any time and free of charge to obtain information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification, blocking or erasure of this data. For this purpose, as well as for any further questions regarding personal data, you may contact us at any time using the address stated in the Legal Notice.
We hereby object to the use of contact details published as part of the statutory Legal Notice obligation for the purpose of sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information being sent, for example by means of spam emails.
We reserve the right to amend these data protection provisions at any time in compliance with the applicable statutory requirements.
The websites use so-called cookies in some cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our services more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
You can configure your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser when you next visit our website.
Cookies that are necessary for carrying out the electronic communication process or for providing certain functions requested by you (e.g. shopping cart functionality) are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Where other cookies are stored (e.g. cookies for analysing your browsing behaviour), these are addressed separately in this Privacy Policy.
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address
This data is not combined with other data sources. We reserve the right to subsequently review this data if we become aware of specific indications of unlawful use. This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free and optimised presentation of its website; for this purpose, server log files must be collected.
If you send us enquiries via the contact form, the information you provide in the enquiry form, including the contact details entered there, will be stored by us for the purpose of processing your enquiry and in the event of follow-up questions. We do not disclose this data without your consent.
The processing of data entered into the contact form is carried out exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time. An informal notification by email to us is sufficient for this purpose. The lawfulness of data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
The data you enter into the contact form will remain with us until you request its erasure, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
We collect, process and use personal data only to the extent necessary for establishing, defining the content of or amending the legal relationship (master data). This is carried out on the basis of Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract. We collect, process and use personal data relating to the use of our websites (usage data) only to the extent necessary to enable the user to use the service or to bill the user for it.
The customer data collected will be erased following completion of the order or termination of the business relationship, but not before expiry of the statutory retention periods.
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the USA and stored there.
More information on how Google Analytics handles user data can be found in Google’s Privacy Policy:
https://support.google.com/analytics/answer/6004245?hl=de
Browser Plugin: You can prevent cookies from being stored by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Objection to Data Collection: You can prevent your data from being collected by Google Analytics by clicking the following link. An opt-out cookie will be set that prevents your data from being collected during future visits to this website: Disable Google Analytics
Demographic Features in Google Analytics: This website uses the “demographic features” function of Google Analytics. This enables reports to be generated containing information about the age, gender and interests of website visitors. This data originates from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be attributed to a specific person. You may disable this function at any time via the advertising settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described under “Objection to Data Collection”.
Data Processing on Behalf of the Controller: We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
IP Anonymisation: We use the “IP anonymisation activation” function on this website. This means that your IP address is truncated by Google within Member States of the European Union or other states party to the Agreement on the European Economic Area before being transmitted further. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide further services relating to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
Legal Basis: Google Analytics cookies are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its online offering and its advertising.
Version: May 2018
Extended Privacy Provisions for the Website https://tickets.habitat-festival.de
In operating our website at the URL https://tickets.habitat-festival.de (hereinafter referred to as the “Website”), we process personal data. We treat such data confidentially and process it in accordance with the applicable laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG). Through these Privacy Provisions, we wish to inform you about which personal data we collect from you, for what purposes and on what legal basis we use it and, where applicable, to whom we disclose it. We will also explain which rights you have in order to protect and enforce your data protection rights.
Our Privacy Provisions contain technical terms used in the GDPR and the BDSG. For ease of understanding, we would first like to explain these terms in simple language:
“Personal data” means any information relating to an identified or identifiable person (Article 4(1) GDPR). Information relating to an identified person may include, for example, their name or email address. However, data is also personal where a person’s identity is not immediately apparent but can be determined by combining our own or third-party information and thereby identifying the person concerned. A person may, for example, be identifiable by means of their address or bank details, date of birth or username, IP addresses and/or location data. All information that in any way permits conclusions to be drawn about an individual is relevant in this context.
Under Article 4(2) GDPR, “processing” means any operation performed on personal data. This includes, in particular, collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or another form of making available, alignment or combination, restriction, erasure or destruction of personal data.
The controller responsible for data processing is:
Company: Kopf & Steine GmbH (“we”)
Legal representative: Frank Diekmann (Managing Director)
Address: Eduardstraße 46
Telephone: +49 160 94806507
Fax: 040 800060922
Email: frank.diekmann@kopfundsteine.de
We have appointed an external Data Protection Officer for our company. You can contact him at:
Name: Arne Platzbecker
Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg
Telephone: 040/ 46008966
Fax: 040/ 46008977
Email: datenschutz@habewi.de
In connection with the Website, we process the personal data relating to you described individually in Section IV below. We only process data that you actively provide on the Website (e.g. by completing forms) or that you automatically make available when using our services.
Your data is processed exclusively by us and, as a general rule, is not sold, leased or disclosed to third parties. Where we make use of external service providers when processing your personal data, this is carried out within the framework of processing on our behalf, under which we, as the controller, are entitled to issue instructions to the processors acting on our behalf. We use external service providers for the hosting of our Website. We host our Website with the external provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, https://www.hetzner.com/, at its Nuremberg data centre location in Germany. If additional external service providers are used for individual processing activities listed in Section IV, they will be identified there.
As a general rule, we do not transfer data to third countries, nor do we intend to do so. We will inform you of any exceptions to this principle in the processing activities described below. Any transfer of data to third countries will then take place on the basis of the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/) or the EU Standard Contractual Clauses.
Each time our Website is accessed, we automatically collect information transmitted by your browser to our server. This comprises the following data:
IP address
browser software used, including its version and language
operating system
the website from which visitors accessed the Website (so-called referrer)
the subpages accessed on the Website
date and time at which the Website was accessed
This data is also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to deliver our Website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
The processing is carried out in order to enable access to the Website and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online services.
The processing is necessary for the purposes of the overriding legitimate interests pursued by the controller (Article 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above.
The data will be erased as soon as it is no longer necessary for achieving the purpose for which it was collected. In the case of data collected for the provision of the Website, this is the case when the respective session has ended. Log files are erased after {{logfile_loeschfrist}} days.
You can make purchases on our Website either as a guest or as a registered user. As part of your ordering process, we process personal data relating to you. The mandatory fields in our online shop marked with an asterisk “*” must be completed. Otherwise, we will not be able to enter into a purchase agreement with you and send you the goods you have requested. All other information is voluntary. When making a purchase on our Website, you can also select one of the payment methods offered in order to pay the purchase price. When your order is completed, the data required for payment will be transmitted to the respective payment service provider. If you make a purchase on our Website as a registered user, you can store your billing and delivery addresses as well as your preferred payment method in your user profile to make future orders faster and more convenient.
The processing is carried out for the purpose of entering into and performing purchase agreements.
The processing is necessary for entering into and performing purchase agreements (Article 6(1)(b) GDPR). This also applies to the disclosure to the respective payment service provider of the data required for processing payments.
Due to commercial and tax law requirements, we are obliged to retain your address, payment and order data for a period of eight years. However, after two years we restrict the processing of such data. This means that your data will thereafter be stored separately solely for the purpose of complying with statutory retention periods and will be erased without undue delay once those periods have expired.
For the processing of your payment, personal data will be transmitted to one of the external payment service providers listed below that you select when making your purchase:
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal reserves the right, under certain circumstances, to transmit personal data to credit reference agencies for identity and creditworthiness checks. Further information on data protection at PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
PayPal and PayPal Express: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Further information on data protection at PayPal and PayPal Express can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Credit card, direct debit, purchase on account via PayPal Plus: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Reference is additionally made to PayPal’s Privacy Policy. Further information on data protection in connection with credit card payments, direct debit and purchase on account via PayPal Plus can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Klarna purchase on account / Sofort bank transfer: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Further information on data protection in connection with Klarna purchase on account / Sofort bank transfer can be found at https://www.klarna.com/de/datenschutz/
Credit card via Stripe: Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, California 94107, USA. Further information on data protection in connection with credit card payments via Stripe can be found at https://stripe.com/de/privacy
You can contact us using the email address stated on the Website. In this case, the personal data transmitted with the email will be processed by us.
The data transmitted with your email will be used exclusively for the purpose of processing and responding to your enquiry.
The processing is necessary for the purposes of the overriding legitimate interests pursued by the controller (Article 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above. Where the email contact is aimed at entering into or performing a contract, the data processing is carried out for the performance of the contract (Article 6(1)(b) GDPR).
We erase the data as soon as it is no longer necessary for achieving the purpose for which it was collected. This is generally the case when the respective communication with you has ended. The communication is considered to have ended when it can be inferred from the circumstances that your matter has been conclusively resolved. If statutory retention periods prevent erasure, the data will be erased without undue delay after expiry of the applicable statutory retention period.
We send a newsletter every two weeks. Through the newsletter, we provide you with information about line-up announcements, offers and news from the world of music and festivals. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by completing and submitting a newsletter subscription form on our Website. You can also subscribe as part of an order placed in our online shop. Only your email address is required for newsletter registration. All other information (such as your first name and surname) is voluntary and is used solely to personalise the emails.
We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our Website. We then send an email to the email address you have provided. In this email, we ask you to confirm that you have in fact registered for the newsletter and wish to receive it. Confirmation takes place by clicking a confirmation link contained in the email. Only after successful confirmation will we add you to our newsletter mailing list and send you emails in the future. As part of the double opt-in procedure, we store the date, time and your IP addresses both when you register and when you confirm your registration.
The processing is carried out in order to provide the newsletter function and send newsletter emails to subscribers. The collection and storage of the date, time and IP addresses during newsletter registration serves to document the consent given and to protect against the misuse of email addresses for unauthorised registrations.
The processing of our subscriber newsletter is based on consent pursuant to Article 6(1)(a) GDPR. Your consent is voluntary. The collection and storage of the date, time and IP addresses during newsletter registration is necessary for the purposes of the overriding legitimate interests pursued by the controller (Article 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above.
If you do not confirm your newsletter registration within 24 hours of receiving the corresponding registration email, your data will be automatically erased. Otherwise, we process your personal data for the duration of your newsletter subscription.
You may stop receiving our newsletter at any time by withdrawing your consent. A simple declaration is sufficient to withdraw your consent (by post to Kopf & Steine GmbH, Eduardstraße 46, by fax to 040 800060922 or by email to frank.diekmann@kopfundsteine.de). Once you have withdrawn your consent, no further newsletters will be sent to you and your personal data will be removed from our active mailing list. In order to enforce your withdrawal, we will retain your email address on a restricted basis in our so-called blacklist. This enables us to ensure that you do not receive any newsletters from us in the future and that your email address is not misused by third parties.
For the administration of our newsletter mailing list and the sending of emails, we use the services of the newsletter provider {{newsletter_provider_dl_text}}
Our Website does not use so-called social media plugins. The Instagram logos displayed on our Website merely contain links to our company’s corresponding profiles on the social networks. Embedding the logos does not result in any data being transmitted to the social networks. If you click on one of the logos, you will simply be redirected to the external website of the respective social network.
However, our profiles within the social networks do involve data processing. If you are logged into the respective social network when visiting such a profile, this information will be associated with your user account there. If you interact with our profile, e.g. by commenting on, “sharing”, “liking” or “retweeting” a post, this information will also be stored in your user account. As a rule, we are also able to view your interactions with our profile.
On the Instagram social network, the so-called “Insights” function enables us to obtain statistical data regarding the use of our Instagram profile. These statistics are provided by Instagram. The “Insights” function cannot be disabled. We cannot decide whether to switch this function on or off. It is available to all operators of Instagram Business Accounts, regardless of whether they actively use the Insights function. Through Instagram Insights, {{Uns}} receive anonymised data regarding the development and reach of our Instagram profile as well as the posts, Stories and videos we publish there. Instagram Insights also provides us with statistical information regarding the location, gender and age of subscribers to our Instagram profile.
The social networks with which you communicate store your data using pseudonyms in the form of user profiles and use such data for advertising and market research purposes. For example, this may result in advertisements being displayed to you within the social network and on third-party websites that correspond to your presumed interests. For this purpose, cookies are generally used and stored by the social network on your device. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the social networks directly.
We maintain profiles on the aforementioned social networks for the purposes of public relations and corporate communication with customers and interested parties. We use Instagram’s “Insights” function to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.
The legal basis for data processing in connection with our social network profiles is the pursuit of our overriding legitimate interests (Article 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above. Where the respective operator of a social network requests your consent, the legal basis is Article 6(1)(a) GDPR. In all other respects, data processing in connection with our presence on Instagram is carried out on the basis of joint controllership pursuant to Article 26 GDPR.
The respective social networks are operated by the companies listed below. Further information regarding data protection in connection with our profiles on the social networks can be found in the linked privacy policies.
Instagram: Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Privacy Policy: https://help.instagram.com/155833707900388/
The social networks also process your personal data in the USA.
When displaying our Website, the standard fonts of your device are replaced with other fonts. This is done in order to display the text on our Website in a more legible and aesthetically appealing manner.
For font replacement, we have chosen a privacy-friendly solution. We do not integrate external services such as Google Fonts or Adobe Fonts. Instead, we store the replacement fonts locally on our server. This has the advantage that when you access our Website, your browser does not make any requests to external font replacement services and therefore no data, in particular your IP address in conjunction with the address of our Website, is transmitted to third parties.
Our Website uses the remarketing service “Meta Pixel” (formerly “Facebook Pixel”), which is operated by Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
The “Meta Pixel” enables us to display advertisements on the Facebook and Instagram social networks specifically to Facebook/Instagram users who have shown an interest in our services, e.g. by previously visiting our Website. With the help of the “Meta Pixel”, we can also measure and evaluate the effectiveness and reach of our advertising on Facebook/Instagram by determining whether Facebook/Instagram users interact with our advertisements on the two social networks and are redirected to our Website by clicking on the advertisements.
When you visit our Website, a connection to Meta’s servers is therefore established and the “Meta Pixel” is integrated into our Website. Meta may additionally store a cookie on your device. If you are logged into Facebook or Instagram, or subsequently log into Facebook or Instagram, your visit to our Website will be associated with your respective user account.
The data collected about you by means of the “Meta Pixel” is anonymous to us. It does not enable us to draw any conclusions regarding your identity. However, Meta may associate the data with your user profile. Data processing by Meta is carried out in accordance with the company’s data policy, which can be accessed for Facebook at www.facebook.com/policy.php and for Instagram at https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
The processing is carried out in order to conduct targeted online advertising for our own offers on Facebook and Instagram and to evaluate its effectiveness and reach.
The processing is based on consent pursuant to Article 6(1)(a) GDPR. We obtain this consent via the consent tool. Such consent is voluntary.
We have explained the storage periods as well as your control and configuration options regarding cookies/tracking pixels above.
You may withdraw at any time, with effect for the future, the consent you have given regarding the collection of data by the “Meta Pixel” and the use of your data for displaying Facebook/Instagram advertisements in the settings of the consent tool.
www.facebook.com/settings?tab=ads
You may also object to the collection of data by the “Meta Pixel” and the use of your data for displaying Facebook/Instagram advertisements directly to Meta at any time. For example, in the settings of your Facebook/Instagram account at https://help.meta.com/support/privacy/, you can determine which types of advertisements are displayed to you on Facebook or Instagram. This setting will apply across devices.
In addition, you can prevent collection by the Meta Pixel by deleting your “Off-Meta Activity” in your Facebook/Instagram settings and disconnecting future activity.
The integration of the “Meta Pixel” may result in personal data being transmitted to Meta. Meta also processes your personal data in the USA.
From time to time, we conduct time-limited prize draws on our profiles on social networks, in particular on Instagram (https://instagram.com/habitatfestival/). To participate in a prize draw, you must fulfil the participation requirements specified in the respective prize draw. Participation in the prize draw is voluntary. By participating in the prize draw, a prize draw agreement is concluded between you and us free of charge.
As part of conducting the prize draw, namely for the purpose of determining the winners and handing over the prizes, we process your username or profile name on the respective social network as well as, where applicable, other publicly visible profile information that you have provided there.
After the closing date for participation, we will determine the winners from the submitted entries. The winners will subsequently be notified using the direct messaging function of the respective social network. Any further communication between you and us, whether by direct message, email or another communication channel, may also contain personal data.
When handing over a prize, we will request written confirmation of collection or receipt and retain this document for documentation purposes.
Please note that the use of social networks and the associated data processing by the respective operators are subject to their terms of use and privacy policies. We have no influence over data processing carried out by social network operators. Information about data processing by Meta Platforms can be found in Instagram’s Privacy Policy at https://privacycenter.instagram.com/guide/?hl=deund and Facebook’s Privacy Policy at https://www.facebook.com/privacy/center/?locale=de_DE.
The processing is carried out for the purpose of conducting and administering a prize draw.
The processing is necessary for entering into and performing the prize draw agreement (Article 6(1)(b) GDPR). The confirmation form documenting the handover of prizes is retained on the basis of an overriding legitimate interest pursued by the controller (Article 6(1)(f) GDPR). Our interest lies in documenting the administration of the prize draw.
We will not delete comments that you leave under the prize draw post on Instagram or Facebook. All other data will be erased as soon as it is no longer necessary for achieving the purpose for which it was collected.
The personal data of participants processed in connection with the prize draw will be erased once the prize draw has ended and the prizes have been handed over.
We will retain the personal data of the winners, including documentation of the handover of the prizes won, for a period of 10 years following completion of the prize draw.
As a general rule, we will not disclose your personal data to third parties. We will not publicly announce the winners anywhere, in particular not on our Website or on our social media channels.
Please note that your comment under the prize draw post may be publicly visible depending on your privacy settings. This is beyond our control and is subject to the terms of use of the respective social network.{{#gewinnspiel_plattformen*instagram}}
The processing of your data by Instagram/Facebook or Meta Platforms Ireland Limited is carried out in accordance with the privacy policies of these social networks, which may also involve transfers to third countries, in particular the USA.
In order to protect your personal data against unauthorised access, we have equipped our Website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS stands for “Transport Layer Security” and encrypts data communications between a website and the user’s device. You can recognise active SSL or TLS encryption by the small lock symbol displayed on the far left of your browser’s address bar.
With regard to the data processing by our company described above, you have the following rights as a data subject:
You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. Where this is the case, subject to the conditions set out in Article 15 GDPR, you have the right to access such personal data and the information listed individually in Article 15 GDPR.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed individually in Article 17 GDPR applies, e.g. where your data is no longer necessary for the purposes pursued by us.
You have the right to obtain from us restriction of processing where one of the conditions listed in Article 18 GDPR applies, e.g. where you contest the accuracy of your personal data, processing will be restricted for the period necessary for us to verify the accuracy of your data.
Subject to the conditions set out in Article 20 GDPR, you have the right to request that data concerning you be provided in a structured, commonly used and machine-readable format.
Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal applies from the time at which it is exercised. In other words, it has effect for the future. Withdrawal of consent therefore does not render the processing carried out prior to the withdrawal unlawful retroactively.
If you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
Decisions that produce legal effects concerning you or similarly significantly affect you may not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.
Where we process personal data concerning you on the basis of Article 6(1)(f) GDPR (for the purposes of overriding legitimate interests), you have the right to object to such processing subject to the conditions set out in Article 21 GDPR. However, this applies only where there are grounds relating to your particular situation.
Following an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We are likewise not required to discontinue processing where it serves the establishment, exercise or defence of legal claims.
In all cases, including irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct marketing purposes.
