The legal requirements for the privacy of your Data can be found in the German Data Protection Regulations ("Datenschutzgrundverordnung," DSGVO), the German Federal Data Protection Act ("Bundesdatenschutzgesetz," BDSG), and the Telecommunications Telemedia Data Protection Act ("Telekommunikation-Telemedien-Datenschutz-Gesetz," TTDSG).
The responsible party in terms of data protection regulations is Bilker Bunker gGmbH, Aachener Straße 39, 40223 Düsseldorf, represented by Managing Director Christina von Plate.
In the following, you will find details of which personal data - all data that may identify you or make you identifiable, such as your name, address, email address, or user behavior - are collected during your visit to our site and how they are used. If you have any questions, please do not hesitate to contact us at info@bilkerbunker.de.
You also have the right to complain to a supervisory authority about the unlawful use of data. The authority responsible for our company is:
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
1. HOSTING AND SERVER DATA COLLECTION
For hosting our website, we use the service of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. When you visit our site, various server statistics are automatically stored, which your browser transmits to Hetzner's server. The name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type, and version, the user's operating system, referrer URL (the previously visited page), I.P. address, and the requesting provider are logged.
This data is used for the statistical evaluation of visits to our site and cannot be assigned to specific persons.
The legal basis for the data collection is Art. 6 para. 1 lit. f) of the German Data Protection Regulations (DSGVO). A merging of this data with other data sources is not undertaken. The I.P. address is anonymized. Our legitimate interest in collecting this data is based on the fact that we can use the data to optimize our services for users, for example, by preventing access from malicious sites or optimizing access via specific browsers, and the log of the I.P. address enables the delivery of the page to the visitor in the first place.
In principle, you have the right to object to this data collection. This is exceptionally factually not considered here because otherwise, using the site would be impossible.
The data will be deleted once they are no longer used for the purposes mentioned above.
1a. SECURITY OF DATA TRANSMISSION
We use a secure server with SSL (Secure Socket Layer) technology to transmit data with 256-bit encryption. Thus, unauthorized persons transmit your data to us securely and unreadable.
2. USE DISCLOSURE OF PERSONAL DATA
2a. General
As you have provided us with personal data, we use them to answer your inquiries, advise you, and process contracts concluded with you and for technical administration. Except in the cases explicitly mentioned in this statement, your personal data will only be disclosed or otherwise transferred to third parties if this is necessary for processing the contract, if this is necessary for billing purposes, or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future; see also section 7 on your data subject rights.
2b. Contract Processing
In the context of agreements concluded with you in the framework of bookings and rental contracts, we collect and store the personal data transmitted by you, such as name and address, for contract processing, e.g., also for invoicing.
Transmission of the data takes place in the scope of the accounting, e.g., to banks. The billing data is transferred to the tax office within the framework of tax law requirements.
The legal basis for collecting, processing, and transferring data is Art. 6 para. 1 lit. b) of the German Data Protection Regulation (DSGVO) in the context of contract processing. The legal basis for data transfer to the tax office is Art. 6 para. 1 lit. c) of the German Data Protection Regulation (DSGVO).
The data will be deleted after the applicable statutory retention obligations expire. As we are not subject to statutory retention obligations, the data will be deleted when the purpose ceases to apply.
You have the right to information and object to your data stored by us at any time; see below. Section 7 on your data subject rights.
2C. Inquiry by Email
If you send us an inquiry by email, we will collect and store the email address and the data in the email to respond to your inquiry.
Legal grounds: If a contractual relationship develops from the inquiry via initiating a contract or if the inquiry relates to an existing contractual relationship, the legal basis is Art. 6 Para. 1 lit. b) of the German Data Protection Regulation (DSGVO), as the data storage is necessary to fulfill a pre-contractual or contractual obligation. Furthermore, we also have a legitimate interest, according to Art. 6 para. 1 lit. f) of the German Data Protection Regulation (DSGVO) in processing the data to communicate with you and respond to your inquiries.
The deletion of the data occurs when the purpose of the storage has ceased to exist, i.e., after answering your email inquiry or when the matter related to the inquiry has been conclusively clarified. In the case of an existing or contractual relationship arising from the inquiry, the data will be deleted after the statutory retention periods have expired.
For the right to deletion and information, see section 7 below on your privacy policy.
3. Instagram Page
For the sake of interaction with our customers, as well as to advertise new products or services, as well as to provide general information about our company and its employees, we operate a fan page on the platform "Instagram." The service is offered on the technical platform and utilizing the services of Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA (hereinafter "Instagram").
The data controller for individuals outside the United States is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Suppose you access the page via our website using the Instagram icon and are logged into your Instagram account simultaneously. In that case, Instagram can directly assign the visits to our website to your Instagram account.
If you do not want Instagram to assign your data to your account, you must log out of Instagram before visiting our website.
When you access interactive features of the site (liking, commenting, sharing, messaging, etc.), an Instagram login screen will appear. After any login, you will again be identifiable to Instagram as a specific user. For information on how to manage or delete information that Instagram has about you, please refer to Instagram's privacy policy at https://help.instagram.com/519522125107875/?maybe_redirect_pol=0.
As the operator of our Instagram fan page, we do not collect or process any data beyond this. For more information on Instagram and other social networks and how to protect your data within the framework of the privacy settings, see, for example, youngdata.de.
The legal basis for using the Instagram fan page is Art. 6 para. 1 lit. f) of the German Data Protection Regulation (DSGVO). Our legitimate interest is based on the fact that we enable customers to have a direct exchange with our company via this social media service, also for complaints, and thus constantly optimize our service.
For your data subject rights, see section 7 below.
4. Facebook Page
For the sake of exchanging information with our customers, advertising new products or services, and general information about our company and its employees, we operate a so-called Facebook fan page. Customers and interested parties can join this by clicking the "Like" button and thus regularly receive information from our company in their news feeds on Facebook. We want to point out that you use this Facebook fan page, and its functions on your responsibility.
This applies in particular to the use of interactive functions, such as commenting, sharing, liking (see under "Things done and provided by you and others" in the Facebook data policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., I.P. addresses, operating system, browser type, language settings, cookie data; see under "Device information" in the Facebook privacy policy statement: https://www.facebook.com/policy).
For the operation of our Facebook fan page, we rely on the technical platform and services of Meta Platforms, Inc 1 Hacker Way, Menlo Park, California 94025 USA.
As explained in the Facebook Privacy Policy under "How do we use this information?", Facebook also collects and uses the information to provide analytics services, known as "Page Insights," to Page operators to provide them with insights into how people interact with their Pages and with content associated with them. As Facebook Page operators, this information is used to provide us with statistical information about Facebook Fan Page usage.
We have concluded a special agreement with Facebook ("Page Insights Information," https://www.facebook.com/legal/terms/page_controller_addendum), which regulates in particular which security measures Facebook must observe and in which Facebook has agreed to fulfill the data subject rights (i.e., users can, for example, direct information or deletion requests to Facebook). Users' rights (information, deletion, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information on Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data).
The data gathered about you in this context is processed by Meta Platforms, Inc. and may be transmitted to countries outside the European Union. Facebook generally describes what information it receives and how it is used in its data rights policy. There you can also find information on how to contact Facebook and the settings options for advertisements. The data policy is available at the following link: https://www.facebook.com/privacy/explanation.
In how Facebook uses data from visits to Facebook pages for its own needs, to what extent activities on the Facebook fan page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the Facebook fan page is passed on to third parties, is not conclusively and stated by Facebook and is not known to us.
Meta Platforms, Inc. can track that you have visited our fan page and how you have used it based on the cookies it uses and the information it collects. This also applies to all other Facebook pages and when you use the social share buttons insofar as they are integrated into our website.
Based on this data, content or advertising can be offered tailored to you.
To avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. In this way, Facebook information by which you can be directly identified will be deleted.
This will allow you to use our Facebook fan page without revealing your Facebook identification, but your I.P. address will be collected, and cookies will be set again. You can exclude the acceptance of cookies in your web browser. However, this could lead to impairments in functionality.
Suppose you access interactive functions of the site (like, comment, share, news, etc.); a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.
For information on managing or deleting your information, please see Facebook's data policy.
We are collectively responsible with Meta Platforms, Inc for the collection or receipt in the course of a transmission (but not the further processing) of "Event Data" that Facebook collects or receives in the method of a transmission through the Facebook social plugins that run on our online service for the following purposes:
- Advertising information that corresponds to the presumed interests of users, as well as the display of content;
- Delivery of commercial and transactional;
- Improving ad delivery and personalizing features and content.
We have entered into a specific agreement with Facebook ("Responsible Party Addendum," https://www.facebook.com/legal/controller_addendum), which explicitly addresses what security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook agrees to comply with data subject rights.
Note: If Facebook provides us with metrics, analytics, and reports that do not obtain details of individual users and are anonymous to us, then this processing is not carried out under shared responsibility but based on a commissioned processing agreement ("Data Processing Terms, https://www.facebook.com/legal/terms/dataprocessing), the Data Security Terms and Conditions" (https://www.facebook.com/legal/terms/data_security_terms) and, concerning processing in the USA, based on standard contractual clauses ("Facebook EU Data Transfer Addendum, https://www.facebook.com/legal/EU_data_transfer_addendum).
Further information on Facebook and other social networks and how you can protect your data within the framework of the privacy settings can be found, for example, at youngdata.de.
The legal basis for using the Facebook fan page is Art. 6 para. 1 lit. f) of the German Data Protection Act (DSGVO). Our legitimate interest is based on the fact that we enable customers to have a direct exchange with our company via this social media service, also for complaints, and thus continuously optimize our service.
The agreements with Facebook do not restrict the rights of users.
For your data subject rights, see section 7 below.
5. Anny Booking System
For booking appointments, we use the tool "anny," which is operated by anny GmbH, Cäcilienstraße 30, 50667 Cologne. The booking system is used to book and organize rental and event dates. For booking, the following data will be requested from you, stored, and forwarded to the provider surname, first name, address, email address, specific date, and, if necessary, a message.
The appointment data is stored for us on the servers of any. We have concluded an order processing agreement with Anny, which meets the requirements of Art. 28 of the German Data Protection Regulation (DSGVO). You can find more details on this in Anny's privacy policy at https://anny.co/privacy?utm_source=google&utm_medium=cpc&utm_campaign=brand_keywords&utm_id=16948344876&gclid=EAIaIQobChMIu5Gx1qiB_gIVV-h3Ch08Cg7UEAAYASAAEgJMH_D_BwE.
The legal basis is Art. 6 para. 1 p. 1 lit. a) of the German Data Protection Regulation (DSGVO) and Section 25 of the Telecommunications Telemedia Data Protection Act (TTDSG), if you have given your consent.
For your data subject rights, see section 7 below.
6. Ticket booking via www.rausgegangen.de
This site integrates widgets of Rausgegangen GmbH, Ehrenfeldgürtel 82-86, 50823 Cologne for booking tickets for events.
A web host from the USA hosts this widget, Amazon Web Services Inc (AWS), 410 Terry Avenue North, Seattle, WA 98109. Sending emails after using the ticketing widget is done using "Mailgun." "Mailgun" is a newsletter delivery platform of the U.S. provider Mailgun Technologies, Inc, 112 E Pecan St. #1135 San Antonio, TX 78205 USA.
We have concluded an order processing agreement with Rausgegangen that complies with the requirements of Art. 28 of the German Data Protection Regulation (DSGVO). For more details, please see the privacy policy of rausgegangen at https://rausgegangen.de/privacy and https://t.rausgegangen.de/privacy .
The legal basis for the use of rausgegangen is Art. 6 para. 1 lit. f) of the German Data Protection Regulation (DSGVO). Our legitimate interest is based on the fact that we would like to offer you a way to book tickets, which can only be done using the widget.
Regarding your data subject rights, see section 7 below.
7. Data subject rights
a. Right to object
Suppose we process your data to protect legitimate interests (Art. 6(1)(f) of the German Data Protection Regulation (DSGVO)). In that case, you may object to this processing on grounds relating to your particular situation. We will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing serves to assert, exercise or defend legal claims.
In the event of an objection to data processing for direct marketing, processing for this purpose will no longer take place.
b. Right to information
You have the right to request confirmation from us as to whether we are processing personal data relating to you and, if so, a right of access to the personal data and related information following Article 15 of the German Data Protection Regulation (DSGVO).
c. Right to rectification
You have the right to request that we correct or complete any inaccurate or incomplete personal data relating to you without undue delay by Art. 16 German Data Protection Regulation (DSGVO).
d. Right to deletion
You have the right to demand that we delete personal data concerning you immediately. We must delete it promptly if one of the reasons listed in Art. 17 German Data Protection Regulation (DSGVO) applies.
e. Right to restriction of processing
You have the right to demand that we restrict personal data relating to you if one of the conditions set out in Art. 18 German Data Protection Regulation (DSGVO) applies.
f. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to request that we transfer the data to another responsible party insofar as this is technically feasible.