DATA PROTECTION

This data protection declaration describes how UP Event Creation UG, Straßburger Strasse. 31, 10405, Berlin (“UP Event Creation”, “we” or “us”) as the person responsible within the meaning of the EU General Data Protection Regulation (“GDPR”), the Federal Data Protection Act (“BDSG”) and other data protection regulations (“applicable data protection laws “) Processed personal data and other information from users (” user “or” you “) of our website www.upeventcreation.de (” website “).

1. CATEGORIES OF PERSONAL DATA, PROCESSING PURPOSES, LEGAL BASIS AND SOURCE

The use of the website and its functions regularly requires the following processing of certain personal data:

1.1 Informational use of the website

If you access our website and use it purely for information purposes (i.e. without using additional functions such as the contact form), the website can automatically collect, process and save certain personal data in a pseudonymised manner. This is device and usage information that (i) specific information about the device used to access the website (including model, operating system, IP address, language and similar information) and (ii) information about the use of Features, functions or notifications on the device can be included to recognize you and analyze trends.

The legal basis for this are our legitimate interests (Art. 6 Para. 1 lit. f) GDPR), to monitor and maintain the performance of the website and to analyze uses, activities and trends in connection with our website.

1.2 Google Maps

On our website we use functions of the map service Google Maps provided by Google. When you visit our website, your browser loads the necessary code from Google and establishes a connection to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. At the same time, Google can place cookies on your device if you have not prohibited the use of cookies in your browser settings, or read cookies. Location data can also be collected if you allow this in your browser settings.

The use of Google Maps is based on our legitimate interests (Art. 6 Para. 1 lit. f) GDPR), which consists in a comfortable design of our website for the user, in particular the location of the places we have indicated on the website

to facilitate. We will collect your IP address to enable transmission to Google.

You are not obliged to provide this personal data, however, it is not possible to use the relevant functions of our website without the provision.

Further information can be found in Google’s data protection declaration, which can be found at https: www.google.com/policies/privacy/.

1.3 Contact Form

If you use the contact form on our website or contact us by email or otherwise, e.g. B. to request information about our (event) locations, the mandatory information requested in the contact form (name, email address, telephone number, customer name / name of the agency, period of the (desired) booking, type of event, number of people) and The personal data you voluntarily provided there is stored by us and processed for the purpose of processing the request and in the event of follow-up questions.

We process this data for the purpose of processing and answering your request and any follow-up questions, to prevent misuse of the contact form and to ensure the security of our information technology systems. We base this data processing on our legitimate interests (Art. 6 Para. 1 lit.f) GDPR). These consist of processing your request and protecting our information technology systems.

2. RECIPIENT OF THE DATA

2.1 External service providers

Up Event Creation can commission external service providers, who act as our processors, to provide certain services for us, such as Email, website, marketing or other IT service providers. When these services are provided, the external service providers can have access to or process your personal data.

External service providers used are obliged to take appropriate technical and organizational security measures to protect the processed personal data and to process the personal data only in accordance with the order due to the contracts they have concluded with order processing.

2.2 Recipients within the corporate group

Some of the people who manage the website and provide IT services may be employees of companies in our group of companies. When managing the website, these employees can have access to and / or process your personal data. The respective transmission of your personal data is based on our legitimate interests (Art. 6 Para. 1 lit.f) GDPR). These consist of internal management and support within the group. Access is restricted to those employees who need the respective data to perform their tasks.

2.3 Other recipients

Up Event Creation may also share your personal information with law enforcement and government agencies, legal advisors, and other external advisors in accordance with applicable data protection law. The legal basis for this processing is compliance with legal obligations (Article 6 (1) (c) GDPR) to which UP Event Creation is subject or our legitimate interests (Article 6 (1) (f) GDPR), such as the exercise or defense against legal claims.

3.  DATA TRANSFER IN THIRD COUNTRIES

Your personal data that we process can be transmitted and processed to recipients in third countries outside the European Union (EU) / the European Economic Area (EEA) who do not guarantee an adequate level of data protection, such as the USA. Recipients in the United States may be eligible for EU-U.S. Privacy Shield certification and thus guarantee an appropriate level of data protection from the perspective of EU data protection law. For example, data transfers to Google are based on the EU-U.S. Privacy Shield.

Insofar as we transfer your personal data to countries that do not offer an adequate level of data protection from the perspective of EU data protection law, we rely on suitable guarantees, such as the standard contractual clauses adopted by the European Commission. You can request a copy of the appropriate warranties by contacting us using the contact details in Section 6. Access is restricted to recipients who need the relevant data to perform their tasks.

4. YOUR RIGHTS AS A PARTICIPANT AND HOW YOU MAKE THEM APPLY

If you have given your consent to the processing of your personal data, you can revoke it at any time with future effect. Such a withdrawal has no influence on the lawfulness of the processing before the withdrawal of the consent. If you file an objection, we will no longer process your personal data, unless another (legal) basis allows this. However, if there is a revocation and there is no other permission, we must delete the personal data immediately (Art. 17 Para. 2 lit. b) GDPR).

According to applicable data protection law, you as the data subject have the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to deletion (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). The right to information and the right to erasure may be limited under certain circumstances in accordance with applicable national data protection law (Sections 34, 35 BDSG). You are also entitled to file a complaint with a data protection authority (Art. 77 GDPR).

In certain circumstances, you have the right to object, at any time, to the processing of your personal data based on our legitimate interests (Art. 6 (1) (f) GDPR) for reasons that arise from your particular situation file (Art. 21 Para. 1 GDPR). In addition, if your personal data is processed for direct advertising, you have the right to object to the processing of your personal data for these purposes at any time, including the creation of profiles, insofar as this is in connection with such direct advertising (Art. 21 para 1 GDPR). In this case, we will no longer process your personal data for these purposes.

To exercise your rights, please contact us by contacting us using the contact details listed in section 6.

5.DURATION OF YOUR PERSONAL DATA

Your personal data will be kept for as long as is necessary for the purposes of the data processing described in section 1 above. If UP Event Creation no longer processes your personal data for the purposes described, we will delete them from our systems and records or make them completely anonymous so that they can no longer be identified. A deletion or complete anonymization does not take place if and as long as we have to keep your data in order to fulfill legal or official obligations, e.g. statutory retention requirements, which include from the Commercial Code (HGB) or the Tax Code (AO), in which retention periods of 6 to 10 years are provided, or if we need the data to preserve evidence within the limitation period, which is usually 3 years, but in individual cases up to can be up to 30 years.

6. CONTACT

If you have any questions about this data protection declaration or the processing of your personal data, please contact us at:

 

UP Event Creation UG

Straßburger Strasse 31, 10405 Berlin

phone: +49 15253744760