Data Privacy Statement

Data erasure and storage period

Personal data of the data subject will be erased or locked as soon as the purpose for storing the data is no longer applicable. Data may be further stored if intended by European or International legislators in the provisions under Union Law or other regulations to which the controller is subjected. Data may also be erased or locked if and when a storage period stipulated by the aforementioned provisions expires, unless further storing of the data is required for purposes of contract conclusion or performance.

B. Data protection relevant processing operations

Gathering and use of your data while visiting our website

Description of the nature and scope of the data processing
If the website is used solely for information purposes and you do not register or otherwise transfer information, we collect only the data which your browser automatically transfers to our server. Transfer of such data may be necessary in order to show our website.

The following data is being collected:

• IInformation regarding browser type and version
• Operating system of the user
• Internet service provider of the user
• IP address of the user
• Date and time of access
• Websites through which the system of the user arrives at our internet site
• Websites which are called up by the system of the user through our website

Besides the data being automatically transferred, those will then also be stored in the log files of our systems. The data will however not be stored together with other personal data of the user.

Purpose of the data processing
Storage in log files is necessary in order to ensure the functionality of our website. Furthermore, such data serves to ensure the security of our information technology systems. Assessment of data for marketing purposes is not carried out. These purposes provide the basis for our legitimate interests in the processing of data in accordance with Article 6 (1) f) of the GDPR.

Legal basis
Temporary storage of automatically generated and for technical reasons necessary log files is lawfully carried out in accordance with Article 6 (1) f) of the GDPR. The legitimate interest is indicated with the purpose of processing.

Data processing period
Where data is stored in log files, storage will take place within 14 days the latest. Storage duration may exceed this time period. In such cases the IP address of users will be erased or alienated to the extent that a client calling up the website cannot be attributed to a specific user.

Options for objection and erasure
Gathering the data for website availability and storage in log files is imperative for running the website. Therefore the option to object cannot be granted.

E-mail communication and contact form

Nature and scope of the data processing
In cases of e-mail communication via the address indicated on our website or requests through our contact form, we gather, process and store personal data, such as first and last name, title, address, e-mail and IP address of the user as well as date and time of registration, for the purpose of performing the respective services, contacting or processing your request as well as for eventual follow-up questions.
With regards to the processing of data collected via the contact form, you will be made aware of our data protection policies and asked to give your consent prior to sending a request. Alternatively, contacting us via the provided e-mail address is an option. In such case, personal data of the user transferred with the e-mail will be stored.
In this context, such data will not be transferred to third persons. The data is exclusively used for processing the conversation.

Purpose of data processing
Processing of personal data from the entry mask of the contact form serves the sole purpose of contacting you. This purpose constitutes our legitimate interest in processing of data in cases of an e-mail communication.
All other personal data processed during the sending operation serve the purpose of avoiding misuse of the contact form and to ensure security of our information technology systems. Our legitimate interest in the processing of data is established therein.

Legal basis for the processing of data
Legal basis for the processing of data transferred with the sending operation of an e-mail constitutes Article 6 (1) f) of the GDPR. Should communication via e-mail be aimed at the conclusion of a contract, then Article 6 (1) b) of the GDPR will additionally constitute a legal basis for the processing of data.

Storage period
The data will be erased if they are no longer necessary in relation to the purposes for which they were collected. With regards to personal data collected from the entry mask of our contact form and data transferred within the sending operation of e-mails, the aforementioned condition is met if and when the respective conversation with the user is finished. Finished is a conversation at the time when it becomes clear from the circumstances that the subject matter of the communication has been settled conclusively. Personal data additionally gathered during the sending operation of e-mails will be erased after a period of seven days the latest.

Options for objection and erasure
When contacting us via e-mail, a user can at any time object to personal data being stored. In such case, the conversation cannot be continued. Any and all personal data transferred and stored during communication will consequently be erased.

Security advice
We would like to advise users of security holes that may occur during data transfer in the Internet when contacting us via e-mail or through the contact form, and that the transfer of data cannot be completely protected against access by third persons. In the context of e-mail communication, personal data is usually being transferred by your computer over an insecure connection. Information that you send unencrypted by e-mail can during transfer be read and stored by third persons, and used by those for purposes other than intended. We therefore advise you to not send us any confidential information without using an encryption program.

Registration

Nature and scope of the data processing
On our website we provide users the opportunity to register for the “Ten Years Camonsite Event” with personal data. The data is thereby entered into an input mask, transferred to us and stored. The data will not be passed on to third persons. The following data is being collected as part of the registration process:

• e-mail address, name, surname, telephone number, company name and position in that company

At the time of registration the following data will be stored in addition:

• The user's IP address (shortened by the last three syllables; e.g. 123.123.123.0)
• Date and time of registration
• The user's browser
• Operating system
• Text (e.g. „User account ID 123 (e-mail address) has been activated“)

During the registration process the user's consent to the processing of the data is obtained.

Legal basis for the processing of data
Legal basis for the processing of data given the consent of the user is Article 6 (1) a) of the GDPR.

Purpose of data processing
A registration by the user is necessary for the provision of certain content and services on our website. To register for the “Ten Years Camonsite Event” the user's identification is necessary.

Storage period
The data will be erased if they are no longer necessary in relation to the purposes for which they were collected. This is provided in case of data collected during the registration process if and when the registration on our Internet site is cancelled or modified.

Options for objection and erasure
As the user you have the option to suspend the registration at any time. You can also at any time have the stored data about you changed.

Route planner Google Maps

Nature and scope of the data processing
On our website we utilise Google Maps for the depiction of interactive maps and for route planning. Google Maps is a web mapping service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, U.S.A. („Google“). By using Google Maps, information about usage of this website, including your IP address and the (starting) address entered in the process of route planning, may be transferred to Google in the US. If you call up a website of our Internet presence that contains Google Maps your browser will automatically establish a direct connection to the Google servers. Content of a map is being directly transferred from Google to your browser by which it is then integrated into the website. We have no influence on the scope of the data gathered by Google in this manner. Such data includes, to our knowledge, the following:

• IP address,
• Internet address or URL of the website called up,
• date and time of the visit on the respective website,
• the (start)address entered in the context of route planning.

We have no influence on further processing or use of the data, in particular the duration for which Google stores the above data, and we therefore cannot assume any responsibility in this regard.

Any further information on nature and scope of data collection and processing by the plug-in provider can be obtained from the data privacy statements of the provider. You will also find therein further information on your respective rights and settings options for protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the US and therefore participates in and subjects to the EU-US-Privacy-Shield the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Purpose of the use of Google Maps
The use of Google Maps is intended to provide you with more ease by digitally indicating the location of our company and to facilitate the navigation should you wish to visit us. Through Google Maps we are able to display for you an interactive map directly on the website and to allow for a comfortable use of the map functionality.

Legal basis
We advise you of the aforementioned data being collected and processed not by us but by Google. Only by way of precaution do we base the use of Google Maps on Article 6 1) f) of the GDPR. The legitimate interest in using Google Maps is constituted by the purpose of displaying the location of the company and to provide the customer with a simple option for navigation.

Options for objection and erasure
If you do not wish to have your data be collected, processed or used by Google through our Internet presence you can deactivate JavaScript in your browser settings. In that case, you will not be able to use the map functionality. You have the right to object to user profiles being generated whereby in order to exercise this right you will have to direct your claim to Google.

Social plug-ins/embedding

Nature and scope of the data processing
We currently make use of the following social media plug-ins or tools: Facebook, Instagram. We thereby apply the so-called two-click solution. This means that in general no personal data will initially be transferred to the providers when visiting our site. You can recognise a plug-in provider by the designated box with the first letter or logo of the provider. We provide you thereby with a possibility to directly communicate with the provider of the plug-in by pressing the button. Only if and when you click the marked field and thus activate it, will the plug-in provider receive the information that you have called up the respective webpage of our inline offer. The following data will be transferred:

• IP address
• Date and time of request
• Time zone difference with Greenwich Mean Time (GMT)
• Content of the request (concrete site)
• Access status/HTTP status code
• Data volume transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

In case of Facebook, according to the statements of the respective providers, the IP address will be immediately anonymised upon collection. By activating the plug-in, personal data will therefore be transferred by your browser to the respective provider and stored there (by US-American providers in the USA). Because data collection by the plug-in provider is carried out through the use of cookies in particular, we recommend that prior to clicking the greyed out box you may delete all cookies in your browser security settings. Neither do we have influence on the data collected and the processing operations nor are the full extent of data collection, the purposes for processing or the storage periods known to us. We also do not have any information on erasure of collected data by the plug-in provider.

Purpose of data processing
The plug-in provider stores the data gathered about you in user profiles and utilises those profiles for purposes of advertisement, market research and/or the tailored design of its website to suit the needs and preferences of customers. Such assessment is carried out (also for users not logged in) particularly for the purposes of displaying needs-oriented advertisement and informing other users of the social network about your activities on our website. Through plug-ins we offer you the possibility to interact with other social networks and other users so that we can improve our offer and make it more interesting to you.

Data transfer occurs irrespective of whether or not you have an account with the plug-in provider and are logged in. If you are logged in with the plug-in provider your data collected by us will directly be attributed to your respective account with the plug-in provider. If you use the activated button and for example link the site, the plug-in provider then stores also this information in your user account and shares it publicly with your contacts. We recommend that after using a social network you regularly log out, in particular however before activating the button, because this way you can avoid data being referenced back to your profile with the plug-in provider.

Further information on purpose and scope of the data collected and their processing by the plug-in provider can be obtained from the below data privacy statements published by those providers. You will also find therein further information on your respective rights and settings options for protection of your privacy.

Addresses of the respective plug-in providers and URL with their data protection information:

a)

[Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook participates in and therefore subjects to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

b)

Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388/?helpref=hc_fnav&bc[0]=Instagram-Hilfe&bc[1]=Datenschutz%20und%20Sicherheitsbereich

Legal basis for the processing of data
Legal basis for utilising the plug-ins is Article 6 (1) f) sentence 1 of the GDPR.

Options for objection and erasure
You have the right to object to user profiles being generated whereby in order to exercise this right you will have to direct your claim to the respective provider.
We recommend that after using a social network you regularly log out, in particular however before activating the button, because this way you can avoid data being referenced to your profile with the plug-in provider.

Integration of YouTube videos

Nature and scope of the data processing
We have integrated YouTube videos into our online offer, which are saved on http://www.youtube.com and can be played back directly from our website. These are all incorporated in the "extended data protection mode", which means that no data about you is being transferred to YouTube if you do not play back the videos. Only if and when you play back videos will the data mentioned in paragraph 2 be transferred. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have called up the respective webpage of our website. Furthermore, the data mentioned in this statement will be transferred. This is carried out irrespective of whether YouTube provides a user account through which you are logged in or if no user account exists. If you are logged in with Google your data will directly be referenced to your account. If you do not wish your data to be attributed to your profile you must log out before activating the button.

YouTube stores your data in user profiles and utilises those profiles for purposes of advertisement, market research and/or the tailored design of its website. Such assessment is carried out (also for users not logged in) particularly for the purposes of producing needs-oriented advertisement and informing other users of the social network about your activities on our website.

Further information on purpose and scope of the data collected and their processing by YouTube can be obtained from the data privacy statement. You will also find therein further information on your respective rights and settings options for protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the US and therefore participates in and subjects to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework

Purpose of employing YouTube
We would like to provide you with impressions that well represent our house and the events therein in order for you to be able to get an idea of the local amenities as well as event themes and formats. We ourselves do not receive any personal data from you with the playback of videos. Data is being collected and processed solely by YouTube.

Legal basis
We advise of the above data being collected and processed not by us but by YouTube. Only by way of precaution do we base the utilisation of the videos on Article 6 1) f) of the GDPR. The legitimate interest in employing videos for playback is constituted by the purpose of providing the customer with an easy way to get an impression of our house and the event formats.

Storage period
The duration for which data is being stored is determined by the provisions of YouTube.

Options for objection and erasure
If you wish no data processing to be carried out by YouTube, you are entitled to the right for objection whereby in order to exercise this right you will have to direct your claim to. In this regard we refer you to the above links for contact information.

Use of cookies

Nature and scope of the data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser and by the Internet browser onto the computer system of the user respectively. If a user calls up a website a cookie can be stored in the operating system of the user. This cookie contains a distinctive character string, which allows an identification of the browser when the website is called up again.

We use cookies for a more user-friendly design of our website. Several elements on our Internet site require that the calling browser can still be identified after switching sites.
No security relevant or personal data will be stored.

As well, we use session cookies. Session cookies are small information units that a provider stores in the active memory of the visiting user's computer. In a session cookie a randomly produced, unique identification number is saved, a so called session ID. Furthermore, it also contains details of its origin and life span. These cookies cannot save any other data.

Purpose of processing
For technical reasons necessary cookies are used for the purpose of facilitating the utilisation of websites for the user. Several of the functionalities of our Internet site could not be offered without the use of cookies. In this regard, it is necessary that the browser can be identified also after a switch of sites. This constitutes our legitimate interest in the processing of data.

We need cookies for:

• Login information
• Contact forms

The user data collected through technically necessary cookies will not be used for user profiling.

We utilise analysis cookies for the purpose of improving the quality of our website and their contents. With the help of analysis cookies we can learn how the website is being used and thus continuously optimise our offers.

Legal basis for processing
Legal basis for the processing of data through usage of cookies is, given the consent of the user, constituted by Article 6 (1) f) of the GDPR.

Legal basis for the processing of data through use of cookies for analytical purposes is, given the consent of the user, constituted by Article 6 (1) a) of the GDPR.

Storage period, options for objection and erasure
Cookies are stored on the computer of the user and transferred to our website by this computer. Therefore, as a user you have full control over the usage of cookies. In your browser settings you can deactivate or limit the transfer of cookies. Stored cookies can be deleted at any time. This can also be set up to occur automatically. Should cookies for our website get deactivated some features and functions of the website may no longer be usable to the full extent.

Session cookies are automatically deleted when terminating the session, i.e. after closing the browser window.

Transfer of data to third persons

To some extent we utilise external service providers for the processing of your data. These providers have been carefully selected and authorised, are subjected to our instructions and regularly being inspected. This can involve technical service providers, providers supporting us with distribution or third parties in data processing (so-called data processors, data processing on behalf of the controller). Insofar as we utilise such services, data processors will be contractually obligated, by adhering to our data protection provisions and following our directive, to handle you personal data with due care and to neither use the data for their own purposes nor to distribute them to third persons.

We otherwise only transfer your data to third parties if we are legally obligated to such action. In certain cases legal specifications may require us to transfer your personal data to third persons, for example in case of a criminal offence or the abuse of this website. We are then obligated to transfer your personal data to the responsible law enforcement authorities. By order of the responsible authorities we are allowed on individual basis to disclose this data insofar as it is required for the purposes of criminal prosecution, averting of danger, the fulfilment of legal tasks of the constitution protection agencies or the military counter-intelligence service or for the enforcement of intellectual property rights

Storage period
Your personal data is only stored as long as required for the necessary purpose. The data will be erased if they are no longer necessary in relation to the purposes for which they were collected.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your work place or place of the alleged infringement if you consider that the processing of personal data concerning your person infringes the GDPR.
The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

D. Data protection in cases of hyperlinks to third-party websites

In cases where you find hyperlinks on our website that route you to websites of other providers (for example noticeable by the change of URL), we assume no responsibility for confidential handling of your data, because we do not have any influence on these companies adhering to the data protection provisions. With regards to the handling of your personal data by these companies please be advised to inform yourself directly on their websites.