Privacy policy
as of 2018-05-22
§ 1 General
Protecting your personal data (hereinafter: "data") is particularly important to us. Therefore, we hereby wish to inform you in detail which of your data are collected when you visit our websites and use our software "BookMeTender" (hereinafter: "BMT" or "we"), and how we subsequently process or use them.
In accordance with Art. 4 Nr. 7 General Data Protection Regulation (GDPR),
Christian Schmidt
Kavalierstr. 21
13187 Berlin, Germany
Tel.: +49 159 06054558
E-Mail: info [at] bookmetender [dot] com
(hereinafter: "CS") is the "controller", or responsible body. Please refer to our imprint for further details. Questions or comments pertaining to this privacy policy or to data protection in general can be addressed to: info [at] bookmetender [dot] com.
By using our BMT, and by approving the validity of this privacy policy during the registration procedure, you declare that you agree with your data being collected, used and processed as described below.
§ 2 Processing of your data
(1) Which data are collected, and how they are collected and used, depends on whether you are visit our BMT to gather information or whether you wish to engage in any of the services offered.
(2) Use of our BMT for purely informational purposes generally does not require you to provide any personal data. In such cases, we collect and use only such data as are transmitted to us by your internet browser, the application or the terminal device, for instance:
- Date and time at which our BMT was used
- Duration of stay
- Browser type
- Browser settings
- Operating system
- Localisation data
- Terminal device attributes
- Last page visited
- Amount of data transferred and the access status (file transferred, file not found etc.) as well as
- Your IP-address
The legal basis is Art. 6 para. 1 lit. f GDPR - our legitimate interest in displaying our websites on your request.
(3) If you contact us via e-mail, telephone or our contact form, we process your submitted data (e.g. e-mail-address, name, phone number or content of the request) to answer your question or process your request.
The legal basis is our contractual relationship (Art. 6 para. 1 lit. b GDPR).
(4) In order to process and complete your registration within our BMT, we collect and process your name, your e-mail address, location and name of the club/ festival and your message. For the purpose stated above, your data may need to be passed on to companies that provide us with services to help us run our business, in particular technical service providers. We have of course chosen these companies very carefully and diligently.
The legal basis is our contractual relationship (Art. 6 para. 1 lit. b GDPR).
(5) When we create a user account for you, we process your name and your e-mail address, as provided by you with your registration. We use these data to handle use of our BMT, to improve our BMT and to contact you, e. g. when there are delays or problems with our BMT.
The legal basis is our contractual relationship (Art. 6 para. 1 lit. b GDPR).
(6) We only gain knowledge of the data that you enter into our databases upon your explicit prior approval. In line with the state of technology, they are transmitted in encrypted form and stored redundantly on a regular basis so as to be able to reconstruct them should they be lost.
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
(7) Should you have given your consent to receive our promotions (newsletter, mobile messages, etc.), we shall inform you of our offers via e-mail, mobile messages, via mail or via telephone, using your respective data. Should you have agreed to being approached in a promotional manner by third parties, we surrender the necessary data to these third parties in order to enable them to inform you of their offers. You can retract your approval of being approached in a promotional manner at any time.
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
(8) Depending on the type of terminal device and the settings, our web application accesses certain functions of your terminal device. Depending on the terminal device being used, the settings can be changed either entirely or partially, and can be revoked ex post.
The legal basis is Art. 6 para. 1 lit. f GDPR - our legitimate interest in displaying our websites on your request.
(9) We reserve the right to use your data in order to contact you should our BMT undergo or have undergone important changes or developments.
The legal basis is our contractual relationship (Art. 6 para. 1 lit. b GDPR).
(10) Should CS enter into a joint venture and BMT be bought or sold, or merged with another company, we are allowed to disclose and transfer your data to our new business partner or (co-)owner.
§ 3 Integration of services and content of third parties
(1) In some cases, third party content might be integrated into our web service, for example YouTube videos, maps from Google Maps, RSS feeds or graphical material from other websites. It is a prerequisite that the providers of these contents (hereinafter: third party providers) receive your IP-address. Without it, the third party providers would not be able to send their content to your browser. The IP-address is therefore needed in order to view this content. We endeavor to only use such content the respective providers of which only use your IP-address for the delivery of content. However, we cannot rule out that third party providers save your IP-address, for instance for statistical purposes. We shall inform you to this end should it come to our attention.
(2) Cookies are small files that allow information that is specific and that relates to your access device (PC, smartphone f. ex.) to be stored on said access device. On the one hand, cookies serve to improve the user-friendliness of websites (f. ex. saving login data) and thus benefit the user. On the other hand, cookies are needed in order to record statistical data pertaining to website usage, and to analyse those data with a view to improving our BMT. Some of the cookies we use are deleted once you have ended your browser session, i. e. when you shut your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (so-called persistent cookies). You can influence the use of cookies. Most browsers provide the option to limit or completely prevent the storage of cookies. However, we point out that, without cookies, both the use of our web service and its degree of user convenience may be restricted.
(3) The legal basis is Art. 6 para. 1 lit. f GDPR - our legitimate interest in displaying and improving our websites.
§ 4 Google Analytics
(1) For our web site www.bookmetender.com we use Google Analytics, a web analytics service provided by Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For our web application club.bookmetender.com we do not use Google Analytics. Google Analytics uses cookies. The information generated by the cookie regarding your use of our web site is usually transmitted to and stored on a Google server in the USA.
(2) Should IP-anonymization be activated in our web site, Google shortens your IP-address within member states of the European Union and other parties to the Agreement on the European Economic Area. In exceptional cases, the full IP-address is transmitted to a Google server in the USA and shortened there. IP-anonymization is activated on our web site. Upon our request, Google shall use this information to analyze the use of our web site, to compile activity reports and to provide us with other services related to the use of our web site and the internet.
(3) The IP-address that your browser passes on to Google Analytics is not combined with any other Google data. You can prevent the storage of cookies by changing the appropriate settings in your browser software (see No. 2.2). Moreover, you can prevent Google from capturing and subsequently processing the web site usage data (including your IP-address) generated by the cookie by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
(4) The legal basis is Art. 6 para. 1 lit. f GDPR - our legitimate interest in displaying and improving our websites.
§ 5 Your rights
(1) You have got the following rights with regard to your personal data:
- Right of access by the data subject (Art. 15 GDPR),
- Right to rectification and erasure (Art. 16 and 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object (Art. 21 GDPR),
- Right to data portability (Art. 20 GDPR).
(2) Furthermore, you have got the right to complain at the Data Security Supervisory Authority about the processing of your data by us.
(3) We would like to point out that any consent you have given pertaining to data protection can be revoked at any time, effective immediately. The same applies when you have given consent to be approached in a promotional manner. To do so, please contact us informally via e-mail at: info [at] bookmetender [dot] com. Such revocation can result in our BMT no longer being available at all, or only with restrictions.
(4) If the data processing is based on a balancing of interests (Art. 6 para. 1 lit. f GDPR), you are entitled to object. If you object we request your reasons and arguments which stand against the processing. If your objection is legitimate, we end that processing or amend the process or comment why the processing is compulsory.
§ 6 Data erasure
(1) We delete the stored data, if the intended purpose ended and the erasure won’t violate mandatory retention requirements. If we won’t erase the data on legal reasons, we restrict the processing. E.g. the data will be locked and not used for other purposes.
(2) in line with the legal requirements the storage lasts six (6) years in accordance with § 257 para. 1 German Commercial Code ["HGB"] (book of account, inventory, opening balance, annual accounts, commercial letters, accounting vouchers, etc.) and ten (10) years in accordance with § 147 para. 1 tax code ["AO"] (books, reports, accounting vouchers, commercial letters, tax documents, etc.).
§ 7 Final provisions
(1) We employ technical and organizational security measures to protect the data we have gathered, especially against accidental or deliberate manipulation, loss, destruction or attack by unauthorized persons. Our security measures are subject to continuous improvement in line with technological advances and development.
(2) Given the constant technical advances in our BMT, we shall update our privacy policy from time to time. Where the changes to our privacy policy do not affect the use of the data we already have, the updated privacy policy shall take effect as of the date of its publication on our website. Changes to our privacy policy that affect our use of data that have already been collected and stored are only permissible if they are reasonable and can be reasonably expected of you. In such cases, you will be informed in due time via e-mail, on our websites, in our BMT or via other means. You have the right to object to the new privacy policy within (4) weeks of being notified of its coming-into-force. Should you object to the new policy, we reserve the right to terminate the contractual relationship and to delete your user account. You are assumed to agree with the new policy should you not state otherwise within the given time frame. When notifying you of the new privacy policy, we shall inform you of your right to object and of the relevance of the objection deadline.
