Including the Social Media and Analytic Tools
1) Name and Contact Data of the Processing Controller and of the Works Data Protection Officer
This data protection information applies to the data processing by
Controller: CRP KONZERTAGENTUR GMBH (im Folgenden: CRP), Büro Hamburg, Große Elbstr. 277a, D-22767 Hamburg
Tel.: +49 40 853 88-888
Fax: +49 40 853 88-999
The works data protection officer for FKP Scorpio Konzertproduktionen GmbH is Rechtsanwalt Martin Glänzer and can be reached at the address Eppendorfer Landstr. 33, D-20249 Hamburg or else under email@example.com.
2) Collection and Storage of Personal Data and the Nature and Purpose of its Use
a) During a Visit to the Website
On calling up our website www.chiemsee-summer.de information is automatically sent to the server of our website by the browser used by your terminal device. This information is temporarily stored in a so-called log file. The following information is thereby recorded without your involvement and is stored until its deletion:
- the IP address of the visiting computer
- the date and time of access
- the name and URL of the file called up
- the website from which the access took place (referrer URL)
- the browser used and, sometimes, the operating system of your computer and the name of your access provider.
The data mentioned is processed by us for the following purposes:
- to ensure comfortable use of our website
- for evaluation of the system's security and stability
- for further administrative purposes.
The legal basis for the data processing is provided by article 6, paragraph 1, sentence 1, letters a and b of the General Data Protection Regulation (GDPR). Our legitimate interest arises from the above-listed purposes for data collection. On no account do we use the data collected for purposes of drawing inferences to your person.
In addition to this, during visits to our website we employ cookies and analytic services. More detailed explanations on this can be found under points 4 and 5 of this data-protection statement.
b) On Registering for our Newsletter
If, in keeping with article 6, paragraph 1, sentence 1, letter a. of GDPR you have explicitly consented to this, we will make use of your e-mail address for purposes of regularly sending you our newsletter. For receipt of the newsletter disclosure of an e-mail address is sufficient.
Cancellation is possible at any time, e.g. via a link at the end of each newsletter. Alternatively, you can send your cancellation by e-mail to firstname.lastname@example.org at any time.
We use CleverReach to send our newsletters. This is a company that actually sends the newsletters. The complete name of this company is : CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.
You can find the CleverReach terms of data protection under: https://www.cleverreach.com/en/privacy-policy/
c) On Using Our Contact Form
With enquiries of whatever sort we offer you the possibility of contacting us via a form provided on the website. Here the disclosure of a valid e-mail address is necessary, so that we know where the enquiry came from and are able to send a reply. Further disclosures can be made voluntarily.
The data processing for purposes of establishing contact with us is undertaken in keeping with article 6, paragraph 1, sentence 1, letter a of GDPR on the basis of your willingly given consent.
The personal or person-specific data collected by us for use of the contact form is deleted after conclusion of the enquiry made by you.
3) Passing On of Data
No transfer of your personal data to a third party for purposes other than those listed below takes place.
We only give your personal data to a third party if you have consented to this, in keeping with article 6, paragraph 1, sentence 1, letter a and/or letter b of GDPR, for fulfilment of contractual relationships and/or if this is for necessary implementation of pre-contractual measures and there are no reasons to believe that you might have a predominant legitimate interest in the non-transfer of your data,
a statutory obligation exists for the transfer, in keeping with article 6, paragraph 1, sentence 1, letter c of GDPR, and
this is legally permissible, and in keeping with article 6, paragraph 1, sentence 1, letter b of GDPR, is necessary for the processing of contractual relationships with you.
The associated data processing is described in detail in this section. As indicated in the cookie banner, you agree to this use by clicking the "I accept" button on the cookie banner. This consent can be revoked on your part at any time with effect for the future either in whole or in part. The options available to you for this purpose are described in detail below.
What are Cookies?
The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "Session cookies". These are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude their acceptance in certain cases or in general and activate the automatic deletion of cookies when closing the browser. The functionality of this website may be limited if cookies are deactivated.
Cookies that are required for performing the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of their services. In regards to the storage of other cookies (e.g. cookies for analysing your surfing behaviour), these are treated separately in this data protection declaration.
Adaptation of your cookie settings
Using the following link, you can easily view your cookie settings and change them where necessary. Alternatively, you can also change the cookie settings in your browser:
Most browsers are set in such a way that cookies are automatically accepted. The storage of cookies in your browser can be deactivated and you can delete them from your hard disk at any time. Without cookies the use of our offer on the website is only possible to a limited extent.
We divide cookies into different categories, depending on their function and purpose:
Essential cookies enable basic functions and are necessary for the proper functioning of the website.
Statistics cookies collect information anonymously. This information helps us understand how our visitors use our website.
Personalisation & Advertising
Marketing cookies are used by third-party vendors or publishers to display personalised advertisements. This is achieved by tracking visitors across websites.
External Media & Services
Content from video platforms and social media platforms is default blocked. If cookies are accepted by the respective external media, manual consent to access this content is no longer required.
a) Tracking Tools
The tracking measures listed below and deployed by us are implemented on the basis of article 6, paragraph 1, sentence 1, letter b of GDPR. With the tracking measures used we want to ensure a needs-oriented design and the progressive optimization of our website. We also employ tracking measures to statistically record and evaluate the use made of our website, and for purposes of optimizing of our offer for you. These interests are to be seen as legitimate in the sense of the above-mentioned regulation.
Explanations of the respective purposes of the data processing, as well as data categories, can be found in the corresponding tracking tools.
b) Google Analytics
For purposes of a needs-oriented design and continuous optimization of our pages we use Google Analytics, a web-analysis service of Google Inc. (https://www.google.de/intl/de/about) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this connection, pseudonymized user profiles are created and cookies (see under point 4) are used. The information created by the cookie on your use of this website, such as
- browser type/version
- operating system used
- referrer URL (the site previously visited)
- host name of the accessing computer (IP address)
- time of server enquiry
You can prevent the installation of the cookies by adjusting the browser-software settings appropriately. In this case, however, we draw your attention to the fact that not all of the functions of this website may then be fully available.
You can also prevent the recording of the data generated by the cookie and relating to your use of the website (incl. your IP address) and the processing of this data by Google in that you download and install the browser add-on (https://tools.google.com/dlpage/gaoptot?hl=de).
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
As an alternative to the browser add-on, particularly in cases of browsers on mobile terminal devices, you can also prevent recording by Google Analytics in your settings. This sets an opt-out cookie that prevents future recording of your data during your visit to this website: The opt-out cookie applies only in this browser and only for our website. It is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
You can find further information on data protection in connection with Google Analytics in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
c) Google Adwords Conversion Tracking and Remarketing
In order to statistically assess the use made of our website and for purposes of optimizing its evaluation of your data, we also make use of Google Conversion Tracking. In this connection, a cookie (see point 4) is placed on your computer by Google Adwords, provided you reached our website via a Google advertisement.
These cookies lose their validity after 30 days and do not serve the purpose of personal identification. If the user visits certain pages of the website of the Adwords customer and the cookie has still not expired, Google and the customer can see that the user clicked the advertisement and was forwarded to this page.
Each Adwords customer receives a different cookie. Cookies cannot thereby be subsequently tracked over the web pages of Adwords customers. The information collected by conversion cookies serves in the creation of conversion statistics for Adwords customers that have opted for conversion tracking. The Adwords customers are told the total number of users who have clicked their advertisement and have been forwarded to a page containing a Conversion Tracking tag. No information is contained, however, which allows users to be personally identified.
If you do not want to participate in the tracking procedure, you can also refuse the placement of the cookie necessary for this procedure – by changing the browser settings, for example, to generally deactivate the automatic employment of cookies. You can also deactivate cookies for conversion tracking in that you change the settings of your browser so that cookies from the domain www.googleadservices.com are blocked. You can find Google's data-protection information on conversion tracking here (https://services.google.com/sitestats/de.html).
For further details on data processing by Google Adwords we refer you to the corresponding data-protection statements:
Google Adwords: https://policies.google.com/privacy?hl=en&gl=uk
In connection with the use of Google Adwords, your personal data is transferred to the USA. In the case of the USA, the EU Commission has not decided that an appropriate or adequate level of protection of personal data in the sense of GDPR exists; such an adequacy decision (article 45 of GDPR) does not exist.
We make use of Google Adwords for our website. Google AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In this connection we make use of the remarketing function. This allows us, with the help of cookies, to present advertisements to the users of our website that appeal to their interests. To this end the interaction of the user with our website is analyzed, e.g. to determine which offers interested him or her, which allows us to also show the user, after the end of the visit to our website, target-oriented advertising on other pages. The cookies deployed serve to clearly identify a web browser on a specific computer and not to identify a person; personal data is not stored. You can deactivate the cookies used by Google by following the subsequent link and downloading and installing the plug-in available there: https://www.google.com/settings/ads/plugin.
You can find more detailed information on Google remarketing, as well as Google’s data-protection statement, under: http://www.google.com/privacy/ads/.
We furthermore make use of the Google AdWords service in the context of so-called conversion tracking. When you click an advertisement inserted by Google, a cookie for conversion tracking is placed on your terminal device. These cookies lose their validity after 30 days, do not hold any personal data, and therefore do not serve the purpose of personal identification. The information collected by conversion cookies serves in the creation of conversion statistics for Adwords customers that have opted for conversion tracking.
You can prevent the storage of the cookies by adjusting your browser-software settings appropriately. In this case, however, we draw your attention to the fact that you may not then be fully able to use all of the functions of this website. Moreover, in your browser you can deactivate interest-related advertisements on Google, as well as interest-related Google advertisements in the web (within the Google display network), in that you activate, under http://www.google.de/settings/ads, the icon Off "Aus", or in that you deactivate under http://www.aboutads.info/choices/. Further information on your setting options, in this connection, and on data protection at Google can be found under https://www.google.de/intl/de/policies/privacy/?fg=1.
d) Facebook Pixel
When you visit our web pages, we observe and document your user behaviour so that, on the basis of this data, we can make individual recommendations for you on our web pages. To this end we process the following personal data:
- IP address
- UU ID
- WEB ID
- device fingerprints
- browser fingerprints
- cookies (add reference to cookies)
- Geo IP location
For the processing we make use of Facebook Pixel. Here we make use of the standard functions only. For further details on data processing by Facebook Pixel we refer you to the corresponding data-protection statements:
Facebook Pixel: https://www.facebook.com/privacy/explanation
In connection with the use of Facebook Pixel, transfer of your personal data to the USA takes place. In the case of the USA, the EU Commission has not decided that an appropriate or adequate level of protection of personal data in the sense of GDPR exists; such an adequacy decision (Art. 45 GDPR) does not exist.
e) Facebook Custom Audiences
(1) The website also uses the remarketing function "Custom Audiences" from Facebook Inc. ("Facebook"). With this, in the context of a visit to the social network Facebook or to other websites also using this procedure, users of the website can be shown interest-related advertisements ("Facebook ads"). We thereby pursue the intention of showing you advertising that is interesting to you, thereby also making our website more interesting for you.
(2) Due to the marketing tools deployed, your browser automatically makes a direct connection to the Facebook server. We have no influence on the extent and the further utilization of the data collected by Facebook through the use of this tool and can therefore only inform you about what we do know. Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up on the corresponding web pages of our Internet presentation, or learns that you have clicked an advertisement shown by us. If you are registered by the Facebook service, Facebook can assign the visit to your account. Even if you are not registered by Facebook, or have not logged on, there is the possibility that the provider can discover and store your IP address and further identifying characteristics.
(3) Deactivation of the function "Facebook Custom Audiences" is possible here and for logged-on users under https://www.facebook.com/settings/?tab=ads#_
The legal basis for the processing of your data is article 6, paragraph 1, sentence 1, letter f of GDPR. You can find further information on data processing by Facebook under https://www.facebook.com/about/privacy
f) Facebook Fan Page
We also use a Facebook platform for our fan page. For this purpose, Facebook uses the devices of those who use our fan page cookies and collects information about how our fan page is used. These Facebook cookies each have a unique cookie ID. Due to this method of data processing, we (and Facebook) may receive anonymous statistical data about how you use this Facebook fan page. If you have any questions, please feel free to contact us or our data protection supervisor.
6) Social Media Plug-Ins
On our website we make use, on the basis of article 6, paragraph 1, sentence 1, letter b of GDPR, of social plug-ins from the social networks Facebook, Twitter and Instagram, as a means of making our business better known. The underlying advertising purpose is to be seen as a legitimate interest in the sense of GDPR. The responsibility for operation in conformity with data protection belongs to their respective providers. The integration of these plug-ins by us is undertaken by way of the so-called two-click method, as a means of protecting visitors to our website as far as possible.
Social media plug-ins from Facebook are used on our website, as a means of making their use more personal. For this we use "LIKE" or "SHARE" buttons. This is an OFFER FROM Facebook:
If you call up a page of our web appearance that contains such a plug-in, your browser links directly to the servers of Facebook. The content of the plug-in is transmitted directly from Facebook to your browser and is integrated by this in the website.
Due to the integration of the plug-ins Facebook receives the information that your browser has called up the corresponding page in our web presentation, even if you have no Facebook account or are not logged-in to Facebook at the time. This information (including your IP address) is transferred by your browser directly to a Facebook server in the USA and is stored there.
If you are logged-in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plug-in, for example if you click the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and is stored there. The information is also published on Facebook and is shown to your Facebook friends.
Facebook can use this information for purposes of advertising, market research and needs-oriented design of the Facebook pages. To this end usage, interest and relationship profiles are created by Facebook, e.g. as a means of evaluating your use of our website in terms of the advertisements slotted in for you by Facebook, to inform other Facebook users about your activities on our website and to provide further services associated with the use of Facebook.
If you don't want Facebook to assign the data gathered on you, via our web presentation, to your Facebook account, you must leave Facebook by logging off, before your visit to our website.
For more on the purpose and extent of the data acquisition, and further processing and utilization of the data by Facebook, and your rights in this connection, and the setting options for protection of your private sphere, please refer to the data-protection information provided by Facebook (https://www.facebook.com/about/privacy/).
Our Internet pages integrate plug-ins of the short-message network of Twitter Inc. (Twitter). You can recognize the Twitter plug-ins (tweet button) by the Twitter logo on our page. An overview of the tweet buttons can be found here (https://about.twitter.com/resources/buttons).
If you call up a page on our website that contains such a plug-in, a direct link between your browser and the Twitter server is made. Twitter is thereby informed that you, with your IP address, have visited our pages. If you click Twitter's "tweet button" while you are logged on to your Twitter account, you can link the contents of our pages to your Twitter profile. Twitter can thereby assign the visit to our pages to your user account. We draw attention in this connection to the fact that we, as the provider of the pages, receive no information as to the content of the data transferred or as to the use made of it by Twitter.
If you do not want Twitter to be able to assign the visit to our pages, please log off your Twitter user account.
Further information relating to this topic can be found in the data-protection statement made by Twitter (http://twitter.com/privacy).
On our website the social media plug-in from Instagram is also used, this being operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera".
If you call up a page on our website that contains such a plug-in, your browser creates a direct link to the servers of Instagram. The content of the plug-in is transmitted directly from Instagram to your browser and is integrated in the page. Due to this integration Instagram receives the information that your browser has called up the corresponding page in our web presentation, even if you have no Instagram profile or are not logged-on to Instagram at the time.
This information (including your IP address) is transferred by your browser directly to an Instagram server in the USA and is stored there. If you are logged-on to Instagram, Instagram can assign the visit to our website directly to your Instagram account. If you interact with the plug-in, for example if you click the "Instagram" button, this information is also transmitted directly to an Instagram server and is stored there.
The information is also published in your Instagram account and is shown there to your contacts.
If you don't want Instagram to assign the data gathered on you via our web presentation directly to your Instagram account, you must leave Instagram by logging-off before your visit to our website.
You can find further information on this in the Instagram data-protection statement (https://help.instagram.com/155833707900388).
aa) We have integrated YouTube videos in our online offer, these being stored on http://www.YouTube.com and directly playable from our website. They are all integrated in "extended data-protection mode", i.e. no data on you as the user is transferred to YouTube, if you do not play the videos. Only if you play the videos is the data itemized in paragraph 2 transferred. We have no influence on this data transfer.
bb) From the visit to the website YouTube receives the information that you have called-up the corresponding sub-page of our website. Furthermore, the data itemized under point 2 a of this statement is transferred. This occurs regardless of whether YouTube makes a user account available, via which you are logged on, or whether no user account exists. If you have logged on with Google, your data will be directly assigned to your account. If you do not want the assignment to your profile with YouTube, you must log off before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or needs-oriented design of its websites. Such evaluation is undertaken (even for non-logged-on users) particularly for provision of requirement-specific advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, although you must contact YouTube in order to exercise this right.
cc) You can obtain further information on the purpose and extent of the data acquisition and its processing by YouTube in the data-protection statement. There you can also obtain further information on your rights and setting options to protect your private sphere: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in den USA.
7) Rights of Persons Affected
You have the right:
- in accordance with article 15 of GDPR, to demand information on your personal data processed by us. In particular, you can demand information on the purposes of the processing, the category of the personal data, the categories of recipients with respect to whom your data has been or will be disclosed, the planned period of storage, the existence of a right to correction, deletion, limitation of the processing or objection to it, the existence of a right of objection, the origins of your data, if this has not been collected by us, and about the existence of an automated decision-making process including profiling and, where applicable, meaningful information on the related details;
- in accordance with article 16 of GDPR, to demand the immediate correction of incorrect data, or to have any incomplete personal data of yours stored by us, completed;
- in accordance with article 17 of GDPR, to demand the deletion of your personal data stored by us, provided the processing is not necessary for the exercising of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons that are in the public interest, or for assertion, exercising or defence of legal entitlements;
- in accordance with article 18 of GDPR, to demand limitations on the processing of your personal data, if the correctness of the data is contested by you, if the processing is unlawful but you reject the deletion of the data and we no longer require it, though you need it for assertion, exercising or defence of legal entitlements, or if you have protested against its processing, in accordance with article 21 of GDPR;
- in accordance with article 20 of GDPR, to demand to be sent personal data of yours, that you have provided us with, in a structured, standard and machine-readable format, or to demand its transfer to another controller.
- in accordance with article 7, paragraph 3 of GDPR, to revoke your previously given consent, with respect to us, at any time. This has the consequence that, from then on, we will no longer be entitled to undertake data processing dependent on this consent;
- in accordance with article 77 of GDPR, to lodge a complaint with a supervisory authority. As a rule you can choose, for this purpose, the supervisory authority at your customary place of residence or workplace, or that at the place of registered address of our business.
8) Right of Objection
If your personal data is processed, on the basis of legitimate interests, in accordance with article 6, paragraph 1, sentence 1, letter f of GDPR, you have the right, in accordance with article 21 of GDPR, to protest against the processing of your personal data, provided there are reasons for doing so that arise from your special situation, or the objection is aimed at direct advertising. In the latter case you have a general right of objection that will be implemented by us without the need for details referring to a special situation.
If you wish to make use of your right of revocation or your right of objection, it is sufficient to send an e-mail to: email@example.com
9) Data Security
During the visit to the website we make use of the much used SSL (secure socket layer) procedure in conjunction with the respective highest encryption level that is supported by your browser. This is normally a 256-bit encryption. If your browser does not support a 256-bit encryption, we resort instead to 128-bit v3 technology. You can see whether a single page of our Internet presentation can be transferred encrypted from the closed depiction of the key or lock symbol in the lower status bar of your browser.
We otherwise make use of appropriate technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments.
10) Current Validity of and Amendments to this Data-Protection Statement
This data-protection statement is currently valid as in May 2018.
Due to the further development of our website and the offers presented in it, or due to changes in statutory or official specifications, it may prove necessary to alter this data-protection statement. The respective, current data-protection statement can be called up by you on the website, under www.chiemsee-summer.de at any time.
11) Supervisory authority data protection
Freie und Hansestadt Hamburg, Der Beauftragte für Datenschutz und Informationsfreiheit, Herr Professor Dr. Johannes Caspar, Ludwig-Erhard-Straße 22, 20459 Hamburg, Tel. : 0049-(0)40-42854 4040, E-Mail: firstname.lastname@example.org