We operate our websites in accordance with the principles set out below:

We undertake to comply with the statutory provisions on data protection and endeavor to observe the principles of data avoidance and data minimization at all times.

1. name and address of the controller and the data protection officer

a) The controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

ARGO Konzerte GmbH
Friedrich Bergius Ring 26
97076 Würzburg
info@argo-konzerte.de
0931 / 2300123

website: https://www.rock-im-park.com

b) The data protection officer

You can contact the data protection officer of the controller as follows

SiDIT GmbH
www.sidit.de
e-mail: info@sidit.de

2. definitions of terms

We have designed our privacy policy in accordance with the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the corresponding definitions can be viewed here.

3. Legal basis for the processing of data

a) Processing of personal data in accordance with the GDPR

We only process your personal data, such as your surname and first name, your email address and IP address, etc., if there is a legal basis for doing so. According to the General Data Protection Regulation, the following regulations in particular come into consideration.

Art. 6 para. 1 sentence 1 lit. a GDPR: The data subject has given their consent to the processing of personal data concerning them for one or more specific purposes.
Art. 6 para. 1 sentence 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Art. 6 para. 1 sentence 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject
Art. 6 para. 1 sentence 1 lit. d GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person
Art. 6 para. 1 sentence 1 lit. e GDPR: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
Art. 6 para. 1 sentence 1 lit. f GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, we will always point out the legal basis for the processing of your personal data at the relevant points in this privacy policy

b) Consent of the legal guardian pursuant to Art. 8 para. 1 sentence 2 alt. 2 GDPR

A legal guardian must consent to all data processing on this website for which the consent of a minor who has not yet reached the age of 16 is required.

Information on the individual data processing operations, their purposes and the categories of data concerned for which the consent of the data subject is required can be found in the privacy policy.

You can revoke your consent at any time by sending a declaration of revocation in text form to the contact details of the controller. The processing remains lawful until revocation.

c) Processing of information in accordance with Section 25 (1) TDDDG

We also process information in accordance with Section 25 (1) TDDDG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This may involve both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment connected directly or indirectly to the interface of a public telecommunications network for sending, processing or receiving messages, Section 2 (2) No. 6 TDDDG.

As a rule, we process this information on the basis of your consent, Section 25 (1) TDDDG.

Insofar as an exception according to § 25 para. 2 no. 1 and no. 2 TDDDG is given, we do not require consent. Such an exception is given if we only access or store the information in order to transmit a message via a public telecommunications network or if this is absolutely necessary so that we can provide a telemedia service expressly requested by you. You can revoke your consent at any time.

We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

4. Disclosure of personal data

The disclosure of personal data also constitutes processing within the meaning of the previous section 3. However, we would like to inform you separately about the issue of disclosure to third parties at this point. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

Data is therefore only passed on to third parties if there is a legal basis for the processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf - i.e. in particular in a relationship of instruction and control with us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus ensure comprehensive protection of your data.

5. Storage period and deletion

Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, if the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

6. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the website operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Cookies

We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your end device when you visit our website. These cookies are used to store information in connection with the end device used.

When cookies are used, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are those that are absolutely necessary in order to provide an information society service that you have expressly requested.

a) Technically necessary cookies

In order to make the use of our website more convenient for you, we use technically necessary cookies, which may be so-called session cookies (e.g. language and font selection, shopping basket, etc.), consent cookies, cookies to ensure server stability and security, etc. The legal basis for the cookies results from Art. 6 para. 1 sentence 1 lit. f) GDPR, our legitimate interest in the error-free operation of the website and the interest in providing you with our services in an optimized manner.

b) Other cookies

Other cookies include cookies for statistical, analytical, marketing and retargeting purposes.

We use these cookies on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

You can revoke your consent to the use of cookies at any time.

We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To do this, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (whereby this may also restrict the functionality of the online offer) or set an opt-out for the corresponding service in individual cases.

We will inform you of the legal basis on which this data is processed for the respective services within the privacy policy.

8. Cookie banner / consent management

We use the cookie banner of the service provider Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden to obtain consent for the cookies we use. This sets a so-called consent cookie in order to query and process the respective consent status. This consent cookie is technically necessary and is therefore used on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, § 25 para. 1 TDDDG.

For the use of some services of the Google/Alphabet Group, we use the so-called Google Consent Mode V2 in Advanced Mode. Details on this consent mode can be found on the Google website athttps://developers.google.com/tagplatform/security/guides/consent?hl=de&consentmode=advancedand in the Google services concerned.

The use of Consent Mode is technically necessary and is therefore used on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

9. collection and storage of personal data and their type and purpose of use

a) External hosting

Our website is hosted by Vercel Inc, 340S Lemon Ave #4133, Walnut, CA 91789, United States. For this reason, all personal data collected on our website is stored on the servers of our hoster, unless an external service of a third party is integrated. This may be the IP address, your email address, communication data or similar. You can find out which specific personal data is involved in the individual functions and services explained by us below. If we use an external service from a third party, this will be made clear in the description of the respective service or tool.

The hoster only processes your data on our instructions and insofar as this is necessary to fulfil the services on the website. The hoster does not process the data for its own purposes. We have concluded an order processing contract with the host.

b) When visiting the website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access was made (referrer URL)
Browser used and, if applicable, the operating system of your computer

The aforementioned data is processed by us for the following purposes

Ensuring a smooth connection to the website
Ensuring a comfortable use of our website
Analyzing system security and stability
error analysis
For further administrative purposes

Data that allows conclusions to be drawn about your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, this data is pseudonymized so that it can no longer be traced back to you.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

c) Newsletter via Brevo

If you have expressly consented in accordance with Art. 6 para. 1 lit. a GDPR, we will use your email address and your first name to send you our newsletter on a regular basis.

The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's email addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the mailing service provider are also logged.

This website uses Brevo for the sending of newsletters. The provider is the Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on servers of Sendinblue GmbH in Germany.

Brevo enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to determine, which links drew an extraordinary number of clicks.

Moreover, we are also able to see whether once the e-mail was opened or a link was clicked, any previously defined actions were taken (conversion rate). This allows us to determine whether you have made a purchase after clicking on the newsletter.

If you do not want to permit an analysis by Brevo, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.

For detailed information on the functions of Brevo please follow this link: https://www.brevo.com/de/newsletter-software/

Storage period

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

Data processing

We have concluded a data processing agreement (DPA) with Brevo.

For more details, please consult the Data Protection Regulations of Brevo at: https://www.brevo.com/de/datenschutz-uebersicht/
and
https://www.brevo.com/de/legal/privacypolicy/

d) WhatsApp communication and WhatsApp newsletter via hellomateo

We use the instant messaging service WhatsApp on our website to offer you another way to contact us and keep you up to date with festival news.

The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Reason for offering this service is that WhatsApp is the most widely used messaging tool. Despite we would like to point out that it has faced criticism in the past as a META company regarding data protection.

In order to address this criticism and still being able to use WhatsApp, we have decided to use the WhatsApp Business API as a technical interface: This way, your personal data is not stored by WhatsApp itself, but by our business solution provider hellomateo, with whom we have concluded a data processing agreement that ensures that personal data may only be processed on our instructions.

The provider is Mateo Estate GmbH, 14467 Potsdam. You can find the data protection information at https://www.hellomateo.de/datenschutz.

The cloud API provided by hellomateo is hosted in Germany. The content of the messages sent via the WhatsApp Business API is protected by end-to-end encryption so that Meta has no access to the content of the messages. The message is only stored temporarily in the Cloud API and then forwarded to the recipient in encrypted form.

Customer hotline

You can contact us via WhatsApp and ask us questions. This enables us to respond to your enquiry more efficiently.

If you communicate with us via WhatsApp, we process your phone number to communicate with you. In addition, we process messages and files that you send to us via the app. According to hellomateo, no other (meta) data such as profile picture, location or last online status is exchanged.

Communication with you via WhtasApp takes place for the fulfilment of our contract or the implementation of pre-contractual measures with you in accordance with Art. 6 para. 1 lit b GDPR.

WhatsApp newsletter

If you communicate with us via WhtasApp, we offer you the opportunity to subscribe to our WhatsApp newsletter in a message to keep you up to date with festival news.

We use your telephone number to send the WhtasApp newsletter.

This is done with your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The registration for our WatsApp newsletter takes place in a so-called opt-in procedure. This means that after you have registered for our WhatsApp newsletter by answering ‘yes’, you will receive a text message from us asking you to confirm your registration. This confirmation is necessary so that no-one can register using someone else's e-phone number. Subscriptions to the WhatsApp newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation.

You can revoke your consent at any time by writing ‘Stop’ via WhatsApp to unsubscribe.

e) Facebook-/Instagram-Messaging and E-Mais via hellomateo

In order to respond to your emails and messages on social media channels more efficiently, we have decided to use hellomateo as a central platform where all messages from different channels are collected, assigned and processed. The platform enables us to respond quickly and effectively to enquiries by managing communication clearly in one place via your preferred channel.

The processed data includes:
- your name or username
- your email address
- social media profile information
- your IP address
- Content of messages and requests
- Timestamp of the communication
- usage data

The data is stored on secure HelloMateo servers located within the European Union. We have concluded an order processing contract with Mateo Estate GmbH, 14467 Potsdam. You can find the data protection information at https://www.hellomateo.de/datenschutz.

Your data will only be used to answer your enquiry and for communication purposes. Your data will not be analysed for marketing purposes.

The legal basis for the aforementioned data processing is the fulfilment of our contract or the implementation of pre-contractual measures with you in accordance with Art. 6 para. 1 lit b GDPR.

f) Press area

On our website you have the opportunity to register as a journalist or press representative for our press mailing list and/or apply for accreditation.

1. press news letter registration / press distribution list

As a journalist or press representative, you can register for our press mailing list to receive regular press releases in the form of a newsletter.

Content of the newsletter and registration data
We will only send you our newsletter and carry out statistical surveys and analyses and log the registration process if you order it from us and have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para.1 TDDDG. The contents of the newsletter are described in detail when you register for the newsletter. To subscribe to the newsletter, it is sufficient to provide your email address. If you provide further voluntary information, such as your name and/or gender, this will be used exclusively to personalize the newsletter addressed to you.

Double opt-in and logging

For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that nobody can register with other people’s e-mail addresses. After registering for our newsletter, you will therefore first receive an e-mail asking you to confirm your registration. Only when you confirm your registration will it become effective.

Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the time of registration and confirmation, the data you provide and your IP address. If you make changes to your data, these changes will also be logged.

Cancellation

If you no longer wish to receive our newsletter, you can withdraw your consent at any time with effect for the future. To do so, you can click on the unsubscribe link at the end of each newsletter or send us an e-mail to the following e-mail address: E-mail address

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

We use the following different service providers, with whom we have concluded an order processing contract, for registration, sending the newsletter, evaluating and compiling statistics and managing the registration data:

2. accreditation

To apply for accreditation for our festival, your personal data provided in the press section will be collected and processed in order to verify the identity of the requesting persons and to ensure that only journalists or press representatives receive accreditation. This processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

Accreditation cards will only be issued after your ID has been checked on site and must be collected in person.

Your data will only be stored for the duration of the accreditation check and the event and then deleted, provided there are no further retention obligations.

In the event of a possible inspection by the security authorities, we may be obliged to disclose your data as a journalist or press representative to fulfill our legal obligations in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR or to avert a specific threat to public safety and order in accordance with Art. 6 para. 1 lit. e) GDPR and § 24 BDSG.

g) Use of MongoDB in our data processing

We use the services of MongoDB - Office Berlin, Germany, EU, Design Offices, Alexanderufer 3-7, 10117 Berlin, Germany , to store and manage data. MongoDB is used to ensure the secure and efficient storage of personal data. The server location is in Frankfurt, Germany. In plain text, we store personal data such as e-mail address, first name, surname, profession, company and department. Other data, such as date of birth and telephone number, are encrypted before transmission to MongoDB and cannot be viewed by MongoDB. A data processing agreement (DPA) has been concluded with MongoDB. Further information can be found in MongoDB’s privacy policy (https://www.mongodb.com/legal/privacy-policy). If you have any questions about data protection, you can contact MongoDB at privacy@mongodb.com or by post at the above address

10. analysis and tracking tools

We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimization of our website and to design it in line with requirements.

We use these tools on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time by changing the cookie settings. Processing remains lawful until you withdraw your consent.

The respective data processing purposes and data categories can be found in the corresponding tools. We would like to point out that we have no influence on whether and to what extent the service providers carry out further data processing.

a) Google Consent Mode v2 - Advanced

For the use of some services of the Google/Alphabet Group, we use the so-called Google Consent Mode V2 in Advanced Mode.

This means that if you do not give your consent in our cookie banner, your client still sends ping information with IP address, timestamp, user agent and referral URL to Google. The IP address is anonymized on the Google servers. This data is used for conversion modelling in order to optimize ads despite the lack of consent or technical restrictions and to improve automatic bid settings.

Details on this consent mode can be found on the Google website at https://developers.google.com/tag-platform/security/guides/consent?hl=de&consentmode=advanced

The processing of your personal data is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

b) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”).

Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as

Name and version of the browser used
Operating system of your computer
Website from which the access is made (referrer URL)
IP address of the requesting computer
Time of the server enquiry

are usually transmitted to a Google server in the USA and stored there.

Your IP address is automatically anonymised by Google before it is recorded via EU domains and servers. There is therefore no logging or storage of your IP address.

Google will use this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We have concluded an order processing contract with Google.

Please click here for an overview of data protection at Google. https://support.google.com/analytics/answer/6004245

c) TikTok Pixel

On our website, we use TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom), which act as joint controllers in Europe.

The TikTok Pixel is a TikTok Advertiser Tool. It is a JavaScript code snippet that allows us to see and track the activities of visitors to our website. For this purpose, information about visitors to our website and the devices they use (so-called event data) is collected and processed.

The purpose of processing this event data is, for example, the targeting of our advertisements, the improvement of ad delivery and personalised advertising. This event data is transmitted to TikTok.

We act as joint controllers with TikTok for the collection and transmission of event data. For this reason, we have concluded an agreement with TikTok on processing as joint controllers. In accordance with the agreements made, we are responsible for providing you with all information pursuant to Art. 13 and 14 GDPR on the joint processing of personal data. TikTok is in turn responsible for ensuring that data subjects can exercise their rights in accordance with Art. 15 to 20 GDPR.

You can access the agreement concluded between us and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

TikTok is solely responsible for the processing that immediately follows the transmission of the event data. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how to exercise your rights against TikTok, please refer to TikTok’s Data Policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE

d) Online/social media marketing with EDGE

For marketing measures on our websites, third-party websites and social networks, we use EDGE for support. The provider is EDGE Entertainment Digital GmbH, a subsidiary of CTS EVENTIM AG & Co. KGaA.

The legal basis for the use is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to effectively set up campaigns on high-reach platforms such as Facebook, Instagram, Google, YouTube and TikTok.

If you purchase our products on our websites or register for the newsletter, we will transmit your personal data to Edge Entertainment Digital GmbH for the purpose of carrying out advertising measures if you give us your consent within the meaning of Art. 6 para. 1 lit. a GDPR.

We are jointly responsible with EDGE for the processing of your personal data.

e) Facebook conversion pixel

We use the “conversion pixel” or visitor action pixel of Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). By calling up this pixel from your browser, Meta Platforms can subsequently recognise whether a Facebook ad was successful, e.g. whether it led to an online purchase.

We only receive statistical data from Meta Platforms for this purpose without reference to a specific person. This enables us to record the effectiveness of Facebook adverts for statistical and market research purposes. In particular, if you are logged in to Facebook, we refer you to their data protection information https://www.facebook.com/about/privacy/.

f) Google Signals

We use Google Signals on our website, an extension of Google Analytics, to collect and analyse cross-device user data. This function is activated if you have agreed to personalised ads in your Google account. The data collected is anonymised and used in aggregated form to identify trends and behavioural patterns without us being able to draw conclusions about individual persons.

The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting the settings for personalised advertising in your Google account or by deactivating the use of cookies on our website.

Google Signals enables Google to create aggregated reports on cross-device user behaviour. No personal data is transmitted to us in the process. However, Google may transfer data to third countries, in particular the USA. We have concluded an order processing contract with Google, which ensures that your data is protected in accordance with European data protection regulations.

The data collected by Google Signals is stored in Google Analytics for a period of 26 months unless you withdraw your consent or delete your data in your Google account.

If you do not want Google Signals to collect data about your user behaviour, you can deactivate personalised advertising in your Google account or install a browser add-on to deactivate Google Analytics. Further information on data protection at Google can be found in Google’s privacy policy.

g) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”).

Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as

Name and version of the browser used
Operating system of your computer
Website from which access is made (referrer URL)
IP address of the requesting computer
Time of the server enquiry

are usually transmitted to a Google server in the USA and stored there.

Your IP address is automatically anonymised by Google before it is recorded via EU domains and servers. There is therefore no logging or storage of your IP address.

Google will use this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We have concluded an order processing contract with Google.

Please click here for an overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]

h) Google Tag Manager

We use the Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Tag Manager is an administration and management tool in which other tracking and/or statistical tools can be centrally managed and played out.

When you visit our website and give your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, Google Tag Manager collects and processes your IP address, which may also be transferred to the USA. However, Google Tag Manager itself does not create any user profiles or analyses.

We have concluded an order processing contract with Google. The Google privacy policy can be found here [https://www.google.com/policies/privacy/?hl=de].

11. social media

The social media plugins listed below are used on our website to publicise our website. The legal basis for the use of social media plugins is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Responsibility for data protection-compliant operation must be guaranteed by the respective provider.

a) Instagram

We use functions of the Instagram service on our websites, which is operated by Meta Platforms Ireland Ltd (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). However, we integrate this provider via a local API. This allows us to use this service in the front end without visitors’ data flowing to the provider.

You can find more information on this in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/

b) TikTok

We use functions of the TikTok service on our website, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

When you activate the plugin, your browser establishes a direct connection to the TikTok servers. The plugin transmits log data to the TikTok server. This log data may contain your IP address, the address of the websites visited, the type and settings of the browser, the date and time of the request, your use of TikTok and cookies.

Further information on the purpose, scope and further processing and use of the data by TikTok as well as your rights and options for protecting your privacy in this regard can be found in TikTok’s privacy policy:
https://www.tiktok.com/safety/de-de/privacy-and-security-on-tiktok/

12. image, sound and video integration

a) YouTube

We embed videos from YouTube, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), into our website as part of iFrame and/or via a plug-in. As part of embedding the videos, we have activated YouTube’s extended data protection mode.

If you play a YouTube video during your visit, a connection to the YouTube servers is established and the YouTube server is informed which of our pages you have visited. This allows YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your member account before visiting our website. In addition, YouTube sets various cookies when the service is started in order to improve the services it offers and to prevent misuse.

Further information on the handling of user data and the cookies set can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

By integrating YouTube, Google Fonts are also dynamically loaded by Google without the website operator or visitor having to actively determine this. These web fonts are integrated by a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google

Name and version of the browser used
Website from which the request was triggered (referrer URL)
Operating system of your computer
Screen resolution of your computer
IP address of the requesting computer
Language settings of the browser or operating system used by the user

Further information can be found in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

The legal basis results from the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie setting on our website.

b) Vimeo

We embed videos from Vimeo.com, Inc, (330 West 34th Street, 5th Floor, New York 10001 USA) into our website as part of iFrame and/or PlugIn.

If you play a Vimeo video during your visit, a connection to the Vimeo servers is established and the Vimeo server is informed which of our pages you have visited. This allows Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your user account before visiting our website. In addition, Vimeo sets various cookies when the service is started in order to improve the services it offers and to prevent misuse.

Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.

The legal basis results from the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie setting on our website.

c) Spotify

We use the Spotify service on our website, operated by Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. The Spotify player is integrated via the Spotify widget so that music and podcasts can be played directly on our website.

To display the Spotify player, a JavaScript file is loaded from Spotify’s servers via HTTPS. This file is executed in the user’s browser and loads the player in an iframe. This results in a request from the user’s browser to Spotify, which automatically transmits personal data to Spotify. The transmitted data includes

IP address,
Browser type and version,
operating system,
referrer URL,
Information about the device (e.g. device type, screen resolution).
If applicable, your Spotify account data (if you are logged in).

The data is processed by Spotify to ensure the technical provision and functionality of the player. In addition, the data collected is used to optimise the service and analyse user behaviour. Spotify therefore acts as its own controller.

Further information on the processing of personal data by Spotify can be found in Spotify’s privacy policy and in the Security and Privacy Centre.

The integration of the Spotify player and the associated data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. The processing of your personal data remains lawful until the revocation is received.

13. Rights of the data subject

You have the following rights:

a) Information

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

the purposes of processing
the categories of personal data
the recipients or categories of recipients to whom your data has been or will be disclosed
the planned storage period or at least the criteria for determining the storage period
the existence of a right to rectification, erasure, restriction of processing or objection
the existence of a right to lodge a complaint with a supervisory authority
the origin of your personal data if it was not collected by us
the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details

b) Rectification

In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data stored by us.

c) Erasure

In accordance with Art. 17 GDPR, you have the right to demand that we erase your personal data without undue delay, unless further processing is necessary for one of the following reasons

the personal data are still necessary for the purposes for which they were collected or otherwise processed
to exercise the right to freedom of expression and information
for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
for the establishment, exercise or defence of legal claims

d) restriction of processing

In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons

You contest the accuracy of your personal data.
The processing is unlawful and you oppose the erasure of the personal data
We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
You object to the processing pursuant to Art. 21 (1) GDPR.

e) Notification

If you have requested the rectification or erasure of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 GDPR, we will inform all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You can request that we inform you of these recipients.

f) Transmission

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format.

You also have the right to request the transfer of this data to a third party, provided that the processing is carried out using automated procedures and is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

g) Revocation

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In future, we may no longer continue the data processing that was based on your withdrawn consent.

h) Complaint

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

i) Objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying the particular situation. If you would like to exercise your right of cancellation or objection, simply send an email to: info@argo-konzerte.de

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

i. is necessary for the conclusion or fulfilment of a contract between you and us

ii. is authorised by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests

iii. is made with your express consent

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in i) and iii), we shall take reasonable steps to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

14. Amendment of the privacy policy

If we change the privacy policy, this will be indicated on the website.

Status: 22.05.2025

Three Days Grace