1. Data protection at a glance
General Information
The following information provides an overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.
For detailed information on data protection, please refer to the privacy policy set out below.
Data collection on this website
Who is responsible for data collection?
Data processing on this website is carried out by the website operator:
Montana Winter Event GbR
2a Lindenstraße
67574 Osthofen
Germany
Email: info@loerracher-weihnachtscircus.de
How do we collect your data?
Your data is collected, firstly, when you provide it to us. This may include, for example, data that you enter into a contact form or send to us by email.
Other data is collected automatically or, with your consent, by our IT systems when you visit the website. This includes, in particular, technical data such as your internet browser, operating system, IP address or the time the page was accessed.
What do we use your data for?
Some of the data is collected to ensure the website is provided in a technically fault-free and secure manner. Other data may – provided you have given your consent – be used to analyse user behaviour, to display external content or for marketing purposes .
2. Data controller
The data controller for this website is:
Montana Winter Event GbR
2a Lindenstraße
67574 Osthofen
Germany
Email: info@loerracher-weihnachtscircus.de
The data controller is the natural or legal person or a partnership with legal capacity which, alone or jointly with others, determines the purposes and means of the processing of personal data .
3. General Information on data processing
Legal basis
We process personal data in particular in accordance with the General Data Protection Regulation (GDPR).
Where you have consented to the processing of personal data, such processing is carried out on the basis of Article 6(1) (a) of the GDPR.
Where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is carried out on the basis of Article 6(1)(b) of the GDPR.
Where processing is necessary to fulfil a legal obligation, it is carried out on the basis of Article 6(1) (c) of the GDPR.
Where processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not take precedence, it is carried out on the basis of Article 6(1)(f) of the GDPR.
Where consent is required for the storage of information on your device or for access to information stored there, this is done on the basis of Section 25(1) of the TDDDG. Where storage or access is strictly necessary to provide a digital service that you have expressly requested, this is based on Section 25(2) of the TDDDG.
Retention period
Unless a more specific retention period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective purpose of processing.
If you submit a valid request for erasure or withdraw your consent, the data in question will be erased, provided there are no statutory retention obligations or other legally permissible grounds for its continued storage.
Recipients of personal data
As part of our business activities, we work with external service providers. In doing so, it may be necessary to transfer personal data to these recipients.
Where necessary, we enter into contracts with service providers for data processing in accordance with Article 28 of the GDPR or put in place other agreements required under data protection law.
Data transfers to third countries
Some of the services used on this website are provided by companies based outside the European Union or the European Economic Area, in particular in the USA.
Where personal data is transferred to third countries, this is done only in accordance with the statutory requirements. This may in particular be done on the basis of an adequacy decision by the European Commission or appropriate safeguards such as the Standard Contractual Clauses of the European Commission.
In the case of providers certified under the EU-US Data Privacy Framework, data transfers may take place on the basis of the relevant adequacy decision.
4. Your rights
Under the applicable legal provisions, you have, in particular, the right to:
- Information regarding your personal data that has been processed (Art. 15 GDPR),
- Rectification of inaccurate data (Article 16 of the GDPR),
- Deletion of your personal data (Article 17 of the GDPR),
- Restriction of processing (Article 18 of the GDPR),
- Data portability (Article 20 of the GDPR),
- Right to object to certain processing activities (Article 21 of the GDPR) and
- Withdrawal of consent already given, with effect for the future (Article 7(3) of the GDPR).
The withdrawal of consent does not affect the lawfulness of the processing carried out up to the time of withdrawal.
Right to lodge a complaint
Under Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority for your usual place of residence, your place of work or the place where the alleged data protection breach occurred.
5. SSL or TLS encryption
For security reasons and to protect the transmission of confidential information, this website uses SSL or TLS encryption.
You can recognise an encrypted connection, in particular, by the fact that the website address begins with ‘https://’.
6. Hosting and server log files
When you visit our website, the web server or hosting provider automatically processes information in what are known as server log files .
These may include, in particular:
- IP address,
- Browser type and browser version,
- operating system used,
- Referrer URL,
- pages or files accessed,
- Date and time of the server request,
- Hostname of the accessing device.
Data is processed, in particular, to ensure the secure, stable and technically fault-free operation of our website.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
7. Cookies and consent management
Our website uses cookies and similar technologies. Cookies are small data files that are stored on your device or contain information that can be read when you visit our website .
Some cookies and technologies are technically necessary for the website to function. Others are used for analytics, marketing or external media services and are only activated with your consent.
When you visit our website for the first time, you can use our consent banner to choose which categories of services you wish to consent to.
Where consent is required, the storage of information on your device or access to such information is based on Section 25(1) of the TDDDG, and the subsequent processing of personal data is based on Article 6(1)(a) of the GDPR.
Storage or access that is strictly necessary for technical reasons takes place in accordance with Section 25(2) of the TDDDG. The associated processing of personal data may, in particular, be based on Article 6(1)(f) of the GDPR .
You may withdraw your consent at any time with effect for the future, or change your selection. To this end, we provide a option on our website that allows you to access your data protection and cookie settings again.
8. Google Analytics
This website uses, subject to your consent, Google Analytics to analyse the use of our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, which is based in the USA.
Google Analytics enables us to analyse information about the use of our website. In particular, this may involve the processing of page views, session duration, devices and browsers used, approximate location information and interactions with our website.
Google Analytics uses cookies or similar technologies for this purpose, provided you have consented to their use.
The legal basis for the processing is your consent in accordance with Article 6(1)(a) of the GDPR. Where information is stored on or retrieved from your device, this is done on the basis of Section 25(1) of the TDDDG.
You can withdraw your consent at any time via the cookie and privacy settings on our website, with effect from that point onwards .
When using Google services, it cannot be ruled out that data may be transferred to Google companies or servers outside the European Union. Such data transfers are subject to the legal requirements governing transfers to third countries.
9. Meta Pixel
This website uses the following, subject to your consent: Meta Pixel.
The provider for users within the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The parent company is Meta Platforms, Inc., which is based in the USA.
With the help of Meta Pixel, we can track how visitors have discovered our website and how they interact with our online presence. This enables us, in particular, to measure the effectiveness of our advertising campaigns on Facebook and Instagram and to optimise our advertising .
In particular, this may involve the processing of technical information about your device, your IP address, the pages you have visited, the times at which you accessed the pages, and information about your interactions with our website.
This information will only be used with your consent.
The legal basis is Article 6(1)(a) of the GDPR and – insofar as information is stored on or read from your device – Section 25( 1) of the TDDDG.
You can withdraw your consent at any time via the cookie and privacy settings on our website, with effect from that point onwards .
The transfer of personal data to third countries, in particular the USA, cannot be ruled out in the context of using Meta services.
10. Google Fonts
Our website uses fonts from Google (‘Google Fonts’).
Provided that Google Fonts are embedded locally on our own web server, no connection is made to Google’s servers when the fonts are accessed.
If Google Fonts are loaded directly from Google’s servers, the website visitor’s IP address, in particular, may be transmitted to Google. Such external integration takes place only in compliance with the necessary data protection requirements.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
11. Google reCAPTCHA
We use the following on our website Google reCAPTCHA, in particular to protect contact forms from automated submissions, misuse and spam.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA may process various types of information about website visitors and their use of the website in order to determine whether an input is being made by a human or an automated programme.
Where consent is required for the use of reCAPTCHA, processing is carried out on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
In this case, reCAPTCHA is only activated once the relevant consent has been given.
It cannot be ruled out that data may be transferred to Google companies outside the European Union.
12. Google Maps
On our website, you can view maps of the service Google Maps be involved.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps enables us, in particular, to display the venue and other relevant locations on an interactive map.
Google Maps will only be activated once you have consented to the use of external content or the relevant service. When the map is loaded, personal data, in particular your IP address and technical information, may be transmitted to Google.
The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as information on your device is accessed or stored there.
You can withdraw your consent at any time via the cookie and privacy settings on our website.
13. YouTube and Vimeo
On our website, you can find videos from the platforms YouTube and Vimeo be involved.
YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Vimeo is provided by Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA.
The embedded videos will not be loaded until you have consented to the use of external media or the relevant service.
Once a video has been played, personal data such as your IP address, technical device information and information about your use of the video may be transmitted to the relevant provider. If you are logged in to the relevant provider’s service, the information may, where applicable, be linked to your user account.
The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as information is stored on or read from your device.
The transfer of data to the USA cannot be ruled out in connection with the use of these services.
14. Facebook and Instagram
Our website may feature content or functions from social networks Facebook and Instagram be involved.
The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Where content from Facebook or Instagram is embedded directly into our website, it will only be loaded once you have given your consent.
Once activated, your IP address, technical information about your device and information about your visit to our website may be transmitted to Meta. If you are logged in to Facebook or Instagram, Meta may, where applicable, link this information to your user account.
The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as information is stored on or read from your device.
You can withdraw your consent at any time via the cookie and privacy settings on our website.
15. Contact form and getting in touch
If you contact us via the contact form or by email, we will process the information you provide in order to deal with your enquiry.
This may include, in particular, your name, email address, your message and any other information you provide voluntarily.
Insofar as your enquiry relates to a contract or is intended to facilitate pre-contractual measures, the processing is carried out on the basis of Article 6(1)(b) of the GDPR.
In other cases, processing is carried out, in particular, on the basis of our legitimate interest in the efficient handling of enquiries addressed to us in accordance with Article 6(1)(f) of the GDPR or – where the relevant consent has been obtained – on the basis of Article 6(1) (a) of the GDPR.
The data will be deleted once the purpose for which it was stored no longer applies and there are no statutory retention obligations or other legal grounds preventing its deletion.
16. Ticket sales / Reservix
Our website contains links to an external ticket provider Reservix.
The Reservix ticket shop is not directly integrated into our website. If you click on the relevant link, you will leave our website and be redirected to an external Reservix website.
It is only when you access the external website that its privacy policy applies. The nature and scope of data processing on that site are governed by the privacy policy of the respective provider.
Simply by providing the external link, we do not, as a rule, receive any personal data regarding your use of the Reservix ticket shop.
17th amendment to this privacy policy
We reserve the right to amend this privacy policy if the legal situation, our website or the services we use change.
