Privacy Statement

The management of EVENTED GmbH in Ensdorf, Germany, attributes great importance to the protection of the users of its website www.evented.de. Users of this website are therefore, generally speaking, not obliged to provide personal data. If a user – hereinafter: data subject – wishes to make use of particular services of EVENTED GmbH that require the processing of personal data, EVENTED GmbH will only process this data if it has legal permission to process personal data or if the data subject has explicitly given permission to process their personal data.

Personal data, which includes for instance name, address, contact information such as telephone number or email address, will be processed in accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation) as well as the corresponding national provisions for the handling of such data. In this statement and with regard to the usage of our website, we intend to inform data subjects on the type, extent and purpose of the collected and communicated data and about their rights regarding the handling of their data.

EVENTED GmbH has taken certain measures and precautions for the processing of the aforementioned data as a way of preventing this data from being processed without legal basis and inspected by an unauthorized party. However, we also have to inform you that it is technically impossible to guarantee a complete protection of data transmitted via the internet. For this reason, you can also communicate with us via different channels such as post or telephone.

To explain our processing activities, we use the same terms as the ones used in the relevant provisions of the General Data Protection Regulation in order to avoid any misunderstandings and ambiguity.

The party responsible for the processing of the collected and communicated data within the use of www.evented.de is:

EVENTED GmbH    
Gustav-Stresemann-Straße 3
66806 Ensdorf
Germany
Phone: +49 (0) 68 31 89 37 63-0
Email: info@evented.de

Data Protection Commissioner:
Dennis Kruchten, dennis.kruchten@evented.de

The website of EVENTED GmbH uses cookies. Cookies are small text files that are stored on a computer system via a browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID, which is a unique identifier of the cookie. It consists of a string of characters that associates websites and servers with the specific browser, in which the cookie has been stored. This enables any website and server visited to distinguish the individual browser of the data subject from other browsers containing different cookies. A specific browser can be recognized and identified via the unique cookie ID.

By using cookies, EVENTED GmbH is able to provide its website users with services that are more user-friendly. This would not be possible without the use of cookies.

By using cookies, information and services on our website can be optimized for the user. As men-tioned above, cookies enable us to recognize the users of our website. By recognizing our users, we are able to simplify the usage of our website for them. For example, the user of a website that stores cookies will not have to re-enter their login data every time they visit the website. The web-site and the cookie that is stored on the user’s computer system will do this for them.

Using the correct settings in their browser, the data subject is able to prevent cookies from being stored via our website at any time and consequently object to the storage of cookies permanently. Furthermore, all standard browsers and other types of software can delete any cookies previously stored. If the data subject disables the storage of cookies in his or her browser, our website may be limited in its functions.

Every time a data subject retrieves content via our website under the aforementioned internet address, general information and data will be collected as a result of transmission technology. This information and data is stored in so-called server log files. The following information may be collected:

1.    the type of internet browser used by the data subject;
2.    the installed operating system of the computer that is used by the data subject;
3.    the website, from which the data subject has navigated to our website (so-called http referer);
4.    the subpages within our website which are visited by the data subject with the used system;
5.    date and time of the access of our website by the data subject;
6.    the internet protocol (IP) address that was designated to the internet connection used by the data subject to retrieve content from our website;
7.    the internet service provider (ISP) of the internet connection, from which content of our website was retrieved.

EVENTED GmbH will not draw any conclusions in regard to using this data to identify the data subject. The data is used to:

1.    display the content of our website correctly;
2.    optimize the content and advertisements on our website;
3.    ensure that our IT systems and website always work
4.    provide law enforcement authorities with the necessary data in case of a cyber-attack.

In order to achieve these purposes, the aforementioned information will be analyzed in an anonymized fashion, statistically and with the objective to ensure data protection and data security for the data subject and to create an optimal level of protection. If server log files are stored until the end of the evaluation for stated reasons, they will not be merged with the data that is actively transmitted by the data subject. They will be stored separately to this information.

Due to legal obligations, the website of EVENTED GmbH provides information that enables users to quickly contact us electronically or communicate with us directly. A contact form enables users to contact us, however, its use is not mandatory. When a data subject contacts us using any of the stated means, any personal data transmitted by the data subject will be processed and stored in order to process the request that prompted them to contact us.

EVENTED GmbH will only store personal data for the period of time that is needed to achieve the processing purpose and during which EVENTED GmbH is obligated to retain data due to legal provisions. As soon as the storing purpose lapses or the data retention period expires, personal data will be erased routinely and according to legal requirements, and any further processing of the relevant data will be restricted.

Regarding the handling of their personal data, data subjects can contact the person responsible for data protection – hereinafter: controller – and assert the following rights:

1.    the right to receive a confirmation from the controller if personal data concerning him or her is processed by the controller;

2.    the right to receive information from the controller regarding what kind of personal data concerning him or her is being processed by the controller as well as a copy of this information, both free of charge; the data subject is particularly entitled to receiving the following information:
a.    information regarding the processing purposes;
b.    information regarding the categories of the processed personal data;
c.    information regarding the recipients or categories of the recipients who have already received the relevant personal data or will receive the relevant personal data, especially recipients in so-called third countries and international organizations; also – in such cases and on explicit request – information regarding the existence of adequate data protection guarantees;
d.    where possible, information regarding the planned storage period for personal data or the criteria for determining the storage period;
e.    information regarding the existence of the right to rectify or erase the data subject’s personal data and the existence of the right to restrict the processing of personal data;
f.    information regarding the existence of a revocation right regarding the processing of the data subject’s personal data by the controller;
g.    information regarding the existence of the right to appeal in front of a supervisory authority;
h.    information regarding the existence of an automated decision-making process including profiling according to art. 22 par. 1 and 4 of the General Data Protection Regulation and – in case such an automated decision-making process is intended – significant information regarding the logic as well as the scope and the aspired effect of this processing on the data subject.

3.    the right to request the controller to rectify any inaccurate personal data concerning him or her; this includes the right to request that any possibly incomplete personal data is completed – if necessary with a complementary declaration – in consideration of processing purposes;

4.    the right to request the controller to erase any personal data concerning him or her if
a.    the data was collected and processed for purposes for which it is (no longer) necessary;
b.    permission to process personal data has been revoked or no other legal basis exists (anymore);
c.    the data subject has objected to the processing of his or her personal data and no overriding legitimate grounds for processing exist;
d.    the data subject’s personal data has been processed in an unlawful fashion;
e.    the controller is legally obligated to erase the data subject’s personal data.

If personal data has been made public by EVENTED GmbH and we are responsible for erasing the relevant data according to art. 17 par. 1 of the GDPR, we will – in consideration of the available technology and implementation costs – take measures to inform other controllers who are processing the personal data that the data subject has requested that any links to or copies and replications of this personal data are erased provided that the processing is not necessary.

5.    the right to request the controller to restrict the processing where one of the following applies:
a.    the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b.    the processing is unlawful and the data subject is opposed to the erasure of the personal data and instead requests that its use is restricted;
c.    the controller no longer needs the personal data for the purposes of the processing, but it is still required by the data subject for establishing, exercising or defending legal claims;
d.    the data subject has objected to any processing pursuant to art. 21 par. 1 and the verification is still pending as to whether the legitimate grounds of the controller override those of the data subject.

6.    the right to receive personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit the data to another controller without being hindered by EVENTED GmbH, provided that the processing is based on consent pursuant to point a) of art. 6 par. 1 or point a) of art. 9 par. 2 of the General Data Protection Regulation or on a contract pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation and the processing is carried out by automated means; this right does not apply if the processing is necessary for executing a task which is being carried out in the public interest or in the exercise of an official authority assigned to the controller.

In this context, the data subject has the right to have his or her personal data transmitted directly from one controller to another, where technically feasible and where no rights and liberties of others are being adversely affected.

7.    the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on point e) or f) of art. 6 par. 1 of the General Data Protection Regulation. This includes the right to object to a possible profiling.

EVENTED GmbH will no longer process the personal data unless compelling legitimate grounds for the processing which override the interests, rights and liberties of the data subject or for the establishment, exercise or defense of legal claims can be established.

If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to having their personal data processed for direct marketing purposes, the personal data will no longer be processed for such purposes by EVENTED GmbH.

Furthermore, if personal data is processed for scientific or historical research purposes or statistical purposes pursuant to art. 89 par. 1, the data subject, on grounds relating to his or her particular situation, has the right to object to having his or her personal data processed, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

8.    the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The data subject does not have this right if the decision
a.    is necessary for entering into or carrying out a contract between the data subject and a data controller;
b.    is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and liberties and legitimate interests;
c.    is based on the data subject’s explicit consent.

In cases where the processing of personal data is necessary for concluding or carrying out a contract between us and the data subject or on the basis of the permission of the data subject, EVENTED GmbH will implement suitable measures to safeguard the data subject’s rights and liberties and legitimate interests. This includes at the least the right to request human intervention on the part of the controller as well as the possibility to express his or her point of view to the controller.

9.    the right to revoke permission previously provided to the controller at any time for processing personal data concerning him or her.

EVENTED GmbH has integrated “Google Analytics” with its anonymization function “Anonymize IP” into its website. This function requires javascript to be activated on the computer system in use.

Google Analytics is a web analytics service. Web analysis is the collection, storage and processing of data concerning the behavior of website visitors. This kind of service, among other things, collects data concerning the website from which a user has navigated to our website (so-called referrer), which subpages the user has visited and how often and for how long users remain on a subpage. A web analysis is mostly used in order to optimize a website and to provide a cost-benefit analysis of internet marketing.

The operating company of Google-Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

For the web analysis with Google Analytics, the controller adds "_gat._anonymizeIp" to the tracking code. This truncates and anonymizes the IP address of the data subject’s internet connection if our website is being accessed from a Member or Union State.

The purpose of Google Analytics is to analyze the flow of visitors to our website. Google uses the collected data and information to evaluate, for example, the usage of our website in order to provide online reports, which present what activity is being carried out on our website, and to provide further services concerning the usage of our website.

Google Analytics places a cookie on the data subject’s system. We explained cookies at the beginning of the privacy statement. By placing the cookie, Google enables our website’s usage to be analyzed. Every time one of the subpages of our website – for which we are responsible and on which Google Analytics is integrated – is accessed, the internet browser of the data subject’s system automatically transmits data to Google for the purpose of online analysis. In the course of this technical process, Google receives personal data, such as the data subject’s IP address. Google uses this to retrace the origin of the visitors and clicks and subsequently to enable commission settlements.

The cookie enables the storage of personal information, for example access time, the location from which our website was accessed, and the number of times the data subject has been on our website. Each time our website is accessed, this personal data including the IP address of the data subject’s internet connection are transmitted to Google in the USA. This data is stored by Google in the USA. Google may disclose this data to third parties.

As stated above, the data subject can prevent the placing of cookies via our website at any time by using the relevant settings in their browser and consequently object to the storage of cookies permanently. This setting also prevents Google from placing a cookie in the data subject’s system. Furthermore, a cookie that has already been placed by Google can be erased via the internet browser or another software at any time.

The data subject can also object to and subsequently prevent Google Analytics from collecting data concerning their usage of our website. The same goes for the processing of such data by Google. In order to do so, the data subject will need to download an add-on under https://tools.google.com/dlpage/gaoptout and install it in their browser. This browser add-on informs Google Analytics via javascript that no data or information concerning the visitors of websites is to be transmitted to Google Analytics. Google considers the installation of this add-on as an objection. If the data subject’s system is being deleted, formatted or re-installed, the data subject needs to re-install the browser add-on in order to deactivate Google Analytics. If the data subject or any other person in the data subject’s sphere of influence uninstalls or deactivates the browser add-on, the browser add-on can be re-installed or re-activated.

You will find further information and the applicable data protection regulations of Google under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. You will find a detailed explanation of Google Analytics under https://www.google.com/intl/de_de/analytics/.

The legal basis for the processing of personal data is the regulation provided in point a) of art. 6 par. 1 of the General Data Protection insofar as EVENTED GmbH requests permission from the data subject.

If the processing of a data subject’s personal data is necessary for the initiation, performance or termination of a contract with the controller, the processing of such data is lawful pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation.

If the controller is subject to a legal obligation which makes the processing of personal data necessary, such processing is lawful pursuant to point c) of art. 6 par. 1 of the General Data Protection Regulation.

In rare cases, processing personal data is necessary in order to protect the vital interests of the data subject or of another natural person. This applies, for example, if the controller is aware that the data subject is injured and the controller needs to call for medical assistance. In such and similar cases, the processing of personal data is lawful pursuant to point d) of art. 6 par. 1 of the GDPR.

EVENTED GmbH is allowed to process personal data pursuant to point f) of art. 6 par. 1 0f the GDPR for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and liberties of the data subject which require protection of personal data. The execution of business activities for the benefit of our employees and our shareholders is a legitimate interest.

EVENTED GmbH explains explicitly that we are legally bound to provide personal data to some extent. This applies, for example, in relation to the tax law and contractual provisions. A contract with the controller can only be concluded if the necessary personal data of the person concerned is fully provided. If you have any questions concerning the basis and necessity of processing, you can contact the controller by any of the communication means stated above.