Privacy statement

I. Name and address of the person responsible

The person responsible within the meaning of the Basic Data Protection Ordinance and other national data protection laws of the member states as well as other data protection regulations is:

Zytanien gGmbH
Ziegeleistr. 41
31275 Lehrte
Germany

Represented by:
Chief executive officer: Florian Ričko

Contact:
Phone: 0171-3446071
E-Mail:  

Register entry:
Registry court: Amtsgericht Hildesheim
Registry No.: HRB 205899

VAT ID:
Sales tax identification number according to §27a sales tax law: DE319439663

II. General information on data processing

1. Scope of processing of personal data

We only process personal data of our users, as far as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception shall apply in such cases in which prior consent has been obtained on the basis of actual data. Reasons is not possible and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing.

3. Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

III. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, the hosting provider's system automatically collects data and information. from the computer system of the calling computer. The following data is collected and stored in a so-called server log file of the provider:

(1) Information about the browser type and version used
(2) The user's operating system
(3) The IP address of the user
(4) Date and time of access
(5) Websites from which the user's system reaches our website

This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of data processing

It is technically necessary to store the IP address in the provider's system, to enable the website to be delivered to the user's computer.

4. Duration of storage

Data collected by the Provider that is necessary for the provision of the Website will be deleted, as soon as the session is over.
For security reasons (e.g. to investigate misuse or fraud), the log file information is used for the Maximum duration of 7 days stored and then deleted. We reserve the right, however, to store this data for a longer period of time if necessary and to forward it to an investigative authority of the Federal Republic of Germany, if we either become aware of concrete indications of an illegal use or if a legal action has been taken against us. the data has been ordered to be released.

5. Possibility of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

IV. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files, stored by the Internet browser on the user's computer system. This cookie contains a characteristic character string that uniquely identifies the browser. the next time you visit the website.
Some elements of our website require it, that the calling browser can also be identified after a page change. The following data is stored and transmitted in the cookies:

Cookie typePages concerned
Language settingsall
Display sizeall
Login information / PHP SessionIDFestival:Newsletter, Forum, Contact:FAQ, Tickets:Ticket Shop

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of data processing

Some functions of our website cannot be offered or only to a limited extent without the use of cookies. For this it is necessary that the browser is recognized even after a page change. Our cookies are used to make the following services work:

(1) Language selection (English/German)
(2) Sending of optimized image files adapted to display size
(3) Newsletter subscription
(4) Forum registration and usage
(5) Contact form usage
(6) Ticket Shop registration and usage

The data collected by the above-mentioned cookies are not used to create any tracking or usage profiles.

4. Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer. Thus, the user has full control over their use and can restrict the transmission of cookies by making appropriate changes in the settings of the Internet browser or disable cookies completely. Cookies that have already been saved can be deleted at any time. This can also be automated - e.g. when closing the browser.

V. Newsletter

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us. Specifically, this is the following user data:

(1) Firstname
(2) Lastname
(3) E-Mail address

In addition, the following data is collected upon registration:

(1) Date and time of registration
(2) State of registration (un-/confirmed)

While processing the data in the context of the registration process the user's consent will be obtained and a refernece is made to this privacy statement. In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

Legal basis for the processing of data after registration for the newsletter by the user is subject to the user's consent Art. 6 para. 1 lit. a DSGVO.

3. Purpose of data processing

The collection of the e-mail address of the user serves the delivery of the newsletter. The collection of the user name serves the friendly salutation in the newsletter. The collection of other personal data within the registration process serves to prevent misuse of the services or the e-mail address used.

4. Duration of storage

The above data will be stored for as long as the subscription to the newsletter is active, or has not been revoked by the user.

5. Possibility of objection and elimination

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. Besides, there is a link on the newsletter registration page itself to unsubscribe. Thereby a revocation of the consent of the storage of the data collected during the registration process is also possible.

VI. Forum

1. Description and scope of data processing

On our website, we offer users the opportunity to register for our services by entering personal data to register in a forum. The data is entered into an input mask and transmitted to us and saved. The following data is collected during the registration process:

(1) Firstname
(2) Lastname
(3) E-Mail address
(4) Password
(5) Username (nickname)
(6) Date of birth
(7) Gender

In addition, the following data is collected upon registration:

(1) Date and time of registration
(2) State of registration (un-/confirmed)

While processing the data in the context of the registration process the user's consent will be obtained and a reference is made to this privacy statement. No data will be passed on to third parties in connection with data processing in the forum. The data is used exclusively for the unique assignment of the forum posts created by the respective user.

2. Legal basis for data processing

Legal basis for the processing of the data after registration in the forum by the user is subject to the user's consent Art. 6 para. 1 lit. a DSGVO.

3. Purpose of data processing

The collection of the user's e-mail address as part of the registration process serves this purpose, prevent misuse of the services or the e-mail address used. A registration of the user is necessary for the holding ready and the unambiguous assignment. of posts created by the user in the forum.

4. Duration of storage

The above-mentioned data will remain stored until it is either deleted by user himself, or deleted by the forum administrator on request, e.g. because of demonstrably incorrect information.

5. Possibility of objection and elimination

A forum account can be deleted by the the user concerned at any time. For this purpose there is a corresponding link on the user's profile page. When deleting a user account, all user data created in the course of the forum membership will be deleted automatically as well. Furthermore the user may change or delete individual contributions created by him any time.

VII. Contact form and contacting us by e-mail

1. Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

(1) E-mail address
(2) Request

In addition, the following data is collected upon registration:

(1) Date and time of the request

For the processing of the data, the user's consent is obtained and reference is made to this privacy statement within the scope of the sending process. Alternatively, you can contact us via the e-mail addresses provided on the contact page. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for processing the data in the contact form is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. Legal basis for the processing of data transmitted in the course of sending an e-mail, is Art. 6 para. 1 lit. f DSGVO. Is the e-mail contact aimed at concluding a contract? the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of data processing

The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the conversation with the user is finished. The conversation is ended when it can be deduced from the circumstances, that the facts in question have been finally clarified.

5. Possibility of objection and elimination

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. This can be done either in writing or by telephone at the address of the person responsible as specified under I.

VIII. Ticket Shop

1. Description and scope of data processing

A ticket shop is provided on our website where interested visitors can purchase festival tickets in advance for themselves and/or third parties. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

(1) First and last name(s) of ticket recipient(s)
(2) E-mail address(es) of ticket recipient(s)
(3) Number of tickets ordered

In addition, the following data is collected when ordering tickets:

(1) Date and time of order
(2) The number(s) of the tickets ordered

The user's consent is obtained for the processing of the data during the ordering process and reference is made to this data protection declaration. No data is passed on to third parties in connection with data processing in the ticket shop.

2. Legal basis for data processing

In case the user has given his or her consent, the legal basis for processing the data in the Ticket Shop is Art. 6 para. 1 lit. a DSGVO. A further legal basis for processing the data is Art. 6 para. 1 lit. b DSGVO, as processing is absolutely necessary to fulfil a contract of which the user concerned is a contracting party.

3. Purpose of data processing

The processing of personal data serves exclusively to clearly assign the tickets ordered by the user, i.e. to check receipt of payment by the user and to send the tickets to the address(es) specified by the user. Furthermore, the stored personal data is used to validate the user's ticket(s) on entering the festival area.

4. Duration of storage

The data will be deleted as soon as they are no longer required for the above-mentioned purposes of their collection.

5. Possibility of objection and elimination

In principle, the user has the possibility to revoke his consent to the processing of personal data at any time. However, he should be aware that under these circumstances it is no longer possible to verify the tickets presented, and the tickets are therefore considered invalid by the organizer. Furthermore, it is pointed out that §3 of the Ticket Shop's terms and conditions remains unaffected by the revocation of consent to the processing of personal data. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. This can be done either in writing or by telephone at the address of the person responsible as specified under I.

IX. Automatically included third-party services

Within our website, services of third-party providers are automatically included in 2 places as soon as you call up these pages. Your IP address will be automatically transmitted to the third party because without it the third-party provider is not able to send the requested information back to your browser. Specifically, these are the following pages:

1. Info --> by car (https://www.zytanien.de/en/anreise-pkw)

Maps of the service "OpenStreetMap" are included here by OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom.
You can find OpenStreetMap Foundation's privacy statement on: https://wiki.osmfoundation.org/wiki/Privacy_Policy

2. Info --> by rail (https://www.zytanien.de/en/anreise-bahn)

Travel information of DB Vertrieb GmbH, Stephensonstraße 1, 60326 Frankfurt am Main are included here.
The provider uses several cookies of his own on this occasion.
You can find the privacy statement of Reiseauskunft der DB Vertrieb GmbH on: https://www.bahn.de/p/view/home/datenschutz/schutz.shtml

We strongly recommend that you read the above privacy policies BEFORE entering the page mentioned under VIII. 1. and VIII. 2. or in case of doubt not to call up these pages.

X. Possible tracking and collection of data by clicking artist links, video and audio links, etc.

On our "Program" page - but also at other places of our website - there are a lot of links to external providers, which are impossible to be checked by us in advance which services they may include and whether these service comply with the current data protection regulations. As soon as you click on one of these links, your IP address will be automatically transmitted to the third party, because without it the third-party provider is not able to send the requested information back to your browser. In all likelihood, providers will use their own cookies on this occasion to process your data for their purposes.
It is your decision whether you take the risk of unwanted data transmission, or do not click on these links as a precaution. We strongly recommend, at least after entering these pages, to FIRST read the respective privacy statements of those third-party services. In addition, it makes sense to log off from social networks such as Facebook, Twitter and Google BEFORE clicking on these links to prevent any further disclosure of your identity.

XI. Rights of persons concerned

If personal data is processed by you on our website, you are affected within the meaning of the German Data Protection Ordinance (DSGVO). and you have the following rights against the person named under I:

1. Right of information

You can request information from the person responsible (see I.) as to whether personal data concerning you is processed on this website. If such processing has taken place, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to have your personal data corrected or deleted, a right to have the data processed restricted by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;

You also have the right to request information as to whether the personal data relating to you is transferred to a third country or an international organisation. Furthermore, you can demand information as to whether appropriate guarantees in accordance with Art. 46 DSGVO exist in the context of the transmissions being made.

2. Right of correction

You have a right of correction and/or completion by the person responsible, if the processed personal data concerning you is incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right of limitation of processing

Under the following conditions, you may restrict the processing of your personal data:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead demand the restriction of the use of the personal data;
(3) the person responsible no longer needs the personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
(4) if you have filed an objection against the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, except of the storage such data may only be processed with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing of the data has been restricted in accordance with the above-mentioned requirements, you will be informed by the person responsible before the restriction is lifted.

4. Right of deletion

You can demand that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately, if one of the following reasons applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
(3) You file an objection against the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 DSGVO.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
(6) The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

The right to cancellation does not exist insofar as the processing is necessary

(1) to exercise freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the person responsible is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the person responsible;
(3) to assert, exercise or defend legal claims.

5. Right to information

If you have exercised your right of rectification, cancellation or restriction of the processing against the person responsible, the person responsible is obliged to inform all other recipients to whom your personal data have been disclosed of this rectification or cancellation of the data or restriction of the processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

6. Right of data transfer

You have the right to access the personal data that you have provided to the person responsible, in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible, in case

(1) processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be disclosed directly to us. are transmitted by the aforementioned person responsible to another person, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right of data transfer shall not apply to the processing of personal data necessary for the performance of a task which is in the public interest or in the exercise of which has been transferred to the person responsible.

7. Right of objection

You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f DSGVO. The person responsible will then no longer process the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of legal claims.

8. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or living the alleged infringement, if you believe that the processing of personal data concerning you violates the DSGVO. The supervisory authority to which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

XII. Changes to this privacy statement

We reserve the right to adapt this privacy statement accordingly, if this becomes necessary due to changed legal situations or technical changes or extensions on the website. If user consents are required for this or components of the privacy statement contain provisions of the contractual relationship with the users, we will inform the users in advance and, if necessary, obtain the necessary consent.

last update: July 2018