Welcome to Heidelberger Kultur- und Kongressgesellschaft mbH and our online presence, especially www.heidelberg-congress.com
We are pleased that we have gained your attention in our services. The protection of your privacy and your personal data is very important to us. The collection and use of your data is therefore always in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). We, being responsible for the data processing, would thus like to inform you in the following which data we collect and how we process this data.
The GDPR defines personal data as any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or one or more specific characteristics that are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data will only be stored if this is necessary to provide the service booked, to comply with legal requirements or for the purpose stated below.
Anonymised data/log files
You can visit our website without having any personal data collected. Every time you visit our website, however, certain anonymised data is stored, e.g. which page or which offer was called up. However, this data is not personal and is therefore not subject to the legal regulations of the GDPR or the German Federal Data Protection Act (BDSG).
The website operator or site provider collects data on access to the site and stores this as "server log files". The following data is logged like this:
Visited website, time of access, amount of data sent in bytes, source/reference from which you accessed the site, browser used, operating system used, IP address used.
The data collected is used only for statistical purposes and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are concrete indications of illegal use.
A collection of anonymous data takes place solely for statistical evaluation in order to improve our offer. Please also read the sections "Right to information / right of revocation".
Purpose of the collection of personal data
However, the collection of personal data is indispensable if you wish to book a service via our portal, contact us, subscribe to our newsletter or use other offers on our site, for the processing of which personal data is indispensable.
In accordance with the legal regulations and in the interests of data economy, we generally only collect data that is required for the provision of this particular service. As far as we ask for further information in our forms, the information is always voluntary and marked as such.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. In addition, it is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
In the case of booking one of our services, the data collected will be used for the processing of this booking, for advertising purposes and for statistical purposes within the legal requirements.
Legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 Abs. 3 German Act Against Unfair Competition (UWG).
If you subscribe to our newsletter, we will also store and use the personal and service data you provide when making a booking on basis of Art. 6 (1)(f) GDPR in order to provide you with the best possible service as a newsletter subscriber.
The legal basis for the processing of the data by the user after registration for the newsletter is Art. 6 (1)(a) GDPR if the user has given his consent.
We also use the personal data stored by us to maintain customer relations, to provide customer support (e.g. information on the services you have booked), to carry out our own advertising and marketing measures (e.g. the dispatch of catalogues or other advertising mailings within the legally permissible framework, queries on customer satisfaction) and to process orders.
Legal basis for the processing of personal data
If and to the extent that we obtain the consent of the data subject for processing personal data, Art. 6 (1)(a) EU-General Data Protection Regulation (GDPR) serves as legal basis.
Art. 6 (1)(b) GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation, to which our company is subject, Art. 6 (1)(c) GDPR serves as legal basis.
Art. 6 (1)(d) GDPR serves as legal basis in the event that vital interests of the data subject or another natural person require the processing of personal data.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1)(f) GDPR serves as legal basis for the processing.
Disclosure of personal data to third parties
Disclosure of your personal data takes place exclusively if legally required, in particular, if required by data protection regulations and competition acts.
Insofar as this is necessary for the provision of the contractual service owed by us or statutory obligations, your data is also passed on to sub-contractors or service providers for the provision of the service in our name or on our behalf (e.g. technical processing of postal and email dispatch, payment processing, customer service).
In addition, the data is passed on to persons or companies to process your booking. Please note that the data protection regulations at the headquarters of these persons and companies may differ from those in Germany.
A disclosure and transmission of your data to third parties will also take place if we are obliged to do so by law or due to a legally binding judicial procedure.
You have the right to receive the personal data concerning you, which you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer these data to another responsible person without being hindered by the controller to whom the personal data was provided.
Storage and erasure of data
Your personal data will be stored within the scope of the purposes mentioned under "Purpose of the collection of personal data". The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the Controller is subject. The legislator has enacted various obligations and periods for the retention of data. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.
The technical specifications stipulate that only the server can read a cookie sent by it. We assure you that no personal data will be stored in cookies.
Unfortunately, it is only possible to use our services to a limited extent without accepting cookies. We therefore recommend that you permanently activate cookies for our website. Most Internet browsers are set so that they automatically accept cookies. However, you can deactivate the storage of cookies and set your Internet browser in a manner that it notifies you as soon as cookies are sent.
The legal basis for the processing of personal data using cookies is Art. 6 (1)(f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1)(a) GDPR if the user has given his consent.
Use of Google Analytics
The Google tracking codes of this website use the function "_anonymizeIp()", thus IP addresses are only further processed in abbreviated form in order to exclude direct personal references. The data collection and storage can be objected at any time with effect for the future. By clicking the "Deactivate" button, tracking is completely prevented. The browser used must accept cookies so that the objection can be made permanently. Alternatively, you may object to the collection of data by using a Google browser plug-in to prevent the information collected through cookies (including your IP address) from being sent to and used by Google Ireland Limited. The following link will take you to the appropriate plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Use of Google Fonts
Use of Google Maps
Use of Matomo
This website uses Matomo, an open source software for statistical evaluation of visitor access. Matomo uses so-called cookies - text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website will be stored on the server of the provider in Germany. The IP address is anonymised immediately after processing and before it is stored in order to exclude any direct reference to a person.
Possibility to object to tracking by Matomo: Here you can decide whether a unique web analysis cookie may be stored in your browser in order to enable the operator of the website to collect and analyse various statistical data.
If you wish to opt out, click on the following link to place the Matomo deactivation cookie in your browser.
Your visit to this web site is currently being tracked by Matomo Web Analytics. Click here so that your visit is no longer recorded.
Use of Econda
In order to design and optimise this website in line with requirements, anonymised data is collected using solutions and technologies from econda GmbH (www.econda.de) and user profiles are created from this data using pseudonyms. Cookies can be used for this purpose to enable the recognition of an Internet browser. The user profiles are not merged with data on the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are made unrecognisable immediately after receipt. Visitors to this website can object to this data collection and storage at any time for the future by clicking on the following link: www.econda.de/widerruf-zur-datenspeicherung/.
After your objection, an opt-out cookie will be stored on your terminal device. If you delete your cookies, you must click the link again.
Funtions of the music service Spotify are integrated on our pages. Provider is the Spotify AB, Birger Jarlsgatan 61, 11356 Stockholm in Sweden. The Spotify plugins are recognizable by the green logo on our page. Find a survey of the Spotify plugins under https://developer.spotify.com.
This allows a direct connection between your browser and the Spotify server via the plugin when you visit our website. Spotify receives the information that you have visited our site with your IP address. You can link the content of our pages to your Spotify profile by clicking the Spotify button when you are logged in to your Spotify account. This allows Spotify to associate your visit to our website with your user account.
Data processing is based on Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in the attractive acoustic design of its website.
For further information, please refer to the privacy police of Spotify: https://www.spotify.com/de/legal/privacy-policy/.
If you do not want Spotify to associate your visit to our website with your Spotify user account, please log out of your Spotify account.
Use of WordPress.com-Stats (Jetpack)
This website uses WordPress.com-Stats, a statistical visitor traffic analysis tool operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA, using tracking technology from Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA. WordPress.com-Stats uses "Cookies", which are text files placed on your computer, to help the website analyse how users use the site.
You can object to the collection and use of the data by Quantcast with effect for the future by clicking on the link "Click here to opt-out" at this point to set an opt-out cookie in your browser: http://www.quantcast.com/opt-out .
If you delete all cookies on your computer, you must set the opt-out cookie again.
Evaluations on Trusted Shops
If you have given us your express consent to this during or after your order by activating a corresponding checkbox or clicking a button ("Evaluate later"), we will send your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Köln (www.trustedshops.de) to remind them of the opportunity to rate your order, so that they can send you an e-mail reminding you of the opportunity to rate your order. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.
Facebook Social Plugins
Our online presence uses social plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland “Facebook”). The plugins can be recognized by one of the Facebook logos (white "f" on a blue tile or a "thumbs up" sign) or by the additional "Facebook Social Plugin". The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/?locale=de_DE
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your Facebook member data, you must log out of Facebook before visiting this website. It is also possible to block Facebook-Social-Plugins with Add-ons for the browser used, for example with the "Facebook Blocker".
This website uses the "Facebook Pixel" of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook"). This allows users to track their behaviour after they have seen or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and may help optimize future advertising efforts.
Die erhobenen Daten sind für uns anonym, bieten also keine Rückschlüsse auf die Identität der Nutzer. Allerdings werden die Daten von Facebook gespeichert und verarbeitet, sodass eine Verbindung zum jeweiligen Nutzerprofil möglich ist und Facebook die Daten für eigene Werbezwecke, entsprechend der Facebook-Datenverwendungsrichtlinie (https://www.facebook.com/about/privacy/) verwenden kann. Der Nutzer kann Facebook sowie dessen Partnern das Schalten von Werbeanzeigen auf und außerhalb von Facebook ermöglichen. Es kann ferner zu diesen Zwecken ein Cookie auf seinem Rechner speichern.
Use of the Google +1 button
Use of the Twitter tweet button
This website uses the “Tweet“-button of the social network Twitter, which is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (“Twitter”). The button is recognizable by the dark blue bird and the word "Tweet" on a light blue background. When a web page of this website containing such a button is accessed, the browser used establishes a direct connection with the Twitter servers. The content of the “Tweet” button is transmitted by Twitter directly to the browser used and the Twitter message is integrated by this browser. The provider therefore has no influence on the amount of data that Twitter collects with the button, but assumes that the IP address is also recorded. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as the relevant rights and setting options for the protection of privacy can be found in Twitter's data protection information: http://twitter.com/privacy. If the visitor is a Twitter member and does not want Twitter to collect data about him/her via this website and link it to the member data stored on Twitter, the visitor must log out of Twitter before visiting this website.
Use of the Xing-Social PlugIns
Use of the LinkedIn Social PlugIn
This website uses plugins of the social network LinkedIn, which is operated by the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The LinkedIn plugins can be recognized by their logo or the "Recommend" button. Please note that the plugin establishes a connection between your internet browser and the LinkedIn server when you visit our website. LinkedIn is thus informed that this website has been visited with your IP address. If you click on the "Recommend" button of LinkedIn and are logged into your account at LinkedIn at the same time, you have the possibility to link content from our website to your profile page at LinkedIn-Profil. In doing so, you enable LinkedIn to assign your visit to our website to you or your user account. You need to know that we do not receive any information about the content of the data transmitted and its use by LinkedIn. For more details about the collection of the data and your legal options and setting options, please contact LinkedIn at https://www.linkedin.com/
Use of the wize.life button
Use of the Pinterest button
This website uses the "Pin-it" button of the social network Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). You can recognize the Pinterest Plugin on our site by the "Pin it-Button" designed in white font on a red background or in red font on a white background, alternatively by a red-white "P" on a white background.
If you click on the Pinterest "Pin it-Button" while logged in to your Pinterest account, you can link the contents of our pages to your Pinterest profile. This makes it possible for Pinterest to assign the visit to our pages to your user account. Being the provider of these pages, we would like to point out that, we do not know the content of the transmitted data or its use by Pinterest. Further information can be found in Pinterest's data protection declaration at: http://pinterest.com/about/privacy
Use of the Instagram button
This website uses social media plug-ins from Instagram, the social network operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. The Instagram plugin can be recognized by the "Instagram button" on our homepage.
If you click the Instagram button while logged into your Instagram account, content from our website can be linked to your Instagram profile. This allows Instagram to assign the visit to our pages to your user account.
Use of etracker
On our website, data is collected and stored for marketing and optimisation purposes using technologies from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com). This data can be used to create user profiles under a pseudonym. For this purpose it is possible that cookies are used. Cookies are small text files that are stored locally in the cache of the Internet browser of the page visitor. The cookies enable the recognition of the Internet browser. The data collected using etracker technologies will not be used to personally identify the visitor to this website and will not be merged with personal data relating to the bearer of the pseudonym without the express consent of the person concerned.
The data collection and storage can be objected at any time with effect for the future. To object to the collection and storage of your visitor data in the future, you can obtain an opt-out cookie from etracker via the following link. This ensures that no visitor data from your browser will be collected and stored by etracker in the future: http://www.etracker.de/privacy?et=V23Jbb .
In doing so, an opt-out cookie with the name "cntcookie" will be set by etracker. Please do not delete this cookie as long as you wish to maintain your objection. Further information can be found in etracker's data policy: http://www.etracker.com/de/datenschutz.html .
If you want to make sure that no data from you is stored on Youtube, do not click on the embedded videos.
Use of Hotjar
Use of Optimizely
This website uses Optimizely, a web analysis service of Optimizely, Inc. ("Optimizely"). Optimizely uses "Cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Optimizely on servers in the United States.
In the event that IP anonymization is activated on this website, Optimizely will, however, shorten your IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the complete IP address will be transmitted to a server from Optimizely in the USA and shortened there. On behalf of the operator of this website, Optimizely will use this information to evaluate your use of the website and to compile reports on website activity.
Use of Olark
Security, questions and suggestions, controller
Eventually, security also depends on your system. You should always keep your access information confidential, never have your Web browser store passwords, and close the Web browser window when you end your visit to our site. This makes it more difficult for third parties to access your personal data.
Use an operating system that can manage user rights. Set up multiple users on your system in the family and never use the Internet under administrator rights. Use security software such as virus scanners and firewalls and keep your system up to date.
The Controller of this website as defined in the GDPR and other national data protection laws of the EU member states as well as other data protection regulations is:
Heidelberger Kultur- und Kongressgesellschaft mbH Neue Schlossstraße 4 69117 Heidelberg Phone: +49 (0) 6221 67917-0 Fax: +49 (0) 6221 67917-99 E-Mail: email@example.com www.heidelberg-congress.com
Right to information / right of revocation; further rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on its details;
- to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
- to demand the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the correctness of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
- to revoke your consent once given to us at any time in accordance with Art. 7 para. 3 GDPR. As a result from this, we are no longer allowed to continue the data processing based on this consent in the future, and
Of course, you are entitled to these rights free of charge. To revoke your consent to the use of data, to request information or correction, blocking or erasure or to exercise further rights of data subjects please contact:
Heidelberger Kultur- und Kongressgesellschaft mbH Neue Schlossstraße 4 69117 Heidelberg Phone: +49 (0) 6221 67917-0 Fax: +49 (0) 6221 67917-99 E-Mail: firstname.lastname@example.org
Competent supervisory authority
You can contact the supervisory authority responsible for you for complaints within the meaning of Art. 77 GDPR at:
Landesbeauftragter für Datenschutz und Informationsfreiheit [State Commissioner for Data Protection and Freedom of Information] Baden-Württemberg PO Box 10 29 32 70025 Stuttgart Telefon: 0711/61 55 41 – 0 E-Mail: email@example.com
If you no longer wish to receive our newsletter or promotional emails, please click on the following link: "Unsubscribe newsletter", which is included at the end of all emails we send.