GRAND PRIX EMANUEL FEUERMANNNovember 2022

In order to ensure transparency, our Privacy Policy is modelled on both the GDPR and the Bundesdatenschutzgesetz (Federal Data Protection Act “BDSG”). The specialist terms used by us correspond to the GDPR definitions of these terms.

We refer here in particular to Art. 4 GDPR.

The controller for the purposes of the GDPR and other national data protection laws of the EU member states, as well as any other data protection provisions, is the:

KRONBERG ACADEMY FOUNDATION
Beethovenplatz 1
61476 Kronberg
Germany
Telephone +49 6173 783378
Email: stiftung@kronbergacademy.de
Web: www.kronbergacademy.de

Contact details of the data protection officer for the purposes of Art. 13(1)(b) GDPR:
The data protection officer of the controller is:
Mr Holger Heuermann
Tel. +49 6173 783363
h.heuermann@kronbergacademy.de

Provider identification pursuant to Section 5 German Telemedia Act (TMG) can be found in the Legal Notice.

We collect different categories of data from those who use our services. These are subdivided as follows:

– Personal identification data, e.g.: names, addresses…Electronic identification data, e.g.: IP addresses, screen resolution…

– Contact details, e.g.: telephone numbers, email addresses….

– Contract data, e.g.: date of contract conclusion, separate contract provisions….

– Payment data, e.g.: payment process, account number…

– Input data, e.g.: images that have been uploaded/submitted, text entries…

– Tracking data, e.g.: search terms, articles read…

The GDPR constitutes the sole legal basis for the processing of data.
It is necessary for us to perform processing in order to provide the best possible service. More detailed descriptions of the different purposes can be found in the corresponding subsection.

Processing is based exclusively on the following legal foundation:

In accordance with Art. 6(1)(a) and Art. 7 GDPR, processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

In accordance with Art. 6(1)(b) GDPR, processing is lawful if such processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.

In accordance with Art. 6(1)(c) GDPR, processing is lawful if such processing is necessary for compliance with a legal obligation to which the controller is subject.

In accordance with Art. 6(1)(d) GDPR, processing is lawful if such processing is necessary in order to protect the vital interests of the data subject or of another natural person.

In accordance with Art. 6(1)(f) GDPR, processing is lawful if such processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

In principle, data shall not be passed on to third parties. There may be circumstances, however, in which it is appropriate to outsource data processing to an external service provider to allow us to perform our work (for example, address data are transmitted to transport companies to enable them to deliver products that have been purchased).

We shall only transfer data to recipients with whom we have concluded a contract on commissioned data processing as defined by Art. 28 GDPR. This article stipulates how data pertaining to data subjects should be handled, and ensures they are protected.

Data subjects have the following rights:

– Full right of access regarding the processed data pursuant to Art. 15 GDPR

– Right to rectification of the data pursuant to Art. 16 GDPR

– Right to GDPR-compliant portability of data pursuant to Art. 20 GDPR

– Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

– Right to withdraw data processing consent pursuant to Art. 7(3) GDPR

– Right to object on personal grounds pursuant to Art. 21 GDPR or, specifically, a right to processing in accordance with Art. 6(1)(f) GDPR

– Right to erasure of the data pursuant to Art. 17 GDPR. Should erasure be prevented on grounds arising from Art. 6(1) GDPR, the scope of processing shall be restricted.

– Right to restriction of data processing pursuant to Art. 18 GDPR

What are the data concerned?
Our website uses Matomo, an open source software tool used for statistical evaluation of visitor access. The software places a cookie on the user’s computer (see above for more about cookies). When individual pages of our website are visited, the following information is stored:

– The web pages visited

– The website from which the user came to the web pages visited (referrer)

– The sub-pages called up from the web page originally visited

– The time spent on the website

– The frequency of visits to the website

– Two bytes of the IP address from the user’s visiting system

The software is set so that IP addresses cannot be stored in full, and instead two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). As a result, it is no longer possible to match the shortened IP address to the visiting computer, meaning that each user remains anonymous. The software runs solely on the servers of our website. User data is only stored there. These data are not passed on to third parties.

Purpose and legal basis of processing
Matomo enables us to analyse the surfing behaviour of our users. By evaluating the data collected, we are able to compile information on how individual components of our website are used. This helps us to improve our website and its user-friendliness on a continual basis. Our legitimate interest in processing data as defined by Art. 6(1)(f) GDPR also lies within these purposes. By anonymising IP addresses, we give adequate consideration to users’ interests in protecting their data.

Who is affected?
All visitors to our website until cookies are blocked.

When are these data erased?
The data are erased as soon as they are no longer required for our record-keeping purposes. This is the case after 24 months.

How can data subjects avoid cookies being stored?
Data subjects can decide whether explicit web analytics cookies may be placed on their computer to allow website operators to collect and analyse a range of statistical data.

If data subjects choose to opt out of this, they can click on the following link to place the Matomo deactivation cookie in their browser.

Some data is also processed for purposes and reasons that are intrinsically linked to the Foundation itself. These include marketing purposes and data processing for teaching purposes.

What are the data concerned?

– Personal identification data

– Electronic identification data

– Contact details

– Contract data

– Inputdata

– Payment data

Purpose and legal basis of processing
This data processing takes place in order to be able to run the Kronberg Academy Foundation and meet legal obligations.

The legal basis is thus provided by Art. 6(1)(a) to (c) and (f) GDPR as well as Section 7 German Act Against Unfair Competition (UWG).

Data are passed on to third parties. The categories of recipients are as follows:  payment service providers, communications service providers and web service providers.

Who is affected?
All visitors to our website, interested parties, customers, business partners, those who attend events and employees.

When are the data erased?
The data are erased once the intended purpose has been fulfilled, however this does not take place before the legal archiving and storage obligations have been honoured. We perform checks in this regard every 24 months.

Data are processed on account of subscriptions to our newsletter (post/email). The following data are processed here:

– Personal identification data

– Contact details

– Contract data

Purpose and legal basis of processing
This data processing takes place to enable us to deliver a newsletter.
The legal basis is provided by Art. 6(1)(a) GDPR as well as Section 7 German Act Against Unfair Competition (UWG).

Data are passed on to third parties. The categories of recipients are as follows:  courier services, communications service providers and web service providers.

Who is affected?
All individuals who have subscribed to our newsletter.

When are the data erased?
The data are erased once the intended purpose has been fulfilled, however this does not take place before the legal archiving and storage obligations have been honoured. We perform checks in this regard every 24 months.

Some data is also processed in connection with internal administrative tasks and in order to comply with legal obligations, such as financial accounting.

What are the data concerned?

– Personal identification data

– Electronic identification data

– Contact details

– Contract data

– Payment data

– Input data

– Tracking data

Purpose and legal basis of processing
This data processing takes place in order to be able to manage the Foundation efficiently and meet legal obligations.

The legal basis is thus provided by Art. 6(1)(c) and (f) GDPR.

Data are passed on to third parties. The categories of recipients are as follows:  payment service providers and tax consultants.

Who is affected?
All visitors to our website, interested parties, customers, business partners and employees.

When are the data erased?
The data are erased once the intended purpose has been fulfilled, however this does not take place before the legal archiving and storage obligations have been honoured. We perform checks in this regard every 24 months.

What are the data concerned?
There is a contact form on our website that can be used to establish contact electronically. If a user makes use of this option, the following data are stored:

– Title

– Name

– Contact email address

– Text of message entered by user

– Contact telephone number (if entered by user)

– Date and time of transmission

– IP address of computer from which the form was sent

– Address of page containing the contact form

Alternatively, contact can be made using the email address provided. In this case, the user data transmitted with the email shall be stored.

Data are passed on to third parties. The categories of recipients are as follows:  platform providers of communications tools. The data are used solely to process the conversation.

Purpose and legal basis of processing
Data entered in the input fields or contained in the email are processed solely to allow us to contact you. A necessary, legitimate interest in data processing lies in doing so.

The other data processed during the sending process serve to ensure that the contact form is not misused and also ensure the security of our IT systems.

The legal basis for the processing of data transmitted by means of the form or an email is Art. 6(1)(f) GDPR. If contact is made by email with the intention of concluding a contract, the legal basis for such processing shall be Art. 6(1)(b) GDPR.

Who is affected?
The groups of data subjects involved here are those interested in our services, our customers and any business partners who have made contact with us.

When are these data erased?
The data are erased as soon as they are no longer required to fulfil the purpose for which they were collected. With regard to data entered in the fields of the contact form and data sent to us via email, this shall be the case when the conversation in question between us and the user has ended. The conversation shall be deemed to have ended when circumstances indicate that the facts concerned have been fully clarified.

Data categories processed
Data processing also takes place in connection with our online shop.
The following categories of data are processed here:

– Personal identification data

– Contact details

– Contract data

– Payment data

Purpose and legal basis of processing
This processing is necessary for the performance of the contract and in order to take steps at the request of the data subject prior to entering into the contract. This also includes processing both prior and subsequent to the conclusion of the contract in the form of support queries.

The legal basis for this is therefore Art. 6(1)(b) GDPR.

Furthermore, we are also required to perform processing in order to comply with legal obligations. Mandatory archiving and storage duties are imposed on us.

The legal basis for this is therefore Art. 6(1)(c) GDPR.

Transmission to third parties and processing in third countries
These data are only passed on to third parties if this is necessary for us to fulfil our duties or if we are subject to legal obligations.

In some circumstances, these third parties may be located in third countries.

Categories of third parties here are:

– Couriers/parcel services

– Payment service providers

Who is affected?
The groups of data subjects involved here are those interested in our services, our customers and any business partners who have made contact with us in relation to our shop.

Erasure
The data are erased once the legal archiving and storage obligations have been honoured. We perform checks in this regard every 24 months.

Eventim
We use a solution supplied by CTS EVENTIM AG & Co. KGaA for our online shop. Although it does not appear so on the screen, ticket sales are processed on a web page belonging to our service provider, CTS EVENTIM AG & Co. KGaA. Please be aware that the service provider is CTS EVENTIM AG & Co. KGaA, Contrescarpe 75-A, 28195 Bremen, Germany. In addition to our privacy policy, Eventim has its own policy on the ticket sales pages. Further information can be found here: https://www.eventim.de/help/data-protection/?affiliate=TUG . We have entered into a contract with Eventim for commissioned data processing as defined by Art. 28 GDPR. All data transmitted to Eventim also come to us and are processed as stated in the “Shop” section.