Data Privacy Policy

Privacy Policy | Tempodrom Betriebsgesellschaft mbH & Co. KG

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is: 

Tempodrom Betriebsgesellschaft mbH & Co. KG
Möckernstr. 10
10963 Berlin
+49 (0) 30-747 37-0
info@tempodrom.de
www.tempodrom.de

Contacting the data protection officer

The data protection officer of the controller is:

DataCo GmbH
Nymphenburger Str. 86
80636 Munich
+49 89 7400 45840
www.dataguard.de

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We will only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)-You have given us your consent to process your personal data for the specific purpose that we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections “Exercising your rights” in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) -We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - We must use your data to comply with the law.

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) -The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) -The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

Legitimate interests (Art. 6 para.1 p.1 lit. f GDPR) -The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or legal obligation and you do not provide the requested data.

Data sharing and international transfers

As explained in this Privacy Policy, we use various service providers to help us provide our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, which oblige them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” standard of data protection according to the European Commission, or by using another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.

Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller

1. the right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this data and to the following information:

• Purposes of processing
• Categories of personal data
• Recipients or categories of recipients
• Planned storage duration or the criteria for determining this duration
• The existence of the rights to rectification, erasure, restriction or objection
• Right to lodge a complaint with the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
• If applicable, transfer of personal data to a third country or international organization

2. right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

• You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
• In the case of unlawful processing, you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need your personal data for the purposes of the processing, but you require your personal data for the establishment, exercise or defense of legal claims, or
• after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

• 4. right to erasure (“right to be forgotten”) (Art. 17 GDPR)

  If one of the following reasons applies, you have the right to demand that your personal data be erased without undue delay

• Your data is no longer necessary for the processing purposes for which it was originally collected.
• You withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
• Your personal data is processed unlawfully.
• The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Please note that the above reasons do not apply if processing is necessary:

• For exercising the right of freedom of expression and information;
• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
• For reasons of public interest in the area of public health.
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
• For the establishment, exercise or defense of legal claims.

5. right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used

• The user's operating system

• Date and time of access

• Websites from which the user's system accesses our website

• Websites that are accessed by the user's system via our website

• (anonymized) IP address of the requesting computer, access status/HTTP status code, amount of data transferred in each case

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

3. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

5. exercising your rights

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

Use of cookies

1. description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Below we describe the type of cookies we use:

We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.

The following data is processed when technically unnecessary cookies are set:

• IP address

• Location of the Internet user

• Date and time the website was accessed

• Tracking of the surfing behavior

• Cookie settings of the website visitor
   
• Session ID of the website visitor

2. purpose of the data processing

The use of technically unnecessary cookies is for the purpose of improving the quality of our website, its content and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can thus constantly optimize our offer. In particular, these cookies are used for the following purposes:

Analysis cookies are used by third-party providers and help us to improve our online offerings: Cookie from Google for website analytics. Generates statistical data on how visitors use the website. External content from interactive, streaming and map services is blocked by default. If cookies from external media are accepted, access to this content does not require manual consent: Spotify is used to unblock the Spotify music player. YouTube is used to unblock YouTube video. TikTok is used to unblock TikTok videos. Instagram is used to unblock Instagram posts. Google Maps is used to unblock Google Maps maps.

3. legal basis for data processing

The provisions of the Telecommunications and Telemedia Data Protection Act (TTDSG) apply to the storage of information in the end user's terminal equipment and/or access to information already stored in the end user's terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored and accessed on your terminal equipment on the basis of Section 25 (2) No. 2 TTDSG. The purpose of storing and accessing the information in your terminal equipment is to make it easier for you to use our website and to be able to offer you our services as you have requested. Some functions of our website would not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted at the end of the session (e.g. logging out or closing the browser) or after a specified period of time. Information on different storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG i.V.m. Art. 6 para. 1 lit. a, Art. 7 GDPR. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.

4. Exercising your rights

You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link https://www.tempodrom.de/datenschutz/

Newsletter

1. description and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us.

In order to provide this service, we collect the following data from you

• E-mail address

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

No data will be passed on to third parties in connection with the data processing for sending newsletters. The data will be used exclusively for sending the newsletter.

2. Purpose of data processing

The purpose of collecting the user's e-mail address is to send the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

3. legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given his consent.

4. duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected during the registration process will generally be deleted after a period of seven days.

5. Exercising your rights

The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.

This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.

E-mail contact

1. description and scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored.

The data is used exclusively for processing the conversation.

2 Purpose of data processing

In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

3. legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to respond to your request sent by e-mail in the best possible way.

If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest

5. Exercising your rights

If the user contacts us by email, they can object to the storage of their personal data at any time by sending an email to info@tempodrom.de In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

Contact form

1. description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is stored when the message is sent:

• e-mail address

• Last name

• First name

• Your address

• Telephone/mobile phone number

• Function, zip code, city, company, homepage/company website, event data (date, occasion etc.)

• Date and time

2. purpose of data processing
The processing of personal data from the input mask of the contact form or via the e-mail address provided serves us solely to process the contact. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal basis for data processing
The legal basis for the processing of data transmitted in the context of sending an e-mail is Art. 6 par. 1 S. 1 lit. f DSGVO. Our legitimate interest is to provide you with the best possible response to your inquiry via the contact form. If the e-mail contact is aimed at concluding a contract, the further legal basis for the processing is Art. 6 Abs. 1 S. 1 lit. b DSGVO.

4. Duration of storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for personal data from the input mask of the contact form and for data sent by e-mail when the respective conversation with the user has been terminated. The conversation shall be deemed to have been terminated when the circumstances indicate that the matter in question has been finally clarified.
The personal data additionally collected during the sending process will be deleted after a period of seven days at the latest.

5. Exercise of your rights
If the user contacts us via the input mask of the contact form, he can object to the storage of his personal data at any time in the following way
You can object to the processing at any time by sending an e-mail to info@tempodrom.de. In this case, all personal data stored as part of the contact will be deleted.

Submit your application via email and our online form
Application by email and application form There is an application form on our website that can be used for electronic applications. If an applicant takes advantage of this option, the data entered in the input mask is sent to us and saved. This data is:

• Salutation
• Last name
• First name
• Telephone number
• Email address
• Salary expectations
• Information on training and education
• Language skills & motivation
• Earliest possible start date
• Upload cover letter, CV, references, certificates
• Academic title Alternatively

You can also send us your application by email. In this case, we will record your email address and the data you provided in the email. After sending your application, you will receive confirmation of receipt of your application documents from us by email. We also offer an applicant/talent pool. Your data will not be passed on to third parties. The data will only be used to process your application.

2. Purpose of data processing

The processing of personal data from the application form serves solely to process your application. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the application form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for processing your data is the initiation of a contract which takes place at the request of the person concerned, Art. 6 Para. 1 Clause 1 Letter b Alt. 1 GDPR and Section 26 Para. 1 Clause 1 BDSG.

The legal basis for processing the data within the framework of the applicant pool is the applicant's express declaration of consent, Art. 6 Para. 1 Clause 1 Letter a, Art. 7 GDPR.
You can revoke your consent at any time with effect for the future.

4. Duration of storage

After the application process has been completed, the data will be stored for up to 3 months. Your data will be deleted after the 3 months have expired at the latest. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of objection

The applicant has the opportunity to object to the processing of personal data at any time by sending an email to (HR@kps.de) and to revoke his consent. In such a case, the application can no longer be considered.

All personal data that was saved in the course of electronic applications will be deleted in this case.

Company appearances

Instagram:
Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland On our company page we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. real name or photo of your user profile) public. However, since we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our company presence on social networks for communication and the exchange of information with (potential) customers. Our company presence on www.tempodrom.de serves as a central information platform for all interested parties and visitors to the Tempodrom. Here you can find out everything you need to know about the events taking place, about our location and the rooms that can be rented for public events and company events, as well as information about our gastronomic offerings and general information about visiting the Tempodrom.

Below we explain the main areas and functions of our website:

1. Event information
On www.tempodrom.de you will find detailed information about our current and upcoming events.
This includes: Event calendar: A clear calendar that shows all planned events, sorted by date. Event descriptions: Each event is presented with a comprehensive description, including date, time, location and ticket prices. Ticket sales: Tickets can be conveniently purchased online via direct links. We work with established ticket providers to ensure a safe and easy purchasing process.

2. Information about the Tempodrom
Our website offers extensive information about the Tempodrom itself: History and architecture: An introduction to the history of the Tempodrom, the special architecture and the most important milestones in our development. Virtual tour: An interactive tour of our premises that allows visitors to explore the Tempodrom virtually. Rental options: Information about the possibility of renting the Tempodrom for your own events, including details of available rooms, technical equipment and contact information for inquiries.

3. Service and support
ur corporate presence also offers comprehensive support for our visitors: FAQ section: Answers to frequently asked questions about events, tickets, getting there and more. Getting there and parking: Detailed directions for various means of transport as well as information on parking options near the Tempodrom. Contact information: Easy ways to get in touch with us, be it via a contact form, email or phone.

4. Current news and updates
We keep our visitors up to date with the latest news and updates: News: Regular posts about news, special events, artists and other relevant location topics. Newsletter: Opportunity to sign up for our newsletter to be regularly informed about upcoming events and special offers.

5. Social media integration
Our website is linked to our social media channels so that visitors can also get the latest information and updates there: Instagram, Facebook, TikTok, LinkedIn and X: Links to our profiles where we also share current news, event announcements and other content. By using www.tempodrom.de we want to ensure that our visitors are always well informed and have a positive experience. We invite you to visit our website and learn more about the Tempodrom and our diverse offerings.

The publications on the company website can contain the following content:

• Information about services

• Competitions

• Advertising

• Customer contact

• Event details, visitor information

Every user is free to publish personal data through activities. If we process your personal data to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 Para. 1 Clause 1 Letter a, Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 Para. 1 Clause 1 Letter f GDPR.

Our legitimate interest is to be able to answer your query as best as possible or to provide the information requested. If the aim of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 Para. 1 Letter b GDPR. We store your activities and personal data published on our Instagram company website until you revoke your consent. In addition, we comply with statutory retention periods. We process data from our company presence in our systems. This is stored there for the following period:

Contact requests: Data collected as part of contact requests will be deleted after the request has been answered and any further communication has taken place, but no later than after 1 year. Alternatively, contact can be made via the email address provided. In this case, the user's personal data transmitted with the email will be stored. The data will be used exclusively for the purpose of processing the corresponding contact requests and serve to prevent misuse of the contact form and to ensure the security of our systems. The legal basis for the processing of the aforementioned personal data is Art. 6 Para. 1 Clause 1 Letter f GDPR (legitimate interests).

The legitimate interest arises from the fact that we can only carry out the action desired by the user (e.g. answering inquiries) by processing the user's data accordingly. If the contact is aimed at concluding a contract, Art. 6 Para. 1 Letter b GDPR (performance of the contract and pre-contractual measures) is also the legal basis for the processing. We have concluded a data processing agreement in accordance with Art. 28 (3) GDPR for the processing of your personal data. You can object to the processing of your personal data that we collect as part of your use of our company presence at any time and assert your rights as a data subject, as set out in the "Your Rights" section of this data protection declaration. To do so, send us an informal email to datenschutz@tempodrom.de and info@tempodrom.de.

You can find further information on the processing of your personal data by Instagram and the corresponding objection options here: Instagram: https://help.instagram.com/519522125107875

X:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
On our company page we provide information and offer X users the opportunity to communicate. If you carry out an action on our X company website (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. real name or photo of your user profile) public. However, since we generally or largely have no influence on the processing of your personal data by X, we cannot make any binding statements about the purpose and scope of the processing of your data. We use our company presence on social networks for communication and the exchange of information with (potential) customers.

Our company website at www.tempodrom.de serves as a central information platform for all interested parties and visitors to the Tempodrom. Here you can find out everything you need to know about the events taking place, about our location and the rooms that can be rented for public events and company events, as well as information about our gastronomic offerings and general information about visiting the Tempodrom. Below we explain the main areas and functions of our website:

1. Event information
On www.tempodrom.de you will find detailed information about our current and upcoming events. This includes: Event calendar: A clear calendar that shows all planned events, sorted by date. Event descriptions: Each event is presented with a comprehensive description, including date, time, location and ticket prices. Ticket sales: Tickets can be conveniently purchased online via direct links. We work with established ticket providers to ensure a safe and easy purchasing process.

2. Information about the Tempodrom
Our website offers extensive information about the Tempodrom itself: History and architecture: An introduction to the history of the Tempodrom, the special architecture and the most important milestones in our development. Virtual tour: An interactive tour of our premises that allows visitors to explore the Tempodrom virtually. Rental options: Information about the possibility of renting the Tempodrom for your own events, including details of available premises, technical equipment and contact information for inquiries.

3. Service and support
Our corporate website also offers comprehensive support for our visitors: FAQ section: Answers to frequently asked questions about events, tickets, getting there and more. Getting there and parking: Detailed directions for various means of transport as well as information on parking options near the Tempodrom. Contact information: Easy ways to get in touch with us, be it via a contact form, by email or by phone.

4. Latest news and updates We keep our visitors up to date with the latest news and updates: News: Regular posts on news, special events, artists and other relevant location topics. Newsletter: Opportunity to sign up for our newsletter to be regularly informed about upcoming events and special offers.

5. Social Media Integration
Our website is linked to our social media channels so that visitors can also get the latest information and updates there: Instagram, Facebook, TikTok, LinkedIn and X: Links to our profiles, where we also share current news, event announcements and other content. By using www.tempodrom.de we want to ensure that our visitors are always well informed and have a positive experience.

We invite you to visit our website and find out more about the Tempodrom and our diverse offerings. The publications about the company's presence can contain the following content:

• Information about services

• Competitions

• Advertising

• Customer contact

• Event details, visitor information

Every user is free to publish personal data through activities. If we process your personal data to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 Para. 1 Clause 1 lit. a, Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest is to be able to answer your request as best as possible or to provide the information requested.

If the aim of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 Paragraph 1 Letter b of GDPR. We store your activities and personal data published via our X company website until you revoke your consent. In addition, we comply with the statutory retention periods.

We continue to process data from our company website in our systems. This is stored there for the following period: Contact requests: Data collected as part of contact requests is deleted after the request has been answered and any further communication has taken place, but no later than after 1 year. Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.

The data is used exclusively for the purpose of processing the corresponding contact requests and serves to prevent misuse of the contact form and to ensure the security of our systems. The legal basis for the processing of the aforementioned personal data is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR (legitimate interests). The legitimate interest arises from the fact that we can only carry out the action desired by the user (e.g. answering inquiries) by processing the user's data accordingly. If the contact is aimed at concluding a contract, Art. 6 Paragraph 1 Letter b of GDPR (performance of the contract and pre-contractual measures) is also the legal basis for the processing.

We have concluded a data processing agreement in accordance with Art. 28 Paragraph 3 of GDPR for the processing of your personal data. You can object to the processing of your personal data, which we collect as part of your use of our company presence, at any time and assert your rights as a data subject, as set out in the "Your rights" section of this data protection declaration. To do so, send us an informal email to datenschutz@tempodrom.de and info@tempodrom.de. You can find further information about the processing of your personal data by X and the corresponding objection options here: X: https://x.com/de/privacy

Use of company profiles in career-oriented networks

1. Scope of data processing
The company profile is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company profile.

On our site we provide information and offer users the opportunity to communicate. The company profile is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company profile.

You can find more information in the privacy policy of: LinkedIn: https://www.linkedin.com/legal/privacy-policy

If you carry out an action on our company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. real name or photo of your user profile) public.

2. Legal basis for data processing
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 Para. 1 Clause 1 Letter f of GDPR. Our legitimate interest is to be able to answer your query as best as possible or to provide the requested information. If the aim of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 Para. 1 Letter b of GDPR.

3. Purpose of data processing
Our company website serves to inform users about our services. Every user is free to publish personal data through activities.

4. Duration of storage
We store your activities and personal data published via our company website until you revoke your consent. In addition, we comply with the statutory retention periods.

5. Exercising your rights
You can object to the processing of your personal data that we collect as part of your use of our company website at any time and assert your rights as a data subject, as set out in the "Your rights" section of this privacy policy. To do so, send us an informal email to the email address provided in this privacy policy. You can find more information on exercising your rights here: LinkedIn: https://www.linkedin.com/legal/privacy-policy

Hosting

The website is hosted on servers by a service provider commissioned by us. Our service provider is: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

You can find more information about the processing of personal data by Hetzner at: https://www.hetzner.com/legal/privacy-policy

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
• Information about the browser type and version used
• The user's operating system
• Date and time of access
• Websites from which the user's system accesses our website • Websites accessed by the user's system via our website • (anonymized) IP address of the requesting computer, access status/HTTP status code, amount of data transferred in each case This data is not merged with other data sources. This data is collected on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website error-free and to optimize its functions. The website server is geographically located in Germany.

Integrated third-party services
We use various service providers to provide the services we offer on the website. In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential to providing the basic service offered on the website in order to provide the relevant website service. If such services are required for additional services, extended functions or additional purposes, your personal data will only be shared with service providers if you give your consent. You can revoke your consent to use integrated third-party services and manage your consent settings at any time here: https://www.tempodrom.de/datenschutz/ Use of Facebook Comments

1. Scope of processing of personal data
e use functions of the social network Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H , D2 Dublin, Ireland (hereinafter: Facebook).
We use this plugin to expand the functionality of our online presence. Users can use Facebook Comments to comment on content on our online presence using their Facebook account. This allows personal data to be stored and evaluated, especially the user's activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). We have no information about the exact extent to which personal data is collected. You can find more information about how Facebook processes data here: https://de-de.facebook.com/policy.php

2. Purpose of data processing
The use of the Facebook Comment Plug-In serves to improve the user-friendliness of our online presence. We use this plug-in to be able to offer an embedded comment function directly on Facebook without users having to leave our online presence.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent Facebook from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on objection and removal options with Facebook, see: https://de-de.facebook.com/policy.php

Use of Google Analytics 4 (GA 4)

1. Scope of processing of personal data
We use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google).

Google Analytics examines, among other things, how website visitors use our site. Google places cookies on your device. During the visit, user behavior is recorded in the form of "events". This means that personal data can be stored and evaluated, including:
• First visit to the website
• Interaction with the website, usage path
• Clicks on external links
• Video usage
• File downloads
• Advertising impressions and clicks
• Scrolling behavior (if to the end of the page)
• Searches on the website
• Language selection
• Page visits
• Location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
• Your internet provider
• Referrer URL

We use the User ID function. Using the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyze user behavior across devices. By default, IP address anonymization is activated in GA 4. This means that your IP address is shortened by Google within the member states of the European Union or other contracting states to the Agreement on the European Economic Area. Only in rare cases will the full IP address be transferred to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser will not be merged with other Google data as part of Google Analytics. You can find more information about how Google processes data here: https://policies.google.com/privacy

2. Purpose of data processing
We use GA 4 to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyze the performance of our website and to display targeted advertising to people who have already expressed an initial interest by visiting the site.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR.

4. Duration of storage
After 2 months, your personal data will be deleted. This deletion occurs automatically once a month.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can revoke your consent using our Cookie Consent Tool. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser. You can find more information on objection and removal options with Google at: https://policies.google.com/technologies/partner-sites

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de You can use the following link to deactivate Google's use of your personal data: https://adssettings.google.de

Use of Google Maps

1. Scope of processing of personal data
We use the online map service Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use the Google Maps plug-in to visually display geographical data and embed it on our website.

By using Google Maps on our website, information about the use of our website, your IP address and addresses entered in the route planning function are transmitted to a Google server and stored there. You can find more information about how Google processes data here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing
The use of the Google Maps plug-in serves to improve the user-friendliness and an appealing presentation of our website.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de For more information on objection and removal options against Google, please visit: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google ReCaptcha

1. Scope of processing of personal data
We use Google ReCaptcha from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is intended to check whether data entry is compliant and was not carried out by a bot. To do this, Google ReCaptcha analyzes and authenticates the behavior of an online presence visitor with regard to a wide variety of characteristics. This allows personal data to be stored and evaluated, especially the user's activity (in particular mouse movements and which elements have been clicked on) and device and browser information (in particular time, IP address and operating system). The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing
The use of Google ReCaptcha serves to protect our online presence from misuse.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfil the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

You can find more information on objection and removal options against Google at: https://policies.google.com/privacy?gl=DE&hl=de"

Use of Instagram plugin

1. Scope of processing of personal data

We use plug-ins from the Instagram service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as Facebook). We use the integrated Instagram buttons to enable a link to our Instagram profile. A widget is also integrated that enables us to display certain photos and videos from our Instagram profile on our online presence.

When you visit a page of ours that contains such a plug-in, your browser establishes a direct connection to a Facebook server. The contents of the plug-ins are transmitted directly to your browser and integrated into the online presence. Data is automatically transferred to Instagram and stored on their servers. This transmitted data includes connection data (such as your IP address, date and time, the URL accessed) as well as the browser and operating system used. Your visit to our pages can therefore be tracked by Instagram, even if you are not actively using the plug-in functions. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to assign the visit to our pages to your user account.

If you want to prevent this direct assignment, you must log out of Instagram before visiting our online presence. You can find more information on this in Instagram's privacy policy: https://help.instagram.com/155833707900388

2. Purpose of data processing
The use of the Instagram plug-in serves to improve the external presentation of our company.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent the collection and processing of your personal data by Instagram by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

For more information on objection and removal options against Instagram, see: https://help.instagram.com/155833707900388

Use of LinkedIn

1. Scope of processing of personal data
We use functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (hereinafter referred to as LinkedIn). Every time you access one of our pages that contains LinkedIn functions, a connection is established to LinkedIn servers. LinkedIn is informed that you have visited our website using your IP address. If you click on LinkedIn's "Recommend button" and are logged into your LinkedIn account, LinkedIn can assign your visit to our website to you and your user account.

This allows personal data to be stored and evaluated, especially the user's activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system). We would like to point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn. You can find more information about how LinkedIn processes data here: https://www.linkedin.com/legal/privacy-policy

2. Purpose of data processing
The use of the LinkedIn plug-in serves to make our online presence more user-friendly.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent LinkedIn from collecting and processing your personal data by preventing third-party cookies from being saved on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, transmission can be prevented by logging out of your LinkedIn account before accessing our website. You can deactivate the use of your personal data by LinkedIn using the following links: https://www.linkedin.com/psettings/guest-controls

You can find more information on objection and removal options with LinkedIn at: https://www.linkedin.com/legal/privacy-policy

Use of X

1. Scope of processing of personal data We use the social plugins of Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (hereinafter referred to as X). With the social plugins we can integrate content from X (in particular tweets or moments) or links to the X platform (in particular tweet or follow button) on our online presence. This allows personal data to be stored and evaluated, especially the user's activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system).

By using X and the "Re-Tweet" function, the online presences you visit are linked to your X account and made known to third parties. We do not receive any information about the content of the data transmitted and its use by X. Further information on the processing of data by X can be found here: https://X.com/de/privacy

2. Purpose of data processing
The integration of the X plug-in serves to improve user-friendliness. Content from X can be displayed embedded and users of the X service can use functions of X.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent the collection and processing of your personal data by X by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on objection and removal options with X, see: https://X.com/de/privacy

Use of YouTube

1. Scope of processing of personal data
We use the YouTube plug-in operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and its representative in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). We use the YouTube plug-in to embed YouTube videos on our website. When you visit our website, your browser establishes a connection to YouTube's servers. This allows personal data to be stored and evaluated, especially the user's activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). We have no influence on the content of the plug-in. If you are logged into your YouTube account during the visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this information is sent directly to YouTube and stored there.

You can find more information about how Google processes data here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing
The use of the YouTube plug-in serves to improve user-friendliness and an appealing presentation of our online presence.

3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Duration of storage Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de You can find further information on objection and removal options against Google at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Spotify

1. Scope of processing of personal data
We use functionalities of the Spotify music streaming service from Spotify AB, Regeringsgatan 19, SE-111 53, Stockholm, Sweden (hereinafter referred to as Spotify). Spotify is a digital music, podcast and video streaming service that gives us the opportunity to offer our digital content via a range of devices such as computers, phones, tablets, speakers, televisions and cars.

In particular, the following personal data is processed by Spotify:
• Information about the type of Spotify service subscription
• Information about interactions with the Spotify service
• Conclusions about your interests and preferences based on the use of the Spotify service
• User-generated content
• URL information
• Online identifiers including cookie data and IP addresses
• Information about the device types used
• Device attributes of devices in your WiFi network that are available for connecting to the Spotify service
• Non-exact location determined from technical data
• Motion-generated or orientation-generated mobile sensor data

Cookies and other similar technologies from Spotify are stored on your device. 
You can find more information about the use of cookies by Spotify here: https://www.spotify.com/de/legal/cookies-policy/

Spotify assures that data transfer to other countries is carried out in accordance with the respective data protection laws and that, for example, the standard data protection clauses approved by the EU Commission are in place. Other recipients of the data are:
• Service providers
• Payment processors
• Advertising partners
• Spotify partners
• Scientific research
• Other Spotify group companies
• Law enforcement and data protection authorities
• Buyers or prospective buyers

However, since we generally have no influence on the processing of your personal data by the Spotify companies, which are jointly responsible for our corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data. You can find more information on the processing of data by Spotify here: https://www.spotify.com/de/legal/privacy-policy/

2. Purpose of data processing
We use Spotify to provide audio formats such as music and podcasts.

3. Legal basis for the processing of personal data
The legal basis for data processing is Art. 6 Para. 1 Clause 1 Letter f of GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. Duration of storage
The data generated by the company's presence is not stored in our own systems. Your personal information will be stored by Spotify for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights
You can prevent Spotify from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on objection and removal options with Spotify, see: https://www.spotify.com/de/legal/privacy-policy/

Integration of plugins via external service providers

1. Description and scope of data processing
We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you access our website, a connection is established to the servers of the providers we use in order to retrieve content and save it in the cache of the user's browser. This means that personal data can be stored and evaluated in server log files, especially device and browser information (in particular the IP address and the operating system).

We use the following services:
• 360 degree tour by nexpics

2. Purpose of data processing
The use of the functions of these services serves to deliver and accelerate online applications and content.

3. Legal basis for data processing
This data is collected on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website. 4. Duration of storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Exercising your rights Information on exercising your rights against 360 Grad Tour by nexpics can be found at: https://www.nexpics.com/datenschutzerklarung/

Video surveillance when visiting the Tempodrom

I.) GENERAL
At this point we would like to inform you about the processing of your personal data as part of the video surveillance when visiting the Tempodrom event venue. The controller within the meaning of the EU General Data Protection Regulation No. 2016/679 ("GDPR") with regard to the processing of personal data in connection with video surveillance is Tempodrom Betriebsgesellschaft mbH & Co. KG, Möckernstr. 10, 10963 Berlin, Germany, ("Tempodrom", "we", "us").

You can contact us at this address, via info@tempodrom.de or by phone: +49 (0) 30 747 37 220.

For all questions about data protection (including the assertion of your rights under Section 5), you can also contact our data protection officer directly. The contact details of the data protection officer are: Data protection officer, Tempodrom Betriebsgesellschaft mbH & Co. KG, Möckernstr. 10, 10963 Berlin, Germany; datenschutz@tempodrom.de.

In the following, we explain to you which data we collect as part of video surveillance, for what purposes and in what way we use this data and what rights you are entitled to.

II.) PROCESSING OF YOUR DATA
We process your personal data obtained through video surveillance for the purposes of building protection, property security, vandalism prevention and event security. The personal data processed as part of video surveillance is biometric data. The processing is based on the legal basis of Art. 6 Para. 1 lit. f) GDPR (legitimate interest).

III.) DATA TRANSFER TO THIRD PARTIES
The personal data collected as part of video surveillance will not be passed on to third parties or transmitted in any other way without your consent - subject to other cases expressly described in this data protection declaration. Excluded from this are transfers of personal data to state institutions and authorities insofar as we are legally obliged to do so or for the purpose of prosecuting criminal offenses. The legal basis for this processing of your personal data is Art. 6 Para. 1 Clause 1 Letter c) GDPR (fulfillment of a legal obligation) or Art. 6 Para. 1 Clause 1 Letter f), Paragraph 4 GDPR (legitimate interest).

IV.) DURATION OF STORAGE OF YOUR PERSONAL DATA
We generally only store your personal data obtained by us in connection with video surveillance for as long as it is necessary to check whether further storage is required for the purposes stated in section 2. This will usually require a period of 72 hours (but at least 48 hours). If our review shows that storage is not necessary for the purposes stated in section 2, we will delete the recordings immediately unless further storage is planned - e.g. due to mandatory statutory retention periods. The standard deletion period is 7 days.

V.) YOUR RIGHTS
You have the right to request information from us at any time about the personal data we have stored about you. If the legal requirements are met, you also have the right to have the relevant data corrected, deleted or restricted from being processed. You also have the right to object to the processing of your data by us and to receive the personal data concerning you from us in a structured, common and machine-readable format (you can transmit this data to other locations or have it transmitted). If you believe that our processing of the personal data concerning you violates applicable data protection law, you can complain to the responsible supervisory authority for data protection.

VI.) DATA SECURITY
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge of it. These are always adapted in line with the current state of the art.

Changes to the data protection declaration
We reserve the right to change the data protection declaration in order to adapt it to any changes in the legal situation or changes to the service and data processing. This data protection declaration was created with the support of DataGuard.