In the following, we would like to inform you about data protection on our websites and about the type, scope and purpose of the personal data we collect, use and process. Data protection has a high priority for us.

Personal data are all data with which you could be personally identified, such as name, IP address, telephone number, etc.. Some of this data is processed automatically when you visit our website (e.g. IP address, browser type, operating system, etc), or when you give us your consent to process it, or when you provide us with your data voluntarily, e.g. by entering your data in a form on our website.

Furthermore, we would like to inform you about your rights under the GDPR. 
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your personal data processed by us, as well as the right to correct or delete this data.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. If you have given us consent to process your data, you can revoke this consent at any time for the future. Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority.

The person responsible for data protection / processing is the
Amberg Congress Centre 
Municipal enterprise under public law of the city of Amberg
Schießstätteweg 8
92224 Amberg

Tel. 09621/4900-0
Fax. 09621/4900-10
E-mail: acc@amberg.de

Managing Director: Petra Strobl

a company of Amberger Congress Marketing (ACM)
Chairman of the Board: Lord Mayor Michael Cerny
Members of the board: Petra Strobl, Jens Wein

Processing of your data within the scope of the services we provide

In the case of our customers, guests or business partners, or in the event that you are interested in our services, the type, scope and purpose of the processing of your personal data are based on the contractual or pre-contractual relationships existing between us. In this context, we process personal data that we request from you or that you provide to us in order to answer your enquiry, to provide you with an offer or to process your order. The persons concerned are interested parties, business partners and contractual partners. The processing purpose is the handling of contractual services, communication, as well as answering contact requests and office and organisational procedures.

Unless otherwise stated in the further notes of this data protection declaration, the processing of your data, as well as its transfer to third parties, is limited to those data that are necessary and appropriate to answer your enquiries and/or to fulfil the contract, to protect our rights, as well as to fulfil legal obligations. 

The data concerned are 

- Inventory data (e.g. names, addresses)
- Payment data (e.g. bank details, invoices)
- Contact data (e.g. e-mail address, telephone number, postal address)
- Contract data (e.g. subject matter of the contract, duration of the contract)

The legal basis for data processing is Art. 6 I 1 lit. b DSGVO, the fulfilment of the contract or the fulfilment of pre-contractual requests. 

Unless a specific storage period is stated in this data protection declaration, we store your personal data until the purpose for the data processing no longer applies. We delete your personal data when we no longer need it, i.e. after termination of the contractual relationship existing between us, or after our legitimate interest in the further processing of the data has ceased to exist, or if you request us to delete it. Mandatory statutory provisions - in particular statutory retention periods - remain unaffected. Likewise, it may be necessary to process your personal data until the expiry of these periods in order to assert, exercise or defend legal claims arising from contractual relationships, or to protect the rights of another natural or legal person. We will then delete the personal data required for this purpose only after these periods have expired. However, until the expiry of these periods, we limit the processing of this data to these purposes.

Calling up the websites - processing of personal data and type and purpose of use

When you call up our website, you transmit data to our web server (out of technical necessity) via your internet browser. The following data is processed in the server log files during an ongoing connection for communication between your internet browser and our web server:

- the page from which the file was requested - referrer URL
- the name of the file
- the date and time of the request
- a description of the type of web browser / browser version and operating system used
- IP address of the requesting computer
- access status (file transferred, file not found, etc.)
- Amount of data transferred

For technical reasons (calling up the website), this data is stored for a short time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After 7 days at the latest, the IP addresses are deleted or anonymised.

The data is evaluated exclusively for internal purposes and does not allow us to draw any conclusions about your person. A comparison with other data does not take place.

The aforementioned data is processed for the following purposes:
- Ensuring a proper and smooth connection setup of the website,
- Ensuring a comfortable use of the website,
- evaluation of system security and stability

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. The legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. You can visit the website without providing any personal information.

Cookies

We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity. Cookies do not contain any personal data and can therefore not be directly assigned to any user.

The use of cookies serves to make the use of our offer more pleasant for you. For example, we use technically necessary session cookies to save your consent for the implementation of statistical and marketing measures on the website. The legal basis for data processing in this case is Art 6 I S 1 lit c DSGVO in conjunction with § 25 TTDSG. These cookies are automatically deleted after you close your browser.

Furthermore, cookies from third-party services may be used with your consent. The legal basis is then Art 6 I S 1 lit a DSGVO - your consent. These cookies are automatically deleted after a defined period of time. You can see the duration of storage in the overview in the cookie settings of your web browser. You can revoke your consent at any time. Further explanations of the cookies used, their purpose and storage period can be found in our cookie policy. There you can also change and revoke your consent to the setting of cookies at any time.

Google Tag Manager - Google Analytics

This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics may use so-called "cookies" with your consent (Art 6 I S 1 lit a DSGVO). The information about your use of this website, such as browser type/version, operating system used, referrer URL, host name of the accessing computer (IP address) and time of the server request are transmitted to a Google server and processed there. Google may also use other technologies, such as tracking pixels, to analyse the use of the website.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage, such as market research and customising websites. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The IP addresses are anonymised, so that an allocation is not possible (IP masking).

You can find more information on data protection at Google at policies.google.com/privacy or at https://support.google.com/analytics/answer/6004245?hl=de.

Enquiries by e-mail, fax or telephone

If you contact us by e-mail, fax or telephone, your enquiry including all personal data resulting from it (e.g. name, enquiry) will be stored and processed by us for the purpose of processing your request. The data will not be passed on without your consent. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and / or on our legitimate interest (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in effectively processing the enquiries sent to us.

The (e-mail) data sent to us via contact requests will be stored by us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular legal retention periods - remain unaffected.

Data when using our contact form

If you send us a message via our contact form, you can also use a pseudonym instead of your real name. The entry of an e-mail address is necessary to enable us to contact you by e-mail. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

The data you enter in the contact form will only be used by us to respond to your enquiry via the contact form. We do not pass on the data you enter in the contact form to third parties or use this data for any other purpose than to answer your enquiry. Data processing is carried out either for the purposes of fulfilling a contract to which the data subject is a contracting party or for carrying out pre-contractual measures (Art. 6 I S 1 lit b DSGVO), or in accordance with Art. 6 (1) S 1 lit a DSGVO on the basis of your voluntarily given consent and / or on our legitimate interests (Art. 6 (1) lit f DSGVO), as we have a legitimate interest in effectively processing the enquiries addressed to us.

Your data will be deleted once we have completed processing your enquiry, provided that there are no legal obligations to retain the data.

Newsletter

We only send our newsletter with promotional information (hereinafter "newsletter") with the express consent of the recipient in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO. Registration for our newsletter takes place in a so-called double opt-in procedure, i.e. after registering for our newsletter, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no third party can register with your e-mail address. There is no legal or contractual obligation to provide your data, but it is not possible to send a newsletter without providing your data.

Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. 
To register for our newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide your first and last name as well as your address. This information is voluntary and only serves to personalise the newsletter. You can also use a pseudonym.

Your e-mail address will be stored by us until you unsubscribe from our newsletter. You can unsubscribe from the newsletter at any time in the future by either clicking on the link at the end of each newsletter in the newsletter itself or by clicking on the "Unsubscribe from newsletter" link on our website and then following the steps described.

The consent to the sending of e-mail addresses is based on Art. 6 Para. 1 lit. a. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves both our business interests and the expectations of users for information about our products.
We would like to point out that you can revoke your consent to the future processing of your personal data at any time. Further information on your right of revocation can be found under "Data subject rights".
 

Google Maps

With your consent (Art 6 I S 1 lit a DSGVO), this website integrates Google Maps, a mapping service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), for the display of an interactive map and for the creation of directions.

By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server and stored there. Your IP address may also be transferred to the USA. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

When calling up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The Google privacy policy & additional terms of use for Google Maps can be found at https://policies.google.com/privacy?hl=de.

Photo/filming at public events

At public events or trade fairs, photos (photographs) or film recordings (films) may be taken which could also depict participants. These recordings may be published for reporting on the event in the press as well as on the internet in accordance with Art 6 I S 1 lit f DSGVO. Recipients are users of the online and print and video media worldwide.

We assume that the persons participating in the event or otherwise involved consent to the creation and publication of the recordings exclusively for public relations purposes, including in social media, through their behaviour of participation or involvement. Consent includes consent to download recordings from our websites.

For recordings that do not show persons of contemporary history, have persons as an accessory next to landscapes or other localities or recordings that reflect meetings, processions or similar events and their character, you will be asked for your consent in individual cases (Art 6 I S 1 lit a DSGVO). 

In the event that no consent is given for these photographs to be taken or the consent is revoked, you will not suffer any disadvantages.

In the case of photographs in which the focus is on individual persons, the persons concerned have the right and the possibility to inform the photographer at any time that they do not wish to be photographed. Should this not be possible or not be observed, we will subsequently prevent publication by us if we are notified accordingly.

If you do not wish to be pictured in such photographs, you can contact the person in charge or the photographer directly at any time during the event.

As a rule, we keep the photographs and films for archiving purposes indefinitely. Photographs for which consent was obtained because it was required will be deleted immediately upon withdrawal of consent. 

Data protection when sending application documents

If you send us your application documents, we will only use them to decide on your application and will not pass on your data to third parties. We would like to point out that we do not currently offer any encryption of your data when sending application documents by e-mail. However, you can send your attachments encrypted to us by e-mail, e.g. using the 7ZIP programme (http://www.7-zip.de/), and inform us of your password separately, e.g. by telephone. You will receive an e-mail from us to your e-mail address informing you that we have received your application. You can also send us your application by post at any time.

Application data is kept and managed separately from other data records.
If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents are automatically deleted at the latest 6 months after notification of the rejection decision, provided that no other legitimate interests of the controller oppose deletion or the applicant has expressly consented to longer storage and retention of his or her application, e.g. for possible subsequent contact in the case of vacancies. Other legitimate interests in this sense are, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Data processing for the purpose of contacting you and processing your application data is carried out in accordance with Art. 6 para. 1 p. 1 lit. a,b DSGVO on the basis of your voluntarily given consent, as well as for the implementation of pre-contractual measures.

Online presence in social networks

We operate online presences in social networks for advertising purposes.  
We would like to point out that you use the social services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, rating).

If you visit our online presences in social media, personal data will be collected and processed by the respective provider for advertising and market research purposes. As a rule, usage profiles are also created. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to play interest-based advertising to you. To prevent social media operators from collecting information about you during your visit to our websites, you should log out of the respective social media before you start visiting our websites and delete any existing social media cookies from your browser. 

Social network links

No social plugins from Facebook or other social networks are integrated on these web pages. Therefore, no programme code of a social network is active on our pages. The icons for Facebook etc. on our website are merely linked images.

Data protection notice - Online presence on Facebook/Instagram (META)

Facebook Ireland (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland - hereinafter referred to as Facebook) and the Page Administrator (we) are jointly responsible for processing personal data for the purposes set out in the Terms of Use for Covered Products on the Page Administrator's Facebook account that is collected in connection with a visit to or interaction with a Page (including its content). 

Covered Products are all Facebook Products, Facebook Pages and Page Insights. Facebook Products include Facebook itself (including the Facebook mobile app and the browser in the app), Messenger, Instagram (including apps like Direct and Boomerang), Portal branded devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team apps, and any other features, apps, technologies, software products, products or services offered by Facebook, Inc. or Facebook Ireland Limited. In addition, Facebook Business tools are also Facebook products.

The scope of the joint processing and controller addition covers the collection of personal data set out in the Terms of Use for Covered Products and its transfer to Facebook. The subsequent processing of data by Facebook is not part of the joint processing. Similarly, it is not part of the joint processing if personal data are processed exclusively by us - we are the sole data controller in this case.

The information required under Article 13(1)(a) and (b) DSGVO can be found in Facebook's data policy at www.facebook.com/about/privacy. Further information on joint processing can be found in the respective terms of use of the products.

For the use of certain Facebook products (so-called "Facebook business tools") and the associated data processing, the supplementary agreement between us and Facebook as joint controller pursuant to Art. 26 DSGVO applies, which can be viewed at www.facebook.com/legal/controller_addendum.

The Site Administrator and Facebook have entered into this Additional Agreement for Controllers in order to define the respective responsibilities for fulfilling the obligations under the GDPR with respect to joint processing (as set out in the Terms of Use for Covered Products). 

Further, we have agreed that between the parties Facebook is responsible for enabling the rights of data subjects under Articles 15-20 of the GDPR with respect to the personal data stored by Facebook following the joint processing.

The data transfer is based on the standard contractual clauses of the EU Commission.
Further info can be found at 
de-de.facebook.com/help/566994660333381/  
www.facebook.com/legal/EU_data_transfer_addendum 
help.instagram.com/519522125107875/;

Data processing conditions at Facebook
We expressly draw your attention to the fact that the use of certain Facebook products may involve the transfer of personal information to Facebook. Depending on the circumstances, it may also be the case that Facebook Ireland Limited, transfers EU data to Facebook Inc. in the USA for the purpose of storage and further processing. By using Facebook products, the user agrees to Facebook's data processing conditions. These can be found at www.facebook.com/legal/terms/dataprocessing/update.
The Facebook EU data transfer addendum can be found at www.facebook.com/legal/EU_data_transfer_addendum. 
Facebook's data policy can be found at www.facebook.com/about/privacy/ - Instagram's data policy can be found at help.instagram.com/519522125107875 
Information about cookies and other storage technologies on Facebook can be found at www.facebook.com/policies/cookies/ 
Facebook's data security terms and conditions can be found at www.facebook.com/legal/terms/data_security_terms.
Facebook's terms of use for commercial use can be found at www.facebook.com/legal/commercial_terms/update. 
You can contact Facebook's privacy officer at https://www.facebook.com/help/contact/540977946302970.

Further information on page insights data
Facebook continues to provide us with Page Insights data for the Facebook Page. Insights data is aggregated data that provides us with information on how users interact with the Facebook page. The legal basis for the data processing is Art. 6 para. I p. 1 lit. f DSGVO, the protection of our legitimate interests in an optimised presentation of the website and effective communication with users.
The data processing takes place on the basis of an agreement between the jointly responsible parties in accordance with Art. 26 DSGVO, which you can view at www.facebook.com/legal/terms/page_controller_addendum.
Further information on Page Insights data on Facebook at www.facebook.com/legal/terms/information_about_page_insights_data and at de-de.facebook.com/help/instagram/155833707900388. 

Data processing when contacting us via Facebook products
We collect personal data when you contact us, e.g. via the contact form or via Messenger. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. I S. 1 lit. f DSGVO. Your data will be deleted once we have completed processing your request, provided that there are no statutory retention obligations to the contrary.

Your rights
Facebook and we have agreed that Facebook is primarily responsible for providing you with information about joint processing and enabling you to exercise your rights under the GDPR. Under the GDPR, you have the right of access, rectification, portability and erasure of your data, as well as the right to object to the processing of your data and to restrict the processing. You can find out more about these rights in your Facebook settings. For more information about your rights, please also see "Data subject rights" in this privacy policy.

Facebook and we have agreed that the Irish Data Protection Commission is the lead authority for oversight of processing under joint responsibility. You have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie ) or with your local supervisory authority.

Right to object to advertising
You can object to the processing of your data for advertising purposes on Facebook at any time by changing your settings for advertisements in your Facebook user account at www.facebook.com/settings accordingly.

Legal basis of the operation of the Facebook page / Instagram and processing of personal data upon retrieval
We operate the Facebook page / Instagram page for advertising purposes for our services. The processing of personal data is based on Art 6 I S 1 lit f DSGVO.

Data security - SSL encryption

We use SSL (Secure Socket Layer) encryption on our website to protect the transmission of confidential content. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
be read by third parties. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the status bar of your browser - the address bar of your browser shows "https://" if SSL encryption is active.

Processing/transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed above or below.

We only pass on your personal data to third parties if:
- you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
- this is legally permissible and required in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO for the fulfilment of contractual relationships or for the implementation of pre-contractual measures with you,
- in the event that there is a legal obligation for us to disclose data in accordance with Art. 6 Para. 1 Sentence 1 lit. c DSGVO,
- the processing is necessary for the protection of our legitimate interests or those of a third party pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, override these, in particular if the data subject is a child.

Data subject rights

You have the right
- In accordance with Art. 15 DSGVO, to request information about your personal data processed by us;
- in accordance with Art. 16 DSGVO, to demand the correction of incorrect or incomplete personal data stored by us without delay;
- in accordance with Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
- revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent in the future;
- complain to a supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of personal data concerning you violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. You can find a list of data protection officers in Germany and their contact details at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to object to data collection in special cases and to direct marketing (Art. 21 DSGVO)

Insofar as we process your personal data in accordance with Art. 6 (1) p. 1 lit. f DSGVO in order to protect our legitimate interests which prevail in the context of a balancing of interests, you have the right to object to the processing of your personal data with effect for the future in accordance with Art. 21 DSGVO. If the processing is carried out for direct marketing purposes, you can exercise this right at any time. This also applies to profiling, insofar as it is related to such direct marketing. Insofar as processing is carried out for other purposes, you only have the right to object if there are grounds arising from your particular situation.

If you wish to exercise your right to object, simply send us an e-mail.

After you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

In the event of your objection to the processing of your personal data for direct marketing purposes, the personal data will no longer be processed for these purposes.

As a responsible company, we do not use automatic decision-making or profiling.

Amendment of this privacy policy - Status

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration in compliance with the applicable data protection regulations. The current data protection declaration can be called up and printed out by you at any time on our website under Data Protection.

Status: November 2022 - created by RA Markus v. Hohenhau - www.e-anwalt.de