Person in charge
Vantage Global Event Production GmbH
Mathilden street 15a
45130 Essen, Germany
Managing Director: Jürgen Künkel
Link to the imprint http://www.vantage-global.com/de/impressum
Contact our data protection officer: firstname.lastname@example.org
Types of data processed:
- Inventory data (e.g. names, addresses).
- Contact information (e.g. e-mail, phone numbers).
- Content data (e.g. text input, photographs, videos).
- Usage data (e.g. visited web pages, interest in contents, access times).
- Meta/communications data (e.g. device information, IP addresses).
categories of Persons concerned
Visitors and users of the online offer (hereinafter we refer to the persons concerned as "users").
Purpose of processing
- Provision of the online offer, its functions and contents.
- Answering contact requests and communicating with users.
- Security measures.
- Audience measurement / Marketing.
"Personal data" shall be any information relating to an identified or identifiable natural person (hereinafter referred to as "the person concerned"); A natural person is considered to be identifiable, either directly or indirectly, particularly by assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (e.g. cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
"Processing" means any operation performed with or without the help of automated procedures or any such series of operations in connection with personal data. The term has a broad meaning and covers virtually every handling of data.
"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific person concerned without the provision of additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data are not assigned to an identified or identifiable natural person.
"Profiling" means any kind of automated processing of personal data, which consists in the use of such personal data to assess certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or location change of that natural person.
The "person in charge" shall mean the natural or legal entity, authority, institution or another body which alone or jointly with others, decides on the purposes and means of processing personal data.
"Processor" means a natural or legal person, authority, institution or another body that processes personal data on behalf of the person in charge.
Relevant legal bases
We shall, in accordance with article 32 GDPR, take into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing, as well as the varying likelihood of occurrence and severity of the risk for the Rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, disclosure, availability and Separation. We have also established procedures to ensure that the rights concerned are exercised, that data deletion and data vulnerability. We also take into account the protection of personal data in the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technical design and privacy-friendly preferences (article 25 GDPR).
Cooperation with processors and third parties
If we disclose data to other persons and companies (processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is only done on the basis of a legal permission ( For example, if a transfer of the data to third parties, as to payment service providers, according to article 6 (1)(b) GDPR required for the fulfillment of the contract), you have agreed to a legal obligation to do so or on the basis of our legitimate interests (e.g. in the case of the use of agents, web hosts, etc.).
If we entrust third parties with the processing of data on the basis of a so-called "contract for processing", this is done on the basis of article 28 GDPR.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of the use of third-party services or disclosure, or transmission of data to third parties, this only occurs when it is done to fulfill our (pre) contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Article 44 et seq. GDPR. i.e. processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy shield") or observance of officially recognized special contractual Obligations (so-called "standard contractual clauses").
Rights of the persons concerned
You have the right to request confirmation as to whether the data concerned will be processed and to provide information on this data as well as further details and a copy of the data in accordance with article 15 GDPR.
They have in accordance with Article 16 GDPR, the right to request the completion of the data relating to them or the correction of the incorrect data concerning them.
They shall, in accordance with article 17 of the GDPR, require the relevant data to be deleted immediately or, alternatively, to require a restriction on the processing of the data in accordance with article 18 GDPR.
You have the right to demand that the data relating to you, which you have provided to us be obtained in accordance with article 20 of the GDPR and to request their transmission to other persons in charge.
You also have the right to submit a complaint to the competent supervisory authority pursuant to article 77 GDPR.
Right of revocation
You have the right to revoke your consent pursuant to article 7(3) of the GDPR with effect for the future.
Right to Object
You may at any time object to the future processing of the data relating to you in accordance with article 21 GDPR. The opposition may, in particular, be against processing for direct marketing purposes.
Cookies and right of objection in direct advertising
"Cookies" are small files that are stored on the user's computers. Different information can be stored within the cookies. A cookie serves primarily to store the information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or "session-cookies" or "transient cookies" are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart can be stored in an online shop or a login status. "Permanent" or "persistent" refers to cookies that remain stored even after the browser is closed. For example, the login status can be saved if the users visit them after several days. Similarly, in such a cookie, the interests of users can be stored, which are used for audience measurement or marketing purposes. "Third-party-cookie" means cookies that are offered by other providers than the person in charge of the online offer (otherwise, if it is only their cookies, it is called "First-party Cookies").
If users do not want cookies to be stored on their computer, they will be asked to disable the corresponding option in their browser's system preferences. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
Deletion of data
The data processed by us will be deleted or restricted in its processing in accordance with articles 17 and 18 GDPR. Unless expressly stated in the scope of this data protection declaration, the data stored with us will be deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with statutory retention obligations. If the data is not deleted because it is necessary for other and legally permissible purposes, its processing will be restricted. i.e. the data is locked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.
According to legal requirements in Germany, the storage shall be carried out in particular for 10 years pursuant to sections 147 Subsec. 1 AO, 257 Subsec. 1 number 1 and 4, Subsec. 4 HGB (books, records, status reports, accounting documents, trading books, for the taxation of relevant documents, etc.) and 6 years Pursuant to section 257 Subsec.1 number 2 and 3, Subsec. 4 HGB (Commercial letters).
According to legal requirements in Austria, the storage is in particular for 7 years according to section 132 paragraph 1 BAO (accounting records, receipts/invoices, accounts, receipts, commercial documents, statement of revenue and expenditure, etc.), for 22 years in connection with real estate and for 10 years in the case of documents relating to electronically supplied services, telecommunications, broadcasting and television services provided to non-entrepreneurs in EU Member States and for which the mini-one Stop Shop (MOSS) is used.
We process the data of our customers within the framework of our contractual services to which conceptual and strategic consulting, planning, software and design development/consulting or maintenance, implementation of campaigns and processes/handling, server administration, Data analysis/consulting services and training services are.
We process inventory data (e.g., customer data such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text inputs, photographs, videos), contract data (e.g., contractual object , term), payment details (e.g., Bank details, payment history), usage and metadata (e.g. in the context of evaluation and success measurement of marketing measures). In principle, we do not process special categories of personal data unless these are components of an authorized processing. Those concerned include our customers, prospective customers, users, website visitors or employees as well as third parties. The purpose of the processing consists of the provision of contractual services, billing and our customer service. The legal basis of the processing stems from article 6 paragraph1 (b) GDPR (contractual services), article 6 paragraph1(f) GDPR (analysis, statistics, optimization, security measures). We process data necessary for the establishment and fulfilment of the contractual services and indicate the necessity of your claim. Disclosure to external parties only takes place if it is required within the scope of an order. When processing the data provided to us in the context of an order, we act in accordance with the instructions of the contracting entities as well as the legal requirements of order processing in accordance with article 28 GDPR and process the data for no other purpose than the order.
We delete the data after the expiration of legal warranty and comparable obligations. The need to retain the data is reviewed every three years; In the case of statutory archiving obligations, the deletion is effected after its expiration (6 years, according to sec. 257 Subsec. 1 HGB, 10 years, according to sec. 147 Subsec. 1 AO). In the case of data which have been disclosed to us in the context of an order by the client, we delete the data according to the specifications of the order, basically after the end of the order.
Administration, accounting, Office Organization, Contact Management
We process data in the context of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. We process the same data that we process in the course of rendering our contractual services. The processing bases are article 6 para. 1(c) GDPR, article 6 para. 1(f) GDPR. Processing affects customers, interested parties, business partners, and website visitors. The purpose and our interest in the processing lie in the administration, financial accounting, Office organization, archiving of data, i.e. tasks related to the maintenance of our business activities, the performance of our tasks and the provision of our Services. The deletion of the data with regard to contractual services and the contractual communication corresponds to the information specified in these processing activities.
We disclose or transmit data to the financial administration, consultants, such as tax consultants or auditors, as well as other fee offices and payment service providers.
We also store information about suppliers, organizers and other business partners on the basis of our business interests, e.g. for the purpose of later contact. We always store a majority of such business-related data permanently.
We process the applicant data only for the purpose and within the scope of the application procedure in accordance with the legal requirements. The processing of the applicant data is carried out in order to fulfill our (pre) contractual obligations within the scope of the application procedure within the meaning of article 6 para. 1(b) GDPR, Article 6 para. 1(f) GDPR, as long as the data processing is necessary for us in the context of legal procedures (Additionally, section 26 BDSG applies in Germany).
The application procedure requires applicants to provide us with the applicant's data. The necessary applicant data are indicated, as far as we offer an online form, otherwise they arise from the job descriptions and in principle include the personal details, postal and contact addresses and the application documents, such as a Cover letter, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.
If, within the scope of the application procedure, special categories of personal data are voluntarily communicated within the meaning of article 9 para.1 GDPR, their processing shall be carried out in accordance with article 9 para. 2(b) GDPR (e.g. health data, such as severe disability or ethnic origin). Provided that special categories of personal data are requested from applicants within the scope of the application procedure in the meaning of article 9 para.1 of GDPR, their processing is additionally carried out in accordance with article 9 para. 2(a) GDPR (e.g. health data, where these are necessary for the exercise of the profession).
If provided, applicants can submit their applications to us via an online form on our website. The data will be encrypted and transmitted to us according to the state of the art.
Applicants can also send us their applications via e-mail. Please note, however, that e-mails are not sent in encrypted form and the applicants themselves have to provide the encryption. We are therefore not responsible for the transmission route of the application between the sender and the recipient on our server, and therefore recommend the use of an online form or the postal delivery service instead. Instead of applying via the online form and e-mail, applicants still have the opportunity to send us the application by post.
The data provided by the applicants may be further processed by us in the event of a successful application for employment purposes. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. The applicant's data will also be deleted when an application is withdrawn, which the candidates are entitled to at any time.
The deletion takes place, subject to a justified revocation of the candidates, after the expiration within a period of six months, so that we can answer any follow-up questions regarding the application and meet our proof obligations under the Equal Treatment Act. Invoices for possible compensation for travel expenses are archived according to the tax regulations.
With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure as well as your right to object. By subscribing to our newsletter, you agree to the receipt and the procedures described.
The content of the newsletter: We send out newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. If the contents are concretely described in the context of an application for the newsletter, they are decisive for the consent of the users. In addition, our newsletter contains information about us and our services.
Double opt-In and logging: the registration for our newsletter is done in a so-called double-opt-in procedure. i.e. After you have registered, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign e-mail addresses. Registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the logon and confirmation date as well as the IP address. Likewise, changes to your data stored by the shipping service provider are logged.
Credentials: To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name in order to give a personal address in the newsletter.
The sending of the newsletter and the success measurement associated with it are carried out on the basis of the consent of the recipients according to article 6 para 1(a), article 7 GDPR i. V. M, section 7 Subsec. 2 No. 3 UWG, or if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to article 6 para.1(f) GDPR in conjunction with section 7 Subsec. 3 UWG.
The logging of the registration procedure is based on our legitimate interests in accordance with article 6 para. 1(f) GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and allows us to provide proof of consent.
Termination/Revocation: You can cancel the reception of our newsletter at any time, i.e. Revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may store the e-mail addresses held for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of possible defense against claims. An individual cancellation request is possible at any time, provided that at the same time the former existence of consent is confirmed.
Newsletter - CleverReach
The shipping service provider can use the data of the recipients in pseudonymous form, i.e. without assigning them to a user, to optimize or improve their own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for Use for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.
Google is certified under the Privacy Shield Agreement and provides a guarantee to comply with European data protection law: (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymization enabled. This means that the IP address of the users is reduced by Google within Member States of the European Union or in other contracting States of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by corresponding settings of their browser software; Users may also prevent Google from collecting the data generated by the cookie and related to their use of the online offer, as well as the processing of such data by using the browser plug-in available to Download and install from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data, settings and possibilities for appeal, see the Google Privacy Statement (https://policies.google.com/technologies/ads) and the settings for displaying Advertisements by Google (https://adssettings.google.com/authenticated).
The personal data of the users will be deleted or anonymized after 14 months.
Google AdWords and Conversion-Measurement
We use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of article 6 para. 1(f) GDPR). ("Google").
Google is certified under the Privacy Shield Agreement which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the online marketing process Google "AdWords" to place ads on the Google advertising network (e.g., in search results, in videos, on Web pages, etc.) so that they are displayed to users who have a suspected interest in the ads. This allows us to selectively display ads for and within our online offering to show users only ads that potentially correspond to their interests. For example, if a user displays ads for products for which he or she is interested, in other online offers, this is referred to as "remarketing". For these purposes, upon access of our website and other Websites where the Google advertising network is active, Google will immediately execute a Google code which will become the so-called (re) marketing tags (invisible graphics or code, also known as " Web beacons ") incorporated into the website. With the help of the device, an individual cookie is stored for the user, i.e. a small file (instead of cookies, comparable technologies can also be used). This file is used to identify which Web pages the user is interested in, for which content he or she has clicked and what offers the user has selected, as well as technical information about the browser and operating system, referring Web pages, visiting time and other Information on the use of the online offer.
We also receive an individual "conversion cookie". The information obtained using the cookie is used by Google to create conversion statistics for us. However, we will only see the total number of anonymous users who clicked on our ad and were redirected to a conversion tracking tag page. However, we do not receive any information that personally identifies users.
The user's data is processed under the Google advertising network pseudonym. i.e. Google does not store and process the name or e-mail address of the users but processes the relevant data cookie-related within pseudonymous user profiles. i.e. from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users is sent to Google and stored on Google's servers in the United States.
For more information about Google's use of data, settings and possibilities for appeal, see the Google Privacy Statement (https://policies.google.com/technologies/ads) and the settings for displaying Advertisements by Google (https://adssettings.google.com/authenticated).
Facebook-Pixel, Custom Audiences and Facebook-Conversion
Within our online offer, due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes the so-called "Facebook pixel" of the social network Facebook, which is from the Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (' Facebook ') is used.
Facebook is certified under the Privacy Shield Agreement and provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
With the help of the Facebook pixel, it is possible for Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to display the Facebook ads that are connected to us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or Products which are determined by the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads correspond to the potential interest of the users and do not cause harassment. With the help of the Facebook pixel, we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were forwarded to our website after clicking on a Facebook advertisement (so-called " Conversion ").
The processing of the data by Facebook is done within the framework of Facebook's data usage policy. Accordingly, general information on the presentation of Facebook ads, in the data usage policy of Facebook: https://www.facebook.com/policy. For specific information and details about the Facebook pixel and how it works, please visit the Facebook Help Center: https://www.facebook.com/business/help/651294705016616.
You can disagree with the Facebook pixel capture and use of your data to display Facebook ads. To set the types of ads you see on Facebook, you can go to the Facebook page and follow the instructions for usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
You can also determine the extent to which cookies are used for range measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and in addition the US website (http://www.aboutads.info/choices) or the European Web site (http://www.youronlinechoices.com/uk/your-ad-choices/).
Integration of third party services and content
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 para.1(f) GDPR), we make use of content or services offered by third-party providers to incorporate their content and services, such as videos or fonts (hereinafter, collectively referred to as "content").
This always assumes that the third-party providers of this content perceive the IP address of the users since they could not send the contents to their browsers without the IP address. The IP address is therefore required to display this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties can also use the so-called pixel tags (invisible graphics, also called "Web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device, including but not limited to technical information on the browser and operating system, referring Web pages, visiting time and other information regarding the use of our online offer.
We embed videos of the YouTube platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.