[EN version for translation purposses only. Please refer to the original version.]
§ 1 General
The website www.eventmachine.xyz ("website") is addressed to business customers and is a service of ZELFMADE GmbH (hereinafter referred to as "ZELFMADE", "we" or "us", "our"). The protection of your privacy is very important to us. Our website provides you with up-to-date information about our services. You will also have the opportunity to test the configurator "EVENTMACHINE" in different set-up variants (hereinafter "demo configurator").
Your personal data (e.g. title, name, address, e-mail address, telephone number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, categories of processed data, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This privacy policy only refers to our website. If you are forwarded to other pages via links on our website, please inform yourself there about the respective handling of your data.
§ 2 Visiting our website and creation of log files
(1) Processing purpose
The storage in log files is done to ensure the functionality of the website.
(2) Data categories
Each time you access our website, our system automatically collects data and information from your computer system. For example, the following of your data may be collected:
- Information about your browser type
- Information about your operating system
- Information about your Internet service provider
- Your IP address
- Date and time of your visit to our site
- Information about the website from which your system accesses our website
- Information about the website that is accessed by your system through our website.
The aforementioned data collected by us about you is stored in the log files of our system. A storage of this data together with other personal data, does not take place in principle. An exception to this is the information we collect about your browser settings.
(3) Legal basis
The legal basis for the temporary storage of data and log files is Art. 6 para.1 lit. f GDPR.
(4) Legitimate interest
We have a legitimate interest in collecting and temporarily storing the aforementioned data, as the temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. In addition, this data is used to optimize our website and to ensure the security of our information technology systems. An evaluation of your log files for marketing purposes does not take place.
(5) Recipient categories
ZELFMADE, hosting provider
(6) Storage duration
The data is deleted or alienated so that it can no longer be assigned to you as soon as it is no longer required for the purpose stated here. In the case of storage of data in log files, the data will be deleted after seven days.
§ 3 Demo configurator
(1) Processing purpose
You can use the demo configurator to test our service in advance.
(2) Data categories
If you would like to fully try out the demo configurator on our website with all its functionalities, you can enter the following data in the demo configurator at the point provided there, for example:
- your salutation
- your name
- your company
- your business e-mail address
However, many functionalities can also be tried out without you having to enter your data.
(3) Recipient categories
ZELFMADE, hosting provider
(4) Legal basis
a) The legal basis for the processing is Art. 6 (1) lit. b GDPR, as the demo configurator serves to initiate a contract.
b) However, the processing is also justified according to Art. 6 (1) lit. f GDPR, as there is a legitimate interest in the processing on our side.
Right of objection: You have the right to object at any time to data processing that is based on Art. 6 (1) (f) GDPR and is not used for direct marketing for reasons that arise from your particular situation. In the case of direct advertising, on the other hand, you can object to the processing at any time without giving reasons.
(5) Storage duration
We store your data as long as they are necessary to achieve the purpose and no retention or storage periods exist.
§ 4 Contacting, telephone advertising
(1) Purpose of processing
We process your personal data that you provide to us via e-mail, contact form, etc. (for example, your e-mail address, name, telephone number, address, IP address) to answer and complete your inquiries. You are not obliged to provide us with your personal data. But without providing us with your email address, we will not be able to respond to you by email.
We would like to use your telephone number to make telephone advertising to you. That means we would possibly contact you by phone to inform you about news and changes regarding our configurator. For this purpose, we will obtain your consent before contacting you.
(2) Recipient
ZELFMADE, hosting provider
(3) Legal basis
a) If you have given us express consent to process your data and have also consented to telephone advertising, the legal basis for this processing is Art. 6 (1) lit. a GDPR.
b) If we process your data to carry out pre-contractual measures, Art. 6 (1) lit. b GDPR is the legal basis.
c) In all other cases (especially when using a contact form), Art. 6 (1) lit. f GDPR is the legal basis.
Right of objection: You have the right to object at any time to data processing that is based on Art. 6 (1) (f) GDPR and is not used for direct marketing for reasons that arise from your particular situation. In the case of direct advertising, on the other hand, you can object to the processing at any time without giving reasons.
(4) Legitimate interest
Our legitimate interest in processing is to communicate with you in a quick manner and to respond to your inquiries in a cost-effective manner. If you provide us with your address, we reserve the right to use it for direct postal advertising. You can protect your interest in data protection by sharing your data sparingly (e.g. using a pseudonym).
(5) Recipient categories
Hosting provider, shipping service provider for direct advertising
(6) Storage duration
Your data will be deleted when it is clear from the circumstances that your inquiry or the matter in question has been conclusively clarified.
However, if a contract is concluded, we will retain the data required by commercial and tax law for the periods specified by law, i.e. regularly for ten years (cf. § 257 HGB, § 147 AO).
(7) Right of revocation
In the event of processing based on your consent, you have the right to revoke your consent at any time.
§ 5 Comments
(1) Purpose of processing
It is possible to post a comment. Your data (e.g. name/pseudonym, e-mail address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, transparency and opinion formation. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.
If applicable, Art. 6 para. 1 lit. f GDPR may also be the legal basis, insofar as we have a legitimate interest in storing your data in connection with the contact request.
(4) Storage duration
A specific storage duration is not provided for. You can request the deletion of your comment at any time.
(5) RIGHT OF OBJECTION
You have the right to object at any time to data processing that is carried out on the basis of Art. 6(1)(f) of the GDPR and is not used for direct advertising for reasons that arise from your particular situation. In the case of direct advertising, on the other hand, you may object to the processing at any time without giving any reasons.
§ 6 Web analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. ("Google"). Google can be reached in Europe at Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site and/or other forms of local data storage. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on our website so that your IP address is truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) Legal basis
a) The legal basis for this processing is Art. 6 para. 1 lit a GDPR, insofar as you have given us your consent in advance.
b) Otherwise, the legal basis for this processing is Art. 6 para. 1 lit. f GDPR.
(3) Legitimate interest
We base our legitimate interest on the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP()" so that the IP addresses are only processed in abbreviated form to exclude direct personal reference.
(4) Recipient categories
Google, partner companies
(5) Transfer to a third country
For the exceptional cases where personal data is transferred to the U.S., Google relies, where necessary, on standard contractual clauses, which can serve as a basis for data transfers from the EU to third countries by providing appropriate safeguards for data protection.
(6) Storage duration
We will only process your data for as long as is necessary for the purpose of the data collection (in this case, the creation of statistics and their evaluation). The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are therefore automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and data protection, please visit marketingplatform.google.com/about/analytics/terms/de/ or policies.google.com and safety.google.
(7) RIGHT OF OBJECTION
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:
You can also prevent the collection by setting an opt-out cookie. If you would like to prevent the future collection of your data when visiting this website, you can click here:
§ 7 Creating remarketing audiences in Google Analytics
(1) Purpose of processing
If you consent to the use of Google Analytics advertising features, this website also uses the advanced features of Google Analytics in addition to the standard features. In order to retarget users who are likely to convert, we create remarketing lists. Our remarketing target group includes cookies or mobile ad IDs for the user group we should retarget because they are particularly likely to make conversions. Remarketing target groups are created based on user behavior on our website or in our Google Analytics configurator (see § 6) and then used as the basis for remarketing campaigns in Google Ads (see § 8).
For this purpose, we use first-party cookies (e.g. Google Analytics cookies) to evaluate in aggregate form which demographic characteristics and interests visitors to our website or typically exhibit. We use this information to improve our web offerings.
(2) Legal basis
a) The legal basis for this processing is Art. 6 para. 1 lit. a GDPR, insofar as you have given us your consent in advance.
b) Otherwise, the legal basis for this processing is Art. 6 para.1 lit. f GDPR.
(3) Legitimate interest
We base our legitimate interest on the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP()" so that the IP addresses are only processed in abbreviated form to exclude direct personal reference.
(4) Recipient categories
Google, partner companies
(5) Transfer to a third country
For the exceptional cases where personal data is transferred to the U.S., Google relies, where necessary, on standard contractual clauses, which can serve as a basis for data transfers from the EU to third countries by providing appropriate safeguards for data protection.
(6) Storage duration
We will only process your data for as long as is necessary for the purpose of the data collection (in this case, the creation of remarketing lists). The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are therefore automatically deleted after 90 days. Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/de/ or
https://policies.google.com/?hl=de&gl=de and
https://safety.google/.
(7) RIGHT OF OBJECTION
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:
You can also prevent the collection by setting an opt-out cookie. If you would like to prevent the future collection of your data when visiting this website, you can click here:
§ 8 Google Ads
(1) Purpose of processing
In addition to Google Analytics (see § 6 and 7), we use the Google Ads application, a marketing tool from Google which is used for remarketing purposes. This is a procedure with which we would like to address you again if you have visited our website once. Through this application, after visiting our eventmachine.xyz website, you can also be shown our advertisements on third-party websites when you continue to use the Internet. We use the remarketing function within the Google Ads service. For remarketing, your interaction on our website is analyzed, e.g. which offers you were interested in, in order to be able to show you targeted advertising on other sites even after your visit to our website. For this purpose, Google stores a cookie in your browser when you visit certain Google services or websites in the Google display network. This cookie is used to record your visits. This cookie is used to uniquely identify a web browser on a particular end device and not to identify you personally; according to Google, personal data is not stored. Thus, Google can determine your previous visit to our website. According to Google, a combination of the data collected in the course of remarketing with your personal data, which may be stored by Google, does not take place. In particular, according to Google, pseudonymization is used in remarketing.
(2) Legal basis
a) The legal basis for this processing is Art. 6 para. 1 lit. a GDPR, insofar as you have given us your consent in advance.
b) Otherwise, the legal basis for this processing is Art. 6 para.1 lit. f GDPR.
(3) Legitimate interest
We base our legitimate interest on the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP()" so that the IP addresses are only processed in abbreviated form to exclude direct personal reference.
(4) Recipient categories
Google, partner companies
(5) Transfer to a third country
For the exceptional cases where personal data is transferred to the U.S., Google relies, where necessary, on standard contractual clauses, which can serve as a basis for data transfers from the EU to third countries by providing appropriate safeguards for data protection.
(6) Storage duration
We will only process your data for as long as is necessary for the purpose of the data collection (in this case, marketing). For the "Audience" (remarketing list), a "membership Duration" of 90 days is stored in Google Analytics. Further information on data protection at Google can be found here:
https://policies.google.com/privacy?hl=de and
https://services.google.com/sitestats/de.html.
(7) RIGHT OF OBJECTION
You can prevent participation in this tracking and remarketing procedure in various ways: you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
You can also make settings for personalized advertising:
https://support.google.com/ads/answer/2662922?hl=en.
§ 9 Information about cookies
(1) Purpose of processing
On this website, technically necessary cookies may be used. These are small text files that are stored in or by your Internet browser on your computer system.
(2) Legal basis
The legal basis for this processing is Art. 6 para.1 lit. f GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies are not used to create user profiles. This protects your interest in data protection.
(4) Storage duration
Technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.
(5) RIGHT OF OBJECTION
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.
§ 10 Newsletter
(1) Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. within the scope of the newsletter we will inform you in particular about services relating to our configurator. For statistical purposes, we can evaluate which links are clicked in the newsletter. In doing so, it is not recognizable for us which specific person has clicked. You have expressly given the following consent separately or, if applicable, in the course of the ordering process: We send newsletters on current topics at irregular intervals. These newsletters contain interesting facts and background information from the MICE sector and updates about our configurator product or special promotions.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 lit. a GDPR.
(3) Recipient categories
Newsletter dispatch provider
(4) Storage duration
Your email address will be stored for the newsletter dispatch only for the duration of the desired registration.
(5) Right of revocation
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: You can unsubscribe at any time by clicking the "unsubscribe" button at the end of an email.
§ 11 Forwarding to third parties
1. General information
We will generally only disclose your personal data to service providers, business partners and other third parties in accordance with applicable data protection laws. We may disclose personal data to service providers engaged by us and require them to perform services on our behalf (commissioned processing). In doing so, we comply with the strict applicable national and European data protection regulations. We may also disclose personal data to a third party if we are required to do so by law or legal process, or to deliver and manage our products and services. In addition, we may be required to provide information to a law enforcement or other authority. If disclosure of information is necessary for ZELFMADE to cooperate with you and provide services to you, or if you consent, we may also disclose information. Also, if audits are pending, disclosure is usually unavoidable.
2. Amazon Web Services
Our eventmachine.xyz website, and therefore also your data, is hosted by Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States (hereinafter "Amazon"). Amazon may only access the data within the scope of our instructions (order processing). Amazon also takes strict technical measures to protect your personal data. Amazon does not disclose your personal data to third parties, unless the disclosure is necessary to process the agreed services or Amazon must do so to comply with the law or a valid and binding order of a governmental or regulatory authority. The data transferred for this purpose will be limited to the minimum necessary.
Amazon may also store the information in countries outside the European Economic Area. However, Amazon will take the necessary steps to ensure that an adequate level of data protection is maintained. For example, if Amazon transfers your information to the United States, additional measures, such as entering into EU-compliant data transfer agreements with the data importer, will be taken as necessary.
(1) Purpose of processing
The purpose of the data processing is that Amazon offers us the possibility to use Amazon servers.
(2) Legal basis
The legal basis for the processing of your data is Art. 28 GDPR.
(3) Storage duration
We store your data only as long as necessary to achieve the purpose.
For more information on data protection at Amazon, please visit:
https://aws.amazon.com/de/compliance/eu-data-protection/
3. Synoptive
(1) Purpose of processing
Synoptive Systems LLC, Oregon/USA ("Synoptive") supports us in the administration, design and optimization of the website. For this purpose, the company receives access to the system environment of our website and the demo configurator. Synoptive may only access your data within the scope of our instructions (order processing). Synoptive also takes strict technical measures to protect your personal data.
(2) Disclosure to third parties
Synoptive will not disclose your personal data to third parties unless the disclosure is necessary to process the agreed services or our service provider is required to do so to comply with the law or a valid and binding order of a governmental or regulatory authority. The data transferred for this purpose will be limited to the minimum necessary.
(3) Transfer to the USA
Synoptive stores your data on servers in the USA. Our service provider is subject to our instructions and is subject to strict contractual restrictions regarding the processing of personal data. Accordingly, processing is only permitted to the extent necessary to perform the services on our behalf or to comply with legal requirements. It is specified in advance by us exactly which rights and obligations our service provider shall have with regard to personal data.
(4) Legal basis
The legal basis for the processing of your data is Art. 28 GDPR.
(5) Storage duration
Our service provider stores your data only for as long as it is required to achieve the aforementioned purpose.
§ 12 Rights of the data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights with respect to the controller (ZELFMADE):
1. Right of information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If there is such processing, you can request information from the controller about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
3. Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
(1) you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims; or
(4) if you have objected to the processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller's legitimate grounds override your grounds.
Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
4. Right to deletion
a) Obligation to delete
You may request from the controller that the personal data concerning you be erased without undue delay, and the controller is obliged to erase such data without undue delay, provided that one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Art. 6 (1) lit. ) or Art. 9 (2) lit. a GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.
b) Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the data controllers that process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
c) Exceptions
The right to erasure does not exist to the extent that the processing is necessary
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) for the assertion, exercise or defense of legal claims.
5. Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.
6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
(1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and
(2) the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) of the GDPR; this also applies to profiling based on these provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include, at a minimum, the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
Responsible for data processing:
ZELFMADE GmbH
Paul-Nevermann-Platz 5
22765 Hamburg
Telefon: +49 (0)40 38629000
service@eventmachine.xyz