I. Introduction and Definitions
1. GENERAL
In operating our website at the URL https://tickets.msdockville.de/57bde38ab6de49e1b6b6dd28a46011f8 (hereinafter referred to as the “Website”), we process personal data. We treat this data confidentially and process it in accordance with applicable laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). These Privacy Provisions are intended to inform you about the personal data we collect from you, the purposes for which and the legal basis on which we use it, and, where applicable, to whom we disclose it. We will also explain the rights available to you to protect and enforce your data protection rights.
2. DEFINITIONS
Our Privacy Provisions contain technical terms used in the GDPR and the BDSG. To make them easier to understand, we would first like to explain these terms in simple language:
2.1 Personal Data
“Personal data” means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR). Information relating to an identified person may include, for example, their name or e-mail address. Personal data also includes data where a person’s identity is not immediately apparent but can be determined by combining information held by us or third parties. A person may, for example, be identifiable by their address or bank details, date of birth or username, IP addresses and/or location data. All information that can in any way be used to identify an individual is relevant in this context.
2.2 Processing
Pursuant to Art. 4 No. 2 GDPR, “processing” means any operation performed on personal data. This includes, in particular, the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or other form of making available, alignment or combination, restriction, erasure or destruction of personal data.
II. Controller and Data Protection Officer
1. CONTROLLER
The controller responsible for data processing is:
Company: Kopf & Steine GmbH (“we”)
Legal representative: Frank Diekmann (Managing Director)
Address: Eduardstraße 46, 20257 Hamburg, Germany
Telephone: 040 80006090
Fax: +49 40 8000 60922
E-mail: info@kopfundsteine.de
2. DATA PROTECTION OFFICER
We have appointed an external Data Protection Officer for our company. You can contact him at:
Name: Arne Platzbecker
Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg, Germany
Telephone: 040/46008966
Fax: 040/46008977
E-mail: datenschutz@habewi.de
III. Processing Framework: Website
When you use our Website, we process the personal data specified in detail below in Section IV. We only process data that you actively provide on the Website (e.g. by completing forms) or that you automatically make available when using our services.
Your data is processed exclusively by us and, as a general rule, is not sold, leased or otherwise disclosed to third parties. Where we use external service providers to assist us in processing your personal data, this is done within the framework of processing on behalf of the controller, under which we, as the controller, are authorised to issue instructions to our processors. We use external service providers to host our Website. Our Website is hosted by the external provider Stefan Kittel IT Solutions, Ziegeleistrasse 18, 21423 Winsen Luhe, https://www.skittel.de, at a data centre located in Winsen Luhe, Germany. If additional external service providers are used for any of the individual processing activities described in Section IV, they will be identified there.
As a general rule, we do not transfer data to third countries, nor do we plan to do so. Any exceptions to this principle will be explained in the processing activities described below. Any transfer of data to third countries will then take place on the basis of the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov/) or the EU Standard Contractual Clauses.
IV. Processing in Detail
1. PROVISION OF THE WEBSITE AND SERVER LOG FILES
1.1 Description of Processing
Whenever you access our Website, we automatically collect information transmitted by your browser to our server. This includes the following data:
- IP address
- browser software used, including its version and language
- operating system
- the website from which visitors accessed the Website (the so-called referrer)
- the subpages accessed on the Website
- the date and time the Website was accessed
This information is also stored in our system’s log files. The temporary storage of your IP address by the system is necessary in order to deliver our Website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
1.2 Purpose
The processing takes place in order to enable access to the Website and to ensure its stability and security. In addition, the processing serves the statistical analysis and improvement of our online services.
1.3 Legal Basis
The processing is necessary for the purposes of the overriding legitimate interests pursued by the controller (Art. 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above.
1.4 Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Where data is collected for the purpose of providing the Website, this is the case when the respective session has ended. Log files are deleted after {{logfile_loeschfrist}} days.
2. REGISTRATION AND USER ACCOUNT
2.1 Description of Processing
As part of your purchase in our online shop, you can create a free, permanent customer account with us. Your customer account allows you to view and manage your orders and to make future purchases more quickly and conveniently, as you will not need to re-enter your personal data for subsequent purchases. Creating a customer account is, of course, not mandatory. You may also shop as a guest.
To create a customer account, you must register, for example as part of your first purchase. Registration takes place by completing the registration form on our Website and submitting it to us electronically. The following information must be provided when registering:
- first name
- surname
- address
- date of birth
- telephone number
- username of your choice
- password of your choice
- e-mail address
By clicking the “Register” button, you submit the form to us. You will then receive an automated welcome e-mail containing a link to confirm your e-mail address. Your customer account on our Website will only be activated once you have successfully verified your e-mail address by clicking the confirmation link. In addition to the information provided during registration, your customer account will store your billing and delivery addresses as well as your preferred payment method or means of payment.
2.2 Purpose
The processing takes place in order to provide you with a free, permanent customer account in our online shop.
2.3 Legal Basis
The processing is necessary for entering into and performing the free user agreement (Art. 6(1)(b) GDPR). Without the personal data provided during registration, we are unable to provide the services we are contractually obliged to provide.
2.4 Storage Period and Withdrawal of Consent
As a general rule, we process personal data relating to your customer account until the termination of your user agreement or, where we requested your consent during registration, until you withdraw that consent.
You may withdraw your consent at any time with effect for the future. A simple notification is sufficient (by post to Kopf & Steine GmbH, Eduardstraße 46, 20257 Hamburg, Germany; by fax to +49 40 8000 60922; or by e-mail to info@kopfundsteine.de). The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
However, if you withdraw your consent, we will delete your customer account from our online shop. Following termination of your user agreement or withdrawal of your consent, we will automatically delete your customer account from our online shop. You can also delete it yourself by selecting the “Delete customer account” function in your customer account settings.
2.5 Recipients
3. PURCHASES
3.1 Description of Processing
You can make purchases on our Website either as a guest or as a registered user. During the ordering process, we process your personal data. The mandatory fields marked with an asterisk (“*”) in our online shop must be completed. Otherwise, we will not be able to enter into a purchase agreement with you and send you the requested goods. All other information is voluntary.
When making a purchase on our Website, you may also select one of the payment methods offered in order to pay the purchase price. When you complete your order, the data required for payment will be transmitted to the respective payment service provider.
If you make purchases on our Website as a registered user, you can save your billing and delivery addresses as well as your preferred payment method in your user profile to make future orders faster and more convenient.
3.2 Purpose
The processing takes place for the purpose of entering into and processing purchase agreements.
3.3 Legal Basis
The processing is necessary for entering into and performing purchase agreements (Art. 6(1)(b) GDPR). This also includes the transfer of data required for processing payments to the relevant payment service provider.
3.4 Storage Period and Withdrawal of Consent
Due to requirements under commercial and tax law, we are required to retain your address, payment and order data for a period of eight years. However, after two years, we restrict the processing of this data. This means that your data will then be stored separately solely for the purpose of complying with statutory retention periods and will be deleted immediately once these periods have expired.
3.5 Recipients and Transfers to Third Countries
For the purpose of processing your payment, personal data will be transferred to one of the external payment service providers listed below, depending on the payment method selected by you during your purchase:
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal reserves the right, under certain circumstances, to transfer personal data to credit agencies for identity and creditworthiness checks. Further information about data protection at PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Credit card, direct debit, purchase on account via PayPal Plus: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Reference is also made to PayPal’s Privacy Policy. Further information about data protection for credit card payments, direct debits and purchases on account via PayPal Plus can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- PayPal and PayPal Express: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Further information about data protection for PayPal and PayPal Express can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Klarna purchase on account / Sofort bank transfer: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Further information about data protection for Klarna purchase on account / Sofort bank transfer can be found at https://www.klarna.com/de/datenschutz/
- Credit card via Stripe: Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, California 94107, USA. Further information about data protection for credit card payments via Stripe can be found at https://stripe.com/de/privacy
- Credit card via BS Payone: BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main, Germany.
4. CONTACT
4.1 Description of Processing
We provide a contact form on our Website for you to contact us. In this form, you are asked to enter your e-mail address, your name and a message. When you click the “Submit” button, the data is transmitted to us using SSL encryption (see Section V).
The contact form can only be submitted if you confirm, by ticking the relevant checkbox, that you have read these Privacy Provisions.
You can also contact us using the e-mail addresses provided on the Website. In this case, we process the personal data transmitted with the e-mail.
4.2 Purpose
By providing a contact form on our Website, we aim to offer you a convenient way to contact us. The data transmitted in and via the contact form or your e-mail will be used exclusively for the purpose of processing and responding to your enquiry.
4.3 Legal Basis
The processing is necessary for the purposes of the overriding legitimate interests pursued by the controller (Art. 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above. Where contact by e-mail is intended to result in entering into or performing a contract, the data processing is carried out for the performance of that contract (Art. 6(1)(b) GDPR).
4.4 Storage Period
We delete the data as soon as it is no longer required for the purpose for which it was collected. This is generally the case when the respective communication with you has ended. Communication is considered to have ended when the circumstances indicate that your enquiry has been conclusively resolved.
Where statutory retention periods prevent deletion, the data will be deleted immediately after the relevant statutory retention period has expired.
5. NEWSLETTER
5.1 Description of Processing
We send out a newsletter every two weeks. Through the newsletter, we provide you with information about ticket updates, line-up information, scene news and offers.
You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by completing and submitting a newsletter subscription form on our Website. You can also subscribe as part of an order in our online shop.
Only your e-mail address is required to subscribe to the newsletter. All other information (such as your first and last name) is voluntary and is used solely to personalise the e-mails.
We use a so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our Website. You will then receive an e-mail from us at the e-mail address you provided. In this e-mail, we ask you to confirm that you actually subscribed to the newsletter and wish to receive it. Confirmation is provided by clicking a confirmation link contained in the e-mail.
Only after successful confirmation will we add you to our newsletter mailing list and send you e-mails in the future. As part of the double opt-in procedure, we store the date, time and your IP addresses both when you register and when you confirm your registration.
5.2 Purpose
The processing takes place in order to provide the newsletter function and send newsletter e-mails to subscribers. The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document consent given and to prevent the misuse of e-mail addresses.
5.3 Legal Basis
The processing associated with our subscriber newsletter is based on consent pursuant to Art. 6(1)(a) GDPR. You can access the declaration of consent on our Website at any time at https://dockville.my-june.com/newsletter-subscribe/. Your consent is voluntary.
The collection and storage of the date, time and IP addresses when subscribing to the newsletter is necessary for the purposes of the overriding legitimate interests pursued by the controller (Art. 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above.
5.4 Storage Period and Withdrawal of Consent
If you do not confirm your newsletter subscription within 24 hours of receiving the relevant registration e-mail, your data will be deleted automatically.
Otherwise, we process your personal data for the duration of your newsletter subscription. You may stop receiving our newsletter at any time by withdrawing your consent. A simple notification is sufficient to withdraw your consent (by post to Kopf & Steine GmbH, Eduardstraße 46, 20257 Hamburg, Germany; by fax to +49 40 8000 60922; or by e-mail to info@kopfundsteine.de).
You may also unsubscribe from the newsletter by clicking the unsubscribe link contained in every newsletter e-mail or via https://dockville.my-june.com/unsubscribe/?j_rid=6a7b3824bff0e0c4c4065544&j_id=8fe4a8ad0133486fb29ec27ad2bf541a-6a7a0c2994f2401de0d646f3&j_r=action-6a6afbf4b441b7ec9b83f665.
Once you withdraw your consent, you will no longer receive newsletters and your personal data will be removed from our active mailing list. In order to enforce your withdrawal, we will add your e-mail address, with restricted processing, to our so-called blacklist. This enables us to ensure that you do not receive newsletters from us in the future and that your e-mail address cannot be misused by third parties.
5.5 Recipients
To manage our newsletter mailing list and send e-mails, we use the services of the newsletter provider {{newsletter_provider_dl_text}}
6. COOKIES
6.1 Description of Processing
Our Website uses cookies. Cookies are small text files that are stored on the user’s device when they visit a website. Cookies contain information that enables a device to be recognised and, where applicable, certain functions of a website to be provided.
We distinguish between our own cookies and external, so-called third-party cookies. Our Website uses both “session cookies” and “persistent cookies”. “Session cookies” are automatically deleted when you end your internet session and close your browser. Persistent cookies remain stored on your device for a longer period of time.
6.2 Purpose
We use cookies to make our Website more user-friendly and to provide the functions described above.
6.3 Legal Basis
6.4 Storage Period and Withdrawal of Consent
Cookies are automatically deleted at the end of a session or upon expiry of the specified storage period. Since cookies are stored on your device, you as the user have full control over the use of cookies.
You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted. This can also be done automatically.
If cookies are disabled, deleted or restricted for our Website, certain functions of our Website may no longer be available or may only be available to a limited extent.
6.5 Recipients and Transfers to Third Countries
When cookies are used, data may be transmitted to the relevant providers of these third-party services. This may also involve transfers to third countries outside the European Union or the European Economic Area.
Information about the recipients of data and any transfers to third countries is provided in the relevant section concerning the respective third-party service in these Privacy Provisions.
7. GOOGLE ANALYTICS
7.1 Description of Processing
Our Website uses “Google Analytics”, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).
Google Analytics uses cookies that enable an analysis of your use of our services. The information generated by the cookies is generally transferred to a Google server in the USA and stored there.
However, we use Google Analytics exclusively with IP anonymisation enabled. As a result, Google first truncates your IP address within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there.
The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
The statistics generated by Google Analytics record, in particular, how many users visit our Website, the country or location from which the Website is accessed, which subpages are accessed and which links or search terms visitors use to reach our Website.
Google Analytics’ Terms of Service are available at www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at www.google.com/intl/de/analytics/learn/privacy.html. Google’s Privacy Policy is available at www.google.de/intl/de/policies/privacy.
7.2 Purpose
The processing takes place in order to analyse the use of our Website. The information obtained in this way is used to improve our online presence and tailor it to users’ needs.
7.3 Legal Basis
The processing is based on consent pursuant to Art. 6(1)(a) GDPR. We obtain this consent through the consent tool. Providing such consent is voluntary.
7.4 Storage Period and Withdrawal of Consent
We have explained the storage period and your options for controlling and configuring cookies in the section on cookies.
You may withdraw the consent you have given with regard to Google Analytics at any time, with effect for the future, via the settings of the consent tool.
Alternatively, you can object to data processing by Google Analytics at any time by downloading and installing the browser add-on provided by Google at tools.google.com/dlpage/gaoptout?hl=de.
We automatically delete analytics data processed and stored using Google Analytics after 14 months.
7.5 Recipients and Transfers to Third Countries
According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics acts as a joint controller with us in relation to data processing. Against this background, we have also entered into the “Google Measurement Controller-Controller Data Protection Terms” with Google.
Google also processes your personal data in the USA.
8. SOCIAL NETWORKS
8.1 Description of Processing
Our Website does not use so-called social media plugins. The Instagram logos displayed on our Website merely link to the corresponding profiles of our company on the social networks. Embedding these logos does not result in any data being transferred to the social networks. If you click one of the logos, you will simply be redirected to the external website of the respective social network.
However, data processing does take place in connection with our profiles on social networks. If you are logged into the relevant social network when visiting such a profile, this information will be associated with your user account on that network.
If you interact with our profile, for example by commenting on, “sharing”, “liking” or “retweeting” a post, this information will also be stored in your user account. As a general rule, we are also able to view your interactions with our profile.
On the Instagram social network, the so-called “Insights” feature allows us to obtain statistical data about the use of our Instagram profile. These statistics are provided by Instagram. The “Insights” feature cannot be disabled. We cannot choose whether to enable or disable this feature. It is available to all operators of Instagram business accounts regardless of whether they actively use the Insights feature.
Through Instagram Insights, {{Uns}} receive anonymised data regarding the development and reach of our Instagram profile and the posts, Stories and videos published there. Instagram Insights also provides us with statistical information about the location, gender and age of subscribers to our Instagram profile.
The social networks with which you communicate store your data under pseudonyms in the form of user profiles and use this data for advertising and market research purposes. For example, advertisements corresponding to your presumed interests may be displayed to you within the social network and on third-party websites.
For this purpose, cookies are generally used and stored by the social network on your device. You have the right to object to the creation of these user profiles. To exercise this right, you must contact the social networks directly.
8.2 Purpose
We maintain profiles on the aforementioned social networks for the purposes of public relations and corporate communication with customers and interested parties.
We use Instagram’s “Insights” feature to analyse the reach of our posts on the social network and to make them more appealing to our visitors in the future.
8.3 Legal Basis
The legal basis for data processing in connection with our profiles on social networks is the pursuit of our overriding legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interest lies in the purpose described above.
If you are asked to provide consent by the respective operator of a social network, the legal basis is Art. 6(1)(a) GDPR.
In all other respects, data processing in relation to our presence on Instagram is carried out on the basis of joint controllership pursuant to Art. 26 GDPR.
8.5 Recipients and Transfers to Third Countries
The respective social networks are operated by the companies listed below. Further information regarding data protection in connection with our profiles on the social networks can be found in the linked privacy policies.
- Instagram: Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Privacy Policy: https://help.instagram.com/155833707900388/
The social networks also process your personal data in the USA.
9. YOUTUBE
9.1 Description of Processing
Our Website uses services provided by “YouTube”, a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use YouTube by embedding individual videos from the platform on our Website as so-called iFrames, allowing them to be played directly on our Website.
The videos are embedded using the “privacy-enhanced mode” offered by YouTube. This means that no personal data is transferred from you to Google unless you play the videos. Data is only transferred to Google when you play a video, and we have no control over this transfer.
If you play an embedded video on a subpage of our Website, Google will be informed which subpage you visited and which video you watched. Your IP address may also be transferred to Google.
If you are logged in as a YouTube or Google user at the time, Google will associate this information with your user account. Google stores your data in the form of user profiles and uses it for advertising purposes, market research and/or the needs-based design of Google websites.
You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly.
Further information about data protection at Google can be found at https://google.com/intl/de-DE/policies/privacy/.
9.2 Purpose
The processing takes place in order to display YouTube videos to you on our Website.
9.3 Legal Basis
The processing is based on consent pursuant to Art. 6(1)(a) GDPR. We obtain this consent through the consent tool or via a content blocker at the location on our Website where a YouTube video is intended to be displayed. Providing such consent is voluntary.
9.4 Storage Period and Withdrawal of Consent
We have explained the storage period and your options for controlling and configuring cookies in the section on cookies.
You may withdraw the consent you have given in relation to YouTube at any time, with effect for the future, via the settings of the consent tool.
9.5 Recipients and Transfers to Third Countries
Embedding YouTube may result in personal data being transferred to YouTube LLC or Google. Google also processes your personal data in the USA.
10. GOOGLE MAPS
10.1 Description of Processing
Our Website uses “Google Maps”, a service for displaying maps provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).
We use Google Maps by embedding a map showing our business address on our Website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google together with the address of our Website.
However, Google Maps does not store cookies on your device.
If you are logged into Google when visiting our Website, Google Maps will associate this information with your Google user account. If you do not want the information to be associated with your Google profile, you must log out before activating the map.
Google stores your data as user profiles and uses it for advertising purposes, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly.
Further information about data protection at Google can be found at https://policies.google.com/privacy?hl=de-DE.
10.2 Purpose
The processing takes place in order to display interactive maps to you on our Website.
10.3 Legal Basis
The processing is based on consent pursuant to Art. 6(1)(a) GDPR. We obtain this consent through the consent tool or via a content blocker at the location on our Website where a Google Maps map is intended to be displayed. Providing such consent is voluntary.
10.4 Storage Period and Withdrawal of Consent
You may withdraw your consent to the display of Google Maps maps on our Website at any time, with effect for the future, via the settings of the consent tool.
10.5 Recipients and Transfers to Third Countries
The use of Google Maps may result in personal data being transferred to Google Ireland Limited or Google LLC. Google also processes your personal data in the USA.
11. FONT REPLACEMENT
When displaying our Website, the standard fonts installed on your device are replaced with other fonts. This is done in order to display the text on our Website in a more readable and aesthetically appealing manner.
For font replacement, we have opted for a privacy-friendly solution. We do not integrate external services such as Google Fonts or Adobe Fonts. Instead, we store the replacement fonts locally on our server.
The advantage of this is that when you access our Website, your browser does not send a request to external font services and therefore no data, in particular your IP address in connection with the address of our Website, is transferred to third parties.
12. META PIXEL
12.1 Description of Processing
Our Website uses the remarketing service “Meta Pixel” (formerly “Facebook Pixel”), which is operated by Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
The “Meta Pixel” enables us to display advertisements on the Facebook and Instagram social networks that are specifically targeted at Facebook/Instagram users who have shown an interest in our services, for example by previously visiting our Website.
The “Meta Pixel” also enables us to track and analyse the effectiveness and reach of our advertising on Facebook/Instagram by recording whether Facebook/Instagram users interact with our advertisements on the two social networks and are redirected to our Website by clicking on these advertisements.
When you visit our Website, a connection to Meta’s servers is therefore established and the “Meta Pixel” is embedded in our Website. Meta may additionally store a cookie on your device.
If you are logged into Facebook or Instagram, or if you subsequently log into Facebook or Instagram, your visit to our Website will be associated with your respective user account.
The data collected about you via the “Meta Pixel” is anonymous to us. It does not allow us to draw any conclusions regarding your identity. Meta, however, may be able to link this data to your user profile.
Meta processes data in accordance with its company data policy, which can be accessed for Facebook at www.facebook.com/policy.php and for Instagram at https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
12.2 Purpose
The processing takes place in order to carry out targeted online advertising for our own services on Facebook and Instagram and to analyse its effectiveness and reach.
12.3 Legal Basis
The processing is based on consent pursuant to Art. 6(1)(a) GDPR. We obtain this consent through the consent tool. Providing such consent is voluntary.
12.4 Storage Period and Withdrawal of Consent
We have explained the storage period and your options for controlling and configuring cookies/tracking pixels above.
You may withdraw the consent you have given regarding the collection of data through the “Meta Pixel” and the use of your data to display Facebook/Instagram advertisements at any time, with effect for the future, via the settings of the consent tool.
www.facebook.com/settings?tab=ads
You may also object to the collection of data through the “Meta Pixel” and the use of your data to display Facebook/Instagram advertisements directly to Meta at any time.
Within the settings of your Facebook/Instagram account at https://help.meta.com/support/privacy/, you can decide which types of advertisements are displayed to you on Facebook or Instagram. This setting applies across devices.
You can also prevent collection by the Meta Pixel by deleting your “Activity Off Meta Technologies” in your Facebook/Instagram settings and disconnecting future activity.
12.5 Recipients and Transfers to Third Countries
Embedding the “Meta Pixel” may result in personal data being transferred to Meta. Meta also processes your personal data in the USA.
13. COMPETITIONS
13.1 Description of Processing
From time to time, we run time-limited competitions on our profiles on social networks, in particular on Instagram (https://www.instagram.com/dockville/).
To participate in a competition, you must meet the entry requirements specified for the respective competition. Participation in a competition is voluntary. By participating in a competition, a competition agreement is entered into between you and us at no cost to you.
As part of conducting the competition, namely for the purpose of selecting the winners and awarding the prizes, we process your username or profile name on the respective social network as well as, where applicable, other publicly available profile information that you have provided there.
After the closing date for entries, we will select the winners from the entries received. The winners will subsequently be notified using the direct messaging function of the respective social network.
Any further communication between you and us, whether by direct message, e-mail or another communication channel, may also contain personal data.
When a prize is awarded, we will obtain written confirmation of its collection or receipt and retain this document for documentation purposes.
Please note that the use of social networks and the associated data processing by their respective operators are subject to their terms of use and privacy policies. We have no influence over the data processing carried out by the operators of social networks.
Information about data processing by Meta Platforms can be found in Instagram’s Privacy Policy at https://privacycenter.instagram.com/guide/?hl=de{{#gewinnspiel_plattformen*facebook}} and Facebook’s Privacy Policy at https://www.facebook.com/privacy/center/?locale=de_DE.
13.2 Purpose
The processing takes place for the purpose of conducting and administering a competition.
13.3 Legal Basis
The processing is necessary for entering into and performing the competition agreement (Art. 6(1)(b) GDPR).
Retention of the confirmation form documenting the handover of prizes is based on an overriding legitimate interest pursued by the controller (Art. 6(1)(f) GDPR). Our interest lies in documenting the administration of the competition.
13.4 Storage Period and Withdrawal of Consent
We will not delete comments you leave under the competition post on Instagram or Facebook.
Otherwise, the data will be deleted as soon as it is no longer required for the purpose for which it was collected. Personal data of participants processed in connection with the competition will be deleted once the competition has ended and the prizes have been handed over.
We will retain the personal data of the winners, including documentation of the handover of the prizes won, for a period of 10 years following the conclusion of the competition.
13.5 Recipients and Transfers to Third Countries
As a general rule, we will not disclose your personal data to third parties.
We will not publicly announce the winners anywhere, in particular not on our Website or our social media channels.
Please note that your comment under the competition post may be publicly visible depending on your privacy settings. This is beyond our control and is subject to the terms of use of the respective social network.
{{#gewinnspiel_plattformen*instagram}} The processing of your data by Instagram/Facebook or Meta Platforms Ireland Limited is carried out in accordance with the privacy policies of these social networks, which may also include transfers to third countries, in particular to the USA.
V. Security Measures
To protect your personal data against unauthorised access, we have secured our Website using an SSL or TLS certificate.
SSL stands for “Secure Sockets Layer” and TLS stands for “Transport Layer Security”. These technologies encrypt data communications between a website and the user’s device.
You can identify active SSL or TLS encryption by the small padlock icon displayed on the far left of your browser’s address bar.
VI. Your Rights
With regard to the processing of data described above by our company, you have the following rights as a data subject:
1. Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed.
Where this is the case, subject to the conditions set out in Art. 15 GDPR, you have the right to access this personal data and the information specified in detail in Art. 15 GDPR.
2. Right to Rectification (Art. 16 GDPR)
You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.
3. Right to Erasure (Art. 17 GDPR)
You have the right to request that we erase personal data concerning you without undue delay where one of the grounds specified in detail in Art. 17 GDPR applies, for example where your data is no longer necessary for the purposes pursued by us.
4. Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request that we restrict processing where one of the conditions specified in Art. 18 GDPR applies. For example, if you contest the accuracy of your personal data, the processing of that data will be restricted for the period necessary for us to verify its accuracy.
5. Right to Data Portability (Art. 20 GDPR)
Subject to the conditions set out in Art. 20 GDPR, you have the right to receive the data concerning you in a structured, commonly used and machine-readable format.
6. Withdrawal of Consent (Art. 7(3) GDPR)
Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal applies from the time it is exercised. In other words, it takes effect for the future. Withdrawal of consent therefore does not retrospectively render the processing unlawful.
7. Right to Lodge a Complaint (Art. 77 GDPR)
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
8. Prohibition of Automated Decision-Making/Profiling (Art. 22 GDPR)
Decisions that produce legal effects concerning you or similarly significantly affect you may not be based solely on automated processing of personal data, including profiling. We hereby inform you that we do not use automated decision-making, including profiling, in relation to your personal data.
9. Right to Object (Art. 21 GDPR)
Where we process your personal data on the basis of Art. 6(1)(f) GDPR (for the purposes of overriding legitimate interests), you have the right to object to such processing under the conditions specified in Art. 21 GDPR. However, this applies only where there are grounds relating to your particular situation. Following an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms. We are also not required to discontinue processing where it serves the establishment, exercise or defence of legal claims. In any event, and irrespective of any particular situation, you have the right to object at any time to the processing of your personal data for direct marketing purposes.
Last updated: August 2026