PRIVACY POLICY

1. CONTROLLER

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

David Günther Andrews Am Brückensteg 5A 63906 Erlenbach Germany

Email: andrews@scadcollective.de

2. GENERAL INFORMATION ON DATA PROCESSING

We process personal data only to the extent necessary to provide a functional website, our content, our event-related services, and communication with users.

Personal data means any information relating to an identified or identifiable natural person.

This Privacy Policy explains in particular: which personal data we collect, for which purposes we process it, on which legal basis we process it, to whom data may be disclosed, how long data is stored, and which rights you have under the GDPR.

3. HOSTING AND SERVER LOG FILES

This website is hosted by Netlify. The provider is Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

When you visit our website, Netlify collects various log files including your IP addresses. Netlify is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable, secure, and fast functional display of our website.

We have concluded a Data Processing Agreement (DPA) with Netlify. This is a contract required by data protection law, which ensures that Netlify processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Data transfer to the USA is based on the Standard Contractual Clauses (SCC) of the EU Commission. Netlify participates in the EU-U.S. Data Privacy Framework.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: Browser type and browser version, Operating system used, Referrer URL, Hostname of the accessing computer, Time of the server request, IP address.

This data is not merged with other data sources. The basis for data processing is Art. 6(1)(f) GDPR, which permits the processing of data for the legitimate interest of the operator in the technically error-free presentation and optimization of its website.

4. CONTACT REQUESTS AND EMAIL COLLECTION

If you contact us by email or via a form on this website, or if you submit your email address to receive updates, we process the data you provide for the purpose of handling your request or sending the requested communications.

The data processed in this context may include: name, email address, message content, any other data voluntarily provided by you.

If the communication relates to pre-contractual inquiries or an existing contractual relationship, processing may also be based on Art. 6(1)(b) GDPR. Otherwise, processing is based on your consent.

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR where applicable.

5. TICKETING VIA WEEZTIX

For ticket purchases, this website links to the external ticketing platform Weeztix.

Provider: Weeztix B.V., Jan van Lieshoutstraat 23, 5611 EE Eindhoven, The Netherlands.

When you click on a ticket link or purchase a ticket via Weeztix, personal data may be collected and processed by Weeztix and, depending on the booking process, by us in connection with event administration and ticket fulfillment.

The categories of personal data may include: name, email address, ticket order information, event-related booking data, payment-related information processed by the ticketing provider or its payment partners.

Legal basis: Art. 6(1)(b) GDPR insofar as processing is necessary for ticket purchase and event-related contract performance, Art. 6(1)(f) GDPR insofar as linking to the ticket provider serves our legitimate interest in providing ticket sales functionality.

6. COOKIES AND CONSENT MANAGEMENT

This website uses cookies and similar technologies.

Cookies that are technically necessary may be stored on your device without consent where this is required for the operation and security of the website.

All non-essential cookies and similar technologies, in particular for marketing, tracking, embedded third-party content, and tag management for such purposes, are only used after you have provided your consent via the consent banner.

You can accept, reject, or customize your preferences at any time via the consent tool used on the website.

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(f) GDPR for technically necessary cookies and security-related processing.

7. USE OF GOOGLE TAG MANAGER

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage website tags through an interface. Google Tag Manager itself serves as a tag management system and may trigger other tags that process personal data.

Non-essential tags managed through Google Tag Manager are only activated after the user has granted the relevant consent through the consent management platform.

Legal basis: Art. 6(1)(a) GDPR for consent-based tag activation, Art. 6(1)(f) GDPR where use is strictly limited to technically necessary deployment.

8. META ADS AND META PIXEL

This website uses Meta advertising technologies, in particular Meta Pixel, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Meta Pixel enables us to measure the effectiveness of our advertisements, build audiences, and understand how users interact with our website after clicking on advertisements on Meta services such as Facebook and Instagram.

In this context, personal data may be processed, including: IP address, device information, browser information, page views, interactions on the website, event data relevant for advertising measurement.

The use of Meta Pixel and comparable marketing technologies is based exclusively on your consent.

Legal basis: Art. 6(1)(a) GDPR.

9. INSTAGRAM EMBEDS AND THIRD-PARTY CONTENT

This website may include embedded content from Instagram.

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When embedded Instagram content is activated, a connection to Meta servers may be established and personal data may be transmitted to Meta. Embedded third-party content of this kind is only loaded after you have given your consent, unless the integration is implemented in a strictly privacy-preserving way that does not transmit personal data before activation.

Legal basis: Art. 6(1)(a) GDPR.

10. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed to the following categories of recipients where necessary: hosting providers, technical website service providers, consent management providers, ticketing providers, email and communication service providers, marketing and advertising providers, authorities and courts where disclosure is legally required.

Where external service providers process personal data on our behalf, we conclude data processing agreements pursuant to Art. 28 GDPR where required.

11. TRANSFERS TO THIRD COUNTRIES

Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfer takes place only in accordance with the requirements of the GDPR.

This may occur in particular in connection with services provided by Google or Meta.

Where no adequacy decision exists, transfers are based in particular on appropriate safeguards such as Standard Contractual Clauses pursuant to Art. 46 GDPR, where applicable.

12. STORAGE DURATION

We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations require.

In particular: server log data is stored only for a limited period necessary for technical security and operation, contact requests are stored for as long as necessary to process the request and any follow-up communication, contract and ticket-related data may be stored for the duration of statutory commercial and tax retention obligations, consent data may be stored for as long as necessary to document granted or withdrawn consent.

13. RIGHTS OF DATA SUBJECTS

You have the following rights under the GDPR, subject to the respective statutory requirements:

Right of access pursuant to Art. 15 GDPR, Right to rectification pursuant to Art. 16 GDPR, Right to erasure pursuant to Art. 17 GDPR, Right to restriction of processing pursuant to Art. 18 GDPR, Right to data portability pursuant to Art. 20 GDPR, Right to object pursuant to Art. 21 GDPR, Right to withdraw consent at any time pursuant to Art. 7(3) GDPR with effect for the future.

To exercise these rights, you may contact us using the contact details stated in this Privacy Policy or in the imprint.

14. RIGHT TO LODGE A COMPLAINT

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

15. OBLIGATION TO PROVIDE DATA

As a rule, you are not legally or contractually obliged to provide personal data when visiting this website. However, certain functions, including contact requests or ticket purchases, may not be available without the provision of the data necessary for those purposes.

16. DATA SECURITY

We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

17. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy at any time in order to reflect changes in legal requirements or changes in the services used on this website.