Thank you for visiting our website. As provided for by law we are required to inform you about the processing of personal data. Please note the following information:
I. Name and address of controller
Controller in terms of the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations:
Parookaville GmbH
Katharinenquartier 4 - 6
47652 Weeze
Tel.: +49 (0) 28 37 – 91 11 – 12
Fax: +49 (0) 28 37 – 91 11 – 11
E-mail: datenschutz@parookaville.com
II. Data protection commissioner
Data protection commissioner of Parookaville GmbH: Mr. Johannes Bergers.
III. Provision of website and log files
Description and extent of data processing
When clicking our website our system automatically collects data and information about the calling computer’s system.
The following data are collected:
- information about browser and browser version
- user’s operating system
- user’s Internet service provider
- user IP
- date and time of access
- websites from which the system accessed our website
- websites a user’s system accesses from our website
Legal basis for data processing
Legal basis for temporary data storage: Art. 6, point 1f, GDPR.
Purpose of data processing
A temporary storage of an IP address is required to ensure to transmit the website to a user’s computer. To do so a user’s address must be stored for a session.
These purposes constitute a legitimate interest in data processing pursuant to Art. 6, point 1f, GDPR.
Storage period
Data will be erased as soon as they are no longer needed for collection purposes. If data are collected to provide a website, data will no longer be needed at the end of the respective session.
Objection and deletion
Collecting data for the purpose of providing the website is absolutely necessary. Hence a user can’t object thereto.
IV. Pre-registration, purchase of tickets and organization of festival
Description and extent of data processing
Pre-registration, purchase of ticket and resale
If you use the possibility of registering for ticket sale during pre-registration or buying tickets during ticket sale, we will collect, process and store your necessary personal data in the course of processing your order. Such data include:
- your name and your address
- your date of birth
- your e-mail address
You can resell tickets to third parties. Therefore, your data are stored to ensure such resale. In order to handle the pre-registration process, ticket sale and ticket resale we collaborate with TicketPAY Europe GmbH, Neue Bahnhofstraße 1-3, 59065 Hamm, Germany, being our processor. Aforementioned data are transmitted to this processor. To read the privacy statement of TicketPAY Europe GmbH click here.
Age verification
You will be granted access to our festival if you are min. 18 years of age at the time of the festival. Therefore, there will be an age verification at the entry gate.
RFID bracelet
At the entry gate of the festival you will receive a bracelet upon presentation of the ticket. Your right of access is stored on such bracelet. This bracelet uses the so-called RFID technology. A unique sequence of figures is stored on the bracelet. However, no personal data are stored. We can readout this sequence of figures and compare them with our data in order to identify you. This way we can grant access to the festival and the areas you have access to on the basis of your ticket. During the festival you will have the chance of a voluntary identification (e.g. in case of lotteries).
Parookaville Post
Ahead of our festival information will be mailed to you (Parookaville Post), using your postal address given by you.
Legal basis for data processing
Legal basis for data processing: Art. 6, point 1f, GDPR and the contract for sale of tickets and access to our festival concluded with us.
Purpose of data processing
We store your data for the purpose of processing your ticket order and to ensure a resale of your ticket through our ticket exchange.
We also store your data for age verification purposes (entry gate, in particular) and to grant access to our festival area using RFID bracelets.
Your address will be stored in order to mail additional information about our festival.
Storage period
Data will be erased as soon as they are no longer needed for collection. In terms of performing the contract this means the fulfilment of all obligations arising from the contract and if warranty claims no longer exist. Statutory legal provisions (obligation to preserve records under tax law and commercial law) remain unaffected.
Objection and erasure
Being a customer you may object to the use of your data with effect for the future.
If data are needed to perform a contract or for pre-contractual measures an early erasure of data will be possible unless otherwise provided for by the contract or by law.
V. Photos and videos during festival
During our event, photographs and video recordings are made which may also show visitors to the event.
Insofar as persons are recognizable or identifiable on the recordings, this involves the processing of personal data.
Since our event is public, we assume that you expect to be recorded accordingly as a participant of the event.
The recordings will not be made secretly or covertly and not,
• if you are affected in your privacy,
• if you would be portrayed in a situation that could be discrediting or pose a risk of discrimination;
• when you have expressed in a recognizable way that you do not wish to be recorded.Recordings will only be made:
• if a large number of people are being recorded together with you, i.e. you are in a group,
or
• the recording depicts the event as such,
or
• you appear only as a so-called "Beiwerk"(incidental) next to the landscape or the pictured location,
or
• you convey a representative impression of the event if you stand out from the audience.
The recordings are created, stored, processed and published for the purpose of documenting the event, reporting on the event, advertising subsequent events and for our public relations work.
This includes publication and distribution via our websites and via our channels in social media and microblogging services (e.g. Twitter) as well as via radio, TV and print media (e.g. as part of press releases).
The recordings for our purposes are made by our own employees or by persons we have commissioned. The commissioned persons are thereby order processors within the meaning of Art. 28 DSGVO.
Insofar as media representatives, photographers or cameramen accredited by us create recordings, they act on their own responsibility under data protection law.
- The processing of personal data for the purposes stated here is carried out on the basis of our legitimate interest, whereby your interests or fundamental rights and freedoms requiring the protection of personal data are not overridden (pursuant to Art. 6 (1) lit. f DS-GVO).
- Within the scope of the above-mentioned purposes, the recordings are both transmitted to the public and made available to operators of media companies, websites and other services for the purpose of publication and use.
Social media and microblogging services have their server locations abroad, especially in the USA, with a few exceptions. There is no adequacy decision for the USA. However, all social networks known to us are certified under the EU-US Privacy Shield. A list of certified companies can be viewed at https://www.privacyshield.gov/.
- Recordings not used for the above purposes will be stored for a period of two years and then deleted; published recordings will be removed from our own Internet offerings and deleted after five years at the latest.
Insofar as the recordings serve to document the event, they will be stored for an unlimited period of time.
In the case of the use of selected images in social media and similar services, other conditions exist in accordance with the data protection guidelines of the respective network operators.
- We do not transfer recordings with your personal data to other third parties beyond the recipient groups listed above, unless there is a legal obligation to do so.
- Since we make and process the recordings on the basis of a legitimate interest, you have a right of objection pursuant to Art. 21 (1) DSGVO (see Section XI of this Privacy Policy). In particular, you have the right to object at any time to the making and use of photographs and film recordings relating to your person for reasons arising from your particular situation. The objection can be communicated to the person who takes photographs or films on site.
- In the case of a justified objection, we will make you unrecognizable on recordings that allow a recognizable identification of your person, remove your portrait or delete the images completely.
VI. Newsletter
Auf unserer Internetseite besteht die Möglichkeit, einen kostenfreien Newsletter zu abonnieren. Dabei werden bei der Anmeldung zum Newsletter folgende Daten aus der Eingabemaske an uns übermittelt:
E-Mail-Adresse des Abonnenten
A free newsletter may be subscribed on our website. The following data of the input mask are transmitted to us:
Subscriber’s e-mail address
By registering you consent to the processing of your data. Reference is made to this privacy statement. Data are solely used to send the newsletter.
The newsletter is sent using “MailChimp” provided by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. This provider is our processor. The company is certified under the Privacy Shield.
Legal basis for the processing of data after user’s newsletter registration subject to user’s approval: Art. 6, point 1 a, GDPR. A user’s e-mail address is used to send the newsletter. Data will be erased as soon as they are no longer needed for collection. Accordingly, data will be stored as long as there is an active newsletter subscription.
A newsletter subscription may be terminated by the user concerned at any time. For this purpose the newsletter includes a corresponding link. This way an approval of storage of personal data collected during registration can be withdrawn.
VII. Lotteries
From time to time you may take part in lotteries found on our website. When taking part the following data will be collected:
participant’s name
participant’s e-mail address
Legal basis for data processing: Art. 6, point 1 b, GDPR, and the contract for participation in the lottery concluded with us.
An e-mail address is collected for the purpose of informing the winner about his/her prize.
Data will be erased as soon as they are no longer needed for collection, i.e. after picking and informing the winner.
VIII. Use of Google Analytics for web analysis
This website uses Google Analytics, a web analysis tool provided by Google LLC (“Google”). Google Analytics uses so-called cookies, i.e. text files stored on your computer to ensure an analysis of the website use. Information about your use of the website generated by that cookie are transmitted to a Google server in the USA and stored there. If the IP anonymisation of this website is enabled, Google will shorten your IP address in the member states of the European Union or another signatory to the Agreement on the European Economic Area. The full IP address is transmitted to a Google server in the USA and shortened there in exceptional cases only.
Google will use these information on behalf of the Organizer in order to analyse the website use, to provide reports on website activities and additional services related to the use of the website and the Internet to the Organizer. The IP address your browser transmits to Google Analytics is not merged with other Google data. Storing cookies on your computer can be prevented by corresponding settings in your browser; it is pointed out that in such case not all functionalities of this website can be used.
You can also prevent a collection of your website use related data generated by the cookie (incl. IP address and the processing thereof by Google) by downloading and installing a browser plug-in at the following address: (http://tools-google.com/dlpage/gaoptout?hl=de).
Google Analytics use of cookies is based on Art. 6, point 1f, GDPR. Storage period: 14 months unless opt-out is used.
IX. Tracking by Facebook-Pixel
This website uses the Facebook pixel, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion tracking.
This way visitors’ behaviour can be tracked after forwarding them to the provider’s website by clicking the Facebook advertisement. This way the effectiveness of Facebook advertisements can be analysed for statistical and market research purposes and they can be optimised for future advertising campaigns.
Collected data are anonymous to the operator of this website. A user’s identity can’t be inferred therefrom. However, these data are stored and processed by Facebook so they could be linked with the respective user profile and Facebook could use them for its own advertising purposes in accordance with the Facebook data use policy. This way Facebook can place advertisements on Facebook sites and outside of Facebook. We being the site operator can’t influence such data use. In the data policy of Facebook you will find additional information about the protection of your privacy: https://www.facebook.com/about/privacy/
You can also disable “Custom Audiences” in settings for advertisements
(https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).
To do so you need to be registered with Facebook. If you don’t have a Facebook account, you can disable the user-based advertising of Facebook at http://www.youronlinechoices.com/de/praferenzmanagement/.
X. Embedding third party content
This website uses content provided by third parties This mainly applies to embedded videos on our websites.
Technically, this means that third parties providing such content can the users’ IP addresses as without an IP address they can’t transmit any content to their browsers. Hence an IP address is needed to present such content. Videos are embedded using the “YouTube” platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The Google privacy police can be found at www.google.com/policies/privacy/. Content is embedded pursuant to Art. 6, point 1f, GDPR. Providing an attractively designed website is our legitimate interest.
XI. Rights of person concerned
If personal data are processed, you are a person concerned in terms of GDPR and the following rights can be exercised:
Right of access
You have the right to obtain from us conformation as to whether or not personal data concerning you are being processed (Article 15, GDPR).
Right to rectification
You have the right to obtain from us the rectification of inaccurate personal data concerning you (Art. 16, GDPR).
Right to restriction of processing
You have the right to obtain from us restriction of processing provided that all legal prerequisites exist (Article 18, GDPR).
Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay, if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (Article 17, GDPR).
Right of notification
You can exercise your right of notification at any time (Article 19, GDPR). If you exercise such right to rectification, erasure or restriction of processing we shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.
Right to data portability
You can exercise your right to data portability at any time (Article 20, GDPR). You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller if technically feasible.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you hall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Right to withdrawal of declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. A withdrawal of your consent doesn’t affect the lawfulness of the processing until such withdrawal on the basis of such consent.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78, GDPR.