Who is responsible for processing your personal data under data protection law?
That would be Ingrid Yeboah, Potsdamer Str. 98, 10785 Berlin, cheers@igmondial.de
We haven’t appointed a Data Protection Officer, as we’re not legally required to do so. However, if you have any questions about data protection, feel free to reach out to us using the contact details above.
How do we process your personal data?
That depends on how you use our website:
1. Visiting our website
Whenever you visit our website or access any file from it, your browser automatically sends certain information to our server so that a connection can be established and the content displayed on your device. For this purpose, temporary so-called log files are stored, which include the following details:
* IP address of the requesting device
* Date and time of access
* Name and URL of the accessed file
* Amount of data transferred
* The referring website (if any)
* Access status (e.g. file transferred, file not found)
* Information about your browser and operating system
* Number of visits
* Time spent on the website
The legal basis for this is Article 6(1)(f) of EU GDPR, our legitimate interest is to ensure fast, stable, and properly formatted delivery of our website content, to maintain its security and functionality, and to investigate any potentially unlawful attacks on the site.
Log files are usually deleted after seven days. In rare cases, we may store them for longer – for example, if we need to analyse attacks on our IT systems.
Our web hosting is provided by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, with whom we have a data processing agreement in accordance with Article 28 of the GDPR.
2. Contacting us using the details provided
If you get in touch with us via email, post, telephone or social media, we’ll process the information you provide so we can respond to your enquiry. This usually includes your name, email address, the content of your message, and possibly a phone number.
If your contact is in relation to setting up or carrying out a contract, the legal basis is Article 6(1)(b) GDPR. In this case, we will store your personal data until your enquiry is fully resolved or the end of our business relationship, unless we are legally obliged or entitled to retain the correspondence (e.g. emails or letters) for longer — for example, to comply with legal obligations or enforce legal claims.
For all other types of enquiries, we rely on Article 6(1)(f) GDPR, with our legitimate interest being to respond to your message. In such cases, we retain your personal data only for as long as needed to handle your enquiry. We also use ALL-INKL.COM for our email hosting.
3. Exclusive invitations
We use your personal data – specifically your first name, last name and email address – to send you invitations to our events by email. The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the GDPR.
For sending these invitations, we use the service Brevo, operated by: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Sendinblue GmbH acts as our processor pursuant to Article 28 GDPR. Sendinblue GmbH processes your email address as well as certain technical information where applicable (e.g. to ensure proper display on mobile devices, diagnose errors or avoid spam filtering). It also records whether and when emails are opened and which links are clicked (so-called tracking). This tracking is used exclusively for statistical purposes to improve the way we send our invitations. We store your data for as long as we have your consent. Once you withdraw your consent, your data will be deleted without undue delay, unless statutory retention obligations require otherwise.
You may withdraw your consent to the use of your data for the purpose of sending invitations at any time with effect for the future – either by simply clicking the unsubscribe link provided in each email or by contacting us using the contact information provided in this notice.
4. Photography and Video Recordings at Our Events
During our events, photographs and video recordings are taken and subsequently published. These recordings are used for promotional purposes on our website and Instagram account, in press releases, as well as for documentation of the event both online and offline.
Legal Basis:
The processing of these images and recordings is based on our legitimate interest in increasing the visibility of our events to the public and promoting our activities, as well as for documentation purposes. This is in accordance with Article 6(1)(f) of the GDPR.
What rights do you have regarding the data we process?
If we process your personal data — or if you want to check whether we do — you have the following rights under the applicable conditions:
* Right of access (Article 15 GDPR)
* Right to rectification (Article 16 GDPR)
* Right to erasure (Article 17 GDPR)
* Right to restriction of processing (Article 18 GDPR)
* Right to data portability (Article 20 GDPR)
You also have the right to lodge a complaint with a supervisory authority. As we’re based in Berlin, the relevant authority for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59–61, 10555 Berlin, Germany.
Any consent you’ve given us can be withdrawn at any time. We’ll then stop processing your data on that basis going forward. Note that withdrawal doesn’t affect the lawfulness of processing based on consent before it was withdrawn.
In addition, under Article 21 GDPR, you have the right to object to processing based on legitimate interests (Article 6(1)(f) GDPR), if reasons relating to your particular situation apply. If your objection relates to direct marketing, no specific reason is needed.
To exercise your right to withdraw consent or object to processing, simply get in touch using the contact details provided above.
We do not carry out automated decision-making or profiling.