Data protection information according to art. 13 and 21 DS-GVO for the HERE-Webshop of VOK DAMS Events GmbH

 

  1. General Information

We, VOK DAMS Events GmbH, offer this webshop as a closed portal for employees and other entitled persons of HERE Global B.V. ("HERE").

This data protection notice applies to the operation of the web shop. We are not responsible for HERE's compliance with regulations on the protection of employee data.

We take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. You are only sufficiently informed about the purpose, type and scope of the processing if the processing is comprehensible for you as the person concerned. Our data protection declaration therefore explains to you in detail which personal data are processed by us when you use the eventlive@here.com website and all other websites referring to it (definitions under 2.).

The person responsible within the meaning of the Basic Data Protection Regulation (DS-GVO), the Federal Data Protection Act (BDSG) and other data protection regulations is

VOK DAMS Events GmbH
Katernberger Straße 54
42115 Wuppertal
Germany

In the following referred to as "responsible person" or "we".

You can reach our data protection officer at:

Per Kristian Stöcker
c/o KREMER-RECHTSANWÄLTE
Disch-Haus – Brückenstraße 21
50667 Cologne

Germany

 

Ideally by eMail under: info@here-eventlive.com

Please note that you may be able to access other websites via links on our website, which are not operated by us but by third parties. Such links are either clearly identified by us or can be identified by a change in the address line of your browser. For compliance with data protection regulations and safe handling of your personal data.

We are not responsible for data on these websites operated by third parties.

  

  1. Definitons

2.1 From the DS-GVO

This data protection declaration uses the terms of the legal text of the DS-GVO. You can view the definitions (Art. 4 DS-GVO) at https://dejure.org/gesetze/DSGVO/4.html, for example.

2.2 Cookies
Cookies are text files that are stored or read by a website on your terminal device. They contain combinations of letters and numbers in order, for example, to recognise the user and his settings when reconnecting to the cookie-setting website, to enable the user to remain logged in to a customer account or to analyse a specific user behaviour.


  1. General information on data processing

We process personal data only to the extent permitted by law.

Personal data will be deleted or protected by technical and organizational measures (e.g. pseudonymisation, encryption) as soon as the purpose of processing no longer applies. This is also the case when a prescribed storage period expires, unless there is a need for further storage of personal data for the conclusion or performance of a contract.

Recipients of your data are employees within our company, who must process your data for the purposes described here if necessary in accordance with a graduated authorization concept. In addition, so-called contract processors according to Art. 28 DSGVO may receive your data in the course of a service provider function, such as IT service providers. All our service providers process data on a contract basis exclusively within the European Union or the European Economic Area and are contractually obliged to take appropriate technical and organizational measures to guarantee data protection and to maintain data secrecy. A data processing in a so-called third country does not take place. Furthermore, recipients of your data may also be partner companies, insofar as we have to consult or inform them if necessary in order to provide a service owed to you.

 

Unless we are required by law to store personal data for a longer period of time or to disclose it to third parties (in particular law enforcement agencies), the decision as to which personal data is collected by us, how long it is stored and to what extent you may have to disclose it depends on which functions of the website you use in individual cases.

 

  1. Data processing in connection with the use of the website
  • Use of the Website

You can only access our webshop via a valid customer login. Without login you will only get to a landing page which does not contain any information and does not collect any personal data. 

After you have logged in with your valid access data (name, password) and have been authenticated as part of a single sign-on procedure, you can use the webshop. We collect the following information as a matter of principle:

IP address of your terminal as well as date and time of login. This information is transmitted by your browser unless you have configured it to suppress the transmission of the information. In order to guarantee the security of our information technology systems, we need part of the IP address. This is also our legitimate interest, which is why processing is permitted under Art. 6 Para. 1 Letter f DS-GVO. However, your IP address will be anonymized by us immediately after it has been collected. After that, it is no longer possible to assign the IP address to you.

 

  • Customer account

To the extent that HERE has authorized you to do so, you may create a customer account on our website; this is done automatically when you place an order in our online shop (see also 4.5.). If you do so, the personal data you provide there will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of registration are also stored. When you log into your customer account, our website places cookies on your terminal device to enable you to remain logged in, even if you have to reload the website in the meantime.

The processing of the personal data entered by you serves the purpose of being able to provide you with the customer account and to be able to assign future usage processes such as orders or contact enquiries to your customer account. These processing operations are lawful pursuant to Art. 6 para. 1 letter b DS-GVO because they serve to fulfil the contract. In addition, the opening of a customer account is a prerequisite for placing an order in our online shop, and processing is also necessary for fulfilling the contract pursuant to Art. 6 Para. 1 Letter b DS-GVO. The storage of IP address and time of registration is necessary to guarantee the security of our information technology systems. This is also our legitimate interest, which is why processing is permissible according to Art. 6 Para. 1 Letter f DS-GVO.

The personal data entered by you will be stored until your customer account with us is terminated, but in any case as long as necessary for the performance of the contract. IP address and time of registration are stored for a period of four weeks. The cookies lose their validity when you log out, otherwise after two days at the latest. We do not merge this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organization is not intended. You are not obliged to provide this personal data, but the establishment or use of a customer account and thus an order in our online shop is not possible without the provision.

 

  • Contact form / Contact by email / Callback request

If you use the contact form on our website, ask us to call you back or send us an e-mail, we will process the personal data you provide there. This information is transmitted by your browser or e-mail client and stored in our information technology systems. The processing of this personal data is necessary to answer your inquiry. In addition, your IP address and date and time of the contact request are stored.

Data processing serves to answer your inquiry and to prevent misuse of the contact form and to guarantee the security of our information technology systems. These processing operations are lawful because the response to your inquiry and the protection of our information technology systems represent legitimate interests within the meaning of Art. 6 Para. 1 Letter f DS-GVO.

Personal data will be stored for as long as is necessary to answer your enquiry. Thereafter, the personal data is routinely deleted every three months. The IP address from the contact form is stored for a period of four weeks. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but it is not possible to use the contact form or send an e-mail without providing it.

 

  • Webshop, request of advertising material or offers

When you add products to your shopping cart, our website places cookies on your device to allow you to continue ordering even if you need to reload the website in the meantime. When you place an order, the personal data entered in the order form is also transmitted to us by your browser and stored in our information technology systems. If you already have a customer account with us, registration in your customer account is sufficient. We will then use the rest of the personal data from your customer account.  In addition, your IP address and time of the order are stored.

The processing of the personal data entered by you serves the purpose of being able to deliver an order. This processing is lawful because it is necessary to fulfil the contract in accordance with Art. 6 Para. 1 Letter b DS-GVO. The storage of IP address and time of the order serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Art. 6 Para. 1 Letter f DS-GVO.

The personal data you enter will be stored for as long as is necessary to fulfil the contract. IP address and time of the order are stored for a period of two weeks. The cookies lose their validity after two days at the latest. We do not merge this personal data with other data sources. Data will not be passed on to third parties.  You are not obliged to provide this personal data, but an order in our online shop is not possible without the provision.

 

You can request individual offers for our products or have advertising material sent to you on our website. If you do so, the personal data you provide when you request us will be transmitted to us by your browser and stored in our information technology systems.

Your IP address and the time of the request are also stored.

The processing of the personal data entered by you serves the purpose of the creation and dispatch of the individual offer or the dispatch of the advertising material. This processing is lawful because it is necessary for the implementation of pre-contractual measures pursuant to Art. 6 Para. 1 Letter b DS-GVO and the response to your enquiry is a legitimate interest of ours pursuant to Art. 6 Para. 1 Letter f DS-GVO. The storage of IP address and time of the request serves the purpose of ensuring the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Art. 6 Para. 1 Letter f DS-GVO.

The personal data provided by you will be stored for as long as is necessary to dispatch the advertising material or prepare an offer or, should a contract be concluded, to fulfil the contract. The data is then routinely deleted every three months. The IP address and time of the request are stored for a period of four weeks. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organization is not intended.  You are not obliged to provide this personal data, but it is not possible to send advertising material or prepare an offer without providing it.


  1. Right of data subjects

As a data subject, you have the right to information under Art. 15 DS-GVO, the right to rectification under Art. 16 DS-GVO, the right to deletion under Art. 17 DS-GVO, the right to limitation of processing under Art. 18 DS-GVO and the right to data transferability under Art. 20 DS-GVO. The restrictions in §§ 34, 35 BDSG apply to the right to information and the right to cancellation.

You have the right to complain to a data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG). The data protection supervisory authority responsible for our head office is: VOK DAMS Events GmbH. However, you are free to complain to another data protection supervisory authority. 


  1. Automated decisions in individual cases including profilingAutomatisierte Entscheidungen im Einzelfall einschließlich Profiling

 Automated decisions in individual cases, including profiling, are not made.

 

  1. Notification obligations of the person responsible

We will notify all recipients to whom your personal data has been disclosed of any rectification or deletion of your personal data or any restriction on processing pursuant to Art. 16, Art. 17 Para. 1 and Art. 18 DS-GVO, unless such notification is impossible or involves a disproportionate effort.

We will inform you of the recipients if you so request.

 

  1. Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 letter e or f DS-GVO. If personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising.

The objection can be made informally and must be addressed to:

VOK DAMS Events GmbH
Katernberger Str. 54
42115 Wuppertal
Germany
info[at]here-eventlive.com