Data protection declaration

The protection of your personal data is very important to MAC – Märkte und Aktionskreis City e. V.

We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes they are used. In order to prevent loss or misuse of the data stored by us, we take comprehensive technical and organisational security measures, which are regularly reviewed and adapted to technological progress.

Responsible for processing acc. Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:

MAC – Märkte und Aktionskreis City e.V.
Theaterstr. 65
52 062 Aachen
Tel. 0241/93 688 949
Fax: 0241/29 906
Mail: info@mac-aachen. de

The MAC – Märkte und Aktionskreis City e.V. collects and stores personal and usage-related data not within the scope of technical possibilities, but only insofar as this is absolutely necessary. The MAC – Märkte und Aktionskreis City e.V. processes personal data, insofar as such data are collected in individual cases with the consent of the user, in accordance with the strict regulations of the applicable German and European data protection regulations.

Use of our website aachenweihnachtsmarkt.de/en

You can visit our website at any time without providing any personal details. On the basis of our legitimate interests within the meaning of Art. 6 para. 1 p. 1 lit. f. GDPR Data about every access to the server on which this service is located (so-called server log files). The access data include:

• IP address;
• Name of the retrieved file;
• date and time of retrieval;
• amount of data transmitted;
• Indication whether the call was successful.

This data storage takes place without reference to any person, i. e. :

The data is collected anonymously and does not allow any conclusions to be drawn about your identity. This data is not evaluated for other purposes, in particular for the creation of user profiles. Log file information is stored for a maximum of 30 days for security reasons and then deleted. Data whose further retention is necessary for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.

Purposes of data collection and processing

When you use our services, we need your data for contract performance and other purposes defined by law. For other purposes, we only use your data with your consent. It is your free choice to transmit this data. If you transmit personal data to Medienhaus Aachen GmbH, we process it in accordance with the provisions of the applicable German and European data protection regulations.

Data is transferred to entities in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary for the execution of an order/contract with you, if it is required by law (e.g. tax reporting obligations) or if you have given us your consent. The processing of your data in a third country may also take place in connection with the engagement of service providers in the context of order processing.

If, for example, information material, newsletters, brochures etc. are ordered, we need your name and other contact details for processing. For example, the use of your bank account is necessary if you have granted us a direct debit authorization or the use of your monthly invoice amount if you are or become a subscription customer. In addition, we also use your inventory data for other legally permitted purposes such as invoice receipts. The deadlines for deletion of your inventory data are governed by statutory regulations. This means that your data is initially stored by us for the duration of the order. Subsequently, we retain the data for a further period of 3 years in order to carry out the necessary processing work and also to be able to provide you with information on request. Following this post-processing phase, certain of your data relating to the terminated contract will be stored in blocked form for a further period of 10 years due to statutory retention obligations, i. e. access to your data by our employees is severely restricted. After expiry of this period, the data relating to the terminated contract will be irrevocably deleted.

We use your personal data for advertising purposes or customer advice only if you have given us your consent. As a rule, you can revoke this at any time. You will be informed separately about the purposes and consequences of a revocation or failure to grant consent in the corresponding text of the consent. As a general rule, the revocation of consent is only effective for the future. Processing that took place before the revocation is not affected by this and remains lawful.

Your data will be used without consent only in the cases provided for by law. In these cases, when collecting your data (e. g. in the context of the conclusion of a contract), we will inform you of the type and extent of the permitted data use. This enables us to tailor our offers even better to your needs while respecting data protection. We thank you for your trust in this regard, as this is the only way we can offer you attractive services. If you no longer wish to receive individual product advice or information about our products, please contact our customer service.

No personal user data such as name, address, telephone number or e-mail address are collected when advertising material is displayed. The MAC – Märkte und Aktionskreis City e. V. temporarily stores only anonymous user data (such as operating system, browser version, etc.) or how the advertising material was reacted to (clicks). The anonymous user data is used in aggregated form only for the provision of targeted advertising. The MAC – Märkte und Aktionskreis City e. V. ensures that usage data or usage profiles are not associated with personal data and that online user data profiles are not combined with possible offline address data.

In the case of advertisements by third parties in which Der MAC – Märkte und Aktionskreis City e. V. collects personal data for a customer via the websites, the applicable data protection regulations, usage and purpose of use are again indicated separately in the respective query. Here, too, the strict regulations of the German data protection regulations apply.

The MAC – Märkte und Aktionskreis City e. V. undertakes not to use the personal data collected and to process and store it only for the purpose of transmission to the customer. The data will be deleted at the latest 6 months after the collection.

IAB TCF 2. 0 (“Transparency and Consent Framework”)

We only include partners and tool providers on this website that comply with the rules of IAB-TCFv2. 0. The Transparency and Consent Framework (“TCF”) is a set of rules for online marketing of the Interactive Advertising Bureau Europe (“IAB Europe”), an industry association for online marketing (see general information on IAB Europe here: https://iabeurope. eu/about-us/). Currently version 2. 0 of the TCF is used (see general information about TCF2. 0 here: https://iabeurope. eu/tcf-2-0/).

According to the IAB Europe, the TCF2. 0 defines strict rules that ensure GDPR compliance and compliance with all other European data protection regulations.

Cookies

Cookies are used in our website. Cookies are small text files that are stored on the computer of the Internet user in order to control the connection during use. Most of the cookies we use contain purely technical information and do not contain any personal information. They are only needed for the duration of the use and are automatically removed when the use ends (so-called session cookies).

A randomly generated unique identification number is stored in a session cookie, a so-called session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have stopped using our online offer and close the browser.

Other cookies remain on your computer and allow us to recognize your computer the next time you visit it (so-called permanent cookies). These cookies are used to welcome you with your username and make it unnecessary for you to re-enter your password or fill in forms with your data. In addition, the use of cookies, for example, reduces the repetition frequency of advertising material in favour of the user and thus increases the quality of the advertising.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies may be deleted in the system settings of their browser. The exclusion of cookies may result in functional limitations of this online offer. Further information on cookies can be found at http://www.allaboutcookies.org/ge/.

Other tools used on aachenerweihnachtsmarkt.de

Social Media Plug-ins

We use social media plug-ins on our pages. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. The provider of the plug-in can be identified by the marking on the box above its initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the above-mentioned data will be transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US-American providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the greyed-out box.

We have no influence on the data collected and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the processing is your consent in the context of the two-click solution, Art. 6 para. 1 bed. a) GDPR.

Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and link to the page, for example, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, in particular before activating the button, as this will help you avoid being assigned to your profile at the plug-in provider.

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the privacy statements of these providers provided below. There you will also find further information about your rights in this regard and settings options to protect your privacy.

Addresses of the respective plug-in provider and URL with their privacy notices:

YouTube videos

We have integrated YouTube videos into our online offering, which are stored on http://www. youtube.com and can be played directly from our website. [These are all integrated in the “enhanced data protection mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no control over this data transfer.]

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, further data will be transmitted. This is done regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the assignment with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The legal basis for the processing is your consent in the context of the two-click solution, Art. 6 para. 1 bed. a) GDPR.

Further information on the purpose and scope of data collection and processing by YouTube can be found in YouTube’s privacy policy. There you can also find more information about your rights and settings to protect your privacy: https://www.google.de/intl/de/policies/privacy.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Maps

This site uses the map service Google Maps via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94 043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The legal basis for the processing is your consent in the context of the two-click solution, Art. 6 para. 1 bed. a) GDPR.

You can find more information on the handling of user data in Google’s privacy policy:

https://www. google.de/intl/de/policies/privacy.

Information about your personal data stored by us / storage period / deletion

We only store your personal data for as long as this is permitted by law. The deletion of stored personal data takes place if the user withdraws his consent to the storage or if knowledge of this data is no longer necessary to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons.

At your request, we will be happy to inform you which data we have stored about you. If, despite our efforts to provide correct and up-to-date data, incorrect data is stored with us, we will correct it immediately. You have the option to review, modify or delete the personal data provided to us at any time.

Should you wish the deletion of the stored data, this deletion will also take place immediately upon your request. If deletion is not possible for legal reasons, it will be replaced by a blocking of the respective data. Please note, however, that if your data is deleted, we will no longer be able to offer you the services described here.

Information about your right to object Art. 21 GDPR

You have the right to object at any time to the processing of your data, which is based on Art. 6 para. 1 p. 1 lit. f GDPR or Art. 6 para. 1 p. 1 lit. e DSGVO to lodge an objection if there are reasons for doing so arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. We may also process your personal data for direct marketing purposes. If you do not wish to receive advertising, you have the right to object to it at any time. We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.

The objection may be made without form and should, if possible, be addressed to:

MAC – Märkte und Aktionskreis City e.V.
Theaterstr. 65
52062 Aachen
Tel. 0241/93 688 949
Fax: 0241/29 906
Mail: info@mac-aachen. de

Status 24.05.2023