1. Name and Contact Details of the Controller

This privacy notice applies to data processing by:

Schutzverband Dresdner Stollen e. V.

Am Lagerplatz 8

01099 Dresden

Phone: 0351-89968035

Fax: 0351-89968036

Email: info@dresdnerstollen.com

Due to the number of our employees who process personal data, we are not legally required to appoint a Data Protection Officer.

2. Collection and Storage of Personal Data and the Type and Purpose of Their Use

The security and confidentiality of your personal data are very important to us. Below you will find information on the scope in which we process your data and on measures taken to protect your privacy as a user of this site. All data collected here are handled strictly confidentially by us in accordance with the applicable data protection regulations.

Processing takes place either pursuant to Art. 6(1)(a) GDPR on the basis of your consent, pursuant to Art. 6(1)(b) GDPR for the performance or initiation of a contract with you, pursuant to Art. 6(1)(c) GDPR to comply with a legal obligation, or pursuant to Art. 6(1)(f) GDPR to safeguard legitimate interests.

a. When visiting the website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until manually deleted in accordance with the applicable data protection regulations:

• IP address of the requesting computer,

• Date and time of access,

• Name and URL of the retrieved file,

• Website from which the access is made (referrer URL),

• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The above data are processed by us for the following purposes:

• Ensuring a smooth connection to the website,

• Ensuring comfortable use of our website,

• Evaluation of system security and stability, and

• for further administrative purposes.

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected to draw conclusions about your person.

In addition, we use cookies and analytics services when you visit our website. Further details are provided below.

b. When using our contact form

If you have any questions, we offer you the opportunity to contact us via a form provided on the website. A valid email address is required so that we know who the request is from and can respond to it. Additional information can be provided voluntarily.

If your inquiry relates to a contract to which you are a party or to pre-contractual measures, data processing takes place pursuant to Art. 6(1)(b) GDPR. For all other inquiries, data processing for the purpose of making contact takes place on the basis of a balancing of interests (Art. 6(1)(f) GDPR). In this case, our legitimate interest is the handling of your request.

We store this data for evidentiary purposes, for the possible assertion, exercise, or defense of legal claims for a transitional period of three years from the end of the year in which you provided us with the data and, in the event of legal disputes, until their conclusion. We also store this data insofar as statutory, in particular commercial and tax law, retention obligations exist. Depending on the type of documents, commercial and tax retention periods may be six or ten years (§ 147 AO, § 257 HGB).

c. Image and audio recordings at events

At our events, we create image and audio recordings that we may publish on our website for public relations purposes.

If you are prominently identifiable in such image and audio recordings, publication will only take place if you have expressly consented (Art. 6(1)(a) GDPR).

If you are identifiable in image and audio recordings in which you are not the focus and which primarily illustrate the atmosphere of the event, we use these for the above-mentioned purposes even if we cannot obtain the consent of all persons depicted. The legal basis for the use of these recordings is Art. 6(1)(f) GDPR. You may object to this processing of your personal data at any time for reasons arising from your particular situation (see section 9).

We store and process image and audio recordings for the purposes described above with the aim of presenting tradition in the long term for future generations as well. Storage and processing therefore take place for an indefinite period, subject to the withdrawal of consent or an objection by the respective data subject as described in the two preceding paragraphs.

3. Disclosure of Data

To perform or fulfill tasks, we pass your data on to service providers commissioned by us. Where we use service providers, contractual relationships are governed in writing in accordance with the provisions of the EU GDPR and the new Federal Data Protection Act (BDSG-neu). This concerns our IT service provider to ensure security and confidentiality.

In addition, your personal data will only be transferred to third parties for the purposes listed below if:

• you have given your express consent pursuant to Art. 6(1)(a) GDPR,

• the disclosure is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6(1)(f) GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,

• there is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR, and

• it is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6(1)(b) GDPR.

4. Cookies

When you visit our website, we store information on your computer in the form of cookies. Cookies are small files that are transferred from an internet server to your browser and stored on your hard drive. The cookie stores information related to the specific device used. However, this does not mean that we directly gain knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offering more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site. We also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period. If you visit our site again to use our services, it is automatically recognized that you have been with us before and what inputs and settings you made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you (see “Analytics Tools”). These cookies enable us to automatically recognize on a subsequent visit that you have already been to our site. These cookies are automatically deleted after a defined period.

The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR.

Of course, you can also visit our website without accepting cookies. If you do not want your computer to be recognized on your next visit, you can also refuse the use of cookies by changing your browser settings to “reject cookies.” The procedure can be found in your browser’s user guide. However, rejecting cookies may lead to restrictions in the use of some areas of our website.

5. Security

We protect your personal data through technical and organizational measures to minimize the risks of unwanted access, loss, misuse, or unauthorized disclosure. A TLS encryption is used to protect the data you transmit on this website. You can usually recognize such encrypted connections by the closed lock symbol in your browser’s status bar and the “https://” prefix at the beginning of the address line.

6. Rights of Data Subjects

You have the right:

• pursuant to Art. 15 GDPR to request information about your personal data processed by us;
• pursuant to Art. 16 GDPR to request the immediate correction of inaccurate or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR to request the deletion of your personal data stored by us unless processing is required to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims. If we have made your personal data public, we are obliged, taking into account available technology and implementation costs, to inform controllers processing your personal data that you have requested the deletion of all links to or copies/replications of such personal data;
• pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose erasure and we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request transmission to another controller;
• pursuant to Art. 7(3) GDPR to withdraw your consent once given at any time with effect for the future. This means that we may no longer continue the data processing that was based on this consent in the future; and
• pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your usual place of residence, workplace, or our registered office.

7. Right to Object

Where your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object which we will implement without the need to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to: info@dresdnerstollen.com.

8. Changes to this Privacy Policy

This privacy policy is currently valid.

As we develop our website and offerings or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on our website at www.dresdnerstollen.com/datenschutz.