We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as this privacy policy.

The following information provides you with an overview of the processing of your personal data by us and your rights.

1. Who is responsible for data processing and who can I contact?
The Controller is:

BESL Eventagentur GmbH & Co.KG
Köthener Straße 38
10963 Berlin

Phone +49 30 325 999 71 0
Fax +49 30 325 999 71 3
E-Mail: info@besl-eventagentur.de

You can reach our external data protection officer at:

Udo Wenzel
Data Protection Officer
BESL Eventagentur GmbH & Co.KG
Köthener Straße 38
10963 Berlin

Phone +49 30 325 999 71 0
Fax +49 30 325 999 71 3
E-Mail: info@besl-eventagentur.de

2. To whom does this privacy policy apply?
This privacy policy applies to all visitors to this website, as well as to our customers and interested parties.

3. What data do we use?
In principle, you can visit our website without disclosing your identity, unless you send us an e-mail or a message via a contact form or give us your consent to receive information material (newsletter). We only process the data required to answer your inquiry or to provide you with our information material. Which data is collected can be seen from the respective input forms. The required data are marked as mandatory fields. If we ask you for further information, this is voluntary information. We use this information to customize our offers or to better tailor them to the needs of our customers.

4. For what purposes and on what legal basis do we use your data?
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Please also note our information on your right to object in accordance with Article 21 GDPR.

a) For the fulfillment of contractual obligations (Art. 6 para. 1b GDPR) The processing of personal data takes place for the performance of a contract, as well as for the implementation of pre-contractual measures that take place at your request.

b) As part of the balancing of interests (Art. 6 para. 1f GDPR) If necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties.

• Assertion of legal claims and defense in legal disputes
• Ensuring IT security
• for direct marketing
• Answering your request

c) Based on your consent (Art. 6 para. 1f GDPR) If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Sending of information material
Provision of newsletters: We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of newsletters. With each newsletter you will be given the opportunity to unsubscribe directly. d) Due to legal requirements (Art. 6 para. 1c GDPR) or in the public interest (Art. 6 para. 1e GDPR) In addition, as a company we are subject to various legal obligations (e.g. commercial code, tax laws).

5. Who receives my data?
Within BESL, access to your data is granted to those departments that need it to fulfill our contractual and legal obligations or in the context of balancing interests. Service providers and vicarious agents employed by us may also receive data for these purposes if they comply with confidentiality and our instructions under data protection law. Data will only be passed on to third parties within the framework of the provisions of the GDPR and the BDSG.

6. Is data transferred to a third country?
Data is not transferred to countries outside the EU or the EEA (so-called third countries).

7. How long will my data be stored?
We process and store your personal data for as long as is necessary for the fulfillment of our contractual and legal obligations or in the context of the balancing of interests. If the data is no longer required for the fulfillment of these purposes, it is regularly deleted, unless its – temporary – further processing is required to fulfill retention periods under commercial and tax law, such as the German Commercial Code and the German Fiscal Code. The retention and documentation periods specified there are six to ten years.

8. What data protection rights do I have?
You have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
A list of supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

You can withdraw your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note our information on your right to object in accordance with Article 21 GDPR.

To exercise your rights, please use the above-mentioned contact details for our data protection officer.

9. Is there an obligation to provide data?
As part of a contact request or the ordering of information material, you must provide the personal data that is required for processing (marked mandatory fields). Without this data, we will not be able to answer your inquiry or send you the information you have requested.

10. Is there automated decision-making including profiling?
In principle, we do not use fully automated decision-making including profiling in accordance with Article 22 GDPR.

11. Information about your right to object in accordance with Article 21 GDPR
a) Right to object on a case-by-case basis
You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is carried out in the public interest or on the basis of a balancing of interests. This also applies to profiling. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of this data that override your interests, rights and freedoms. Or your personal data is used for the establishment, exercise or defense of legal claims.

b) Objection to the processing of your data for direct marketing purposes
In individual cases, we use your personal data for our direct advertising. You have the right to object to this at any time; this also applies to profiling if it is associated with direct advertising. In the event of an objection, we will no longer process your personal data for these purposes. The objection can be made informally and should be addressed to our data protection officer using the contact details above if possible.

12. What data is processed when you use the website?
a) Usage-related data
We receive usage data when you visit our website. This includes information such as screen resolution, browser version, internet access, operating system, language, plug-ins used, origin by country/region and search engines. The stored data is only evaluated for statistical purposes and to optimize our websites. It is not passed on to third parties or evaluated on a user-related basis. Furthermore, we store the connection data to our websites (IP addresses) for a short period of a few days to ensure IT security.

b) Use of cookies
Session cookies are used to facilitate navigation when individual pages are accessed. These cookies expire at the end of the session and do not contain any personal data, i.e. the contents of the cookies are not evaluated on a user-related basis. You can set your browser to allow cookies only in individual cases or not at all.

Cookies that are required to carry out the electronic communication process or to provide certain functions are stored on the basis of Art. 6 para. 1 lit. f GDPR. In this case, cookies are stored for the purpose of the technically error-free and optimized provision of our services. If cookies are deactivated, the functionality of this website may be restricted.

13. How secure is my data?
To protect the personal data of our customers and interested parties, we use a secure online transmission method, the so-called “Secure Socket Layer” (SSL) transmission. All information transmitted using this secure method is encrypted before it is sent. Your personal data is processed exclusively on data centers and computers protected by industry-standard security technologies (e.g. firewalls, password protection, access controls, etc.).

14. Which plugins and tools are used on the website?
a) Social plugins
Our website may contain social plugins (“plugins”) from the social networks facebook.com, twitter.com, xing.com, linkedin.com, pinterest.com, addthis.com, reddit.com and plus.google.com.
In order to increase the protection of your data when you visit a website on our website, the plugins are integrated into the page using a so-called “2-click” or “Shariff” solution. This integration ensures that no connection is established with the servers of Facebook, Twitter, Xing, linkedin, pinterest, addthis, reddit and Google + when a website containing such plugins is accessed. Only when you activate the plugins and thus give your consent to data transmission will your browser establish a direct connection to the servers of Facebook, Twitter, Xing. Linkedin, pinterest, addthis, reddit and Google +. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to the operators of the aforementioned social networks. We have no influence on the scope of the data that the social networks collect with the help of the plugins. To the best of our knowledge, Facebook, Twitter, Xing, linkedin, pinterest, addthis, reddit and Google+ receive information about which of our websites you have currently and previously visited. By calling up the plugins, Facebook, Twitter, Xing, linkedin, pinterest, addthis, reddit and Google+ receive the information that your browser has called up the corresponding page of our website even if you do not have a profile with the corresponding social networks or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the operators of Facebook, Twitter, linkedin, pinterest, addthis, reddit and Google + in the USA and stored there. In the case of Xing, the data is stored in Germany. The information may be published on the respective social network and displayed to your contacts there.
The purpose and scope of the data collection and the further processing and use of the data by the aforementioned social networks as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information at
http://www.facebook.com/policy.php, https://twitter.com/privacy, http://www.google.com/intl/de/+/policy/+1button.html, https://www.xing.com/privacy, https://www.linkedin.com/legal/privacy-policy, https://about.pinterest.com/de/privacy-policy, https://www.addthis.com, https://www.reddit.com/help/privacypolicy

If you are a member of one of the social networks and would like to limit the collection of data via our websites and the merging of your user data with the data stored about you on the respective social network, you should log out before visiting our website.

b) Google Analytics
We use Google Analytics on our websites, a web analysis service provided by Google Inc (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by selecting the appropriate settings in their browser software. In addition, the transmission of the data generated by the cookie and related to the use of the online offer to Google and the processing of this data by Google can be prevented by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

c) YouTube
Our website uses plugins from the Google-operated YouTube site. The operator of the pages is
YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

d) Facebook Connect
We offer you the option of registering for our service with Facebook Connect. To register, you will be redirected to the Facebook page where you can log in with your user data. This links your Facebook profile and our service. Through the link, we automatically receive the data from Facebook Inc. that we need for your registration and use of our services. This includes your first name, surname, email address and user name.
For more information on Facebook Connect and the privacy settings, please refer to the data protection information and the terms of use of Facebook Inc.

e) Use of Vimeo plugins
We use the provider Vimeo, among others, for the integration of videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011.
We use plugins from the provider Vimeo on some of our web pages. When you access the web pages of our website that have such a plugin – for example our media library – a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our web pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.

f) Use of Google AdWords conversion tracking
This website uses the online advertising program “Google AdWords” and, as part of Google AdWords, the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to draw attention to our attractive offers with the help of advertising material (so-called Google AdWords) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR. Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
You can find more information about Google’s privacy policy at the following Internet address: http://www.google.de/policies/privacy/ You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin?hl=de
Please note that you may not be able to use certain functions of this website, or only to a limited extent, if you have deactivated the use of cookies.

15. Links to Websites of other Providers
Our website may contain links to websites of other providers for information purposes, where we have no influence on compliance with data protection and security regulations. Our privacy policy therefore does not extend to these websites.

16. Newsletter Data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use the newsletter service providers described below to process the newsletter.

Rapidmail
This website uses Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
Rapidmail is a service that can be used to organize and analyse the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter is stored on Rapidmail’s servers in Germany.

Data analysis by Rapidmail
For the purpose of analysis, the emails sent with Rapidmail contain a so-called “tracking pixel”, which connects to the Rapidmail servers when the email is opened.In this way, it can be determined whether a newsletter message has been opened.
We can also use Rapidmail to determine whether and which links in the newsletter message are clicked on. All links in the email are so-called tracking links, which can be used to count your clicks.If you do not wish to be analyzed by Rapidmail, you must unsubscribe from the newsletter.We provide a link for this purpose in every newsletter message.
For more information on Rapidmail’s analysis functions, please see the following link: https://de.rapidmail.wiki/kategorien/statistiken/.

Legal Basis
Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR).You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Storage Period
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
For more information, please refer to Rapidmail’s data security information at: https://www.rapidmail.de/datensicherheit.

Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Status 06-2023