Data protection declaration for website operators according to Art. 13 GDPR

The privacy and privacy of the users of our website are of particular concern to us. We therefore undertake to protect your personal data and to collect, process and use them only in accordance with the General Data Protection Regulation (GDPR) and the national data protection regulations. The following privacy policy explains which of your personal data is collected on our website and how this data is used. Our privacy policy is updated regularly in accordance with legal and technical requirements. Please therefore note the current version of our privacy policy.

The following data protection regulations apply exclusively to the websites of Three in One Entertainment & Consulting GmbH on the website: www.3in1-entertainment.com.

I. NAME AND ADDRESS OF THE PERSON RESPONSIBLE

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is the:

Three in One Entertainment & Consulting GmbH
Clubhouse St.Pauli
Spielbudenplatz 21/22
20359 Hamburg
Germany
Tel.: +49 40 325 914 700
E-Mail: write@3in1-entertainment.com
Website: www.3in1-entertainment.com

II. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

The data protection officer of the responsible person is:

Manuel Stahl
Datenschutz hoch 4 GmbH
Oevelgönne 4B
22605 Hamburg
Germany
Tel.: +49 40 809 081 146
E-Mail: dsb@daten4.de
Website: www.daten4.de

III. GENERAL INFORMATION ABOUT DATA PROCESSING

1. Scope of processing of personal data
Your personal data will in principle only be processed to the extent necessary to provide a functional website and our content and services. The processing takes place regularly only after your consent, unless a previous obtaining of a consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data
The legal basis for the processing of personal data is provided in Art. 6 para. 1
GDPR standardized facts as follows:

a) Art. 6 para. 1 lit. a GDPR, if we obtain the consent of the data subject for processing of personal data.
b) Art. 6 para. 1 lit. b GDPR, if the processing of personal data is required to fulfill a contract of which the data subject is a party. This also applies to processing operations required to carry out pre-contractual actions.
c) Art. 6 para. 1 lit. c GDPR, if processing of personal data is required to fulfill a legal obligation that our company is subject to.
d) Art. 6 para. 1 lit. d GDPR, where vital interests of the data subject or another natural person require the processing of personal data.
e) Art. 6 para. 1 lit. f GDPR, if the processing is necessary to safeguard the legitimate interests of our company or a third party and this outweighs the interests, fundamental rights and fundamental freedoms of the person concerned.

3. Data deletion and storage duration
Once the purpose of the storage is removed, your personal data will be deleted or blocked. If the European or national legislator provides for storage beyond its purpose in EU regulations, laws or other regulations to which the controller is subject, this may take effect until the expiry of the retention period prescribed by the said standards. Following this, a blockage or deletion of the data takes place, even if there is a need for further storage of the data for a conclusion of the contract or fulfillment of the contract.

IV. PROVISION OF THE WEBSITE AND CREATION OF LOGFILES

1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data are collected:

a) User IP address
b) Date and time of access
c) Your internet provider
d) Information about the access-browser type and version used
e) Your operating system
f) Websites from which your system is accessed on our website
g) Websites that are accessed by your system through our website

This data is also stored in the log files of our system. In doing so, there is no storage of this data together with your other personal data.

2. Legal basis for data processing
For the temporary storage of data and log files, Art. 6 para. 1 lit. f GDPR is the necessary legal basis.

3. Purpose of the data processing
Providing the website to your computer requires temporary storage of the IP address by the system. To do this, your IP address must remain stored for the duration of the session.
In order to ensure the functionality of the website and security of our IT systems as well as to optimize the website, this data is stored in log files. In this context, no evaluation of the data for the purpose of marketing takes place.
Likewise, these purposes represent our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

4. Duration of storage
If the data collection is no longer necessary to achieve the purpose, the data will be deleted. When collecting the data to provide the website, this is done at the end of each session.

If the data are stored in log files, these will be deleted at the latest after seven days. Even more extensive storage may be possible. For this purpose, the user IP addresses are deleted or alienated so that they can no longer be assigned to the calling client.

5. Opposition and removal possibility
There is no possibility for you to contradict, because the data collection and storage in log files for provision and operation of the website is mandatory.

V. USE OF COOKIES

1. Description and scope of data processing
Our website uses so-called “cookies”. These are text files that are stored in the Internet browser or by the Internet browser on your computer system. A cookie can be stored on your operating system as soon as it calls a website. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.
The use of cookies is for the user-friendly design of our website. Because some parts of our website need an identification of the used browser even after a page break.
The following data is stored and transmitted in the cookies:

a) Log-in information
b) language settings

2. Prevent storage of cookies
Depending on the browser you use, you can specify that cookies are only stored after your consent. If you only want to accept the cookies we use, but not the cookies of any service providers and partners, you can select the setting in your browser “block third-party cookies”. In general, the Help menu in the menu bar of your web browser will show you how to reject new cookies and turn them off. For shared computers that are set to accept cookies and flash cookies, we encourage you to completely unsubscribe after they have been completed.

3. Legal basis for data processing
For the processing of personal data using cookies, Art. 6 para. 1 lit. f GDPR is the necessary legal basis.

4. Purpose of the data processing
The use of technically necessary cookies is made for the purpose of simplifying the use of our websites for you. Without the use of cookies, various functions of our website can not be offered because they require the recognition of the browser after a page break.

Likewise, these purposes represent our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

The following application requires cookies:
Transfer of language settings

There is no creation of user profiles by means of technically necessary cookies collected user data instead.

5. Duration of storage, objection and disposal options
Cookies are stored on your computer. From there they will be sent to our website. By using cookies, you as a user have full control. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. You can also delete previously saved cookies at any time. This can also be done automatically. If you deactivate cookies for our website, this may result in restrictions on the use of our website functions.

VI. CONTACT FORM AND E-MAIL CONTACT

1. Description and scope of data processing
For electronic contact we offer a contact form on our website. To use it, enter your data in the input mask. Subsequently, these data are transmitted to us and stored. The following data is collected:

a) First name, name
b) E-mail address

At the time of sending the message, the following data is also stored:
a) your IP address
b) date and time of your registration

During the submission process, we obtain your consent to the processing of this data and refer to this privacy policy.
You can also contact us via the provided e-mail address. Your personal data transmitted by e-mail will be saved.
The data is used exclusively for processing the communication. A transfer of the data processed for the communication to third parties does not take place.

2. Legal basis for data processing
For the processing of the data, the consent of the user according to Art. 6 para. 1 lit. a GDPR is the necessary legal basis.
If the transmission of personal data takes place via e-mail, Art. 6 para. 1 lit. f GDPR is the necessary legal basis for processing the data. If this contract is also intended to conclude a contract, Art. 6 para. 1 lit. b GDPR is the necessary legal basis for processing.

3. Purpose of the data processing
We process the personal data collected via the input mask exclusively for processing the contact. If you contact us by e-mail, this also includes the required legitimate interest in the processing of the data.

In order to prevent misuse of the contact form and to secure our IT systems, we use the other personal data processed during the sending process.

4. Duration of storage
If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This is given for the personal data from the input form of the contact form and those sent by e-mail when the communication with you has ended. This is the case when the circumstances indicate that the facts were finally clarified.

At the latest after a period of seven days, the additional personal data collected during the sending process will be deleted.

5. Opposition and removal possibility
You may withdraw your consent to the processing of personal data at any time. If you contact us by e-mail, you may object to the storage of your personal data at any time. Please note that in this case further communication with you can no longer be continued.

For a contradiction, send a message to the following e-mail address: write@3in1-entertainment.com

In this case, personal data stored for the purpose of establishing contact will be deleted completely.

VII. TRANSFER OF YOUR DATA TO THIRD PARTIES

In order to make our website as pleasant and comfortable as possible for you as a user, we occasionally use the services of external service providers. Below you will have the opportunity to inform yourself about the privacy policy for the use of the services and functions used to possibly exercise your rights with these service providers.

1. Google Analytics
2. Google Maps
3. Google Fonts

1. Google Analytics
Google Analytics is a service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files that are stored on your computer and allow an analysis of the use of our offer by Google. The information collected by the cookie about the use of our web pages (including your IP address) is usually transmitted to and stored by Google on servers in the United States.
Your IP address will only be collected by Google at our request in a shortened form, which guarantees anonymisation and does not allow any conclusions to be drawn about your identity. If IP anonymisation is activated on our websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

Google will use this information to evaluate your use of our websites, to compile reports on our website activities and to provide us with other services related to the use of websites and the Internet. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. Google transmits this data to third parties only because of legal regulations or as part of order processing. In no case will Google match its data with other data collected by Google.

By using this website, you consent to the processing of data about you by Google and the manner and manner of data processing described above as well as the stated purpose. You can prevent the storage of cookies by a corresponding setting of your browser software. We point out, however, that in this case you may not be able to use all the functions of our website in full.

For more information about Google Analytics and privacy, visit https://tools.google.com/dlpage/gaoptout?hl=en

2. Google Maps
Our websites use Google Maps to display maps and create access maps. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its agents or third parties of the data collected and entered by you. The terms of service for Google Maps can be found in Google Maps Terms of Service. Full details can be found in the privacy center of google.de: Transparency and choice as well as the privacy policy.

3. Google fonts
We use external fonts from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) on our website. In doing so, we have taken the greatest possible care so that personal data is not passed on to Google. Nevertheless, we would like to provide you with the opportunity to obtain information about the handling of personal data in the data protection regulations of Google and to provide an opt-out link provided by Google.

VIII. RIGHTS OF THE DATA SUBJECT

1. Right to information
You may ask the person responsible for a confirmation of your processing of personal data.

If such processing is available, you can request information from the person responsible about the following information:

a) the processing purposes;
b) the categories of personal data being processed;
c) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
d) if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining that duration;
e) the existence of a right to rectification or erasure of the personal data concerning you or to a restriction of processing by the controller or a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) if the personal data are not collected from the data subject, all available information on the source of the data;
h) the existence of automated decision-making including profiling under Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You can also request information about whether your personal data is being transferred to a third country or to an international organization. If this is the case, you may request information about the appropriate safeguards under Article 46 of the GDPR in connection with the transfer.

2. Right to rectification
You may ask the person responsible to correct your incorrect personal data. Likewise, taking account of the purposes of processing, you may request the completion of incomplete personal data, including by means of a supplementary statement. The responsible person must make the coveted correction without delay.

3. Right to be erased (“right to be forgotten”)
You may require the controller to delete your personal information without delay and the controller is required to delete that information immediately, if any of the following is true:

a) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR relied and there is no other legal basis for processing.
c) You object to the processing in accordance with Art. 21 para. 1 GDPR and there are no prior justifiable reasons for the processing or you submit your opposition to processing in accordance with Art. 21 (2) GDPR.
d) Your personal data has been processed unlawfully.
e) The deletion of your personal data is required to fulfill a legal obligation under EU or national law, to which the controller is subject.
f) Your personal data has been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

If the person responsible has made the personal data relating to you public and is obliged to delete them in accordance with Article 17 para. 1 GDPR, he shall take appropriate measures, including technical ones, for data processing, taking into account the available technology and the implementation costs to inform those who process the personal data that you, as the data subject, have requested to delete all links to such personal data or copies or replications of such personal data.

The right to delete does not exist, however, if the processing is required below

a) to exercise the right to freedom of expression and information;
b) to fulfill a legal obligation which requires processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task of public interest or public authority delegated to the controller;
c) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i as well as Art. 9 (3) of the GDPR;
d) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. Article 89 (1) of the GDPR, in so far as the abovementioned deletion rights are likely to render impossible or seriously prejudice the achievement of the objectives of that processing, or
e) to assert, exercise or defend legal claims.

4. Right to restriction of processing
You may require the controller to restrict the processing of your personal information if any of the following conditions exist:

a) the accuracy of your personal information has been disputed by you for a period of time allowing the controller to verify the accuracy of your personal information;
b) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of your personal data;
c) the controller no longer needs your personal data for the purposes of processing, but you do need your personal data to assert, exercise or defend your rights, or
d) you have objected to the processing according to Art. 21 (1) GDPR and it is not clear yet whether the legitimate reasons of the person responsible outweigh yours.

If the processing of your personal data has been restricted, these personal data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

If you have obtained a restriction of processing according to the above-mentioned conditions, you will be informed by the person responsible before the restriction is lifted.

5. Right to information
If you have asserted the above rights to rectification, erasure or restriction of processing to the controller, it shall notify all recipients to whom your personal data have been disclosed of such rectification or deletion of the data or limitation of processing unless this proves to be impossible or involves a disproportionate effort.

At your request, the person in charge has to inform you about these recipients.

6. Right to Data Portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

a) the processing is based on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 lit. b GDPR and
b) the processing is done by automated means.

In exercising this right, you also have the right to obtain that your personal data be transmitted directly from one person responsible to another person responsible, as far as this is technically feasible.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

Similarly, the right to data portability should not affect the rights and freedoms of others.

7. Right to object
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process your personal information unless it can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

If your personal data is processed to operate direct mail, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regarding the use of information society services, regardless of Directive 2002/58 / EG, you can exercise your right to object through automated procedures that use technical specifications.

8. Right to revoke the data protection consent declaration
You can revoke your privacy statement at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Automated decision on a case-by-case basis, including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that will have legal effect or affect you in a similar manner.

This does not apply if the decision

a) is required for the conclusion or performance of a contract between you and the controller,
b) is permitted by the European Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
c) with your express consent.

In the cases referred to under a) and c), the person responsible shall take reasonable steps to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his or her own position and to challenge it heard of the decision.

The decisions under a) to c) may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR and reasonable measures have been taken to protect your rights and freedoms and your legitimate interests.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of its habitual residence, place of work or place of alleged infringement, if you believe that the processing of your personal data violates the GDPR regulations.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

IX. UP-TO-DATENESS AND CHANGE OF THIS DATA PROTECTION EXPLANATION

This privacy policy is currently valid and has the status September 2018.

The further development of our website and its offers or amended legal provisions, or the case law or official regulations may make it necessary to change this privacy policy. The current version of our privacy policy can be accessed and printed at any time on the website at https://3in1-entertainment.com/home/datenschutz/?lang=en