1. responsible person

ClimateXtremes Germany GmbH

Kiefholzstrasse 2
12435 Berlin
Germany

Management: Nicole Srock.Stanley, Lucas Murmann

E-mail: datenschutz@climate-xtremes.com

Charlottenburg Local Court: HRB 218946 B
Tax number: 37/044/48720
VAT ID No.: DE413403500

2. data protection contact

Contact for data protection inquiries: info@climate-xtremes.com

3. purposes, legal bases and storage periods

We process personal data only insofar as this is necessary for the provision of our website, for communication and for the implementation of voluntary offers (e.g. newsletters).

3.1 Hosting and server log files

When our website is accessed, our hosting service provider automatically processes server log data (e.g. IP address, date/time, URL accessed, referrer, user agent).

Purpose/legitimate interest: Provision of the website, IT security, error analysis
Legal basis: Art. 6 para. 1 lit. f GDPR
Recipient: Processor (hosting) pursuant to Art. 28 GDPR - IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, email: info@ionos.de - phone: +49 721 170 5522 (HRB 24498, Montabaur Local Court)
Storage duration: Log files are usually deletedusually deleted or anonymized after 14 days

3.2 Cookies, local storage and consent management

We use cookies and similar technologies. We only use technologies that are not technically necessary with your consent via our consent tool.

Legal basis: Section 25 (1) TTDSG (access/storage on terminal devices) in conjunction with Art. Art. 6 para. 1 lit. a GDPR (consent); for technically necessary cookies Art. 6 para. 1 lit. f GDPR
Revocation: You can revoke your consent at any time with effect for the future in the [cookie settings]. Consent tool: Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany / HRB 171030 (Hamburg Local Court) - VAT ID DE 347062761, Managing Director: Benjamin A. Bornschein - Data protection contact: datenschutz@borlabs.io / Imprint: de.borlabs.io/impressum / Data protection: de.borlabs.io/datenschutz (Data Protection Officer: Sten Pötschke)
The "borlabs cookie" stores, among other things, the cookie runtime, version, domain/path, consent given and a randomly generated UID; no personal data. No visitor data is transmitted to Borlabs.

3.3 Range measurement/analysis

If used, we use analysis tools to measure reach (e.g. Matomo / Google Analytics).

Data: Usage data, truncated IP address, device/browser information
Legal basis: Art. 6 para. 1 lit. a GDPR and § 25 TTDSG (consent)
Recipient/third country: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (provider of Google Analytics within the EU). Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Third country transfer: USA; guarantees: standard contractual clauses in accordance with Art. 46 GDPR (plus additional protective measures) - suitable guarantees (in particular standard contractual clauses, Art. 46 GDPR) and additional measures for transfers to third countries
Storage period: 14 months

3.4 Integrated content and third-party providers

We may integrate third-party content (e.g. maps, videos, fonts/CDNs). The third-party provider may receive personal data (incl. IP address) when the content is accessed.

Examples: Google Maps, YouTube/JOYN, Vimeo, content delivery networks, web fonts
Legal basis: Art. 6 para. 1 lit. a GDPR and § 25 TTDSG (consent); technically necessary integrations, if applicable, Art. 6 para. 1 lit. f GDPR
Recipient/third country: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland / parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA / third country transfer: USA; guarantees: standard contractual clauses pursuant to Art. 46 GDPR (plus additional protective measures).

3.5 Contact (e-mail/form)

When you contact us, we process your details (e.g. name, e-mail address, message, company/telephone number if applicable) to process your request.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual/contractual), Art. 6 para. 1 lit. f GDPR (legitimate interest in communication)
Storage period: until completion of the request and possibly beyond, insofar as statutory retention obligations exist

3.6 Newsletter

When you register for our newsletter, we process your e-mail address and any voluntary information. We use the double opt-in procedure and log the registration.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and Section 7 UWG
Service provider (processor): HubSpot Germany GmbH, Spreeturm, Am Postbahnhof 17, 10243 Berlin, hubspotgermany@hubspot.com
Revocation: Unsubscribe at any time via the link in the newsletter

3.7 Ticket purchase/payment

If tickets are available on our website, we process order, payment and communication data for processing.

Legal basis: Art. 6 para. 1 lit. b GDPR (fulfillment of contract)
Ticket purchase via third-party providers:To purchase tickets, you will be redirected to the website of CTS EVENTIM AG & Co. KGaA Administration: Hohe Bleichen 11, 20354 Hamburg, GermanyPostal address: Contrescarpe 75 A, 28195 Bremen, GermanySeat/commercial register: Munich, AG Munich HRB 212700 / VAT ID No.: DE 181155470Contact: info@eventim.de / Data protection contact: datenschutz@eventim.deDatenschutzhinweise of the provider: https://www.eventim.de/help/data-protection/Impressum of the provider: https://www.eventim.de/help/imprint
Our processing:We do not process any order or payment data on our website for this purpose. If EVENTIM transmits booking data (e.g. name, e-mail, booking/time slot ID) to us after your purchase for access organization/communication, this is done on the basis of 6 para. 1 lit. b GDPR; storage period in accordance with event and retention obligations.
Storage period: statutory retention obligations (6 years under tax/commercial law)

3.8 Competitions/events

If you participate, we process the data required for implementation and notification.

Legal basis: Art. 6 para. 1 lit. b GDPR (participation contract) or Art. 6 para. 1 lit. a GDPR (consent)
Further details are explained in the respective conditions of participation

4. mandatory information, voluntariness and consequences of non-provision

The provision of personal data is not required by law. For technically required data it is necessary for the operation of the website; without newsletter data no dispatch.

5. recipients and processors

We use service providers (e.g. hosting, maintenance, newsletter, analysis, CDN) under conclusion of order processing contracts (Art. 28 GDPR). Transmission to third parties only takes place if there is a legal basis.

Current categories of recipients:

IT/hosting/maintenance service provider
E-mail and newsletter service providers
Payment/ticket and shipping service providers (if used)
Group/partner companies, if necessary and legally authorized

6. third country transfers

If data is transferred to third countries outside the EEA, we provide suitable guarantees (in particular standard contractual clauses in accordance with Art. 46 GDPR) and take additional protective measures. Details can be found in the respective services mentioned.

7. safety

We take technical and organizational measures to protect your data from loss, misuse or unauthorized access and check them regularly.

8. no automated decision-making

There is no automated decision-making including profiling within the meaning of Art. 22 GDPR.

9. minors

Our online services are generally aimed at the general public. If we provide offers for children/young people (e.g. family programs), we only process personal data with the corresponding legal basis and, if applicable, the consent of the legal guardians.

10. your rights

You have the following rights with regard to your personal data:

Information (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interest (Art. 21 GDPR)
You can withdraw your consent at any time with effect for the future.

11. right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Berlin is

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
E-mail: mailbox@datenschutz-berlin.de
www.datenschutz-berlin.de

12. external links

Our website may contain links to external websites for whose content the respective operators are responsible.

13. changes to this data protection notice

We will adapt this information as soon as this is necessary due to technical changes, our services or the legal situation.