This Privacy Notice describes how PaKoBer GmbH, 51, avenue JF Kennedy, 1855 Luxembourg (“PaKoBer“, “we” or “us”), as the controller within the meaning of the EU General Data Protection Regulation (“GDPR“), the Federal Data Protection Act (“BDSG“) and other data protection regulations (“Applicable Data Protection Laws“), processes personal data and other information from users (“Users” or “you“) of our Website www.postbahnhof.com (“Website“).
1. CATEGORIES OF PERSONAL DATA, PROCESSING PURPOSES, LEGAL BASIS AND SOURCE
The use of the Website and its functions requires the following processing of certain personal data on a regular basis:
1.1 Informational use of the Website
If you access our Website and use it for purely informational purposes (i.e. without using additional functions such as the contact form), the Website may automatically collect, process and store certain personal data in a pseudonymized form. This is device and usage information that may include (i) specific information about the device used to access the Website (including model, operating system, IP address, language and similar information) and (ii) information about the use of features, functions or notifications on the device to recognize you and to analyze trends.
The legal basis for this is our legitimate interest (Art. 6 para. 1 lit. f) GDPR) to monitor and maintain the performance of the Website and to analyze uses, activities and trends in connection with our Website.
1.2 Google Maps
Google Maps is used on the basis of our legitimate interests (Art. 6 para. 1 lit. f) GDPR), which is to make our Website comfortable for the User, in particular to facilitate finding the locations indicated by us on the Website.
We collect your IP address to enable the transfer to Google.
You are not required to provide these personal data, but you will not be able to use the respective features of our Website without providing it.
For more information, please see Google’s privacy notice, which can be found at https://policies.google.com/privacy?hl=en.
1.3 Contact form
If you use the contact form on our Website or contact us by email or other means, e.g. to request information about our (event) locations, the mandatory data requested in the contact form (name, email address, telephone number, customer name/name of the agency, period of (desired) booking, type of event, number of persons) as well as any personal data voluntarily provided by you will be stored and processed by us to handle the enquiry and follow-up questions.
We process these data to handle and answer your enquiry and any follow-up questions in order to prevent abuse of the contact form and to ensure the security of our information technology systems. We base this data processing on our legitimate interests (Art. 6 para. 1 lit. f) GDPR). These are the processing of your request and protecting our information technology systems.
2. DATA RECIPIENTS
2.1 External service providers
PaKoBer may engage external service providers who act as our data processors to provide certain services to us, such as email, Website, marketing or other IT services. While providing these services, the external service providers may have access to or process your personal data.
Based on the data processing agreements concluded with them, the external service providers used are obligated to take appropriate technical and organizational security measures to protect the personal data processed and to process the personal data only in accordance with the assignment.
2.2 Recipients within the group of companies
Some of the persons who administer the Website and provide IT services may be employees of companies within our group of companies. While administering the Website, these employees may have access to and/or process your personal data. The respective transfer of your personal data is based on our legitimate interests (Art. 6 para. 1 lit. f) GDPR). These interests are the internal administration and support within the group of companies. Access is restricted to those employees who need the respective data to perform their tasks.
2.3 Additional recipients
PaKoBer may also disclose your personal data to law enforcement and government agencies, legal advisers and other external advisers in accordance with Applicable Data Protection Laws. The legal basis for this processing is compliance with legal obligations (Art. 6 para. 1 lit. c) GDPR) to which PaKoBer is subject or our legitimate interests (Art. 6 para. 1 lit. f) GDPR), such as exercising or defense of legal claims.
3. DATA TRANSFER TO THIRD COUNTRIES
Your personal data that we process may be transferred to and processed by recipients in third countries outside the European Union (EU) / European Economic Area (EEA) that do not provide for an adequate level of data protection, such as the United States. Some recipients in the USA may be certified according to the EU-U.S. Privacy Shield and thus ensure an adequate level of data protection from the perspective of EU data protection law. As an example, data transfers to Google are based on the EU-U.S. Privacy Shield.
To the extent we transfer your personal data to countries which do ensure an adequate level of data protection from the perspective of EU data protection law, we base the transfer on appropriate
safeguards, such as the standard contractual clauses adopted by the European Commission. You may request a copy of the appropriate safeguards by contacting us at the contact details provided in section 6. Access is limited to recipients who need the respective data to perform their tasks.
4. YOUR RIGHTS AS A DATA SUBJECT AND HOW TO ASSERT THEM
If you have declared your consent to the processing of your personal data, you can withdraw this consent at any time with future effect. Such withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. If you lodge an objection, we will no longer process your personal data unless any other (legal) basis permits this. However, if the consent is withdrawn and no other legal basis exists, we must delete the personal data immediately (Art. 17 para. 2 lit. b) GDPR).
According to Applicable Data Protection Laws, as a data subject you may have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). The right to access and the right to erasure may be restricted under certain circumstances in accordance with applicable local data protection law (Secs. 34, 35 BDSG). In addition, you are entitled to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
Under certain circumstances, on grounds relating to your particular situation, you have the right to object at any time to the processing of personal data concerning you processed on the basis of our legitimate interests (Art. 6 para. 1 lit. f) GDPR) (Art. 21 para. 1 GDPR). Furthermore, if your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for these purposes, including the creation of profiles, to the extent that it is related to such direct marketing (Art. 21 para. 2 GDPR). In this case, we will no longer process your personal data for these purposes.
In order to exercise your rights, please contact us under the contact details provided in section 6.
5. STORAGE PERIOD OF YOUR PERSONAL DATA
Your personal data will be stored as long as necessary for the purposes of the data processing described in section 1 above. If PaKoBer no longer processes your personal data for the described purposes, we will remove it from our systems and records or make it completely anonymous so that you can no longer be identified from it. Your data will not be erased or made completely anonymous if and as long as we have to store your data in order to fulfil legal or regulatory obligations, e.g. legal retention requirements, which may arise from the German Commercial Code (Handelsgesetzbuch, HGB) or the German Tax Code (Abgabenordnung, AO), for example, which stipulate retention periods of 6 to 10 years, or if we need the data to preserve evidence within the limitation period, which is usually 3 years, but can be up to 30 years in individual cases.
If you have any questions about this Privacy Notice or the processing of your personal data, please contact us at:
51, avenue JF Kennedy, 1855 Luxembourg,