1. Responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
mainzplus CITYMARKETING GmbH
2. Contact details of our data protection officer
3. General information on data processing
In the course of our business and website operations, we process data.
This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.
4. Data processing
The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:
a) Web page visit log file
We log your website visit. In doing so, we process:
- Name(s) of our accessed website(s),
- Date and time of retrieval,
- the amount of data transferred,
- the browser type and version,
- the operating system you are using,
- the referrer URL (the previously visited website),
- Your IP address,
- the requesting provider.
The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website pursuant to Art. 6 (1) f) GDPR.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.
To provide our online presence, we use the services of Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4 - 6, 32339 Espelkamp, which process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website pursuant to Art. 6 (1) f) GDPR.
If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details - if provided by you - and your message.
If you have contacted us because you are planning a congress or a meeting with us or one of our partner cities, we will transmit your data to the respective contact person:s of the partner city.
The legal basis of the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.
d) Newsletter via Rapidmail
In order to provide you with regular information about our company and offers, we offer to send an e-mail newsletter to the provider Rapidmail. Rapidmail is a service of rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau ("Rapidmail"). With your newsletter registration, we process the data you entered during registration (e-mail address as well as other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration is logged. This concerns the time of registration and confirmation as well as your IP address.
The legal basis for sending the newsletter is your consent pursuant to Art. 6 (1) a) GDPR. The data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out pursuant to Art. 6 para. 1 f) GDPR due to our legitimate interest in the proof of your proper registration.
If you give us your consent, we also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 (1) a) GDPR.
e) Customer data management using Salesforce
To manage our customer data, we use systems of Salesforce.COM Germany GmbH, Erika-Mann-Str. 63, 80636 Munich ("Salesforce"). We therefore process the data we receive in the course of providing you contact us via our website or at trade fairs in systems of Salesforce.
We do not pursue any additional purposes with the processing of your data by means of the Salesforce systems. The legal basis of the processing therefore corresponds to the respective aforementioned legal bases under item 4 c).
Salesforce is a group of companies with offices worldwide. The parent company of the group is salesforce.com in., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA.
Data transfers to the USA may therefore occur in the context of data processing at Salesforce. Salesforce is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the USA.
f) Use of functional cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
We only use technically necessary session cookies on our website.
g) Analysis / Marketing
The legal basis for data processing is your consent in accordance with Art. 6 (1) a) GDPR.
Please note that this website uses Matomo with the extension "anonymizeIp()". This shortens IP addresses before transmission. A direct personal reference in connection with the stored data is thus fundamentally excluded. We may transfer the stored information to third parties if required by law.
You can prevent the data collection by activating the Do-Not-Track option in your browser or by objecting to it by mouse click below. If you remove the following check mark, an opt-out cookie will be set for you, which prevents the data collection. Please note that you must set the cookie again if you delete the cookies in your browser.
h) External content
We use dynamic content ("Content") from third parties to optimize the presentation and the offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider by means of an interface, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) YouTube video integration
We have included videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA ("YouTube"). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for data processing at YouTube. When playing the videos, however, log data is transmitted to YouTube's servers in the USA.
The legal basis for the processing is your prior consent pursuant to Art. 6 (1) a) GDPR.
Google is certified under the EU-US Data Privacy Framework and to this extent falls under the EU adequacy decision for the USA.
We use the map service of Mapbox on our website to provide you with an interactive map. When displaying the map, data including your IP address and your location are transmitted to Mapbox servers and stored there.
The legal basis for the processing is your prior consent pursuant to Art. 6 (1) a) GDPR.
Mapbox Inc., 740 15th Street NW, 5th Floor, Washington DC 20005 is responsible for data processing at Mapbox.
For data transfers to the USA, Mapbox ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. For this purpose, please contact datenschutz(at)mainzplus.com.
5. Duration of data storage
We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
6. Your data subject rights
Upon request, you will receive information free of charge at any time about all personal data that we have stored about you.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have a right of objection in particular in cases where your data is required due to the performance of a task that is in the public interest or the data processing is based on our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right of revocation for consents with effect for the future
You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.
e) Restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
f) Exercise of your data subject rights and right of appeal
If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact us at firstname.lastname@example.org.
You also have the possibility to complain to a supervisory authority about your data protection rights.