Privacy

Privacy Statement

We manage our websites in accordance with the principles set out below:

We undertake to comply with statutory data protection regulations and endeavour always to take into account the principles of data avoidance and data minimisation.

1. Name and address of the controller

The controller, within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the European Union Member States, as well as other statutory data protection regulations, is:

yoveno UG (limited liability company)
Klingholzstraße 7
65189 Wiesbaden

E-Mail: contact@calendify.com
Telephone number: +49 163 1575083

https://calendify.com

2. Explanation of terms

We have designed our Privacy Statement in accordance with the principles of clarity and transparency. However, should there be any ambiguity regarding the use of various terms, the corresponding definitions can be found here.

3. Legal basis for processing personal data

We process your personal data - such as your first and last names, your e-mail address, IP address, etc. - only if there is a legal basis for doing so. The following rules, in particular, come into consideration here, in accordance with the General Data Protection Regulation (GDPR):

  • Art. 6(1)(1)(a) GDPR: The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Art. 6(1)(1) (b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Art. 6(1)(1)(c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Art. 6 (1)(1)(d) GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Art. 6(1)(1)(e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Art. 6(1)(1)(f) GDPR: Processing is necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

However, we will always inform you at the appropriate points in this Privacy Statement of the legal basis on which your personal data are being processed.

4. Disclosure of personal data

Where personal data are disclosed, processing is also carried out within the meaning of section 3, above. At this point, however, we would like to inform you separately about disclosure of data to third parties. The protection of your personal data is particularly important to us. For this reason, we are especially careful when disclosing your data to third parties.

Data is only disclosed to third parties if there is a legal basis for the processing. For example, we disclose personal data to persons or companies acting as processors on our behalf, pursuant to Art. 28 GDPR. A processor is anyone who processes personal data on our behalf, in particular under our instruction and control.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to ensure that they comply with data protection regulations, thus providing comprehensive protection for your data.

5. Storage period and erasure

We will erase your personal data once those data are no longer necessary for the purposes for which they were collected or otherwise processed, and where the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

6. SSL encryption

This site uses SSL encryption for security reasons and to safeguard the transfer of confidential content, such as any requests you send to us as the operators of the site. An encrypted connection can be identified by the change in the address from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

With SSL encryption activated, the data which you transfer to us cannot be read by third parties.

7. Cookies

We use cookies on our website. Cookies are small data packets created automatically by your browser and stored on your client device when you visit our website. These cookies are used to store information about the client device being used.

When cookies are used, a distinction is made between technically necessary cookies and “other” cookies. Cookies are said to be technically necessary if they are essential for providing an information society service which you have expressly requested.

a) Session cookies

In order to make the use of our services more convenient for you, we use what are known as session cookies (e.g. language and font selection, shopping basket, etc.). These session cookies come under the category of technically necessary cookies and are automatically deleted after you have left our site. The legal basis for the cookies derives from Art. 6(1)(1)(c) GDPR, a legal permission.

b) Other cookies

Other cookies include cookies for statistical, analysis, marketing and retargeting purposes.

We use these cookies for your benefit, on the basis of either a legitimate interest in improving and optimising our content pursuant to Art. 6(1)(1)(f) GDPR, or your consent pursuant to Art. 6(1)(1)(a) GDPR.

Where cookies are used on the basis of a legitimate interest, you may, of course, object to their further use at any time, with future effect.

You may at any time withdraw your consent to the use of cookies.

We hereby inform you that the withdrawal of consent shall not affect the lawfulness of processing carried out based on consent before its withdrawal.

In order to do so, you can either edit your cookie preferences on our website, deactivate the use of cookies in your browser settings (doing this may also restrict the functionality of the website) or, in individual cases, set an opt-out for the corresponding service.

You may also indicate your objection to the use of cookies for marketing purposes via the EU website www.youronlinechoices.com/ or in general at optout.aboutads.info.

For each respective service in the Privacy Statement, we refer you to the legal basis on which the data are processed.

8. Collection and storage of personal data, their type and intended purpose

a) When visiting the website

When you access our website, information is automatically sent to our web server by the browser being used on your client device. This information is stored temporarily in what is known as a log file. The following information is recorded without any action on your part and stored until it is automatically erased:

  • the IP address of the computer making the request
  • the date and time of access
  • the name and URL of the requested file
  • the website from which the site is accessed (referrer URL)
  • the browser used, and if applicable, your computer’s operating system and the name of your access provider

We process the above-mentioned data for the following purposes:

  • to ensure that the connection to the website is established smoothly
  • to ensure that our website is convenient to use
  • for evaluation of system security and stability
  • fault analysis
  • for other administrative purposes

Data which permit you to be identified as an individual, such as the IP address, will be erased after 7 days at the latest. Any data we store beyond this period will be pseudonymised, so that they can no longer be associated with you.

The legal basis for the data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest derives from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of identifying you as an individual.

b) Contractual relationship

(1) Conclusion of contract

In the course of establishing the contractual relationship, and pursuant to Art. 6 (1)(1)(b) GDPR, only personal data which is essential for the performance of the contract will be processed.

Any additional data you may choose to provide will only be processed on the basis of the consent you have given in accordance with Art. 6(1)(1)(a) GDPR1. We use these optional data for the purpose of providing a customer-friendly service and continuously improving that service.

(2) User account

aa) General

You have the option of creating a user account with us. As part of your user account, as well as your user name and e-mail address, the additional content you have entered will be processed, along with photos, your interests and the services you have booked. When you book chargeable services, the payment data relating to payment processing is also processed.

The legal basis derives from the contractually agreed services, in accordance with Art. 6 (1)(1)(b) GDPR.

You have the option of amending or deleting the data in your user account at any time, or of deleting your account altogether. If you make use of this functionality, your user account and all the data contained within it will be deleted immediately.

bb) Interactions on the platform

You can share, rate, like and subscribe to event calendars and events on the platform. If you make use of this option, your user name will be processed in this context and made visible to other users.

The legal basis derives from the contractually agreed services, in accordance with Art. 6 (1)(1)(b) GDPR.

cc) Publishing of content

As a basic principle, you can make your own content publicly visible at any time; in particular, your user name, profile picture, interests, events and event calendars.

The legal basis derives from your consent, in accordance with Art. 6 (1)(1)(a) GDPR. You may withdraw your consent at any time. Please note that processing for the purpose of withdrawing consent remains lawful.

dd) Analyses and evaluations

In order to suggest suitable events or event calendars according to your interests or contacts, the event calendars and events you have subscribed to, liked or shared, as well as their relationships with other users of the platform, are analysed.

The legal basis derives from your consent, in accordance with Art. 6 (1)(1)(a) GDPR. You may withdraw your consent at any time. Please note that processing for the purpose of withdrawing consent remains lawful.

(4) Geolocation

We offer you the option of displaying suggestions for suitable events or event calendars in your area. Localisation is based on your IP address or performed via your browser’s geolocation function. You may withdraw your consent at any time, e.g. by deactivating geolocation in the browser settings.

Processing of your personal data carried out prior to the withdrawal of consent shall remain unaffected.

Your site data are processed on the basis of the consent you have given, in accordance with Art. 6(1)(1)(a) GDPR.

(5) E-mail contact

When you send us an e-mail using the e-mail address provided on our website for that purpose, we will store and process your e-mail address and the data provided by you in the e-mail, pursuant to Art. 6 (1)(1)(b) and (f) GDPR, in order to process your message.

Enquiries and the data associated with them will be erased no later than 3 months2 after receipt, unless they are required for further contractual relationship purposes.

(6) Wikimedia Maps

Our website uses the Wikimedia Foundation map service (Wikimedia Foundation, Inc., 1 Montgomery Street, Suite 1600, San Francisco, CA 94104 USA), which in turn uses map data from the OpenStreetMap Foundation (OSMF, OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom).

By using Wikimedia Maps, information about your browser or application, your interaction with the website, and in particular, your IP address, is transmitted to Wikimedia and stored there in order to display the map.

You can find more information at https://meta.wikimedia.org/wiki/Privacy_policy/de.

The use of Wikimedia Maps is a service which allows you to identify accurately the location of events and functions and, if necessary, better plan your attendance. The use of Wikimedia Maps is based on your consent pursuant to Art. 6 (1)(1)(a) GDPR.

(7) Maps from carto.com

Our website uses the Carto map service (CARTO, 201 Moore Street, Brooklyn, NY 11206, USA).

More information is available in Carto’s Privacy Notice. https://carto.com/privacy/

The use of Carto map data is a service which allows you to identify accurately the location of events and functions and, if necessary, better plan your attendance. The use of Carto is based on your consent pursuant to Art. 6 (1)(1)(a) GDPR.

9. Analytics and tracking tools

We use the following analytics and tracking tools on our website. These enable us to ensure the continuous optimisation of our website and to develop it to meet requirements.

We use the tools on the basis of the consent you have given, in accordance with Art. 6(1)(1)(a) GDPR. The actual purposes for processing and categories of data are indicated in the respective tools.

(a) Matomo (formerly “Piwik”)

We use the Matomo analytics service (InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand), which runs on our own servers. As a basic principle, this service uses cookies. However, we have disabled this functionality for this website, so that cookies are no longer stored. Therefore, Matomo does not collect any session data.

10. Video integration

YouTube

Our website uses the YouTube plugin, operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

If you activate the YouTube plugin during your visit to our site, a connection is established to the YouTube servers, and the YouTube server is informed about which of our pages you have visited. In this way, YouTube can associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account before visiting our site.

Further information about the handling of user data is available in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

The legal basis derives from the consent given by you, in accordance with Art. 6 (1)(1)(a) GDPR.

11. Rights of the Data Subject

You shall have the following rights:

a) Right of access

Pursuant to Art. 15 GDPR, you shall have the right to request information about your personal data being processed by us. This right of access includes information about

  • the purposes of the processing
  • the categories of the personal data
  • the recipients or categories of recipient to whom your data have been or will be disclosed
  • the envisaged data storage period, or at least the criteria used to determine that period
  • the existence of the right to rectification, erasure, restriction of processing or objection
  • the existence of the right to lodge a complaint with a supervisory authority
  • the source of your personal data, where they were not collected by us
  • the existence of automated decision-making, including profiling, and where appropriate, meaningful information about the logic involved

b) Right to rectification

In accordance with Art. 16 GDPR, you shall have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data stored by us.

c) Erasure

In accordance with Art. 17 GDPR, you shall have the right to obtain from us without undue delay the erasure of your personal data stored by us, unless further processing is required for one of the following reasons:

  • the personal data are still necessary for the purposes for which they were collected or otherwise processed
  • to exercise the right of freedom of expression and information
  • for compliance with a legal obligation which requires processing under European Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, to the extent that the right referenced in a) is likely to render impossible or seriously impair the achievement of the objectives of that data processing
  • for the establishment, exercise or defence of legal claims

d) Right to restriction of processing

Pursuant to Art. 18 GDPR, you may request the restriction of processing of your personal data, for one of the following reasons:

  • You contest the accuracy of your personal data.
  • The processing is unlawful and you oppose the erasure of your personal data.
  • We no longer require the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
  • You object to processing pursuant to Art. 21(1) GDPR.

e) Notification obligation

If you have requested rectification or erasure of your personal data or restriction of processing in accordance with Art.16, Art.17(1) and Art.18 GDPR, we shall notify all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you about those recipients.

f) Right to data portability

You shall have the right to obtain the personal data which you have provided to us in a structured, commonly used and machine-readable format.

You shall also have the right to request that those data be transferred to a third party, where the processing was carried out by automated means and where it is based on consent pursuant to Art. 6(1)(1)(a) or Art. 9(2)(a) or necessary for the performance of a contract pursuant to Art. 6(1)(1)(b) GDPR.

g) Withdrawal of consent

Pursuant to Art. 7(3) GDPR, you shall have the right at any time to withdraw consent you have previously granted to us. The withdrawal of consent shall not affect the lawfulness of processing carried out based on consent before its withdrawal. We may not carry out any further processing based on your consent, once you have withdrawn it.

h) Right to lodge a complaint

Pursuant to Art. 77 GDPR, you shall have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.

i) Right to object

Where your personal data are processed based on legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you shall have the right pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes. In the latter case, you shall have a general right to object which we shall implement without the need for your particular situation to be specified. You may exercise your right to object or to withdraw consent simply by sending an e-mail to contact@calendify.com.

j) Automated individual decision-making, including profiling

You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right shall not apply if the decision:

  • i. is necessary for entering into, or for the performance of, a contract between you and us
  • ii. is authorised by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests
  • iii. is based on your explicit consent

However, such decisions shall not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In the cases referred to in i) and iii), we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

12. Amendment of the Privacy Statement

If we amend the Privacy Statement, this will be indicated on the website and registered customers will be informed by e-mail.

Version of 08.01.2020