privacy policy
beim Benz -
das Hofbräu zelt
The protection of your personal data is very important to us. We respect and protect your privacy. In this privacy statement, you will find out what personal data we collect and how we handle the collected data.
Responsible Entity in Accordance with Applicable Data Protection Laws, Particularly the General Data Protection Regulation (GDPR):
BENZ & CO. Festbetriebe GmbH
Mercedesstraße 69
70372 Stuttgart
Germany
email: kontakt@beimbenz.de
telephone: +49 711 5509090
1 | Contact data protection officer
If you have any questions about data protection, please contact us at:
BENZ & CO. Festbetriebe GmbH
data protection officer
Mercedesstraße 69
70372 Stuttgart
Phone: +49 711 5509090
Email: kontakt@beimbenz.de
2 | Your rights
You have the right to:
- According to Article 7(3) GDPR, to withdraw your consent at any time. This means that we are no longer allowed to continue processing the data based on this consent in the future, unless it is still required to fulfill a contract or for legal reasons.
- According to Article 15 GDPR, to request information about the personal data we process. Specifically, you can request information about the purposes of processing, the categories of personal data, the recipients of your data, the planned retention period, the existence of the right to rectification, deletion, restriction of processing, or objection, the existence of the right to lodge a complaint, the source of the data (if not provided by you), and automated decision-making, including profiling, and related meaningful information.
- According to Article 16 GDPR, to request the immediate correction of incorrect or the completion of your personal data stored by us.
- According to Article 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is required for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims.
- According to Article 18 GDPR, to request the restriction of the processing of your personal data, if the accuracy of the data is contested, the processing is unlawful, but you oppose its deletion, or we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or if you have objected to the processing under Article 21 GDPR.
- According to Article 20 GDPR, to receive your personal data provided to us in a structured, commonly used, and machine-readable format, or to request the transfer to another controller.
- According to Article 21 GDPR, if your personal data is processed based on legitimate interests pursuant to Article 6(1)(f) GDPR, to object to the processing of your personal data, provided there are reasons arising from your particular situation, or if the objection is directed at direct marketing. In the latter case, you have a general right to object, which will be implemented by us without the need to provide specific reasons. If you wish to exercise your right of withdrawal or objection, simply send an email to kontakt@beimbenz.de.
- According to Article 77 GDPR, to file a complaint with a supervisory authority. You can usually contact the supervisory authority of your habitual residence, workplace, or the location of our company for this purpose.
3 | Duration of storage of personal data
The duration of personal data storage depends on the respective statutory retention period, according to the HGB (Commercial Code) 6 years and the AO (Tax Code) 10 years. After the retention period expires, the corresponding data will be routinely deleted unless it is still required for the fulfillment of the contract or the initiation of a contract, or if we have a legitimate interest in retaining it.
Further information on the retention periods for specific purposes can be found in the relevant sections below.
4 | Notice Requirements under the Data Protection Regulation
When you visit our website www.beimbenz.de, information is automatically sent by your browser to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which the access occurred (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
We process this data for the following purposes:
- Ensuring smooth website connection
- Ensuring comfortable use of our website
- Analyzing system security and stability
- For other administrative purposes
The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest is based on the purposes listed above for data collection. In no case do we use the collected data to draw conclusions about your identity. Additionally, we use cookies and analytics services when you visit our website. Detailed explanations can be found in Section 5 of this Privacy Policy.
5 | Cookies
We use cookies on our website. These are small files automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your device and do not contain viruses, Trojans, or other harmful software.
The cookie stores information related to the specific device used. However, this does not mean that we obtain direct knowledge of your identity.
The use of cookies serves to make the use of our services more convenient for you. For example, we use session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted after you leave our website. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a defined period. When you visit our site again to use our services, it will automatically be recognized that you have already been here and which entries and settings you made, so you don’t have to re-enter them.
We also use cookies to collect statistical data about the use of our website and to optimize our services (see Section 9). These cookies allow us to automatically recognize that you have already visited our site during a return visit. These cookies are automatically deleted after a defined period.
The data processed through cookies is necessary for the stated purposes to protect our legitimate interests and those of third parties pursuant to Article 6(1)(f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to alert you whenever a new cookie is set. Disabling cookies entirely may, however, result in some features of our website not functioning properly.
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) and the corresponding consents, we use the "Cookiebot" consent tool. You can find further details about how "Cookiebot" works at https://www.cookiebot.com/en/.
The legal grounds for processing personal data in this context are Articles 6(1)(c) and 6(1)(f) GDPR. Our legitimate interest is managing the cookies and similar technologies and the corresponding consents. Providing the personal data is not contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data, but if you do not provide it, we will not be able to manage your consents.
6 | inquiries by email, phone or fax
When you contact us via email, phone, or fax, your inquiry, including any personal data (such as your name and inquiry), will be stored and processed for the purpose of addressing your request. We do not share this data without your consent. The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or the initiation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if it was requested; consent can be revoked at any time. The data you send to us via contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after the completion of handling your request). Mandatory legal provisions, especially statutory retention periods, remain unaffected.
7 | use of the booking tool for stuttgart spring festival / volksfest
We only process data related to the establishment of a contract (reservation for Spring Festival or Folk Festival) or pre-contractual measures (inquiries, mailings). This may include general data about you or your company (name, address, contact information, etc.) as well as any other data you provide during the contract establishment process. The legal basis for this data processing is the performance of a contract (Article 6(1)(b) GDPR) and the fulfillment of a contractual obligation (Article 6(1)(c) GDPR). We also use your email address and phone number, which we receive in connection with your order, for customer support and communication with you. The legal basis for this is our legitimate interest (Article 6(1)(f) GDPR). We use your postal address, which we receive in connection with your order, to send you access bands and vouchers or similar items before the festival begins, if desired. The legal basis for this data processing is the performance of a contract (Article 6(1)(b) GDPR) and the fulfillment of a contractual obligation (Article 6(1)(c) GDPR). These personal data are necessary to fulfill the corresponding contract and will be stored only as long as needed for contract processing and any subsequent contract-related correspondence and billing, or as long as required by commercial and/or tax law retention periods for documents containing personal data.
8 | subscription to our newsletter
On our website, you have the option to subscribe to a free newsletter. During the registration process, the data from the input form will be transmitted to us. Your consent will be obtained for the processing of this data. We use a "double opt-in" procedure for sending the newsletter, meaning we will only send you the newsletter by email once you have explicitly confirmed that we can activate the service. We will send you a notification email and ask you to confirm by clicking a link in that email that you wish to receive our newsletter. If you no longer wish to receive newsletters from us, you can unsubscribe at any time. If you have explicitly consented under Article 6(1)(a) GDPR, we will use your email address to send you the newsletter regularly. To receive the newsletter, providing an email address is sufficient. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request to kontakt@beimbenz.de via email.
9 | use of your data for advertising purposes
From time to time, we inform our customers via mail and email about our company's offers. For this purpose, we use your name, postal address, and email address. Of course, you can object to the use of your data for advertising purposes at any time. You can revoke your consent for the use of your data for advertising purposes by contacting kontakt@beimbenz.de via email.
10 | sharing data with third parties
We will only share your personal data with third parties for the purposes outlined below:
- If you have given your explicit consent in accordance with Article 6(1)(a) GDPR.
- If the sharing is necessary for the establishment, exercise, or defense of legal claims, and there is no reason to believe that you have an overriding legitimate interest in not sharing your data (Article 6(1)(f) GDPR).
- If the sharing is required by law under Article 6(1)(c) GDPR, or is necessary for the performance of a contract with you (Article 6(1)(b) GDPR).
11 | plugins and tools
We use social media plugins such as Instagram and YouTube on our website, based on our legitimate interest (Article 6(1)(f) GDPR), to make our company more well-known. Responsibility for data protection compliance lies with the respective providers. These plugins and tools are integrated through consent when first visiting the website through the cookie opt-in, and can be adjusted in cookie settings at any time.
11.1 | Instagram
Features of the Instagram service are integrated on this website. These features are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thus receives information about your visit to this website. If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account.
We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Insofar as consent has been obtained, the above service is used on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be withdrawn at any time. Unless consent has been obtained, the service is used on the basis of our legitimate interest in being as visible as possible on social media.
Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook or Instagram. The processing carried out by Facebook or Instagram after forwarding is not part of the joint responsibility.
Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum.
According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in a manner that is secure under data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) with regard to the data processed by Facebook or Instagram directly with Facebook. If you assert the rights of data subjects with us, we are obliged to forward them to Facebook. Data transmission to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875 and
https://de-de.facebook.com/help/566994660333381.
For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.
11.2 | YouTube
This website includes videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our websites on which YouTube is integrated, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited.
YouTube can also store various cookies on your device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability, and prevent fraud attempts.
If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of presenting our online offerings in an appealing way.
This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
For more information on how to handle user data, please see YouTube's privacy policy at:
https://policies.google.com/privacy?hl=de.
11.3 | Adobe Fonts/TypeKit
We use Adobe Fonts, a web font hosting service, on our website. The service provider is the American company Adobe Inc. The Irish company Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, is responsible for Europe.
If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO. The consent can be withdrawn at any time.
Adobe also processes data from you in the USA, among others. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This may involve various risks to the lawfulness and security of data processing.
As a basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there, Adobe uses so-called standard contractual clauses (= Article 46, paragraphs 2 and 3 GDPR). Standard Contractual Clauses (SCCs) are sample templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, Adobe undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision by the EU Commission. You can find the resolution and the corresponding standard contractual clauses here, among others:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
More information about the processed data and the standard contractual clauses at Adobe can be found at
https://www.adobe.com/de/privacy/eudatatransfers.html.
11.4 | Font Awesome
This site uses Font Awesome to uniformly display fonts and icons. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.
When you call up a page, your browser loads the required fonts into its browser cache to correctly display texts, fonts and symbols. For this purpose, the browser you are using must connect to Font Awesome's servers. As a result, Font Awesome becomes aware that this website has been accessed via your IP address.
Font Awesome is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the uniform presentation of the typeface on our website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
If your browser doesn't support Font Awesome, a standard font is used by your computer.
You can find more information about Font Awesome and in Font Awesome's privacy policy at:
https://fontawesome.com/privacy.
12 | Data security
When you visit our website, we use the common SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.
13 | Amendment to this privacy statement
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
14 | SafeNow app
As an operator of a SafeNow Zone, we use personal data to provide assistance through our security personnel if an alarm is triggered via the SafeNow App. For further details about the processing of your personal data in connection with using the app and triggering alarms, please refer to the privacy policy of SafeNow GmbH.