Privacy Notice

Welcome to European Championships Munich 2022.

We appreciate your interest in our event. We, European Championships Munich 2022 (hereafter referred to as „Munich 2022“, „we“, or „our“) abide by the principles of the European Data Protection Regulation (GDPR) in our processes and workflows.

This is to inform you to what purpose and on which legal basis we process your personal data (PII) and which rights you have concerning this data processing.

Please take the time to read our privacy notice as it contains important information about how we handle your personal data.

Who is responsible for processing my personal data?

Olympiapark München GmbH, Spiridon-Louis-Ring 21, 80809 Munich, phone +49 89 3067 0, facsimile at +49 89 3067 3333, e-mail info@olympiapark.de is the controller for data processing as outlined in Art. 4 No. 7 GDPR, unless otherwise stated.

Who can I contact if I have questions about the processing of my personal data or if I believe that the processing of my data by Munich 2022 violates data protection laws?

If you think that our processing of your data violates your data privacy rights, please contact us at privacy@munich2022.com.

General information

Why am I being informed about the processing of my personal data?

The protection of your personal data is your fundamental right. Therefore, we’re obliged to process your personal data lawfully, fairly and in a transparent manner. We take into account the data protection requirements of the General Data Protection Regulation, which requires us, among other things, to inform you about which personal data we process, for what purposes, and for how long we do so.

What is subject of data privacy?

Personal data, as outlined in Art. 4 No. 1 GDPR, is subject to data privacy under the Data Protection Laws of Germany and the European Union.

What is personal data?

Personal data concerns all matter of information which make use of you as an identified or identifiable person (hereafter referred to also as PII), for example your first name, surname, email address, or usage data such as the IP address or your usage behaviour.

All personal data is used exclusively for the purposes outlined in this privacy notice.

What is the content of this notice?

We have outlined the most important information concerning our typical data processing purposes and clustered it by parties concerned.

The word „data“ in this document pertains solely to personal data in accordance with the data protection laws of Germany, and the European Union.

Information regarding our typical data processing purposes, categorised by relevant parties.

Website visitors - What data do we process if you only visit our website?

When you visit our page featuring information about Munich 2022, we only process the necessary data in order to display the website in its best possible form on your device. In principle, use of the website is possible without the usage of personal data.

Therefore, we claim, „in principle”, because we process your IP address in the short term, in order to make it possible for you to view the website. The IP address, also called internet protocol address, symbolizes a network location through which a web server or various devices can be addressed and reached. It takes two IP addresses – ours and yours – in order for the data packets (which make up our website) to be put back together on your end and show up as the actual website.

Server protocol data

Description and extent

In order to meet your data request, our web server must know your IP address, or rather, „process” it. Every time our site is accessed, our system automatically collates data and information about the operating system of your device. The following data is processed:

  • information regarding your type of browser and which version you are running
  • your operating system
  • your internet service provider
  • your IP address
  • access time and location
  • websites which access our website through your system
  • websites which your system accesses from our website or services

This data is collated and saved automatically in a web protocol file called log file. This data is not linked to any personal data.

Purpose

Temporary storage of your data on our system is necessary in order to deliver our website packages to your device. This requires us to store your data for the length of your session on our servers.

Furthermore, processing your data in the log files is necessary in order to guarantee that our website functions properly. The data also helps us optimize our web offer, as well as ensuring the security of the information technology of our systems. Your data is not analysed for marketing purposes. This is the reason our interest in processing your data is legitimate.

Legal basis

The legal basis for the temporary storage of your data and creation of log files is our legitimate interest in ensuring the security of the information technology of our systems.

Storage

The data is erased as soon as it is no longer needed for these purposes. In the case of data collected in order to display the website this happens when the session is terminated.

Log files are deleted after a maximum of 14 days. Storage past that time frame is possible. In that case your IP address is deleted or scrambled, so that association with your device is no longer possible.

Objection and purge options

The collection of data for the presentation of the website, as well as the processing of log file data, is mandatory for our online presence. Therefore, you cannot object to the processing of this data.

Strictly necessary cookies – functional cookies and performance cookies

We strive to provide you with an optimal and user-friendly visit to our website, as well as offer you individual and unique services, tailor-made for your needs. For this purpose, we use cookies, as well as tracking programs designed to analyse usage data. These provide us with insight and statistics which help us improve our online presence, our communication with you, and to make our services more attractive and relevant for you.

When you access our website, a so-called "cookie and consent banner" informs you about the use of cookies and refers you to this privacy notice. Below you will also find a note on how to prevent the storage of cookies in your browser settings. Cookies are text files that are stored by your browser on your device.

Description and scope

When you access one of our web pages, cookies are stored on your system. A cookie contains a unique set of symbols which enables us to clearly identify your unique browser the next time you access our website.

Purpose

The purpose of using strictly necessary cookies is to make the use of our online offer easier for you. Some of our website functions cannot be offered without the use of cookies. It is necessary to recognize your browser even after a page change. Cookies are required for providing language settings as well as the storage of search terms. The data processed by the strictly necessary cookies is not used to create user profiles.

The use of these cookies serves the improvement of quality and content on our website. These cookies tell us how our website is used and how we can continually optimize our offer. This is the reason our interest in processing your data is legitimate.

Legal basis

The legal basis for the processing of your data by using strictly necessary cookies as well as the collating and usage of performance analysis is our legitimate interest in improving the quality and content on our website.

Objection- and purge options in your browser settings

Cookies are saved on your device and transmitted to us from there. Therefore you, as the user, have full control over the use of cookies. You can change the settings of your browser so that no cookies are stored on your device at all. For that you must change the applicable option in the system settings of your browser. This may cause various functions of our online offer to cease to function.

Below please find information regarding the settings of the most common browser types:

  • Microsoft Edge
  • Firefox
  • Google Chrome
  • Safari
  • Opera

In addition to these cookies, our website uses cookies which enable us to measure your online performance. The data collated through performance cookies is pseudonymized wherever possible. This data is not stored with your other data. Therefore, assignation of this data to your person is not readily possible.

Storage, objection and purge options

You’re the user, and you have full control over the use of cookies, since cookies are stored on your device and transmitted to us from there. Please consult our “cookies overview” for information about when which cookies are automatically deleted from your device. You can change the settings of your browser to deactivate or limit the use of cookies. Stored cookies can be deleted at any time. You can also change your settings via the cookie and consent banner.

If cookies are deactivated for our website, it may cause various functions of our online offer to cease to function.

Ticketshop

What data do we process when you buy tickets to a sports event?

If you buy tickets to sporting events during Munich 2022, we will process your contact information, such address or e-mail, as well as your bank account and, if applicable, credit card data, when the contract is concluded. We need this information to initiate and fulfil the contract (Art. 6 para. 1 lit. b GDPR).

You have the option to manage your contract data yourself in your customer account. Therefore, you must create a digital customer account for our Ticket Shop. Conversely, if you make your purchase by phone, we must create a digital customer account for you. You cannot buy tickets as a "guest". Our Ticket Shop is managed and operated by our partner Ticketmaster GmbH, Spree Forum, Alt-Moabit 60, 10555 Berlin (Ticketmaster). Ticketmaster processes your data on our behalf and according to our instructions within the European Union (EU), unless expressly directed otherwise. This means that Ticketmaster does not use your data for itself, especially not for its own purposes or its own advertising measures.

You must create a digital customer account for our Ticket Shop even if you already have a digital customer account with Ticketmaster. Your Ticketmaster customer account will not be merged with our Ticket Shop customer account and in return our Ticket Shop customer account will not be merged with your customer account at Ticketmaster. 

How do I access the online store?

There are several ways to access our online store. For example, you have the option to access the store during your visit to our website. To do this, click on the "Tickets" button.

We advertise ticket sales on various channels. This gives you the opportunity to access our Ticket Shop directly via an "advertisement". To do this, you must either click on the reference to the ticket purchase provided in a post, for example in our "Back to the Roofs" newsletter, or a Facebook ad, for example.

Will I be shown a cookie banner in the online store?

If you access our Ticket Shop directly via our website, you will no longer be shown a banner. The information you provided and the consent you gave when entering our website also applies to the Ticket Shop, so the settings remain saved, and you do not have to do anything else.

If you enter the Ticket Shop via an advertisement, our banner will be displayed so that you can enter your settings. That way you have full control over the use of cookies. You can find more information about this here.

Which marketing and analysis tools are used in the online store?

We use Google Universal Analytics on our site. Google Universal Analytics is a service of Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, in Ireland („Google”). We apply Google’s service by using “cookies”. Cookies are text files which are saved on your device and which enable usage analysis of our websites and services. The Ticket Shop uses these cookies solely to measure reach and to analyse the use of our online stores by you. The information generated by the cookie about your use of our Ticket Shop is usually transferred to a Google server in Ireland and stored there. We have activated IP-anonymizing on our websites and services, including our Ticket Shop. Therefore, your IP address is truncated before Google Universal Analytics can utilize it.

We use data, which is collated by your Google Analytics Client ID, as well as other data generated by Google's Web Analytics applications, in order to analyse your interactions with our services and websites. Additional information regarding Google's operating procedures can be found here.

We have tasked Google with analysing your net usage data of our websites and shops using web analytics, in order to generate reports about your activity on our website and shops. Google Analytics’ Demographic and Interest Reporting for example gives us analyses relating to age, gender, and interests of our users. The IP address transmitted to Google Analytics during this process is not linked to other Google data.

What revocation and purge options do I have?

If you have consented to the use of cookies via our banner, you can object to the processing of your data, in particular the collection, storage and use of information by Google Web Analytics, at any time and in perpetuity when you revoke your consent. You can access further information on this here.

What happens when you shop the online store?

After you have accessed our Ticket Shop, you can start shopping. For the fulfilment of your purchase, i.e., at the conclusion of the contract, you will have to provide your address, contact information, as well as your bank account and, if applicable, credit card details. We need this information to initiate and fulfil the contract (Art. 6 para. 1 lit. b GDPR).

You have the option to manage your contract data yourself in your customer account. Therefore, you must create a digital customer account for our Ticket Shop. You can find more information on this under the item "Entering contact information and accepting the terms and conditions of purchase". After the end of the contract, i.e., after Munich 2022 has come to an end, we will delete your data or block it if we are legally obliged to keep it. Our retention obligations generally end after ten years.

We share your data with our payment and service providers who assist us in fulfilling contracts and providing customer service. They are contractually obligated to neither use your data for their own purposes nor to pass it on to others.

Ticket selection and shipping

First, you choose your tickets and put them into your shopping cart. There, the tickets you have selected will be reserved, i.e., saved, for the duration of your purchase. The shopping cart reservation is done using the so-called "shopping cart cookie". The shopping cart cookie is necessary so that we can save your ticket selection and it is automatically deleted when you have finished shopping. It is processed in order to initiate and fulfil the contract in accordance with Art. 6 (1) lit. b GDPR.

After you have completed your ticket selection, you will be asked by the system to select the "shipping method".

Entering contact information and accepting the terms and conditions of purchase.

You will then be asked to provide your personal information, which we need in order to process your purchase, agree to the General Terms and Conditions for the Purchase of Tickets and Admission to Events (ATGB), and confirm that you have been given the opportunity to read this notice.

To process your ticket purchase, we need the following information: Your first name as well as your last name and an indication of how you would like us to address you, as well as your complete mailing address, i.e., the street and house number, postal code, city, and country, so that we can provide you with your tickets and issue you a proper invoice.

You must provide an email address to which we can send a summary of your purchase and, if applicable, the invoice and tickets, as well as information related to the events for which you purchased tickets. With the email address provided and a password chosen by you, you can log onto your customer account at any time and manage your purchases as well as your personal information. Your password will be encrypted after you provide it and will be stored in an encrypted database. Only you have the encryption key, we do not have access to your password. If you forget it, it can be reset by the system.

We also ask for a phone number where we can reach you in the event of irregularities with your purchase or changes related to an event, if we cannot reach you otherwise. (For example, if your emails do not go through.)

Option to subscribe to the Ticket Shop Newsletter and receive information about future European Championships.

After you have entered your personal data and agreed to the ATGB, you have the option to subscribe to our Ticket Shop Newsletter. If you wish to receive information about future sports events, especially for the European Championships 2026, you have the option to allow us to give your contact details to the sports association responsible for organizing the European Championships in the sport for which you have purchased tickets.

Conditions for the free subscription to Ticket Shop newsletters

We offer you a free Ticket Shop newsletter subscription option. For this we use the newsletter provider Sendinblue to send our newsletters. Sendinblue is a service of Sendinblue, GmbH, with registered offices at Köpenicker Straße 126 in 10179 Berlin, Germany. As our service provider, Sendinblue processes your personal data on our behalf and according to our instructions within the European Union (EU). This means that Sendinblue does not use your data for itself, especially not for its own purposes or its own advertising measures. You can access more information to Sendinblue here.

We need your email address in order to send you our newsletter. Otherwise, we cannot provide you with the newsletter.

Two-factor authentication („Double Opt-In“) of email addresses and proof of consent

If you subscribe to the Ticket Shop newsletter distribution list, we will send you a link and ask you to confirm the registered email address by means of the so-called double opt-in. In this way, we ensure that you consent to be on the distribution list, have access to the specified email account and that your email address is correct.

Only after clicking on the confirmation link are you included in our distribution list.

In this case, we save your registration and confirmation time in order to log your registration and, if necessary, to be able to prove your email verification or your consent. The provision of this data is essential for the receipt of newsletters. Without the provision of this data, we cannot send you Ticket Shop newsletters.

For the processing of this data in connection to the Ticket Shop newsletter, your consent is obtained, and reference is made to the data protection notice.

Analysis of page opening and click behaviour for success analysis

We analyse the dispatch and receipt of our newsletters in order to constantly optimize the content for you and to verify the efficacy of our advertising campaigns. For this purpose, we primarily record how many users open our newsletters and which articles and links are clicked on most often by the subscribers. For this purpose, the newsletters contain two small files, so-called “tracking pixels”, which are retrieved from the sending server when the newsletter is opened. In our Ticket Shop newsletter there is the tracking pixel provided to us by our newsletter provider for one, as well as the tracking pixel provided by Google in connection with our use of Google Universal Analytics

Upon retrieval of the tracking pixels, we process the following data:

1. your email address

2. your traffic data, specifically your IP address, and

3. the time stamp

This analysis of opening and clicking behaviour allows us to understand which content is of interest to you, so that we can adapt our mailings to your needs and interests. It also enables us to track which advertising measures and campaigns are successful, so that we can use our advertising spend economically and optimize costs.

By subscribing to our newsletter and clicking on the confirmation link, you expressly consent to us collecting your data as just described. Without this consent, you cannot use our newsletter subscription.

We will only use your data for internal evaluation purposes and will not pass it on to third parties.

Unsubscribe

You can prevent the sending of newsletters and thus the future analysis of opening and click behaviours at any time by unsubscribing from the newsletters. To do so, click on the unsubscribe button that you can find at the bottom of each newsletter. Alternatively, you can also contact privacy@munich2022.com.

Purpose, Lawfulness and Purge

We process your data for the purpose of sending the Ticket Shop newsletter with content that is of interest to you and for the fair and economic handling of our advertising budget. We base both the processing within the scope of the mailing and the evaluation of your opening and clicking behaviour on your consent pursuant to Art. 6 (1) lit. a GDPR.

We also process your data for the purpose of verifying the accuracy of your email address and to prove your consent. The storage of your registration and confirmation time takes place according to Art. 6 para. 1 lit. f GDPR. In this context, our legitimate interest lies in being able to prove that you have signed up to the distribution list for the sending of newsletters in the event of any legal disputes. With the double opt-in procedure, we also take your legitimate interest into account by ensuring that you have not been registered by unauthorized third parties.

The data which you provided to receive the newsletter, or data that can be traced back to you, will be deleted upon unsubscription.

Option to receive information about events of the umbrella organizations

We offer you the option to forward your contact information, i.e. the email address provided as well as mailing address, to the sports association responsible for organizing the European Championships in the sport for which you have purchased tickets.

If you make use of the offer, we will forward your contact information as follows:

Tickets purchased for:

Contact information will be forwarded to:

 

Beach Volleyball

Confédération Européenne de Volleyball (CEV)

488 route de Longwy

L-1940 Luxembourg

Grand Duchy of Luxembourg

Canoeing

European Canoe Association (ECA)

Kneza Mislava 11

HR-10000 Zagreb

Croatia

Sport Climbing

International Federation of Sport Climbing (IFSC)

Corso Vinzaglio 12

I-10121, Torino

Italy

Athletics

European Athletics Association (EAA)

Avenue Louis-Ruchonnet 16

CH-1003 Lausanne

Switzerland

Cycling

Union Cycliste Internationale (UCI)

Allée Ferdi Kübler 12

CH-1860 Aigle

Switzerland

Rowing

Fédération Internationale des Sociétés d’Aviron (FISA)

Maison du Sport International, Av. de Rhodanie 54

CH-1007 Lausanne

Switzerland

Table Tennis

European Table Tennis Union (ETTU)

Rue Adolphe Fischer 73

L-1520 Luxembourg

Grand Duchy of Luxembourg

Triathlon

European Triathlon Union (ETU )

3 route d' Arlon

L-8009 Strassen

Grand Duchy of Luxembourg

Gymnastics

Union Européenne de Gymnastique (UEG)

Avenue de la Gare 12

CH-1003 Lausanne

Switzerland

 

We transmit your contact information after the sporting event for which you have purchased tickets has taken place. You can revoke your consent in your customer account as long as you delete the pre-set check mark.

Completion of the purchase process via payment

You complete the purchase of your tickets via payment by selecting the payment method and providing the information required for the selected payment method (payment data).

Your payment data, i.e., information on your bank account or credit card, will be processed for payment purposes by our Dutch payment service provider, Adyen N.V., which has its registered office in Germany at Friedrichstraße 63 in 10117 Berlin (Adyen). You can access the privacy policy of Adyen here. The processing of your data is carried out for the fulfilment of the contract. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR.

We would like to point out that Adyen transmits your payment information to other parties necessary for the purpose of processing the transaction, in particular to the participating credit institutions, banks, credit card institutions and, if you use the services of PayPal for payment, to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, where your personal data is also processed.

If you make your purchase by telephone, you will receive an email from us asking you to complete the ticket order by paying the outstanding ticket price within a period specified in the email. For this purpose, the email contains a link that can only be assigned to your order with the respective OrderID. By clicking on this link, you will be directed to our payment service provider so that you can complete the ticket purchase there, as described above.

If you do not have an email address, you will receive an invoice at the mailing address provided. After receipt of payment, we will mail you your tickets.

What happens after your purchase?

After you have completed your purchase in the Ticket Shop, you will receive a confirmation email summarizing your ticket purchase under an OrderID to the email address you provided during registration.

If you ordered your tickets by phone and did not provide an email address, you will receive the summary of your order by mail to the mailing address provided with the registration.

Where can I view my purchases?

You have the option to view your purchases in your customer account under the "My Orders" tab. Each purchase is stored and kept under its own OrderID, so you can easily find and retrieve it using the specific OrderID.

Marketing and analysis

If you consent to our use of marketing and analysis cookies and the use of similar technologies, we use the information garnered as described in the following paragraphs. Here, too, you retain full control over the use of cookies. You can set your browser accordingly or control the transmission of cookies via the privacy cockpit.

Google Universal Analytics – general information

We use Google Universal Analytics on our site. Google Universal Analytics is a service of Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, in Ireland („Google”). We apply Google’s service by using “cookies”. Cookies are text files which are saved on your device and which enable usage analysis of our websites and services. The cookies' collated information regarding your usage of our website and services is transmitted and stored on a Google server in Ireland. We have activated IP-anonymizing on our websites and services. Therefore, your IP address is truncated by Google. Only in rare exceptions is your IP address transmitted to a Google server in the USA.

Web Analytics

We use data, which is collated by your Google Client ID, as well as other data generated by Google's Web Analytics applications, in order to analyse your interactions with our services and websites. Additional information regarding Google's operating procedures can be found here.

We have tasked Google with analysing your net usage data of our websites and services using web analytics, in order to generate reports about your activity on our website and to give us additional information regarding your usage of our website, as well as the internet usage of related services. Google Analytics’ Demographic and Interest Reporting for example gives us analyses relating to age, gender, and interests of our users. The IP address transmitted to Google Analytics in this process is not linked to other Google data.

Objection and purge options

You can object to the collection, storage, and use of information, and the processing of information by Google Web Analytics, at any time and in perpetuity via the following channels, and revoke the original consent you have given via our banner.

Browser settings

You can deactivate the storage of cookies by changing your browser settings to reject cookies outright, or to notifying you as soon as cookies are set. To do this, you must change the settings in your browser menu, as outlined above under "Objection and purge options in the browser settings". We would like to point out that some areas of our website may then no longer function properly, or only to a limited extent.

Privacy Cockpit settings

You can also change the cookie usage settings which you set via our banner at any time with our "Privacy Cockpit". You can switch off the relevant cookies or the use of Google's Web Analytics by moving the slider in the "Marketing and Analysis" tab.

Download and install of browser plugins

You can prevent the acquisition and storage of cookies and the transmission of your usage data collated by our website and services to Google (including your IP address), as well as their processing by Google, by clicking on this link and installing the offered browser plugin.

The legal basis for the storage of Google Analytics cookies is based on your consent. They are stored for an unlimited period of time, unless you make use of your opt-out options.

Remarketing

We use the Google Analytics Remarketing functions in conjunction with the overarching device functions of Google DoubleClick. These functions enable us to connect the relevant advertising target groups determined by Google Analytics Remarketing with the overarching functions of Google DoubleClick. This way, personalized individual marketing messages, determined by your earlier usage and surfing habits on a particular device (i.e. your smartphone), can be displayed for you on a different device (i.e. your tablet or PC).

If you have given Google the corresponding consent, Google will connect your web and app browser history with your Google account. This way every single one of your devices can display the same personalized advertising messages. To support this function, Google Analytics stores your Google-authenticated ID, which is temporarily linked to our Google Analytics data, in order to identify and determine target groups for advertising messages across all devices.

You can prevent overarching remarketing and targeting permanently by deactivating personalized advertising in your Google account. Please use the following link.

The legal basis for the collating of garnered data in your Google account takes place solely based on your consent, which you can give to or withdraw or revoke from Google directly.

For data collection operations that are not merged into your Google account, for example, because you do not have a Google account or have opted out of the merge, the collection of the data is based on our legitimate interest. Our legitimate interest results from the fact that we have an interest in the anonymized analysis of website visitors for advertising purposes. Further information on this function used by us can be found in Google's data protection information.

AdWords und Conversion-Tracking

We use Google AdWords, which is a Google online advertising program. Within the framework of Google AdWords, we use their so-called “conversion tracking” by setting a conversion tracking cookie each time you click on an ad placed for us by Google. This cookie expires after 30 days and does not serve to identify you personally. If you visit certain pages of our website before the cookie expires, we, as well as Google, can recognize that you were redirected to our site by clicking on our ad. We, as a Google AdWords customer, then receive a specific cookie. This cookie is unique, can only be assigned to us, and cannot be tracked via the websites of other AdWords customers. AdWords customers who have opted for conversion tracking can then use the information obtained by these unique conversion cookies to create conversion statistics. As a customer, we only determine the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. We do not receive any information with which we could personally identify users.

Objection and purge options

If you do not wish to participate in tracking, you can object by deactivating the Google conversion tracking cookie via your internet browser under “user settings”. You can also set your browser to inform you each time a cookie is set and only allow specific cookies, exclude the acceptance of specific cookies or general cookies, and also activate the automatic purge of all cookies when closing your browser.

You can also change your settings for the use of marketing cookies made via our banner at any time via the "Privacy Cockpit" - by switching off the relevant cookies, or the general use of Google conversion tracking, by changing the slider.

The functionality of this website may be limited after disabling cookies.

Purpose and legal basis

If you opt out of conversion tracking, you will then not be included in the conversion tracking statistics. The conversion cookie will not be stored on your device without your explicit permission. We use the statistical information obtained by this cookie according to Art. 6 (1) lit. f DSGVO. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.

For more information on Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://www.google.de/policies/privacy/.

Additional Google tools

We use other Google tools in connection with our marketing and analysis. Specifically, we use the following:

Google Tag Manager

We use Google Tag Manager in conjunction with marketing and analysis to manage the Google tools. This is a tag management system that allows us to quickly and easily update tracking codes and related code fragments, commonly known as "tags", on our websites.

Google Display Network – We use Google Display Network to measure the effectiveness of ad impressions of Google Display Network advertising, and to understand why individual advertising links to our website were not clicked. This helps us better understand the success rate of our advertising campaigns. You can find more information about this here.

Google Optimize – By displaying slightly different variantions of the website to different user groups depending on so-called profile matching, Google Optimize allows us to analyze user behavior as part of A/B testing. This lets us analyze our presence on the Internet, improve our web offerings, and create an interesting user experience for you.

Here you can get an overview of Google's data protection policies in connection with Google Universal Analytics as well as Google's privacy policy.

The legal basis for the data processing is based on your consent. The data will be stored for an unlimited period of time, unless you make use of your opt-out options.

Opt-out options

You can object to the use of your data as described above by changing the applicable settings in your browser under User Settings. Conversely, you can deactivate your settings made via our banner with the "Privacy Cockpit" -- either by switching off the relevant cookies, or the use of tracking tools, by moving the slider under the tab "Marketing and Analysis”.

Social Media Tracking Tools

Tracking Pixel

We also use other tracking tools on our websites that allow us to provide you with a more personalized and interactive web experience by advertising on your social media channels. This allows you to receive more relevant and therefore more interesting advertising. For this purpose, we use cookie-based tools offered by social media platform providers. Specifically, this concerns the tracking tools of the following providers:

·        Facebook Ireland Ltd, with registered offices at 4 Grand Canal Square Grand Canal Harbour Dublin 2 in Ireland. Facebook Ireland Ltd. is a subsidiary of Facebook Inc. with its registered office at 1601 S California Ave, Palo Alto 94304 in California, USA More information about the tool we use can be found here. Additional information on data processing by Facebook can be found here.

·        LinkedIn Ireland Unlimited Company, with registered offices at Wilton Place, Dublin 2 in Ireland. LinkedIn Ireland Unlimited Company is a subsidiary of LinkedIn Corporation, having its principal place of business at 2029 Stierlin Court, Mountain View 94043, California, USA For more information about LinkedIn's privacy practices, click here.

For more information about the tool we use and how you can opt-out of tracking, please click here.

·        Twitter International Company, with registered office at 1 Cumberland Place, Fenian Street, Dublin 2 in Ireland. Twitter International Company is a subsidiary of Twitter Inc. with its principal place of business at 1355 Market St, Suite 900, San Francisco 94103, California, USA Information about Twitter's privacy policy can be found here.

For more information about the tool we use and how you can opt out of tracking, please click here.

In order to be able to use the tools of the aforementioned providers, we integrate so-called tracking pixels into our websites. These tracking pixels are transparent, pixel-sized images with tracking function, which in turn load a small library of tracking functions. These functions allow us to track your activities on our websites, such as the URLs and domains you have visited, the devices you have used, and most importantly, advertising conversions. Advertising conversions, or conversion rate, is a metric that allows us to measure the success of our advertising activities. For example, the conversion rate describes the percentage of visitors to our websites who register for one of our products after interacting with our advertising. The advertising conversion rates are based on the cookies set by the aforementioned providers and enable us to compare our website visitors with the corresponding user accounts on various social media platforms.

Social media buttons (recommendation buttons) – Facebook and Twitter

Recommendation buttons

We maintain a social media presence. It is part of our online media presence. Our aim is to inform and exchange information with interested parties in a target group-oriented manner. Social media enables us to establish electronic contact quickly and therefore to communicate directly via the media of your choice.

Recommendation buttons from Facebook and Twitter are integrated on our website. The links to these platforms are integrated in such a way that your data is only sent to the respective service when you click on the recommendation button (so-called Shariff solution).

We have no influence on what data is sent to Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) or Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland) after clicking on it. You use these platforms and their functions at your own risk. This applies in particular to the use of the interactive functions, such as commenting on, sharing or evaluating our contributions, as well as liking our company site. Most interactive functions are reserved for registered and logged in users.

Your rights

You are entitled to the following rights regarding the processing of your data: right of access; right of rectification; right to purge; right to restriction of processing; right to object; right to data portability, and the right to complain about unlawful processing of your personal data to the relevant data protection authority.

We do not have full access to your personal data. Therefore, you should contact the provider of the respective platform(s) directly when making a claim. Providers have access to the personal data of their users and can take the appropriate measures as well as provide information. We are happy to support you if you need further assistance. Please contact privacy@munich2022.com for this purpose.

Objection on Facebook

For a detailed presentation of respective data processing and the possibilities of objection (opt-out), we refer to the following linked information:

Objection on Twitter

For a detailed presentation of respective data processing and the possibilities of objection (opt-out), we refer to the following linked information:

Shared responsibility – Joint Controllership

According to the case law of the European Court of Justice, we are jointly responsible controllers in the cases listed below.

Shared responsibility – joint controllership with Facebook

As the operator of a fan page on the social network Facebook, we are, together with the operator of this network, responsible, and liable under data protection laws. Facebook is a service which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland. When visiting our fan page, your personal data is processed by those responsible, i.e. by us and by Facebook.

Agreement with Facebook

We have an agreement with Facebook, which among other things regulates the conditions for the use of our respective fan page. Facebook's terms of use and the other terms and guidelines listed at the end of this agreement are definitive.

Page Insights

In connection with the operation of our respective fan page, we use the Page Insights function to obtain user statistics. For this purpose, Facebook stores a cookie on the respective devices of registered users who visit our fan page. When you visit our fan page, Facebook stores the cookies listed on your device to enable us to statistically evaluate your visit. The information stored in the cookies is processed by Facebook, specifically when you (the user) visit the Facebook services and services provided by other companies using Facebook services. You can find more detailed information on the use of cookies by Facebook here, in their cookie policy.

In connection with statistical analysis, we use the filters provided to us by Facebook to specify the categories of data according to which Facebook provides us with anonymized statistics. The following criteria or categories are available to us in anonymized form for evaluating your activities on our Facebook page, provided that you as a user have provided the relevant information:

  • Age range
  • Gender
  • Place of residence (city and country)
  • Language
  • Mobile or stationary page view (YouTube to include individual device types)
  • Interactions in context with posts (e.g. reactions, comments, shares, clicks, views, video usage time)
  • Time of use

Data sharing in the context of Facebook interactions

If you interact with our fan page during your visit, Facebook will also have access to your data. It is therefore also possible that Facebook Inc. at 1601 Willow Road in 94025 Menlo Park, California, i.e. in the USA, has access to your data. Facebook Inc. is located in a third country in which the level of data protection is lower than in the EU.

Shared responsibility – joint controllership with Instagram

We are responsible for the content on our Instagram company page. The Instagram service is a product provided by Facebook Ireland Limited ("Facebook"). As the operator of an Instagram company page, we are jointly responsible with the operator of the social network Facebook Ireland Ltd. When visiting our Instagram page, personal data is processed by the responsible parties.

Instagram is an online platform which enables the sharing of photos and videos. Users can edit photos and videos and add filters. Other users can in turn share these photos and videos, comment on them or mark them with a "Like". Users can also get in touch with each other by writing private messages.

As the person responsible for this site, we have entered into various agreements with Facebook, which, among other things, regulate the conditions for use of the Instagram page.

There is a possibility that your data may also be processed outside the UK or the European Union by Facebook Inc. in the USA. We ourselves do not pass on any personal data.

The joint controller agreement with Facebook essentially means that you can assert your data subject rights directly against Facebook. However, should our assistance be required, please feel free to contact us at any time.

Provision of statistical evaluation – Instagram Insights

The Instagram page is a company page featuring the Instagram Insights function. This means that part of the data collected by Facebook during use is made available to us as a statistical evaluation in anonymized form. However, this statistical evaluation only relates to the audience, content and activity on our Instagram page. Specifically, the evaluation includes the following data:

  • Number of "likes" of our photos and videos.
  • Number of comments on our photos and videos
  • Number of people who have seen a photo or video
  • Number of times a photo or video was shared
  • Number of times a photo or video was reported as spam
  • Number of times a click indicated that the user no longer likes the page
  • Age, gender, location, and language of visitors in aggregate form

This information transmitted to us by Facebook is anonymized and cannot be associated by us with your person. However, this does not necessarily mean that the data collection and data processing by Facebook itself is anonymized. For more information, please see the Instagram privacy policy.

Visibility of personal data for us and other users

When using certain interactive functions on Instagram (e.g. the comment function or the "Like" button), comments or likes are visible to other users and to us as the provider of the Instagram page. Thus, a direct user assignment can be made based on the disclosed personal data.

We have no influence on interactive functionalities and visibility of comments, likes or other activities on our Instagram page. We are therefore not the responsible party in terms of data protection laws. The type, scope and duration of the processing and storage of personal data in this regard are determined by Facebook, so Facebook is ultimately responsible for this.

It is always possible to visit our Instagram page without leaving comments or clicking "Like".

Please note that the interactive functions of Instagram are generally only possible after registration. Data relating to this may also be processed by Facebook but does not fall within our area of responsibility.

Contacting us via private message or comment

It is possible to contact us through our Instagram page either by private message or by comment. You can contact us with questions about us, our Instagram page, or other inquiries.

When you contact us, we are furnished with your username, your actual request and other personal data, if applicable. We have to store this data in order to be able to answer your inquiry. Comments are public and visible to all other Instagram users.

We delete the data generated in the course of your inquiry/contact six months after the last message. If there are legal storage obligations, the data will be stored for the duration of the legally required storage obligation. A public comment can only be deleted by you.

Purpose of data processing

The first purpose of processing personal data in connection with our Instagram presence is to compile statistics on visitor flows. This allows us to better understand how users interact with our site and the products and services presented. It allows us to better design our company page and adapt our products and services to the needs of users. Furthermore, we process users' personal data in order to be able to communicate with you directly via media of your choice.

Lawfulness of data processing

We operate this Instagram page in order to present ourselves to Instagram users and to communicate directly with them. The processing of your personal data is based on our legitimate interests in an optimized company and product presentation as well as direct communication with Instagram users. This also corresponds to the reasonable expectations of the data subjects, as the communication is not initiated by us, but by them.

If we publish images of individuals, this is done primarily via consent or on the basis of a contractual agreement, and in exceptional cases on the basis of legitimate interests.

Objection and purge

You have the right to object to data processing on grounds relating to special circumstances at any time. You can exercise your right to object via the Instagram/Facebook settings. If you wish to object to processing within our area of responsibility, you can contact us for this purpose.

Storage duration

Since we are merely operators of an Instagram page, limited personal data is transmitted to us as described above. The criteria specified by Instagram apply to the storage period, unless it is data that is generated in the context of your inquiry/contact. Inquiry/contact data will be deleted by us six months after the last message.

Shared responsibility – joint controllership with Google

We use Google Universal Analytics on our site. We apply Google’s service by using “cookies”. Cookies are text files which are saved on your device and which enable usage analysis of our websites and services. The cookies' collated information regarding your usage of our website and services is transmitted to Google. Google uses this information to analyse how you use our website and to provide us reports about your activity on our website and to give us additional information regarding your usage of our website, as well as the internet usage of related services. By applying Google’s Universal Analytics on our website, we are, together with Google responsible, and liable under data protection laws. Google Universal Analytics is a service of Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, in Ireland („Google”). You can find more information about the joint controllership here.

Shared responsibility – joint controllership with YouTube

We rely on the technical platform and services of YouTube, a Google company with headquarters at Gordon House, Barrow Street, Dublin 4, Ireland. If you are a resident of the UK or the European Economic Area or Switzerland, (unless otherwise specified in any additional terms), these services are provided by Google Ireland Limited ("Google"), a company incorporated and organised under the laws of Ireland.

In accordance with Google's privacy policy, we assume that any transfer of personal data, including the processing thereof, will also be transferred to the servers of Google LLC in the USA.

In its ruling in case C-210/16, the European Court of Justice decided that platform operators (here: YouTube) and the channel operators located on the platform are jointly responsible for the data processing carried out via the respective channel. To this extent, platform operators and channel operators are to be regarded as jointly responsible parties or joint.

Web page videos

When we integrate videos on our websites they are stored on YouTube. YouTube is a platform offered by YouTube LLC, located at 901 Cherry Ave, San Bruno, CA 94066 in the USA. YouTube is a company affiliated with Google. We embed our videos via YouTube because local hosting is not powerful enough to display the videos.

When you click on one of our videos, a connection is established to YouTube in order to embed the video provided for you on our site. The integration of the video results in a call to the YouTube or Google servers for technical reasons. The servers are located in Ireland, in the EU. We have no influence on which data is transmitted to YouTube after clicking. Therefore, for the associated use of data from your browser or device, we refer you to the privacy notices of YouTube or Google, which you can find here.

You have the right to object to the processing of your personal data, but you must address the objection to YouTube and Google.

When you visit our website with an embedded YouTube video, YouTube receives information about the specific website you are visiting. In the process, your personal data is transmitted to YouTube as just described. Such transmission takes place regardless of whether you have logged into your YouTube account or whether you do not have a corresponding account at all. If you have logged into your YouTube account, your personal data will be assigned to your YouTube profile. If you do not want your personal data to be assigned to your profile, you should log out of your YouTube account before accessing one of our videos. YouTube and Google use this data for advertising, market research and/or a demand-based design of their website.

Google ReCaptcha

We use "Google reCAPTCHA" (hereafter "reCAPTCHA") on our websites. reCAPTCHA is a service of Google Inc., business located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). With reCAPTCHA, we check whether the data entry on our websites (e.g. in our contact form) is made by a human or by an automated program (a so-called BOT). For this purpose, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as a visitor accesses our website. For this analysis, reCAPTCHA evaluates various information points (e.g. IP address, time spent by each visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

Purpose / Lawfulness

We have a legitimate interest in protecting our web offerings from abusive automated spying and from SPAM. You can find more information about Google reCAPTCHA here.

Newsletter subscribers

On our website, we offer a free newsletter subscription with information about services, digital consultancy and design.

General information

We need your email address in order to send you our newsletter. Otherwise we cannot provide you with the newsletter. Our newsletters are always personalized, i.e. we always address you personally. In order to address you personally in our newsletters and event invitations, we also need your first and last name.

Two-factor authentication („Double Opt-In“) of email addresses and proof of consent

If you subscribe to the newsletter distribution list, we will send you a link and ask you to confirm the registered e-mail address by means of the so-called double opt-in. In this way, we ensure that you have access to the specified e-mail account and that your e-mail address is correct.

Only after clicking on the confirmation link are you included in our distribution list.

In this case, we save your registration and confirmation time in order to log your registration and, if necessary, to be able to prove your e-mail verification or your consent.

The provision of this data is essential for the receipt of newsletters. Without the provision of this data, we cannot send you newsletters.

For the processing of this data, your consent is obtained, and reference is made to the data protection notice.

Analysis of page opening and click behaviour for success analysis

We analyze the dispatch and receipt of our newsletters in order to constantly optimize the content for you. For this purpose, we primarily record how many users open our newsletters and which articles are clicked on most often by the subscribers. For this purpose, the newsletters contain a small file, the so-called tracking pixel, which is retrieved from the sending server when the newsletter is opened. Upon retrieval we process the following data:

  • your e-mail address,
  • your traffic data, specifically your IP address, and
  • the time stamp.

This analysis of opening and clicking behaviour allows us to understand which content is of interest to you, so that we can adapt our mailings to your needs and interests.

By subscribing to our newsletter and clicking on the confirmation link, you expressly consent to us collecting your data as just described. Without this consent, you cannot use our newsletter subscription.

We will only use your data for internal evaluation purposes and will not pass it on to third parties.

Unsubscribe

You can prevent the sending of newsletters and thus the future analysis of opening and click behaviours at any time by unsubscribing from the newsletters. To do so, click on the unsubscribe button that you can find at the bottom of each newsletter. Alternatively, you can also privacy@munich2022.com.

Purpose

We process your data for the purposes of sending personalized newsletters with content of interest to you, the recipient, to verify the accuracy of your email address and to prove your consent. A change of these purposes is not planned.

Lawfulness

We base the processing of your data in the context of sending newsletters on your consent.

The storage of your registration and confirmation time is based on our legitimate interest to be able to prove that you have subscribed to the distribution list for the sending of newsletters in the event of any legal disputes. With the double opt-in procedure, we also take your legitimate interest into account by ensuring that you have not been registered by unauthorized third parties.

The evaluation of your opening and clicking behaviour is based on your consent.

Purge

Data that you have provided to receive the newsletter or data that can be traced back to you will be deleted upon unsubscription.

Newsletter service provider

We use the newsletter provider Sendinblue to send our newsletters. Sendinblue is a service of Sendinblue, GmbH, with registered offices at Köpenicker Straße 126 in 10179 Berlin, Germany. As our service provider, Sendinblue processes your personal data on our behalf and according to our instructions within the European Union (EU).

Customers, business partners and their employees

If you are our customer or business partner or an employee of our customers or business partners, we process your data in order to establish and execute contractual relationships with you or with your company, as well as to fulfil legal requirements. As a customer or business partner or as an employee of our customers or business partners, you are required by law and by contract to provide us with the relevant data. Without the corresponding information, a customer or business relationship with us can neither be established nor carried out.

Purpose

We process your data for the establishment and implementation of business relationships. We do not anticipate any change of the aforementioned purposes.

Lawfulness

In the context of contracts with natural persons the legal basis for the processing is the preparation and execution of a contracts. For contracts with legal persons the legal basis is our legitimate interest in being able to communicate with contact persons relevant to the contract.

In the context of tax and commercial law regulations we are legally obliged to process your data. In the event of any examination, enforcement or dismissal of claims the legal basis for data processing is our legitimate interest, which is based on the enforcement of or defence against claims.

Forwarding

Primary recipients of your data for the purpose of processing payments are banks. Insofar as we are obligated or authorized to transmit data, public authorities and offices may be recipients of your data within the scope of their duties. In individual cases, your data may be transferred to collection service providers, lawyers and courts.

Storage

All data relevant to contracts and accounting are stored in accordance with the retention periods under tax and commercial law.

Interested parties and communication partners

If you contact us by calling us, sending us an e-mail, fax or letter, or by using the contact form provided on our website, we will process your data (name, e-mail address, message content) in order to process your request. The provision of data is necessary in order to process your request. Without providing data, communication is not possible.

Purpose

We process your data for the purposes of efficient and effective communication. We do not anticipate any change of the aforementioned purposes.

Lawfulness

The legal basis for the processing of your data is our legitimate interest in being able to communicate efficiently and effectively with interested parties and other communication partners. Furthermore, as the operator of this website, we are legally obliged to provide you with an effective means of contact.

Purge

Inquiries and communications are erased automatically after a minimum period of six calendar years from the end of the last company financial year they relate to.

Job applicants and employment relationships

If you apply for a job with us or for a position to be placed by us, we process your personal data (so-called application data) in principle only insofar as this is necessary for the decision regarding the establishment of an employment relationship with you. The provision of data is required for applicants. It is not possible to submit an application without providing data.

Only persons authorized to make decisions will have access to your application data. As a rule, these are members of the respective management and team leads.

We ask you to upload your application forms exclusively via e-mail to hr@munich2022.com.

Purpose

The processing of your application data serves the purpose of deciding on the establishment of an employment relationship. A change of this purpose is not intended or planned.

Lawfulness

The processing is therefore carried out in the context of pre-contractual measures for an employment relationship sought with the application.

Purge and storage

In the case of advertised positions, your personal application data will be deleted - irrespective of the outcome of your application - after six months have elapsed following a decision on filling the position.

After a possible rejection, you have the option to consent to a storage period exceeding the aforementioned purge period of six months, provided that you are also interested in other positions and thus to be included in our talent pool.

If you give us such consent, we will retain your application data for a period of one additional year, provided that you apply for a position with us. In this case, you may revoke your consent at any time. If you apply for a position to be placed by us, we will retain your documents until you revoke your consent. If you revoke your consent, your application data will be deleted accordingly. The legal basis for processing beyond the usual retention period is your consent.

If you submit an unsolicited application, we will consider this as your consent to be included in our talent pool and will retain your application data for a period of one year if you apply for a position with us, unless you clearly inform us in your application that you do not want this. If you apply to be included in the talent pool as part of the placement process, we will retain your records until you withdraw your consent.

In any case, you can revoke your consent at any time without cause.

Our service providers

We use service providers, in particular for the provision, maintenance, and care of IT systems. Our service providers process your personal data on our behalf and according to our instructions within the European Union (EU), unless we have explicitly described otherwise in this privacy policy.

We have concluded the EU standard contractual clauses with non-European providers. We would like to point out that these providers thereby agree to comply with the data protection standards of the EU, so that there is an appropriate level of protection for your data under data protection law.

What rights do I have?

You have the right to obtain confirmation as to whether or not personal data is processed by us, which categories of data it is, as well as other information, such as the purpose of the processing, the recipient or categories of recipient to whom the data have been or will be disclosed as well as the period for which the data will be stored, and other information outlined in Article 15 GDPR

You have the right to demand we supply all your personal data or correct any incorrect personal data (Right of access / Right of rectification).

You have the right to request the immediate purge of personal data, or alternatively request a restriction of the processing of your personal data. (Right to purge).

You have the right to receive all personal data with which you provided us in a structured, commonly used and machine-readable format as well as request the data be transmitted to another controller (Right of portability).

You have the right to withdraw your given consent at any time without cause, in perpetuity. When you withdraw your consent, we are no longer allowed to process any personal data to which use you formerly consented, in perpetuity. Please direct all permission withdrawal requests to privacy@munich2022.com (Right of withdrawal).

In case we process your personal data based on our legitimate interests, you can object to their future use at any time on grounds relating to your particular situation. However, we may not always be able to comply, for example in case legal regulation requires us to process your data (Right to object).

In case your objection concerns direct marketing, you have a general right to object. In that case we will abide by your right to object without you having to make your case concerning special circumstance. Please direct all objections to privacy@munich2022.com.

In addition, you have the right to enter a formal complaint with the responsible supervisory authority. The supervisory authority for us is the The Bavarian Data Protection Commissioner (BayLfD). However, you can also contact your local regulatory body or that of your employer.

You can contact BayLfD at Wagmüllerstr. 18, 80538 Munich, phone at +49 (0) 89 313 6730 or online at https://www.datenschutz-bayern.de.

 

Last modified on October 25th, 2021