| Privacy policy – Industrie Museum Bayreuth |
| With this privacy policy, we inform you which personal data we collect in the context of your use of IMB and for what purpose the data is used. You can access this information at any time at https://emergo-entertainment.com/datenschutz-industrie-museum-bayreuth/?lang=en |
| 1 Responsible party |
| The responsible body within the meaning of the data protection laws is Emergo Entertainment GmbH Badstrasse 7 95444 Bayreuth If you have any questions or suggestions regarding data protection, you can also contact us by e-mail at studio@emergo-entertainment.de. You can reach our data protection officer as follows: paul.redetzky@emergo-entertainment.de |
| 2 Subject matter of data protection |
| The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, this is any information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers. |
| 3 Permissions |
| Our app uses the following permissions: Permission Camera permission Purpose Scanning QR codes to recognize the pillars. |
| 4 Automated individual decisions or profiling measures |
| We do not use automated processing to make a decision or profiling. |
| 5 Forwarding of data |
| In principle, your personal data will only be passed on without your express prior consent in the cases listed below: If it is necessary to clarify an unlawful use of our services or for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. Data may also be passed on if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities on request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines and the tax authorities. This data is passed on on the basis of our legitimate interest in combating misuse, prosecuting criminal offenses and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data do not prevail, Art. 6 para. 1 lit. f GDPR or on the basis of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR. We also process data in countries outside the European Economic Area (“EEA”). For the USA, the European Commission decided on July 10, 2023 that an adequate level of data protection exists under the provisions of the Data Privacy Framework (adequacy decision, Art. 45 GDPR). Further information – including on the certification of the service providers we use – can be found at https://www.dataprivacyframework.gov/ We use the following service providers that are certified in accordance with the Data Privacy Framework Amazon Web Services Inc. to store a backup copy of the application’s user database.As part of the further development of our business, the structure of Emergo Entertainment GmbH may change by changing its legal form, founding, buying or selling subsidiaries, parts of companies or components. In such transactions, customer information is passed on together with the part of the company to be transferred. Whenever personal data is passed on to third parties to the extent described above, we ensure that this is done in accordance with this data protection declaration and the relevant data protection laws. Any disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data do not outweigh this, Art. 6 para. 1 lit. f GDPR. |
| 6 Deletion of your data |
| We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the app plus a period of 90 days, during which we keep backup copies after deletion, unless this data is required for longer for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims. If you delete your user account, your profile will be completely and permanently deleted. However, we will retain backup copies of your data for a period of 30 days before these are also permanently deleted, unless this data is required for longer for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims. If data must be retained for legal reasons, it will be blocked. The data will then no longer be available for further use. |
| 7 Your rights as a data subject Right to information. You have the right to request information from us at any time about the personal data concerning you that we process within the scope of Art. 15 GDPR. You can submit a request by post or email to the address given above. Right to rectification of inaccurate data. You have the right to demand that we rectify your personal data without undue delay if it is incorrect. To do so, please contact us at the address given above. Right to erasure. You have the right to obtain from us the erasure of personal data concerning you under the conditions described in Art. 17 GDPR. In particular, these conditions provide for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject. For the period of data storage, see also section 12 of this privacy policy. To assert your aforementioned right, please contact us at the addresses given above. Right to restriction of processing. You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify the accuracy and in the event that the user requests restricted processing instead of deletion in the case of an existing right to deletion; furthermore, in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims and if the successful exercise of an objection between us and the user is still disputed. To assert your above right, please contact us at the addresses given above. Right to data portability. You have the right to receive from us the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. To exercise your above right, please contact us at the contact addresses given above. Right to object. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based, inter alia, on point (e) or (f) of Article 6(1) GDPR pursuant to Article 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. Right to lodge a complaint. You also have the right to lodge a complaint with a competent supervisory authority. You can find a list of all European data protection authorities here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. |
| 8 Changes to this privacy policy |
| The current version of this privacy policy is always available at https://emergo-entertainment.com/datenschutz-industrie-museum-bayreuth/?lang=en |
| Stand: 04.08.2024 |
