Data protection

Stadtbetriebe Siegburg AöR - Department RHEIN SIEG FORUM as operator of the RHEIN SIEG FORUM (RSF) takes the protection of your personal data seriously. With this data protection declaration, we would like to give you an overview of how we guarantee your data protection, what type of data is collected for what purpose and how it is used. In the course of the further development of the website and the implementation of new technologies, changes to this data protection declaration may also become necessary. We, therefore, recommend that you read through the data protection declaration again from time to time.

Information on the general use of rhein-sieg-forum.de

1. Which data is automatically stored by us, and how do we handle it?
Every time content of this portal is accessed, data is temporarily stored that may allow identification. The following data is collected each time a web page of the portal is accessed:
• Date and time of access
• Name of the accessed internet service, the accessed resource and the action taken
• Query made by the client
• Amount of data transferred
• Message as to whether the retrieval was successful
• IP address of the calling computer
• Origin of the visiting computer
• Time spent on the website
• Client information (browser, operating system, resolution)

For the purposes of statistical evaluation and usage analysis, only anonymised IP addresses are used at all times. On the other hand, non-anonymised IP addresses are used to defend against and analyse attacks on rhein-sieg-forum.de. For this purpose, protocol files, so-called "log files", are directly and exclusively accessible to administrators. If you would like information about the data collected from you, please contact us at info@rhein-sieg-forum.de.

1.1 Data transfer
The telecommunications privacy law also protects your e-mail content and form entries from unauthorised access and processing. However, we would like to point out that other operators and users can generally record data transfer via the Internet. Personal data is, therefore, only transmitted in encrypted format wherever possible.

The online transfer of personal data between the user's browser and the servers is encrypted using the HTTPS protocol. To enable this encryption technology functionality, the user is required to use the current versions of the most popular browsers.

1.2 Disclosure of personal dataData that has been logged when accessing the Internet portal of Stadtbetriebe Siegburg AöR or that has been collected for a particular service will only be passed on to third parties outside Stadtbetriebe Siegburg AöR - Fachbereich Rhein-Sieg-Halle,

• insofar as we are obliged to do so by law or by judicial or public prosecutorial order, or
• in the event of attacks on our server operator's Internet infrastructure, the transfer is necessary for legal or criminal prosecution
• to defend and protect our rights
• to comply with the terms of use or data protection regulations
• to resolve technical difficulties with the products
• to cooperate with service partners who require the transmission of data for the processing of orders. The transfer of data is limited to the minimum necessary for the fulfilment of their order.
• To cooperate with service partners who support us, particularly in the marketing area, to analyse specific technical data and data processing and/or storage functions.

We work with a limited number of trusted external service partners who have been carefully selected by us and meet high data protection and security standards. Maintenance is provided by Fahrenheit GmbH and hosting by Mittwald CM Service GmbH & Co. KG on behalf of Fahrenheit GmbH. Data is only disclosed to service partners to the extent that this is necessary to provide the services offered.

Personal data will not be passed on for commercial purposes.

2. Do we analyse usage patterns on our website?
This website uses Matomo (formerly Piwik), open-source software for statistical analysis of visitor access. Matomo uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. The session cookies used are text files that are only temporarily stored on your computer. As soon as the web browser is closed, they are deleted again. The information generated by the cookie about your use of our website is stored on a server of our hosting provider Mittwald CM Service GmbH & Co. KG, on behalf of Fahrenheit GmbH. Data collected is used to identify and improve relevant content on our website.

The IP address is anonymised immediately after processing and before it is stored. Matomo is configured according to the recommendations of the Independent Centre for Data Protection (ULD) and follows the applicable data protection regulations.

By using this website, you consent to the processing of data about you in the manner and for the purposes set out above.

3. What happens if you voluntarily provide us with additional data?
Beyond the data mentioned above, personal data is only collected and stored if you expressly and knowingly provide us with such information for specific purposes, services and functions. We only use the personal data you enter for the purpose, service or function you requested and only within Stadtbetriebe Siegburg AöR or the service providers commissioned with the respective service.

Any e-mails from this website will only be sent to the address you provide. The address will not be published and will only be used for the purpose, service or function requested by you.

You can revoke your personal data at any time by notifying info@rhein-sieg-forum.de or independently unsubscribing or deleting services or functions in the respective (technical) context - with effect for the future. Your personal data will not be sent to third parties for other purposes.

4. What does it mean to click on an external link?
We would like to point out that operators of external websites linked from the RHEIN SIEG FORUM internet portal may collect and analyse the data of visitors to these websites.

4.1 Social Media
Some of the pages offered on the RHEIN SIEG FORUM website contain links to social media networks (e.g. Facebook, Google, Instagram, Xing or LinkedIn). To ensure you have full control over your data, no social plug-ins are used, only hyperlinks. Therefore, no data exchange takes place.

By clicking on the link, you leave the RHEIN SIEG FORUM website. The social media platforms and other possible third-party content providers that you reach via the hyperlink provide these services and their data processing under their own responsibility.

DATA PROTECTION DECLARATION on the various services offered by the RHEIN SIEG FORUM
according to the General Data Protection Regulation (GDPR) Articles 13 and 14 about the processing of your personal data as well as about your data protection claims and rights.

1. Who is responsible for data processing, and whom can you contact?
Stadtbetriebe Siegburg AöR | Department RHEIN SIEG FORUM
Bachstr. 1 | 53721 Siegburg
Tel. 02241/102-7110 | E-Mail: info@rhein-sieg-forum.de

If you have any questions on the subject of data protection, you are welcome to contact the data protection officer of Stadtbetriebe Siegburg AöR, Mr ChristophSchwamborn, wenden (02241/102-7791 | datenschutz-sbs@siegburg.de).

2. From which sources do the personal data originate?
We process the data that we receive from you in the course of the business relationship. This is the case when you contact us with a registration or a request via our website www.rhein-sieg-forum.de or fanpages www.facebook.com/rheinsiegforum and www.instagram.com/rhein_sieg_forum.

We process your data in accordance with data protection law and legal regulations for specific purposes and for a specific duration. We have listed the respective purposes and the processing period below. If we collect data from you for additional purposes, we will inform you separately at the time of collection.

3. What data do we collect, for what purposes and for how long?
3.1 RSF-Newsletter

We process the data you provided when registering for the purpose of direct advertising. For this purpose, we need your name, title and a contact option (address, e-mail address and/or telephone number). We will write to you by e-mail or letter and inform you about offers, services and events which we assume, based on the data you have provided, to be relevant and interesting for you. Subscribers to our RSF newsletter also have the opportunity to participate in our service surveys. If you share your opinion with us, we can publish it on our website www.rhein-sieg-forum.de.

Voluntary information is marked. You can request information, deletion or correction of this data at any time.

We will store the data you provide for the RSF newsletter for as long as you wish to receive the newsletter and beyond that only for as long as we need data to enforce or defend legal claims. You can revoke your consent for the future at any time, for example, by clicking on the unsubscribe link at the end of each e-mail newsletter. The legal basis for the data processing associated with this is Article 6(1)(a) of the GDPR in conjunction with your consent as well as Article 6(1)(b) of the GDPR.

3.2 Prize draws, promotions, etc.
To be able to participate in the respective promotion, we require your name, title, and means of contact (address, e-mail address and/or telephone number). If you register for prize draws, promotions or similar events, we will only store the data you provide for this purpose for the purpose of carrying out and processing (contacting) the respective competition, promotion or similar event.

Voluntary information is marked. You can request information, deletion or correction of this data at any time.

Six months after fulfilment of the purpose (completion of the prize draw, promotion, etc.), we will delete the data you have provided for this purpose in order to be able to answer any enquiries later. The legal basis for the data processing associated with this is Article 6(1)(a) of the GDPR in conjunction with your consent, Article 6(1)(b) of the GDPR as well as Article 6(1)(f) of the GDPR on the basis of our own and third-party marketing purposes or for customer retention.

3.3 Customer serviceTo enable our customer service to respond to your questions or other requests, we need your name, title and a means of contact (address, e-mail address and/or telephone number). If you contact us with queries or concerns, this personal data will only be used to answer your queries or fulfil your requests.

Voluntary information is marked. You can request information, deletion or correction of this data at any time.

We will only store the data you provide for as long as it takes to answer or fulfil your request. Beyond that, we only store it as long as there is a legal obligation to do so, or we need your data to enforce or defend legal claims. The legal basis for the data processing associated with this is Article 6(1)(b) of the GDPR, i.e. the processing of your data is necessary for the fulfilment of the agreement on answering your questions or concerns.

3.4 Table reservations
When you reserve a table for an event, we need your name, title and a means of contact (address, e-mail address and/or telephone number). This personal data is ultimately used to fulfil your request. In the case of a table reservation, we need your data for registration, checking, table marking and billing of ordered drinks and/or food.

Voluntary information is marked. You can request information, deletion or correction of this data at any time.

We will only store the data you provide for as long as it takes to fulfil your request. Beyond that, we only store it as long as there is a legal obligation to do so or as long as we need your data to enforce or defend legal claims. The legal basis for the data processing associated with this is Article 6(1)(b) of the GDPR, i.e. the processing of your data is necessary for the fulfilment of the agreement on answering your questions or concerns.

3.5 RSF complimentary WiFi
If you would like to use our free WiFi in the RHEIN SIEG FORUM, the separate data protection declaration given applies. Please note that personal data is collected in order to enable you to use the WiFi.

3.6 RSF Video Surveillance
We operate an adequately marked video surveillance system in the RHEIN SIEG FORUM. The cameras only record the area of the stage in the large hall and only record images as well as the date and time of the recordings; there is no sound recording.

The video recordings are not stored. The legal basis for the data processing associated with this is Article 6(1)(f) of the GDPR. The personal data collected is stored on the basis of our legitimate interest, namely to protect your safety, the safety of our employees, our contractual obligations towards our tenants and our property, and the prevention and investigation of criminal offences (obtaining evidence, securing evidence).

3.7 RSF Photographs
By purchasing a ticket or registering for an event at the RHEIN SIEG FORUM and attending the event, you give your consent to the processing of photo data relating to you. These can be used by us to advertise the event in print media, in the municipal e-mail newsletter "Siegburg aktuell" as well as on the website www.rhein-sieg-forum.de and the fanpages www.facebook.com/rheinsiegforum and www.instagram.com/rhein_sieg_forum.

You can revoke your consent to the processing of the photos at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The legal basis for the data processing associated with this is Article 6(1)(a) of the GDPR in conjunction with your consent as well as Article 6(1)(f) of the GDPR on the basis of our own and third-party marketing purposes or for customer retention.

4.Explanation of the various legal bases
4.1 Based on your consent, Article 6(1)(a) of the GDPR
If you have given us your consent to process your data, the processing will only be carried out in accordance with the purposes and to the extent agreed in the respective declaration of consent.

Your given consent can be revoked at any time with effect for the future in writing by e-mail or letter to our contact address listed under point 1. The revocation of consent does not affect the lawfulness of the processing of your data carried out on the basis of your consent until revocation.

4.2 For the fulfilment of contractual obligations, Article 6(1)(b) of the GDPR
Your data is processed in order to fulfil our contractual obligations towards you.

4.3 For the fulfilment of legal obligations, Article 6(1)(c) of the GDPR
The processing of your data may be necessary due to legal obligations to which we are subject (in particular for the storage of business letters and contractual documents). Such obligations may result, for example, from the German Commercial Code (HGB), the German Fiscal Code (AO), the German Civil Code (BGB), etc.

4.4 For the protection of legitimate interests, Article 6(1)(f) of the GDPR
If it is necessary to protect our legal interests or those of a third party, we may process the following data:
• Your date of birth is processed, for example, to be able to clearly identify you to prevent confusion. For example, we can ensure that we have only recorded you once as a person in our database.
• We also have a legitimate interest in processing your data for our own and third-party marketing purposes, for customer loyalty or direct advertising as permitted by law.
• In addition, there is a legitimate interest in processing your data for administrative purposes within Stadtbetriebe Siegburg AöR and in the context of legal prosecution.
• Your data may also be processed when we deal with enquiries or concerns you have communicated to us.
•  In addition, we ask for your opinion on events attended in order to be able to constantly optimise our products and services, or to offer other customers a decision-making aid within the framework of the RSF service surveys.
• The processing of your MAC address for the RSF WIFI is carried out to provide this free service and the traceability of the user in the event of legal claims and for the investigation of criminal offences.
• We process the recordings of our video surveillance for the protection of your safety, the safety of our employees, our contractual obligations towards our tenants and our property, as well as for the prevention and investigation of criminal offences (procurement of evidence, preservation of evidence).

5. Who receives your data?
Your data will be transferred to the following recipients:

• Service providers used by us (as order processors), such as IT or payment service providers, suppliers and logistics companies, insofar as they require your data to fulfil their respective tasks. These service providers are contractually obliged to treat your data confidentially and process it only to the extent necessary to provide services.
• Within Stadtbetriebe Siegburg AöR, your data will be disclosed to those employees and offices that require it for the fulfilment of the respective contractual and legal obligations as well as our legitimate interests.
• If we are legally obliged to do so, we will also pass on your data to public bodies and authorities.

6. Are you obliged to provide data?
To use our services, you must provide the data required to carry out our contractual obligations towards you and for voluntary benefits and services. If you do not provide this necessary data, we will generally have to refuse the service you seek.

7. Is there any automated decision making, including profiling?We do not use automated decision-making pursuant to Article 22(1) or Article 22(4) of the GDPR to bring about a decision on the establishment and performance of business relationships or other decisions that would similarly significantly affect you.

However, based on the interests you indicated when you signed up for the RSF newsletter, we will send you information tailored to your interests.

8. What rights do you have in connection with the processing of personal data?
You have the right,

• if you have given your consent, to withdraw your consent at any time in accordance with Article 7(3) of the GDPR. This means that the processing of data based on this consent may no longer be continued in the future
• request information about your processed personal data in accordance with Article 15 of the GDPR. In particular, you may request information on (i) the purposes of processing, (ii) the category of personal data, (iii) the categories of recipients to whom your data have been or will be disclosed, (iv) the planned storage period or, if specific information on this is not possible, criteria for determining the storage period, (v) the existence of a right to rectification, (v) the existence of a right of rectification, erasure, restriction of processing or opposition, (vi) the existence of a right of appeal, (vii) the origin of your data, unless the organisations have collected it with an existing data commissioning agreement (viii) as well as about the possible existence of automated decision-making, including profiling, and, if applicable, meaningful information about its request meaningful information on the details thereof
• in accordance with Article 16 of the GDPR, to demand the correction of inaccurate or incomplete personal data stored about you without undue delay
• demand the deletion of your stored personal data in accordance with Article 17 of the GDPR. This does not apply if (i) processing is necessary for the exercise of the right to freedom of expression and information, (ii) compliance with a legal obligation to which the controller is subject, (iii) for reasons of public interest, (iv) for the establishment, exercise or defence of legal claims or (v) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the erasure of the data is likely to render impossible or seriously prejudice the purposes of such processing, the further storage of the data is necessary
• to request the restriction of the processing of your personal data in accordance with Article 18 of the GDPR under the conditions specified therein
• in accordance with Article 20 of the GDPR, under the conditions specified therein, to receive your personal data that you have provided to us in a structured, common and machine-readable format, or to request that it be transferred to another controller, and to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR, without prejudice to any other administrative or judicial remedy.

To exercise any of the rights mentioned above, please contact us in writing (by letter or e-mail) at the contact addresses provided.


9. What supervisory authority is responsible for dealing with us?

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: + 49 211 – 38424-0
Fax: +49 211 – 38