Service:
Privacy Policy

Welcome to our website. Below we would like to explain to you which personal data we process, in what way we process this personal data, and what rights you have with regard to this processing.

Controller for Data Processing

The controller for data processing is

ShowSlot Touring GmbH
Hanauer Landstraße 114 – 116
60314 Frankfurt am Main, Germany

We have appointed a data protection officer for our company. You can reach our data protection officer at the postal address given above, as well as at:

Email: datenschutz@showslot.com

Your Rights Regarding Data Processing Carried Out by Us

We are happy to inform you whether and which personal data of yours we process and for what purposes (Art. 15 GDPR). In addition, under the respective statutory requirements, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR). Under the statutory requirements, you have the right to object to processing (Art. 21 GDPR). To exercise the above rights, please contact our data protection officer.

If our data processing is based on your consent within the meaning of Art. 6 (1)(a) GDPR, you may withdraw this consent at any time, freely and without giving reasons (Art. 7 (3) GDPR). Withdrawing consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.

Exercising your rights as described above is free of charge for you.

Notwithstanding these rights and the possibility of pursuing any other administrative or judicial remedy, you always have the option of lodging a complaint with a supervisory authority. The supervisory authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden, Germany

Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

Data Security

We have taken extensive technical and organisational measures to protect your personal data against manipulation, loss, destruction, or access by unauthorised third parties.

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

If, after concluding a contract for a paid service, we ask you to provide us with your payment details (e.g. account number for direct debit), this data is required for payment processing. Payment transactions using common means of payment (credit card, direct debit) are carried out exclusively via an encrypted SSL or TLS connection.

Automated Decision-Making (Including Profiling)

We do not process your personal data as part of an automated decision-making procedure (including profiling), nor do we intend to carry out such processing.

Recipients of Data

In the following cases, we transfer your data to recipients or third parties:

Insofar as we use processors to fulfil the purposes stated by us, we transfer personal data to these processors. The legal basis in this case is Art. 28 GDPR. If, in the course of such processing, a data transfer to countries outside the EEA takes place, we have taken measures in accordance with the requirements of Art. 44 GDPR to ensure the lawfulness of the data transfer.

Insofar as this is necessary to fulfil our contractual obligations, e.g. in particular to a commissioned bank for invoicing or as part of processing payments via a payment service provider. The legal basis in this case is Art. 6 (1)(b) GDPR.

Insofar as this is necessary to fulfil a legal obligation to which we are subject, e.g. in particular to authorised law enforcement and tax authorities. The legal basis in this case is Art. 6 (1)(c) GDPR.

Insofar as this is necessary to safeguard legitimate interests. Our legitimate interests include, in particular, the proper conduct of our business operations (such as in the context of disclosing data to the postal service for mail delivery) and the assertion and defence of our legal claims (such as in the context of disclosing data to our legal advisors). The legal basis in this case is Art. 6 (1)(f) GDPR.

General Information on Data Deletion

Below, we inform you of the purposes and legal bases of the processing operations we carry out as controller, as well as when we delete stored data. Unless otherwise stated, we store the data you provide when contacting us until the purpose for the processing or storage no longer applies. Once the purpose no longer applies, the data is deleted, unless you have consented to longer retention pursuant to Art. 6 (1)(a) GDPR.

Storage beyond the point at which the purpose ceases to apply is permissible if justified by our legitimate interests; this is the case, for example, if we need the data to assert or defend our legal claims. The legal basis in these cases is Art. 6 (1)(f) GDPR. Statutory retention obligations likewise always remain unaffected, for instance with regard to retention and documentation obligations under tax and commercial law (from the German Commercial Code, Criminal Code or Fiscal Code); the legal basis for longer retention for statutory reasons is Art. 6 (1)(c) GDPR.

Processing of Data You Actively Provide to Us

Use of the Website

You can use the website without actively providing us with your personal data. Where you actively provide us with your personal data (for example, name, address, or email addresses), this is always done on a voluntary basis. Please note that certain personal data is processed when you visit the website without you actively providing it. We explain below, under sections 8 et seq., what this data is and how it is processed.

Purchasing Tickets: CTS EVENTIM

You can purchase tickets to our events via our website. When you select tickets on our website and start the purchase process, the ticket shop opens.

The ticket shop is operated by our partner CTS EVENTIM AG & Co. KGaA, Contrescarpe 75-A, D-28195 Bremen, Germany; email: kundenservice@eventim.de, phone: +49 (0) 421 – 20 31 55 11 ("CTS Eventim"). We have concluded a data processing agreement with CTS Eventim as our service provider pursuant to Art. 28 GDPR.

When you place an order via our website, we collect the following data:

Title, first name, last name,
a valid email address,
address,
IP address,
phone number (landline and/or mobile)

This data is collected for the following purposes:

to be able to identify you as our customer;
to be able to process, fulfil and handle your order;
to correspond with you;
for invoicing purposes;
to handle any liability claims that may arise, as well as to assert any claims against you;
to ensure the technical administration of our website;
to manage our customer data.

Data processing is carried out for the initiation, execution and handling of your order. The legal basis is Art. 6 (1)(b) GDPR. The personal data collected by us for processing your order is stored until the statutory retention period expires and is then deleted.

Please note that, in its web shop, EVENTIM may under certain circumstances also process your personal data on its own responsibility, in particular also on the basis of a separate contractual relationship existing between you and EVENTIM. Please refer to EVENTIM's privacy policy, which you can find here, for details on which of your personal data EVENTIM processes on its own responsibility and for what purposes, to whom EVENTIM discloses your data in this context, and how EVENTIM ensures the protection of your personal data.

Contacting Us

When you contact us with an enquiry, we process the personal data provided in your enquiry in order to process, manage and respond to it. You can use a contact form we may provide for this purpose. If you provide us with personal data in your enquiry, such as your name and email address, we will use this to process, manage and respond to your enquiry. The same applies if we work together with you as a business partner and, in doing so, process personal data of you or your employees.

We also use the Zendesk service to handle contact enquiries. Zendesk is a service provided by Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA. We have concluded a data processing agreement with Zendesk as our service provider pursuant to Art. 28 GDPR. We have configured the service so that, according to Zendesk's assurance, data is processed only within the territory of the European Union. In addition, Zendesk participates in the EU/US Data Privacy Framework. Any data transfers to the USA that may be associated with our use of Zendesk are lawful pursuant to the European Union's adequacy decision under Art. 45 GDPR. Further information on this, as well as Zendesk's privacy policy, can be found here.

The legal basis for this processing of your data is Art. 6 (1)(b) GDPR, insofar as it concerns the initiation of a contract or customer support within an existing contractual relationship. If you give us your express consent, for example in a contact form, the legal basis is Art. 6 (1)(a) GDPR. You may withdraw your consent at any time, free of charge and without giving reasons. If neither of the two aforementioned cases applies, the legal basis is Art. 6 (1)(f) GDPR, namely our legitimate interest in communicating with our customers and business partners as they wish.

We store the data you provide when contacting us until the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Statutory retention periods remain unaffected.

So that we can stay in touch with you, we offer you the option of subscribing to our newsletter. In order to be able to send you the newsletter, we need to ask you to provide a selection of personal data, namely your first name, last name and email address. Only in this way can we send you the newsletter correctly.

We use the Brevo service to send the newsletter. Brevo is a service provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. We have concluded a data processing agreement with Brevo as our service provider pursuant to Art. 28 GDPR. Brevo's privacy policy can be found here.

The legal basis for processing this data is your express consent pursuant to Art. 6 (1)(a) GDPR. You always give this consent voluntarily when subscribing to the newsletter. We will store this data until you withdraw your consent. You may withdraw your consent at any time, free of charge and without giving reasons; a corresponding link can be found in every newsletter message. If necessary, your email address will be stored on a blacklist after unsubscribing to prevent future mailings. This storage is based on our legitimate interest in complying with statutory requirements pursuant to Art. 6 (1)(f) GDPR. Data from the blacklist is used exclusively for this purpose and is not merged with other data.

In addition to the aforementioned processing of the information you actively provide when subscribing to the newsletter, Brevo also collects the following personal data using cookies and other tracking methods: opening behaviour (whether a newsletter was opened), click behaviour (which links were clicked, and how often), conversion rate (whether clicking on certain links led to actions or other predefined goals being achieved). Brevo also allows newsletter recipients to be segmented into categories, for example by age, gender, or geographic location. This clustering helps us tailor content specifically to the interests of the respective target group.

The legal basis for this processing is also your express consent pursuant to Art. 6 (1)(a) GDPR. You always give this consent voluntarily when subscribing to the newsletter. We will store this data until you withdraw your consent. You may withdraw your consent at any time, free of charge and without giving reasons; a corresponding link can be found in every newsletter message.

Safeguarding Legitimate Interests and Fulfilling Legal Obligations

We may use the personal data you provide to advertise our goods and services, unless the law expressly requires the recipient's consent.

We process personal data as part of the proper conduct of our business operations (such as storing B2B contacts, performing and processing contracts, and communicating with our business partners, banks and advisors). The legal basis in this case is either the performance of contracts concluded with the data subjects, Art. 6 (1)(b) GDPR, or our legitimate interest in the proper conduct of our business operations, Art. 6 (1)(f) GDPR.

Where necessary, we also process your data to safeguard our legal interests, e.g. when disclosing your data to debt collection agencies or law firms, courts and authorities. The legal basis is the safeguarding of our legitimate interests pursuant to Art. 6 (1)(f) GDPR, namely the assertion, exercise or defence of legal claims.

Furthermore, we process your data to fulfil our retention obligations for business records under commercial and tax law, and disclose your data to third parties where we are legally obliged to do so, e.g. to the tax office. The legal basis is Art. 6 (1)(c) GDPR (fulfilment of legal obligations).

If you give your consent, for example for email advertising, your consent - which may be withdrawn at any time - is the legal basis pursuant to Art. 6 (1)(a) GDPR. Pursuant to § 7 (3) UWG (German Act Against Unfair Competition), we may, by way of exception, also send you advertising by email without your consent if you provided your email address in connection with an order and we advertise our own similar goods or services. The legal basis for the data processing is Art. 6 (1)(f) GDPR. The legitimate interest we pursue is direct advertising. You may object to this form of email advertising at any time; we inform you of this right of objection both when you provide your email address and in every advertising email.

We delete this data if you lodge a valid objection within the meaning of Art. 21 GDPR or withdraw your consent within the meaning of Art. 7 (3) GDPR. Mandatory statutory provisions - in particular retention periods - remain unaffected.

Competitions

From time to time, we hold competitions. If you take part in a competition, we collect data required to run the competition. This is usually an individual competition entry (e.g. a comment, a photo, or the answers to questions), as well as name and contact details, without which we cannot run the competition or send out prizes.

Unless stated otherwise as part of the competition's terms, the personal data collected in connection with participation and/or prize fulfilment is processed solely for the purpose of running and handling the respective competition. For this purpose, data may also be transferred to cooperation partners, service providers commissioned to run the competition, or providers involved in prize fulfilment.

The legal basis for this processing is Art. 6 (1)(b) GDPR, namely the preparation and performance of the contract regarding participation in the competition. The data is deleted once the competition has been settled and the statutory retention periods have expired.

Some competitions also provide for us to publish submitted photos or videos, for example as part of announcing the winner or for a vote on our website. We process this data in accordance with the purposes stated in the terms of the respective competition, such as for displaying photos for a vote on our website.

The legal basis for the data processing is your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time. Please note, however, that further participation in the competition is not possible following a withdrawal.

Job Applications

We are always pleased when people are interested in joining ShowSlot. For this reason, we publish job postings, but we are also happy to receive speculative applications.

We process the data provided to us as part of an application for the purpose of evaluating the application and, where there is mutual interest, conducting an application process. In doing so, we will forward your information within the ShowSlot group of companies and to the departments involved.

The legal basis for the processing of your data described above is Art. 6 (1)(b) GDPR, insofar as it concerns the initiation of a contract or support within an existing contractual relationship. Otherwise, the legal basis is Art. 6 (1)(f) GDPR, namely our legitimate interest in communicating as desired with everyone interested in joining us.

Processing of Data from Your Devices: "Cookies" and Similar Identifiers

"Consent Manager"

We use technical tools on our website for various services and functions that are stored on your device. These are, in particular, cookies, but also similar so-called identifiers, such as tracking pixels or web beacons (all such technical tools are collectively referred to as "cookies" in this document). We explain in this privacy policy which services and functions use cookies. Most of the cookies we use are so-called "session cookies". They are automatically deleted once your visit ends. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

When you access our offering, our consent manager is displayed to you immediately. The consent manager will ask whether you consent to the use of cookies. You can call up the consent manager again at any time via the "Cookie Settings" button and change any settings previously made.

Technically Necessary Cookies

Our website uses cookies for technically necessary functions: the technical structure of the website requires us to use certain cookies. Without these technologies, our website could not be displayed fully and correctly, or support functions could not be enabled. We explain which cookies these are in this privacy policy and also in the consent manager. You cannot opt out of these cookies if you wish to use our website. The legal basis for the use of such cookies is § 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The legal basis for the processing of personal data carried out as part of the use of such cookies is Art. 6 (1)(f) GDPR, namely our legitimate interest in being able to offer you a functional and operational website.

Other Cookies

In addition, we use optional cookies for which we require your consent: we only use these cookies after receiving your consent via the consent manager. The functions are only activated if you consent, and may in particular serve to allow us to analyse and improve visits to our website, make it easier for you to use across different browsers or devices, recognise you on a return visit, or serve advertising (possibly also to tailor advertising to your interests, measure the effectiveness of ads, or display interest-based advertising). We explain which cookies these are in this privacy policy. The legal basis for the use of such cookies is your consent pursuant to § 25 (1) TDDDG. We explain the legal basis for the processing carried out as part of the use of such cookies below, in connection with the explanation of the respective functions that use cookies.

Processing of Data When Visiting the Website: Data Processing as Part of Technical Provision

Log Files

When you visit our website and view its content, information is transmitted from your browser to our server, including the following personal data:

Browser type and browser version
operating system used
referrer URL
hostname of the accessing computer
time of the server request
IP address

This information is temporarily stored in what is known as a log file. Log files are automatically deleted within 24 hours, unless a technical and/or security-relevant event and the need to analyse it require longer retention. This data is not merged with other data sources.

We process this data in order to provide and display our website and the content it contains to you, and to protect against brute-force attacks. The legal basis for this processing is Art. 6 (1)(f) GDPR. Our legitimate interest in the processing arises from the fact that the processing is technically necessary to display our website to you and to ensure the stability and security of the website. The data is deleted as soon as it is no longer required for the purpose described. You may object to this legitimate interest at any time.

Content Delivery Networks

We use various so-called content delivery networks (CDNs) to deliver content, such as those provided by CloudFlare, BunnyNet and BrightCove (ZenCode). Technically, the transfer of information between your browser and our website is routed via the content delivery network's network in order to ensure reliable and fast delivery of content. In doing so, the providers are able to analyse traffic between users and our website, for example to detect and defend against attacks on our services. In addition, cookies may be stored on your device for optimisation and analysis purposes, and statistical data on visits to our websites may be collected. Access data includes: the name of the page/file accessed, the date and time of access, the amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider. Log data is used for statistical analysis for the purpose of operating, securing and optimising the offering.

The legal basis for the processing is Art. 6 (1)(f) GDPR, namely our legitimate interest in the protection and security of our systems. Where necessary, we have concluded a data processing agreement with the CDN providers pursuant to Art. 28 GDPR. Where and insofar as the CDN providers are based in the USA, the CDN providers participate in the EU/US Data Privacy Framework. Any data transfers to the USA that may be associated with our use of the CDN are lawful pursuant to the European Union's adequacy decision under Art. 45 GDPR.

Our "Consent Manager": CookieBot

As explained in section 8 above, we offer you the option, on our website, of configuring and controlling the use of cookies at any time using our consent manager. However, our consent manager must communicate with your device, i.e. know its IP address, in order to function correctly. This is processed in anonymised form. The consent manager must also store your consent or refusal of consent, as well as the date and time of consent and browser information, as otherwise it could not fulfil its purpose.

We use the consent manager CookieBot on our website. CookieBot is a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. We have concluded a data processing agreement with CookieBot as our service provider pursuant to Art. 28 GDPR. Processing by CookieBot takes place exclusively within the European Union. CookieBot's privacy policy can be found here.

When you enter our website, a consent manager cookie is stored in your browser, in which the consents you have given, or their withdrawal, are stored. This data is not passed on to the consent manager provider. This cookie has a lifespan of 12 months. This means that your browser remembers the settings you made in the consent manager for this period; the cookie is deleted once this period expires.

The legal basis for the use of this cookie is § 25 (2) No. 2 TDDDG. The legal basis for the data processing carried out as part of the use of the consent manager is our legitimate interest within the meaning of Art. 6 (1)(f) GDPR in being able to offer you a functional and operational website and in enabling you to control the cookies used on it. The data is deleted at the latest once the cookie's lifespan expires. You may object to this legitimate interest at any time.

Google Tag Manager

We use the Google Tag Manager service on our website. Google Tag Manager is an auxiliary service that ensures other services are loaded on the website. Google Tag Manager itself does not access this data and does not process it, but it enables the functioning of other services, which may in turn process data. We explain what data these services process in the relevant section of this privacy policy.

The provider of Google Tag Manager is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC. We have concluded a data processing agreement with Google Ireland Ltd. as our service provider pursuant to Art. 28 GDPR. Further information on Google Tag Manager, as well as Google's privacy policy, can be found here.

Processing of Data When Visiting the Website: Web Analytics

Google Analytics

We want to know how users use our website and how we can improve it. To analyse user behaviour, we use the Google Analytics service on our website. The service sets and uses cookies and processes the IP address used by your device.

"Google" is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC. We have concluded a data processing agreement with Google Ireland Ltd. as our service provider pursuant to Art. 28 GDPR. Further information on Google Analytics, as well as Google's privacy policy, can be found here.

We use Google Analytics with the "User-ID feature" disabled. This means that, according to Google, user behaviour is not collected or assigned to a pseudonymised user ID. Also, according to Google, the IP address used by your device is shortened and anonymised by Google immediately and while still within the European Union. According to Google, non-anonymised IP addresses only reach the USA in exceptional cases. According to Google, the IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of "events". Events can include:

Page views
First visit to the website
Session start
Pages visited
Your "click path", interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
internal search queries
interaction with videos
file downloads
ads viewed / clicked
language setting

The following is also recorded:

Your approximate location (region)
Date and time of the visit
Your IP address (in shortened form)
technical information about your browser and the devices you use (e.g. language setting, screen resolution)
Your internet service provider
the referrer URL (which website/advertising medium you came to this website from)

The information generated by cookies about your use of this website, which as a rule cannot be attributed to any individual due to the anonymisation of the IP address, is generally transmitted to and stored on a Google server in the USA. On our behalf, Google will use this information to evaluate use of the website, compile reports on website activity, and provide other services relating to website usage and internet usage to the website operator. The data we send that is linked to cookies is automatically deleted after two months. The maximum lifespan of Google Analytics cookies is two years. Data whose retention period has been reached is deleted automatically once a month.

This website uses the "demographic characteristics" feature of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from Google's interest-based advertising as well as visitor data from third-party providers. This data cannot be attributed to any specific person. You can disable this feature at any time via the ad settings in your Google account.

The legal basis for the use of this cookie is your consent pursuant to § 25 (2) No. 2 TDDDG. The legal basis for the data processing carried out in this context is your consent pursuant to Art. 6 (1)(a) GDPR. You give us both via our consent manager (see section 8 above), through which you may withdraw your consent at any time. You can also generally prevent the processing described by adjusting the settings in your browser software. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA that may be associated with our use of Google services are lawful pursuant to the European Union's adequacy decision under Art. 45 (1)(a) GDPR.

Google Ads Conversion

We want to know how effective advertisements on other websites and in search engines are. For this purpose, we use the Google Ads Conversion service on our website. The service sets and uses cookies and processes the IP address used by your device.

"Google" is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC. We have concluded a data processing agreement with Google Ireland Ltd. as our service provider pursuant to Art. 28 GDPR. Further information on Google Ads Conversion, as well as Google's privacy policy, can be found here.

When we place advertisements on other websites and search engines, these advertisements are displayed there via a so-called "ad server". If you reach our website by clicking on such an advertisement from the Google network or Google ad server, Google Ads Conversion sets a cookie on your device ("conversion cookie"). These cookies expire after 30 days. As long as the cookie is active, we can recognise that a user has clicked on the Google Ads advertisement. Using so-called "view-through conversions", we can determine how many users saw our ad without clicking on it and later completed a purchase on our website. This allows us to understand user behaviour and their response to our advertisements. Each Google Ads customer receives a different cookie. The information obtained using the cookies is used solely to generate conversion statistics for us as a Google Ads customer. Among other things, this tells us the total number of users who clicked on one of our ads and were forwarded to one of our pages tagged with a conversion tracking tag.

The legal basis for the processing described is your consent pursuant to Art. 6 (1)(a) GDPR. You give us this via our consent manager (see section 8 above), through which you may withdraw your consent at any time. You can also generally prevent the processing described by adjusting the settings in your browser software. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA that may be associated with our use of Google services are lawful pursuant to the European Union's adequacy decision under Art. 45 GDPR.

Using Google's general evaluation tools, we can only determine how many users, broken down by general criteria not linked to personal data, have seen our advertising. Please note, however, that Google may assign this data to other profiles created on its own responsibility, over which we have no influence. If you do not or no longer agree with this, please do not give your consent, or withdraw your consent in the consent manager.

Google Remarketing

We would like to try to connect with potential customers and show them advertising that matches their interests. For this purpose, we use the Google Remarketing service. The service sets and uses cookies and processes the IP address used by your device.

"Google" is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC. We have concluded a data processing agreement with Google Ireland Ltd. as our service provider pursuant to Art. 28 GDPR. Further information on Google Remarketing, as well as Google's privacy policy, can be found here.

Google Remarketing enables companies to display advertising to internet users who have previously shown interest in the company's products on its website, or in similar products from other providers. To do this, Google Remarketing sets a cookie on the user's device, which stores which of our offerings the user has viewed on our website. This cookie can be recognised within the Google advertising network. If it is recognised, Google can display advertising to the user that corresponds to the offering (or the interests derived from it) that the user viewed on our website.

Meta Pixel

We want to know how effective our activities (posts, advertisements) are on the social media networks Facebook and Instagram. For this purpose, we use the Meta Pixel service on our website. The service sets and uses cookies and processes the IP address used by your device.

The Facebook Pixel service is offered by Meta Platforms Inc., 1601 Willow Road, 94025 Menlo Park, California, USA. We have concluded a data processing agreement with Meta as our service provider pursuant to Art. 28 GDPR. Further information on Facebook Pixel, as well as Meta's privacy policy, can be found here.

The Meta Pixel service enables companies to link the behaviour of users on their own website with any existing profiles of these users on social media networks. With this service, we can track conversions, optimise advertisements, and create target audiences for our advertising on social media networks. To do this, Meta sets a cookie on the user's device, which stores which of our offerings the user has viewed on our website. When you visit our pages, the tracking pixel establishes a direct connection between your browser and the Meta server. This allows Meta to receive, among other things, information from your browser that our page was accessed from your device. If you are a Facebook user, Meta can use this to link the visit to our pages to your user account; the cookie can be recognised within the Meta network. If it is recognised, Meta can display personalised advertising to the user on its social media networks that corresponds to the offering (or the interests derived from it) that the user viewed on our website.

The legal basis for the processing described is your consent pursuant to Art. 6 (1)(a) GDPR. You give us this via our consent manager (see section 8 above), through which you may withdraw your consent at any time. You can also generally prevent the processing described by adjusting the settings in your browser software. Meta participates in the EU/US Data Privacy Framework. Any data transfers to the USA that may be associated with our use of Meta services are lawful pursuant to the European Union's adequacy decision under Art. 45 GDPR.

Microsoft Clarity

We want to know whether our site works well for our users and how users interact with our website. To identify usability issues, we use the Microsoft Clarity service on our website. The service sets and uses cookies and processes the IP address used by your device.

The Microsoft Clarity service is offered by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft as our service provider pursuant to Art. 28 GDPR. Further information on the Microsoft Clarity service can be found here; Microsoft's privacy policy can be found here.

The Microsoft Clarity service creates a log of mouse movements and clicks made when visiting the website, with the aim of deriving potential improvements for the website. The information collected is transmitted to Microsoft in anonymised form and evaluated there on our behalf.

TikTok Pixel

We use the TikTok Pixel service on our offerings, a service of the social network "TikTok", which is offered by TikTok Technology Ltd, The Sorting Office, Ropemaker Place, Dublin D02 X525, Ireland ("TikTok"). Using the TikTok Pixel, we can specifically target users of our website as part of remarketing measures when they visit the social network "TikTok".

A TikTok Pixel is set if you give your consent to this via our "consent manager" (see section 8 above). The TikTok Pixel establishes a connection to TikTok's servers and receives information from there about whether, and if so which, specific parts of our website you accessed or whether you clicked on one of our advertisements. TikTok then uses this data to display targeted and personalised advertising to its users and to create interest-based user profiles. The data collected from users is anonymous to us and is only used to measure the effectiveness of the advertisements displayed.

TikTok also receives your IP address and further information about the user's device, such as the marketing identifier, the device you use, the website visited, and the time. TikTok uses this data to identify users of our website and link their actions to a "TikTok" user account. TikTok processes this data on its own responsibility from the point of transmission onwards. We have no influence on further processing by TikTok. TikTok's privacy policy can be found here.

Joint controllership: We are jointly responsible with TikTok Technology Limited, Ireland, for the collection and transmission of data as part of this process. This applies to the following purposes:

Measurement and insight reporting
Collection and transmission of developer data and/or event data

The following processing operations are therefore not covered by joint processing; they are the sole responsibility of TikTok:

Determining and improving the relevance of advertisements for individuals.
Optimising ad delivery by TikTok.
Improving user safety, research and development, in order to maintain and improve the integrity of TikTok's products and services.

For joint controllership, we have concluded an agreement with TikTok pursuant to Art. 26 GDPR, which can be found here.

This agreement sets out the respective responsibilities for fulfilling GDPR obligations with regard to joint controllership. Contact details for the responsible company as well as TikTok's data protection officer can be found here.

We have agreed with TikTok that TikTok can be used as a point of contact for exercising data subject rights. This does not, however, restrict the responsibility for data subject rights.

We will carry out processing under our responsibility exclusively within the European Union or the European Economic Area. TikTok states that it processes personal data exclusively within the European Union or the European Economic Area. Should transfers to third countries nevertheless occur, TikTok states that it has concluded appropriate safeguards in the form of standard contractual clauses pursuant to Art. 46 GDPR.

Pinterest Pixel

We use the Pinterest Pixel service on our offerings, a service of the social network "Pinterest", which is offered by Pinterest Europe Limited, Waterloo Exchange, 3rd Floor Waterloo Road, Dublin 4, Ireland. Using the Pinterest Pixel, we can specifically target users of our website as part of remarketing measures when they visit the social network "Pinterest".

A Pinterest Pixel is set if you give your consent to this via our "consent manager" (see section 8 above). The Pinterest Pixel establishes a connection to Pinterest's servers and receives information from there about whether, and if so which, specific parts of our website you accessed or whether you clicked on one of our advertisements. Pinterest then uses this data to display targeted and personalised advertising to its users and to create interest-based user profiles. The data collected from users by Pinterest is anonymous to us and is only used to measure the effectiveness of the advertisements displayed.

Pinterest also receives your IP address and further information about the user's device, such as the marketing identifier, the device you use, the website visited, and the time. Pinterest uses this data to identify users of our website and link their actions to a "Pinterest" user account. Pinterest processes this data on its own responsibility from the point of transmission onwards. We have no influence on further processing by Pinterest. Pinterest's privacy policy can be found here.

The legal basis for the processing described is your consent pursuant to Art. 6 (1)(a) GDPR or § 25 (2) TDDDG. You give us this via our consent manager (see section 8 above), through which you may withdraw your consent at any time. You can also generally prevent the processing described by adjusting the settings in your browser software. We will carry out processing under our responsibility exclusively within the European Union or the European Economic Area. Pinterest states that it processes personal data exclusively within the European Union or the European Economic Area.

uptain

We use the uptain service on our offerings. Uptain is offered by uptain GmbH, Obergrünewalder Str. 8A, 42103 Wuppertal, Germany ("Uptain"), which allows us to analyse your use of the website and improve customer engagement (e.g. through a dialogue window). For this purpose, we collect information about your usage behaviour, i.e. cursor movement, dwell time, links clicked, and abandoned purchase processes. We use this information to approach you - if you consent - with offers attractive to you. Identifiers may be used in the process.

We have concluded a data processing agreement with Uptain as our service provider pursuant to Art. 28 GDPR. Further information on Uptain, as well as Uptain's privacy policy, can be found here.

Privacy Notices for Our Social Media Presences

Under current law, we are joint controllers, together with the respective provider of the social network, with regard to our presences on social networks. We have therefore entered into agreements pursuant to Art. 26 GDPR with the respective networks.

Joint Controllers

For our social media presences on Facebook and Instagram, ShowSlot Touring GmbH (contact details see section 1 above) is jointly responsible with: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta").

For our social media presence on YouTube, ShowSlot Touring GmbH (contact details see section 1 above) is jointly responsible with: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google")

For our social media presence on Pinterest, ShowSlot Touring GmbH (contact details see section 1 above) is jointly responsible with: Pinterest Europe Limited, Waterloo Exchange, 3rd Floor Waterloo Road, Dublin 4, Ireland ("Pinterest").

For our social media presence on TikTok, ShowSlot Touring GmbH (contact details see section 1 above) is jointly responsible with: TikTok Technology Ltd, The Sorting Office, Ropemaker Place, Dublin D02 X525, Ireland ("TikTok").

For our social media presence on LinkedIn, ShowSlot Touring GmbH (contact details see section 1 above) is jointly responsible with: LinkedIn Ireland Unlimited Co., Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).

Applicability of the Above Information

With regard to the responsibility we assume, the information set out under sections 1 to 7 above also applies to our social media presences on Facebook and Instagram.

Purpose, Categories of Personal Data, and Legal Basis for the Data Processing

by ShowSlot Touring GmbH

We use social media for public relations and to market our services and products. For this purpose, we process the data entered by users of the social networks themselves (e.g. username, account content).

The legal basis for this processing is Art. 6 (1)(f) GDPR. Our legitimate interest in the processing arises from the fact that we wish to present our company and our products to interested people as part of our public relations and marketing activities on social networks. We do not ourselves pass on any of this personal data to third parties. The data is deleted, within the possibilities made available to us by the social networks, as soon as it is no longer required for the purpose described. You may object to this legitimate interest at any time.

by the Social Media Network

Please refer to the data usage policies and privacy policies of the following providers for information on which of your personal data is processed when you visit the social media networks and our social media presence on these networks, on what legal basis this is done, whether this data is also processed outside the European Union, and how long this data is stored by the operator of the respective social media network:

Meta, which can be found here. You will also find information on how to get in touch there.
Google, which can be found here. You will also find information on how to get in touch there.
Pinterest, which can be found here. You will also find information on how to get in touch there.
TikTok, which can be found here. You will also find information on how to get in touch there.
LinkedIn, which can be found here. You will also find information on how to get in touch there.

Please note that each of the named social media networks collects and processes a range of information when you visit our social media presences on these networks, such as the IP address of the device you use. This information is used to provide us with statistical information about how our social media presence is used. Since this information is provided to us in anonymised form, we are unable to trace it back to individuals, and for us this data does not constitute personal data.

How the operators of the named social media networks use the data from visits to our social media presences on these networks for their own purposes, to what extent activities on our social media presences are attributed to individual users, how long this data is stored, and whether data from a visit to our social media presences is passed on to third parties, is not conclusively or clearly stated by any of the operators of the named social media networks and is therefore not known to us.

In the agreements on joint controllership concluded with us pursuant to Art. 26 GDPR, each operator of the respective social media network acknowledges joint responsibility under data protection law and assumes essential data protection obligations regarding informing data subjects, data security, and reporting data breaches. Under the agreement, the operators of the social media networks are the primary point of contact for exercising data subject rights. Only the operators have direct access to the necessary information and can provide information or take other measures.