The data controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

RG Company Events

Address: Birkenstraße 17, 30171 Hanover

Telephone: +49 157 37216952

Email: contact@rg-company.de

Further information about the company can be found in the legal notice on this website.

The protection of your personal data is of great importance to us. We process your personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other relevant legal provisions.

This privacy policy informs you about what personal data we process when you use our website and in connection with our events, for what purposes this is done, and what rights you have as a data subject.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, email address or the IP address of your device.

Where we process personal data, we do so exclusively on the basis of statutory provisions.

Depending on the nature of the processing, we rely in particular on the following legal bases:

• Article 6(1)(a) of the GDPR – Consent

• Article 6(1)(b) of the GDPR – Performance of a contract or implementation of pre-contractual measures

• Article 6(1)(c) of the GDPR – Compliance with legal obligations

• Article 6(1)(f) of the GDPR – Protection of legitimate interests

Where consent is required to access or store information on your device, this is also carried out on the basis of Section 25 of the Telecommunications and Digital Services Data Protection Act (TDDDG).

As a general rule, we only retain personal data for as long as is necessary for the respective purpose of processing.

Furthermore, we only retain personal data where statutory retention obligations apply or where claims may be asserted or defended.

Once the relevant processing purpose no longer applies and statutory retention periods have expired, the data in question will be deleted or blocked in accordance with legal requirements.

Our website is hosted by the following hosting provider:

Strato AG

Otto-Ostrowski-Straße 7, 10249 Berlin

When you visit our website, the hosting provider automatically processes technical information that is necessary for the operation and security of the website.

This includes, in particular:

• IP address

• Date and time of access

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• File requested

• HTTP status code

This processing is carried out on the basis of our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in ensuring the secure, stable and technically fault-free provision of our website.

We have a contract with our hosting provider regarding data processing on our behalf in accordance with Article 28 of the GDPR.

Further information can be found in Strato AG’s privacy policy.

When you visit our website, the web server automatically generates what are known as server log files.

These contain, in particular:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

• Pages accessed

• Hostname of the accessing computer

Processing is carried out solely to ensure the smooth operation of the website, for error analysis and to guarantee IT security.

This data is not combined with other data sources.

The legal basis for the processing is Article 6(1)(f) of the GDPR.

We implement appropriate technical and organisational security measures to protect your personal data.

Our website uses SSL/TLS encryption (HTTPS) to protect the transmission of confidential content against unauthorised access.

You can recognise an encrypted connection by the fact that the address bar of your browser begins with ‘https://’ and a padlock icon is displayed.

Despite all technical security measures, completely watertight security during data transmission over the internet cannot be guaranteed.

Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information.

Some cookies are technically necessary for the website to function properly. Other cookies are used to analyse how our website is used or to improve our online offering, and are only set with your consent.

When you visit our website for the first time, our cookie banner will inform you about the use of cookies, and you can manage or withdraw your consent on a case-by-case basis.

The legal bases for data processing are:

Article 6(1)(f) of the GDPR for technically necessary cookies,
Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG for cookies requiring consent.

We use the CookieYes service to manage the cookie consents you have given.

The provider is:

CookieYes Limited

3 Warren Yard, Wolverton Mill,
Milton Keynes MK12 5NW,
United Kingdom

CookieYes stores your cookie settings and your consents so that these can be taken into account during future visits and to fulfil statutory record-keeping obligations.

In particular, the following data may be processed:

• anonymised IP address

• time of consent

• consent status

• consent ID

• browser information

The legal basis for the processing is Article 6(1)(c) of the GDPR in conjunction with statutory record-keeping obligations, as well as Article 6(1)(f) of the GDPR.

Further information can be found in the CookieYes privacy policy.

When you use our contact form, we process the personal data you provide solely for the purpose of handling your enquiry.

This includes, in particular:

• Name

• Telephone number

• Email address

• Content of your message

The processing is carried out solely for the purpose of handling your enquiry and, where applicable, for the purpose of taking pre-contractual measures or fulfilling an existing contractual relationship.

The legal bases are Article 6(1)(b) of the GDPR and Article 6(1)(f) of the GDPR.

The data will be deleted as soon as your enquiry has been fully processed and there are no longer any statutory retention obligations.

If you contact us by email or telephone, we will process the personal data you provide solely for the purpose of dealing with your enquiry.

Depending on the content of your message, the following data in particular may be processed:

• Name

• Telephone number

• Email address

• Content of your enquiry

• any further information provided voluntarily

Processing is carried out on the basis of Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR.

Tickets are generally sold via external ticketing service providers or via the venue’s own ticketing system.

12.1 Ticket sales via Eventim

For certain events, the ticketing system of CTS EVENTIM AG & Co. KGaA is integrated into our website, or it is possible to book tickets via this system.

If you wish to purchase a ticket, your personal data will be processed directly by Eventim. This includes, in particular, order, payment and contact details.

The respective ticket provider is solely responsible for the processing of this data.

Eventim’s privacy policy applies in addition.
The legal basis for the integration of the ticket sales system is Article 6(1)(b) of the GDPR.

12.2 Ticket sales via the respective venue’s ticketing system

For individual events, tickets are sold via the ticketing system of the respective venue or concert hall.

By clicking the ‘Buy tickets’ button, you will leave our website and be redirected to the website of the relevant venue.

From this point onwards, the processing of personal data is carried out exclusively by the relevant operator of the ticketing system.

The privacy policy of the relevant venue applies.

RG Company Events does not currently offer a newsletter.

Should a newsletter be introduced in the future, visitors may voluntarily provide their email address to receive regular information about concerts, ticket sales launches, events, discount offers or other news from RG Company Events.

Registration takes place exclusively on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR.

Where required by law, the double opt-in procedure will be used for registration.

Consent given may be withdrawn at any time with future effect, for example via an unsubscribe link in the newsletter or by notifying the organiser.

Personal data will be used exclusively for sending the newsletter and will not be processed for any other purposes unless there is a legal basis for doing so.

As soon as a newsletter is offered, additional information regarding the mailing service provider used will be published in this privacy policy.

During our events, photographs, videos and audio recordings may be taken by RG Company Events or by persons commissioned by us (e.g. photographers, videographers, agencies or members of the press).

Purpose of processing

The recordings are used in particular for:

• reporting on the respective event,

• public relations,

• documenting our events,

• promoting future events,

• presenting our company, and

• providing information about our range of events.

Publication of the recordings

The recordings made may be published in particular:

• on our website,

• on our social media channels (e.g. Instagram, Facebook, TikTok and YouTube),

• in press releases,

• in print media (e.g. leaflets, posters or programmes),

• in other promotional and informational materials produced by the organiser.

By publishing this material, we are pursuing our legitimate interest in providing information about our events, documenting them and promoting future events.

Legal basis

Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our legitimate interest in reporting, public relations, documentation and the promotion of our events.

Where consent is required in individual cases, processing is carried out on the basis of Article 6(1)(a) of the GDPR.

Where applicable, the provisions of the German Art Copyright Act (KunstUrhG), in particular Sections 22 and 23 of the KunstUrhG, shall also apply.

Retention period

Photographs, videos and audio recordings are generally stored for as long as is necessary for the purposes stated.

Recordings that have already been published may, within the framework of statutory provisions, remain permanently available in archives, press reports, social media or other publications.

Rights of data subjects

Data subjects have the rights to which they are entitled under the GDPR.

Provided the legal requirements are met, data subjects may, in particular, request access, rectification, restriction of processing or erasure, and may object to the processing.

Whether there is a right to erasure or to prevent publication in a specific case depends on the relevant legal provisions and a balancing of interests.

RG Company Events maintains company profiles on various social media platforms, in particular on:

• Instagram

• Facebook

• TikTok

• YouTube

Our website provides links to these platforms only.

Simply visiting our website does not result in any personal data being transmitted to the operators of these social media platforms.

Only when you click on a relevant link and access our social media page will personal data be processed by the respective platform operator.

We have no influence over the nature, scope or purpose of this data processing.

The respective privacy policies of the relevant platform operators apply.

We use various technical services and WordPress plugins to provide and ensure the secure use of our website.

CookieYes
We use CookieYes to manage your cookie consents.
Further information on this can be found in Section 9 of this privacy policy.

Elementor
Our website was created using the WordPress plugin Elementor.
When you use the contact form, the personal data entered there is processed solely for the purpose of handling your enquiry.
The legal basis is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR.

WP Mail SMTP
We use WP Mail SMTP for the technical sending of emails.
The plugin is used solely to ensure the reliable delivery of emails, for example via the contact form.
Only the data technically necessary for sending emails is processed.

Site Kit by Google
We use Site Kit by Google to manage various Google services.
In particular, the following Google services may be integrated via Site Kit:
• Google Analytics
• Google Search Console
• Google PageSpeed Insights
Where personal data is processed or cookies are set in this context, this is done exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that such consent is required by law.

Further information can be found in Google’s privacy policy.

Google Analytics
Where Google Analytics is enabled and you have given your consent, information regarding your use of our website will be processed.
This may include, in particular:
• truncated IP address,
• browser information,
• operating system,
• pages visited,
• duration of visit,
• source of the website visit,
• interactions on our website.
Google Analytics helps us to analyse the use of our website and to continuously improve our online offering.
The data may be transferred to Google’s servers outside the European Union.
Further information can be found in Google’s privacy policy.

Yoast SEO
We use Yoast SEO for the technical search engine optimisation of our website.
In principle, no personal data is processed for marketing purposes.

WP Fastest Cache
We use WP Fastest Cache to improve the loading speed of our website.
Technically necessary cookies or cache files may be created in order to deliver content more quickly.
The legal basis is Article 6(1)(f) of the GDPR.

Where we process your personal data, you are entitled, in particular, to the following rights within the framework of the statutory provisions:

Right of access

You have the right to request information as to whether, and if so, which personal data we process about you. This includes, amongst other things, information on the purposes of processing, the categories of personal data, the recipients of the data and the intended retention period.

Right to rectification

Should your personal data be inaccurate or incomplete, you may request that it be rectified or completed without delay.

Right to erasure

You may request the erasure of your personal data subject to the statutory conditions, in particular where it is no longer necessary for the original purposes or has been processed unlawfully.

However, there is no right to erasure where statutory retention obligations apply or where other legal grounds prevent erasure.

Right to restriction of processing

Subject to the statutory conditions, you may request that the processing of your personal data be restricted.

Right to data portability

Where processing is based on your consent or a contract and is carried out by automated means, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format or – where technically feasible – to have it transferred to another data controller.

Right to withdraw consent

You may withdraw your consent at any time with effect for the future.

This does not affect the lawfulness of the processing carried out prior to the withdrawal.

Right to object

Where we process personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR, you may object to such processing at any time on grounds relating to your particular situation.

Where personal data is processed for the purposes of direct marketing, you may object to such processing at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data if you believe that this infringes data protection regulations.

An overview of the data protection supervisory authorities can be found on the websites of the respective national data protection authorities.

Personal data will only be disclosed where this

• is necessary for the performance of a contract,

• is required by law,

• is based on your consent, or

• is permitted on the basis of legitimate interests.

Where services provided by companies based outside the European Union or the European Economic Area are used (e.g. Google or Meta), personal data may be transferred to so-called third countries.

Such transfers take place exclusively in accordance with legal requirements, in particular on the basis of an adequacy decision by the European Commission, appropriate safeguards (e.g. standard contractual clauses) or your express consent.

We implement appropriate technical and organisational measures to protect your personal data against loss, manipulation, unauthorised access or any other unauthorised processing.

Our website uses SSL/TLS encryption (HTTPS) to ensure that the transmission of confidential content is secure.

Our security measures are continuously updated in line with technological developments.

We reserve the right to amend this Privacy Policy should technical, legal or organisational changes make this necessary.

The version published at the time of your visit to our website shall apply.

We therefore recommend that you review this Privacy Policy regularly.