Privacy Policy & Data Protection Declaration

1. Data Controller & Contact Details

The data controller responsible for personal data collected through this website pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

Scenesgarshowtickr Bau & Mobilität UG (haftungsbeschränkt)
Holzmarktstraße 25, 10243 Berlin, Germany
Commercial Register: Amtsgericht Charlottenburg, HRB 198422 B
Managing Director: Technical Operations Board
Email: [email protected]

2. Categories of Data Collected & Purpose of Processing

We collect and process personal data exclusively to provide our engineering documentation, ensure technical website security, and respond to builder inquiries:

• Server Log Information: When accessing our pages, your browser automatically transmits technical metadata, including IP address, access timestamp, requested URL, HTTP status code, browser type and operating system. Processing is conducted under Article 6(1)(f) GDPR to safeguard server integrity, mitigate DDoS attempts, and guarantee operational uptime.
• Direct Communication & Contact Form: When you submit questions via our contact form or send correspondence to our email, we store your full name, email address, topic selection, and message text. Processing is grounded in Article 6(1)(b) GDPR for taking steps prior to entering into a prospective technical consulting contract, or Article 6(1)(f) GDPR based on our legitimate interest in providing reliable technical replies.
• Local Storage Preferences: Your interactive weight calculation values and cookie consent choices are handled purely client-side via your web browser's localStorage API. These numerical values remain strictly on your local device and are not uploaded to our backend servers.

3. Third-Party Service Processors

We do not sell, rent, or commercialize your personal data. We engage technical service providers (web hosting and email routing infrastructure) situated within the European Union operating under strict Data Processing Agreements (DPA) compliant with Article 28 GDPR. No data transfers take place to countries outside the European Economic Area (EEA) lacking an adequacy decision by the European Commission.

4. Data Retention Periods

Server access logs are retained for a maximum duration of 14 days and automatically purged thereafter, unless an active security incident necessitates evidentiary retention. Contact submissions and inquiry correspondence are retained for up to twelve months from the conclusion of our correspondence, unless statutory commercial or fiscal retention duties under the German Commercial Code (HGB §257) require prolonged archiving.

5. Your Statutory Rights Under the GDPR

As an affected data subject within the European Union, you possess extensive enforceable rights under Articles 15 through 22 GDPR:

1. Right of Access (Art. 15 GDPR): You may request written confirmation regarding whether we process personal data concerning you.
2. Right to Rectification (Art. 16 GDPR): You may demand the prompt correction of inaccurate personal data or completion of incomplete profiles.
3. Right to Erasure (Art. 17 GDPR): You may request the deletion of your personal data where statutory retention obligations do not apply.
4. Right to Restriction of Processing (Art. 18 GDPR): You may contest processing while claims are being verified.
5. Right to Data Portability (Art. 20 GDPR): You may obtain your submitted data in a structured, commonly used, and machine-readable format.
6. Right to Object (Art. 21 GDPR): You have the right to object at any time to data processing predicated upon legitimate interests (Art. 6(1)(f) GDPR).

To exercise any of these statutory rights, please send an informal email directly to [email protected]. Furthermore, you have the right to lodge a formal complaint with the competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.

6. California Consumer Privacy Act (CCPA/CPRA) Disclosures

For residents of California accessing our guides: Scenesgarshowtickr does not sell personal information, does not share personal information for cross-context behavioral advertising, and has not disclosed personal consumer data for monetary or other consideration during the preceding 12 months.