289/23-4/11/
PRIVACY POLICY
Status: 01 April 2026
________________________________________
1. General Information
The protection of your personal data is of particular concern to us. We process your data exclusively in accordance with the applicable legal provisions (GDPR, TDDDG). In this Privacy Policy, we inform you about the most important aspects of data processing within the scope of our services.
For the provision of our online platform, we process information relating to you, so-called personal data – hereinafter referred to simply as “data”. The term “processing” refers to any handling of data, such as collection, storage, use, or deletion of personal data.
We are happy to inform you within this Privacy Policy about the processing of your personal data as well as your rights and claims under data protection law.
The controller responsible for processing your personal data is:
Kyrylov & Gumirov GbR
Grassistraße 27
04107 Leipzig
Germany
E-Mail: ten.rku%40vorimug
If you have any questions about how your data is processed or wish to exercise your rights (see below), please contact us at this address.
________________________________________
2. Data Processing When Using Our Website
2.1 General Information
Within the scope of our website, we process data that you provide to us (e.g. when contacting us) and data generated through your use of our website (our servers log requests for security reasons).
The web server for operating our website is technically provided by Google LLC (Mountain View, California) as a data processor. When personal data is transferred to Google, an adequate level of data protection is ensured by the EU Standard Contractual Clauses and by the certification of this service provider under the EU-US Data Privacy Framework:
https://www.dataprivacyframework.gov/list
________________________________________
2.2 Data Processing for the Operation and Security of Our Platform (Server Logs)
Server logs: When you access our website and use our software, the web server collects usage data (so-called server logs). The collection of this data is necessary to technically enable the connection to our server and the use of the website. In addition, this data is used to prevent and analyze attacks.
The following data is collected: hostname and IP address of the accessing device, date and time of the request, identification data of the browser and operating system used, and the “referrer” URL.
Legal basis: The processing of your data is based on our legitimate interest in ensuring the operation of the service, system security, and error detection.
Recipients of the data: The web server is operated by Google (Mountain View, California) as a data processor. In the event of a hacker attack, the server log data may be passed on to law enforcement authorities. No further transfer to third parties takes place.
Additional information: Server logs are stored in personal form for a maximum of 3 months. The IP address is stored to support authorities in investigating and prosecuting security incidents (e.g. hacking, data breaches).
________________________________________
2.3 Data Processing When Contacting Us
Purpose of processing: If you contact us by email, telephone, or via the online form, we collect and store all data you provide.
Legal basis: Processing is carried out for the implementation of pre-contractual measures (e.g. inquiries about events or bookings) or for the performance of a contract (Art. 6(1)(b) GDPR), or based on our legitimate interest in handling inquiries (Art. 6(1)(f) GDPR).
Recipients of the data: We only share data with third parties if this is necessary to respond to your inquiry.
Additional information: We store the data for the duration of processing the inquiry and for possible follow-up questions. In addition, we retain inquiries for up to six months so that you can refer to them later.
________________________________________
3. Data Sharing, Data Processing by Third Parties
3.1
Your personal data is used exclusively by us and is not shared with third parties without your consent, a legal obligation, or a court/official decision.
If we use third parties (“data processors”) to perform services, we ensure that they process your data exclusively within the framework of our instructions, the agreements concluded with them, and in compliance with data protection regulations.
________________________________________
3.2 YouTube Videos
We have embedded videos from the YouTube platform (Google LLC, Mountain View, California) on our website. This allows you to play videos. Please note that your data may be transmitted – subject to your consent – even before you actively use interactive elements.
Legal basis: Processing is based on your consent via the cookie banner on our website (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Recipients of the data: By using the YouTube plugin, data is transmitted to Google. As Google is headquartered in the USA, data may be transferred to the USA. An adequate level of protection is ensured by Google’s participation in the EU-US Data Privacy Framework.
Further information on data processing can be found in Google’s Privacy Policy:
https://policies.google.com/privacy
________________________________________
4. Your Rights
4.1 Right of Access (Art. 15 GDPR)
You have the right to request information about whether we process your personal data. If so, you have the right to access this data and additional information related to the processing.
4.2 Right to Rectification (Art. 16 GDPR)
If the personal data we process about you is incorrect or incomplete, you have the right to request correction or completion.
4.3 Right to Erasure (Art. 17 GDPR)
If the legal requirements are met, you have the right to request the deletion of your personal data.
4.4 Right to Restriction of Processing (Art. 18 GDPR)
If the legal requirements are met, you may request restriction of processing.
4.5 Right to Data Portability (Art. 20 GDPR)
If the legal requirements are met, you may request that your data be provided in a structured, commonly used, and machine-readable format.
4.6 Right to Object (Art. 21 GDPR)
For reasons arising from your particular situation, you may object at any time to the processing of your data based on legitimate interest (Art. 6(1)(f) GDPR).
4.7 Right to Withdraw Consent
If processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4.8 Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law or your rights, you have the right to lodge a complaint with the competent supervisory authority:
Saxon Data Protection and Transparency Commissioner
Dr. Juliane Hundert
P.O. Box 11 01 32
01330 Dresden
Germany
Phone: +49 351 85471-101
Fax: +49 351 85471-109
E-Mail: ed.neshcas.btds%40tsop