1. SCOPE, CONTRACTUAL RELATIONS
1.1 The present General Terms and Conditions (hereinafter referred to as the "GTC") apply to concert events organized by MCT Agentur GmbH, Strausberger Platz 2, 10243 Berlin, Managing Director: Scumeck Sabottka, entered in the Commercial Register kept by the Amtsgericht (Local Court) of Berlin under the number HRB: 65613 (hereinafter referred to as "we" or "MCT"), with MCT acting as concert event organizer. They govern the relationship in place between MCT and the purchasers of tickets (hereinafter referred to as "you" or the "customer"). The GTC are a component part of the agreement as to the acquisition of concert tickets (hereinafter referred to as the "Tickets"). In the event that the customer uses general terms and conditions of its own that contradict our GTC set out here, these shall not become a component part of the agreement unless we have consented to them in writing.

1.2 By purchasing a Ticket, you as our customer will confirm that you are aware of these GTC and that you have accepted them as being binding upon yourself. Should you acquire the Ticket(s) online, you will confirm this by clicking on the button "Ich bestätige außerdem, dass ich die Allgemeinen Geschäftsbedingungen gelesen habe und stimme ihnen zu" ("I furthermore confirm that I have read the General Terms and Conditions of the event organizer and accept them").

1.3 Besides the present GTC, the general terms and conditions of the respective owner of the venue and its site shall apply for the respective venue (including the corresponding house rules). These terms are included herein by reference.

2. CONCLUSION OF THE CONTRACT, TICKET PURCHASE PRICE AND DUE DATE, NO RIGHT OF REVOCATION, AND EXCLUSION OF CHILDREN UNDER THE AGE OF SIX YEARS
2.1 Tickets may be purchased directly from one of our distribution partners in advance ticket sale service points, via the internet, or via ticket hotlines. Our distribution partners broker the sale of the Tickets on behalf of MCT and for our account. The general terms and conditions employed by our distribution partners have equal rank with the present GTC and are likewise to be observed. Where our distribution partners’ terms deviate from the MCT GTC, the latter shall govern.

2.2 In purchasing Tickets, an agreement as to the attendance of the concert event is concluded by you as the customer and MCT as the concert event organizer. MCT as the concert event organizer shall be entitled to the entirety of the Ticket Purchase Price, which is comprised of the basic ticket price, the advance booking charge, the charge for mass transit, the system charge and other fees, in each case including statutory VAT (hereinafter referred to as the "Ticket Purchase Price"). The Ticket Purchase Price shall be due for payment immediately upon the contract having been concluded, unless a different payment deadline is provided to you in the course of the order process.

2.3 Our distribution partner may charge additional fees on its own behalf. This will be indicated to you in the course of the order process.

2.4 Until payment of the Ticket Purchase Price is made in full, the Tickets shall remain the sole property of MCT and shall not entitle their bearer to access the concert event.

2.5 The contract as to the attendance of a concert event is a contract concerning recreational events, regarding which the customer is not entitled to any right of revocation. Accordingly, you cannot revoke your declaration of intention regarding the order of tickets for recreational events.

2.6 The sale of Tickets to children under the age of six (6) years is hereby ruled out. No Ticket may be purchased for them (also not along with other Tickets) as third-party beneficiaries. Children under the age of six (6) years will not be granted access to the concert event, also not if they are accompanied by a person who is a primary carer or who is tasked with care guardian obligations.

3. VALIDITY OF THE TICKETS
3.1 Your Ticket will entitle only one person each to attend the concert event. Upon your leaving of the concert, respectively the validation (Online Tickets), the Ticket will no longer be valid.

3.2. It is expressly prohibited to use the Ticket in several instances.

4. SPECIAL PROVISIONS DURING THE SARS COV 2 PANDEMIC OR OTHER PANDEMICS OR EPIDEMICS
4.1 In the event that a concert event is subject to legal or regulatory requirements or measures to be taken due to containment measures against the SARS-CoV-2 pandemic (hereinafter referred to as the "Corona Pandemic") or other pandemics or epidemics, the following provisions shall apply:

4.2 We reserve the right to impose access restrictions to a concert event. Such access restrictions may include, for example, proof of vaccination or convalescence, the presentation of a negative test result or the wearing of masks. These will be announced as far as possible, at the latest 14 days before the start of the respective concert event. In case of non-observance of such access restrictions, we are entitled to exclude the respective visitor from the concert event. In this case, there is no right to a refund of the Ticket Purchase Price.

4.3 Attendance at a concert event is prohibited if the visitor has contracted SARS-CoV-2, has knowingly had contact with a person who has tested positive, has typical symptoms of infection with the coronavirus or is affected by legal or official quarantine measures. In these cases, there is also no entitlement to a refund of the Ticket Purchase Price. The same applies to infections in the context of other pandemics or epidemics.

4.4 MCT is entitled to subsequently convert standing room seats into seats or to allocate the ticket holder different seats in the same category for the purpose of complying with distance areas or protection and hygiene requirements prescribed by the authorities or by law. In such cases, the customer shall not be entitled to any refunds.

4.5 Furthermore, it may occur that MCT has to reduce the number of visitors originally admitted to a concert event. In such cases, MCT is entitled to cancel Tickets against reimbursement of the Ticket Purchase Price (with the exception of the advance booking and system charge). MCT will select the Tickets to be cancelled in a non-discriminatory process. Claims for damages by the customer do not exist in the aforementioned cases, unless MCT is at fault.

5. CANCELLATION OR POSTPONEMENT OF A CONCERT EVENT
5.1 MCT has the right to cancel or reschedule a concert event for reasons of force majeure. Force majeure is any event beyond the control of a party and for which it is not responsible that wholly or partially precludes the performance of this Agreement in accordance with the purpose of this Agreement (attendance at a concert event), makes such performance substantially more difficult or makes such performance unreasonable for a party. This includes, but is not limited to, catastrophic events, acts of terrorism (including the threat, danger or reasonable suspicion of such acts of terrorism), violent riots (including the threat, danger or reasonable suspicion of such riots), war or warlike events, epidemics, pandemics, fire, extreme or catastrophic weather conditions (such as floods, hurricanes or cyclones) that pose a threat to the life and limb of the participants in the concert event, severe weather and/or catastrophe warnings, strikes, as well as official orders for which the respective party is not responsible, in particular as a result of the aforementioned events. The Corona Pandemic is also considered as force majeure. MCT has the right to cancel or reschedule a concert event if its performance is prohibited by authorities or law, if a person substantially involved in the concert event is unable to arrive and/or depart due to entry and/or exit restrictions, or is unable to attend due to a Covid 19 disease, suspected disease, or preventive measure.

5.2 In the event that a concert event is cancelled without replacement, you are entitled to a refund of the Ticket Purchase Price. You must assert this claim no later than four (4) weeks after the cancelled concert event date. If you are prevented from asserting the refund claim in due time for reasons beyond your control - e.g. due to illness - you are responsible for proving the existence of those conditions that justify the non-occurrence. In the event that a concert event is rescheduled to an alternative date for reasons of force majeure (section 5.1), the Tickets shall remain valid. A revocation of the ticket purchase and refund of the Ticket Purchase Price as a result of the rescheduling is not possible, unless it can be proven that you cannot reasonably be expected to attend the new date, for example because you have already booked a trip. In the event that the concert event is rescheduled to an alternative date for other reasons, the claim for reimbursement of the Ticket Purchase Price must be asserted by you no later than midnight on the day before the alternative date. If you are prevented from asserting the refund claim in due time for reasons beyond your control - e.g. due to illness - you are responsible for proving the existence of the conditions that justify the non-occurrence.

5.3 Charges paid (advance booking charge and system charge, section 2.2) will, except in the case of fault on the part of MCT, not be reimbursed. Should you rescind the agreement as regards the event, we will set off our claim to compensation in the amount of the charges against the claim to reimbursement of the charges paid to us. The reason is that should you rescind the said agreement, you will be under obligation to compensate us for the value of the brokerage services that you have enjoyed by purchasing your Ticket from us via our distribution partner. The same applies to the system charge for the use of the ticketing system for issuing your Tickets.

5.4 Should our distribution partner charge additional fees in its own name (section 2.3), their reimbursement shall be goverened by the general terms and conditions of our distribution partner.

5.5 You are to contact our distribution partner as regards your claim to reimbursement of the Ticket Purchase Price, not including the paid charges. Unless our distribution partner provides for a different reimbursement procedure, the reimbursement of the Ticket Purchase Price, with the exception of the advance booking fee and the system fee, will only be made upon presentation of the original Tickets. Should the Tickets have been lost, it will not be possible to reimburse the Ticket Purchase Price or to provide you with replacement tickets.

5.6 Your rights to rescind the contract within the scope provided for by law, or to demand compensation for damages in the event MCT is responsible for a violation of its obligations, shall remain unaffected hereby. However, the enforcement of claims to compensation of damages and/or the reimbursement of expenditures shall be subject to the liability reservation set out in section 11 hereof.

6. LIMITED TICKET PURCHASE
6.1 For certain concert events, the Ticket purchase per person is limited to a maximum number of Tickets. The maximum number of Tickets will be displayed to you during the order process. You may only purchase this number of Tickets for the concert event, regardless of the number of purchase processes. It is expressly prohibited that one person, or several persons who have affiliated themselves with others for the purpose of commercially trading tickets or selling them as a business, initiate(s) a greater number of purchasing processes than specified, for example by providing different e-mail addresses or using different payment means (particularly by using pre-paid credit cards deployed for the pur-pose of purchasing a greater number of tickets than is admissible), or by circumventing this rule in any other way.

6.2 Section 10 applies in the event of a violation of section 6.1.

7. RESTRICTIONS ON ACQUIRING AND TRANSFERRING TICKETS
7.1 For reasons of fairness and to prevent the resale of Tickets at excessive prices, thus also preventing any negative impacts on MCT’s reputation as concert event organizer, it is in the interests of MCT to restrict the acquisition and transfer of Tickets. You hereby enter into obligation to purchase and use the Tickets solely for private use. In particular, you are specifically prohibited from:
(a) Transferring or selling Tickets without the prior express approval of MCT, or acquiring them on behalf of a third party, where this is done in the context of commercial or business activities;
(b) Offering Tickets for sale in the context of internet auctions not authorized by MCT;
(c) Selling Tickets to third parties with the intent of making a profit without having obtained the prior express approval of MCT, or acquiring them on behalf of a third party in order to obtain a profit by the brokerage activity;
(d) Transferring and/or selling Tickets for advertisement or marketing purposes, as a bonus, as a promotional gift or as part of any hospitality or travel package not authorized by MCT;
(e) Selling Tickets in front of the concert event venue; or
(f) Acquiring Tickets by way of involving, as your representative, a third party acting on your behalf in a business or commercial capacity, unless the total fees to be paid to said third party amount to no more than 15% of the Ticket Purchase Price (section 2.2).
7.2 For any instance in which the prohibitions set out in section 7.1 are culpably breached, MCT may demand that you pay a contractual penalty, the amount of which MCT may determine at its equitable discretion, and which, in the event of a dispute, may be reviewed before a court. As a general rule, the amount of the contractual penalty shall be based on the current offer price or price for the onward sale; as a minimum, however, it shall be based on the Ticket Purchase Price of the Tickets offered for sale or transferred in violation of section 7.1 hereof. The maximum contractual penalty shall amount to EUR 7,500.00. Any further-reaching claims to compensation of damages or demands for payment of a contractual penalty for any other violations of the present GTC shall remain unaffected hereby. Any contractual penalty paid shall be set off against a claim to compensation of damages.

7.3 Where the stipulations of section 7.1(f) have been violated, the agreement as to the attendance of the concert event will not be concluded, since any representation is ruled out in this case. In such event, you will be reimbursed for the Ticket Purchase Price (section 2.2) already paid, to the exception of the advance booking charge and the system charge. Any Ticket already issued will be disabled by ourselves or by our distribution partners and will thus lose its validity.

8. SPECIAL PROVISIONS FOR THE PURCHASE OF PERSONALIZED TICKETS
8.1 For certain concert events, the Tickets are personalized, in other words, only that person has the right to demand access to the concert event that holds visiting rights. That person’s name will be printed on the Ticket as a component part of the Ticket. These concert events will be marked with a corresponding notice regarding the personalization of the Ticket, or notice of this fact will be given when the Ticket is purchased.

8.2 You enter into obligation to acquire the Tickets exclusively for your private use and to use them exclusively on a private basis. Section 7.1 shall apply.

8.3 The first name and last name you provide will be noted on the Ticket. Should the option be available to purchase several personalized Tickets, you will be asked, when you make the purchase, to provide the first name(s) and last name(s) and the e-mail address(es) of the other person(s) to whom the personalized Ticket(s) is / are to be issued; you are under obligation to provide this information truthfully immediately in making the purchase. The legal transaction will come about or fail upon the immediate and truthful provision of the various names of Ticket holders at the purchase, in due time, since immediately following the purchase process, the Tickets will be made out in the names that you have provided (referred to by legal experts as "relative obligation to perform at a fixed point in time"). Any violation of your obligation to provide the different names will mean that MCT will have to expend considerable additional amounts of time, effort and money in retroactively processing re-personalization requests and will cause conflicts during admission to the event. Additionally, concert events will be identified as "sold out" in spite of the fact that MCT has the right to rescind the respective agreements should you violate your obligation to provide different names, meaning that these seats will once again become available. Should MCT have to set an appropriate deadline for you in each case prior to rescinding the agreement, this would be to the detriment of the other fans and would enable the unauthorized trade in tickets at excessive prices. For the event that one and the same name is provided in purchasing several Tickets, in contravention of the above provision, MCT reserves the right, for the above reasons, to immediately rescind the agreement without this requiring any deadline to be set (Section 323 paragraph 2 no. 2 of the Bürgerliches Gesetzbuch (BGB, German Civil Code)). Moreover, you will be asked to confirm that you are entitled to personalize the Ticket(s) in the name of the third person(s). In such cases, the contract shall be concluded exclusively by yourself with MCT. Any other persons that you may name will be the sole beneficiaries under this contract and will gain an independent right to attend the concert event (Sections 328 et seqq. of the German Civil Code).

8.4 The right to attend the concert event is the result solely of the contract you have concluded with MCT (section 2.2 hereof). Moreover, your name will have to be noted on the Ticket. As a result of the contract you have concluded with MCT, third parties for whom you have acquired a personalized Ticket are likewise entitled to attend the concert event. The names of these third parties must be noted on their Tickets. An additional pre-requisite for attending the concert event is that you or the person(s) for whom you have purchased the Ticket are able to identify themselves at the admission ticket checkpoint by submitting a valid passport, personal identity card, driver’s license, credit card, or EC bank card.

8.5 MCT is not under obligation to demand that the said documents be shown to it at the admission ticket checkpoints in order to be sure that the ticket holder is in fact authorized to attend. MCT will be free from its performance obligations vis-à-vis its contractual partner if another person has obtained access to the concert event by presenting a Ticket. Only one person is authorized to attend the concert event per Ticket.

9. RETURNING PERSONALIZED TICKETS
9.1 In case of personalized Tickets return of your Ticket(s) is only possible on the ticket platform "Fansale" (www.fansale.de) (hereinafter referred to as "Fansale") operated by CTS Eventim AG & Co. KGaA (hereinafter referred to as "CTS").

9.2 The return is done through your customer account at CTS, which allows you to create a customer account for Fansale. The following shall apply. This requires that the Ticket(s) are actually purchased through Fansale. This cannot be guaranteed.

9.3 By using the option to return, you offer the Ticket(s) to us and allow us to offer the Ticket(s) once again for sale on Fansale on our own behalf and for our own account. Your offer to return the Ticket/s is not deemed accepted by us until the Ticket(s) is/are resold on Fansale.

9.4 CTS will offer the Ticket(s) for sale on Fansale on behalf of and for the account of MCT until the beginning of admission to the respective concert. You set the price at which your Ticket/s should be sold. The maximum price may not exceed the Ticket Purchase Price (Clause 2.2). If the Ticket/s have not been sold you may withdraw your offer through your customer account on Fansale at any time.

9.5 On request, Tickets may be reserved for one or more third parties for a maximum of 48 hours. In this case the Ticket(s) will only be offered for sale to such third party/parties during the aforementioned reservation period. CTS will provide you with a link in this respect which you may forward to one or more third parties. The first third party that purchases the available Ticket(s) within the aforementioned reservation period using this link receives the Ticket. If the Ticket is not purchased within the aforementioned reservation period, it is offered for sale on Fansale.

9.6 If the Ticket(s) is/are sold, you will be informed immediately. Your Ticket(s) will be blocked so that you are no longer entitled to entry. A new Ticket will be generated for the purchaser. The purchaser of a Ticket purchased using Fansale, has to pay a fee to CTS . After the sale through Fansale the amount of the purchase price will be credited to your account or your credit card account.

9.7 It is possible to exercise the return option until the beginning of admission to the respective concert.

9.8 If and to the extent that Tickets are not sold, they will not be blocked so that they still entitle to admission to the event.

10. DISABLING PERSONALIZED TICKETS
10.1 In the event of a violation of the prohibitions set out in section 6.1 or 8.2, MCT shall be entitled to disable the Tickets concerned, against reimbursement of the Ticket Purchase Price (not including the advance booking charge and the system charge, section 2.2) and to refuse access to the concert event to the respective holder of the Ticket.

10.2 In the event of repeated prohibitions set out hereinabove in section 6.1 or 8.2, MCT shall be entitled to disable the Tickets without any compensation, in other words without reimbursement of the Ticket Purchase Price paid.

10.3 The distribution partner from whom you purchased the Ticket may also disable tickets on behalf of MCT. Moreover, the general terms and conditions of said distribution partner may stipulate further reasons based on which tickets may be disabled.

11. LIABILITY OF MCT
11.1 MCT shall be liable without any restrictions whatsoever for any and all damages to life, limb or health arising in the context of the contractual relationship where such damages were caused culpably. The same shall apply where liability is mandated by the law, in particular liability pursuant to the Produkthaftungsgesetz (ProdHaftG, German Product Liability Act), and in the event of guarantees.

11.2 In the event that essential contractual obligations are breached (so-called “cardinal obligations”), such breaches being based on simple negligence and not covered by the stipulations of section 11.1 hereof, MCT shall be held liable to a limited extent, this being the compensation of the foreseeable damage that is typical for the type of contract concerned. The cardinal obligations of MCT include those duties the fulfillment of which is the basis of the due and proper implementation of the contract, and in the adherence to which you may, as a general rule, trust.

11.3 In all other regards, MCT shall be held liable only for grossly negligent or intentional violations of its contractual duties.

11.4 To the extent the liability of MCT is excluded or restricted by the stipulations of the above paragraphs, this shall also apply to the liability of its statutory representatives and the persons it employs in the performance of its obligations (Erfüllungsgehilfen).

12. OBLIGATIONS OF CUSTOMERS ATTENDING A CONCERT EVENT
12.1 No hazardous objects such as gas containers, pyrotechnical articles (such as flares, firecrackers or sparklers), laser pointers, weapons of any kind or objects that may be used as a projectile – in particular bottles and cans – may be taken to any concert event.

12.2 No audio recording devices, film, photo or video cameras may be taken to a concert event, nor may they be operated. This also concerns mobile radio devices with a photography application. Recordings of any form are prohibited and any abuse will be prosecuted under law.

12.3 In the event of the stipulations of section 12.2 being violated, MCT and its employees are entitled to seize the recording equipment and cameras and to keep them until the end of the concert event, such storage being liable to payment of a fee. The films and recording material of any nature on which parts of the concert event have been recorded may be seized and stored by MCT. They will be returned to the owner provided that the latter has consented to the recordings being deleted from such material.

12.4 MCT reserves the right to prohibit persons who have violated the stipulations of the above paragraphs from entering the concert event, or to remove them from the concert event.

13. SOUND AND/OR IMAGE RECORDING
In the event that image and/or sound recordings, such as photo/film/TV and/or audio recordings (hereinafter referred to as "recordings"), are made during a concert event by MCT and/or the artist(s) and/or third parties commissioned for this purpose, you agree that you may be recorded in picture and/or sound and that the recordings may be used exclusively by MCT and/or the artist(s), spatially, temporally, content-wise unlimited, edited and/or unedited, in whole and/or in part, in physical and incorporeal form, in all media and formats (e.g. print, social media, audiovisual media, online etc.) itself and/or via third parties without any claim to remuneration without any restrictions, in particular duplicated, distributed, broadcast, made publicly available, etc., made publicly acces-sible, etc.

14. APPLICABLE LAW, PLACE OF JURISDICTION
14.1 To the extent the customer is not a consumer, solely the laws of the Federal Republic of Germany shall apply; the UN Sales Convention is excluded.

14.2 The place of performance and the place of jurisdiction is Berlin if the customer is a merchant, a legal entity under public law, or special assets governed by public law.

15. FINAL CLAUSES
15.1 By the time at which the contract is concluded, MCT has not concluded any agreements or made any undertakings, neither orally nor in writing, besides the present GTC.

15.2 Should individual provisions of this contract be or become null and void or ineffective, either wholly or in part, this shall not impact the effectiveness of the other provisions. The stipulations of the law shall replace those of the General Terms and Conditions that are not incorporated or ineffective (Section 306 paragraph 2 of the Bürgerliches Gesetzbuch (BGB, German Civil Code)). In all other regards, the parties shall determine an effective provision to take the place of that provision that is null and void or ineffective, which new provision is to approach as closely as possible the previous provision’s economic intent, unless an amending interpretation of the contract takes precedence or is possible.

Last update: 09.05.2023 - print ToS

1. Data protection, Controller and Data Protection Officer

In this privacy policy we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. This privacy policy explains which kind of data we collect and what we use it for. It also explains how and for what purpose this is done. We would like to point out that data transmission in the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. Unless a more specific storage period is specified within this privacy policy, your personal data will remain with us until the purpose for the data processing doesn’t apply anymore. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons cease to apply.
The Controller for the processing of your personal data through this website is the
MCT Agency GmbH
Strausberger Square 2
10243 Berlin

Phone: +49 30 5363 8200
Fax: +49 30 5363 8222
E-mail:hartmann@mct-agentur.com.

You can reach our data protection officer at the e-mail datenschutz@mct-agentur.com.

2. General notes and mandatory information

a) SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
b) External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website are stored on the hoster's servers. This may include e.g. IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
We host the content of our website with the following provider:
Hetzner Online GmbH (hereinafter referred to as Hetzner)
Industriestr. 25
91710 Gunzenhausen

Details can be found in the privacy policy of Hetzner:
https://www.hetzner.com/de/legal/privacy-policy?country=gb.
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that our service provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. Data collection on our website

a) Cookies
Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.
Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services). Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes.
Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6para. 1(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6para. 1(a) GDPR and § 25 para. 1 TTDSG); this consent may be revoked at any time.
You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited. Which cookies and services are used on this website can be found in this privacy policy. b) Consent with Cookiebot
Our website uses consent technology from Cookiebot to obtain your consent to the storage of certain cookies on your end device or for the use of certain technologies and to document this in a data protection- compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”). When you enter our website, a connection is established with the Cookiebot servers to obtain your consent and provide you with other explanations regarding the use of cookies. Cookiebot will then store a cookie in your browser to identify the consent you have given or its revocation. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie itself or the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected. Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6para. 1(c) GDPR.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
c) Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
• The type and version of browser used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.
This data is recorded on the basis of Art. 6 para. 1 lit.f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.
d) Inquiry by e-mail or telephone
If you contact us by e-mail or phone, your request including all resulting personal data (name, request, e-mail address) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures (e.g. booking tickets on account). In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was requested; the consent can be revoked at any time. The data you send us via contact requests will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.
d) Press area of our website
In order to use the press area of our website, you will require media access from us, which you can request from us by e-mail. For this purpose, we collect your name, your e-mail address and, if necessary, proof of your journalistic or press activities. The legal basis for this is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in processing your data results from the fact that the press area of our website with the download options available there can only be made available to journalists and press representatives for legal reasons.

4. Purchase of tickets on account

In connection with the purchase of tickets for our events (order by e-mail), we process the data required for the conclusion and processing of the contract. This includes: Name, address, e-mail address, ticket information/code. If it is an order for personalized tickets for several people, we also collect the names of the other ticket holders by you, so that a personalized issuance is possible. The legal basis for this is Art. 6 para. 1 lit. b GDPR. If tickets with special conditions for severely disabled persons are involved, we also require a copy of the severely disabled person's ID as proof and to prevent misuse. As a special category of personal data pursuant to Art. 9 para. 1 GDPR, this requires express consent pursuant to Art. 9para. 2 lit.a GDPR, which can be revoked at any time. The collected customer data will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods (regularly 10 years).

5. Analysis tools

a) Tracking tools
The tracking measures listed below and used by us are carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the analysis measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. The respective data processing purposes and data categories can be found in the following explanations of the corresponding tracking tools.
b) Matomo
This website uses the open source web analytics service Matomo. The provider of the Matomo Cloud is InnoCraft Ltd ("InnoCraft"), 7 Waterloo Quay, P.O. Box 625, 6140 Wellington, New Zealand, whose German data center is located in Frankfurt am Main. InnoCraft assures that all data and backups are stored within the EU. In addition, the EU Commission has issued an adequacy decision pursuant to Article 45 of the GDPR, which states that the level of protection for personal data is comparable to that of the EU. With the help of Matomo, we are able to collect and analyze data about the use of our website by visitors. This allows us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.). The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. We use IP anonymization for the analysis with Matomo. This means that your IP address is shortened before analysis so that it can no longer be clearly assigned to you. In addition, we have configured Matomo so that it does not store cookies in your browser.
We have concluded a commission processing agreement with InnoCraft pursuant to Art. 28 III GDPR with the obligation to process personal data as a processor exclusively on our instructions and not to pursue our own purposes. Find out more at https://matomo.org/matomo-cloud-dpa/. For more information, click here: https://matomo.org/matomo-cloud-privacy-policy/.
c) etracker
This website uses the analysis service etracker. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. With etracker, we can analyze the behavior of our website visitors. For this purpose, etracker collects, among other things, your shortened IP address, geographic information (maximum city level), log files and other information that your browser transmits to our web server when you visit the website. This allows us to measure website interactions such as dwell time, conversions (e.g., sign-ups, orders), scroll events, clicks, and page views of the website visitor. These interactions are attributed to the website visitor for the duration of the current day so that they can be recognized on subsequent visits. After the end of the day, visitor recognition is no longer possible. Without your consent, no cookies are stored in your browser and no information is read from the memory of your terminal device. The cookie-free use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website. The rights and fundamental freedoms of the data subjects are preserved. The IP address is anonymized as soon as possible during the analysis with etracker. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 Para. 1 TTDSG. The consent can be revoked at any time.
We have concluded a contract on data processing (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
e) IONOS WebAnalytics
This website uses the analysis services of IONOS WebAnalytics (hereinafter: IONOS). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D - 56410 Montabaur. As part of the analyses with IONOS, among other things, visitor numbers and behavior (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. from which page the visitor comes), visitor locations and technical data (browser and operating system versions) can be analyzed. For this purpose, IONOS stores the following data in particular:
• referrer (previously visited website)
• requested website or file
• browser type and browser version
• operating system used
• type of device used
• time of access
• IP address in anonymized form (used only to determine the location of the access).

According to IONOS, data collection is completely anonymized, so it cannot be traced back to individual persons. Cookies are not stored by IONOS WebAnalytics. The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both its web offering and its advertising. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. For more information on data collection and processing by IONOS WebAnalytics, please refer to the IONOS privacy statement at the following link: https://www.ionos.de/terms-gtc/datenschutzerklaerung/. We have concluded an data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

6. Social media

a) General information
Our social media presences are intended to ensure the broadest possible presence on the Internet. We want to communicate with our visitors and inform them about events and news. The specific media portals used are listed under the following points. Social networks such as Facebook, Instagram, etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations relevant to data protection. In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in. Please also note that we don't have knowledge of all processing on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details on this can be found in the terms of use and privacy policies of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest of ours within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR). Joint Controller and assertion of rights If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operators of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook). Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider. Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Your rights
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to object, data portability and the right to complain to the competent supervisory authority. Furthermore, you can demand the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.
b) Facebook Fanpage

Our Facebook page uses the services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). If you are registered with this service, your visit to our Facebook page may be linked to your account. Even if you are not registered there or have not logged in, it is possible that Facebook receives and stores information such as your IP address (more detailed under a) General information). You can find more information on data processing at https://de-de.facebook.com/policy. Meta provides the operators of Fanpages with so-called Facebook Insights. These are summarized data, through which page operators can obtain information about how users interact with their page (details can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data ). Facebook and we are jointly responsible for the processing of this data according to Art. 26 GDPR. Therefore, we have entered into a joint processing agreement (Joint Controller Addendum) with Meta. The agreement is limited exclusively to the collection of the data and its forwarding to Facebook. Processing that takes place after the onward transfer by Facebook is not part of the joint responsibility. The obligations incumbent on us jointly have been set out therein and can be viewed at the following link: https://www.facebook.com/legal/controller_addendum. Your rights under Art. 13 et seqq. GDPR (e.g. request for information) regarding the data processed by Facebook can be asserted directly with Facebook. You can contact the data protection officer of the provider of the Facebook service at the following link: https://www.facebook.com/help/contact/540977946302970. You can object to the data processing here: https://www.facebook.com/help/contact/1994830130782319. If you assert your data protection rights with us, we will forward the request to Facebook. Data transfer to the U.S. is based on the EU-U.S. Data Privacy Framework and/or the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
c) Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited ("Meta"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit the platform, your profile information as well as information about the visit is essentially processed by Meta. Data is also processed if you do not have an Instagram account or are not logged in. You can find all further information on this in Instagram's privacy policy at: https://help.instagram.com/519522125107875. We process the data of visitors to our profile, in particular information about user interactions (e.g. likes and comments), public profile information, demographic and statistical data, as well as the data transmitted to us in the context of messages and comments. We use the statistics function to learn more about the visitors to our profile. Demographic and statistical data in the context of so-called "Insights" data help us to adapt our content to the respective target group. This is aggregated data for us, a personal reference is not possible for us. Instagram and we are jointly responsible for the processing of this data in accordance with Art. 26 GDPR. Therefore, we have concluded a joint processing agreement (Joint Controller Addendum) with Meta. The agreement is limited exclusively to the collection of the data and its forwarding to Facebook. Processing that takes place after the onward transfer by Facebook is not part of the joint responsibility. The obligations incumbent on us jointly have been set out therein and can be viewed at the following link: https://www.facebook.com/legal/controller_addendum. Data transfers to the U.S. are based on the EU-U.S. Data Privacy Framework and/or the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

7. Plugins and tools

a) YouTube with extended data protection
This website embeds videos from the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after starting a video, YouTube may store various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. You can find more information about data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.
b) Vimeo without tracking (Do-Not-Track)
This website uses plugins of the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. In addition, Vimeo obtains your IP address. However, we have set Vimeo in such a way that Vimeo will not track your user activities and will not set any cookies.
The use of Vimeo is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Insofar as a corresponding consent was requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. Data transfer to the U.S. is based on the EU-U.S. Data Privacy Framework and/or the standard contractual clauses of the EU Commission, as well as, according to Vimeo, on "legitimate business interests".
For more information on the handling of user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy.

8. Online-based Audio and Video Conferences (Conference tools)

a) General information
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata). Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection. Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while using the service. Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit.b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6 para.1 lit.f GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected. We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.
Conference tools used
We employ the following conference tool:

b) Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the privacy policy of Microsoft Teams: https://privacy.microsoft.com/de-de/privacystatement. We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

9. Transfer of personal data

a) Legal basis
We will only pass on your personal data to third parties if this is necessary to achieve our purposes and at least one of the following legal bases exists:
• you have expressly given your consent to this in accordance with Art. 6 Para. 1 lit. a GDPR,
• this is legally permissible and necessary for the processing of contractual relationships according to Art. 6 Para. 1 lit. b GDPR,
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 (c) GDPR, as well as
• the transfer according to Art. 6 para. 1 (f) GDPR is necessary to protect our legitimate interests, unless your interests, fundamental rights and freedoms, which require the protection of your personal data, prevail.
b) Data transfer to the USA
We largely, but not exclusively, rely on service providers located within the EU/EEA or a third country for which the European Commission has adopted an adequacy decision within the meaning of Art. 45 of the GDPR. Even in the case of service providers based within the EU/EEA, however, we cannot guarantee in individual cases that they will store or process your data exclusively on servers in countries where a level of protection comparable to that in the EU/EEA prevails. Among other things, we use tools from companies based in the USA. If these tools are active, your personal data may be transferred to these third countries and processed there. We note that the European Commission has adopted an adequacy decision for the EU-U.S. Data Privacy Framework (successor to the "Privacy Shield"). The decision states that the United States will ensure an adequate level of protection - comparable to that of the European Union - for personal data transferred from the EU to U.S. companies within the new framework. Based on this sectoral adequacy decision, personal data can be transferred securely from the EU to U.S. companies participating in the framework ("Data Privacy Framework") without having to implement additional data protection safeguards. To participate, companies must have certified themselves with the U.S. Department of Commerce. If they have not done so, the adequacy decision does not serve as a basis for secure data transmission. In these cases, we enter into Standard Contractual Clauses (SCC) with the service providers. By concluding standard contractual clauses within the meaning of Art. 46para. 1(c) GDPR, we provide guarantees for the protection of your data. In addition, we encrypt or pseudonymize personal data before transferring it to a service provider in a third country, if this is technically possible and appropriate.

10. Data subject rights

You have the right to,

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• in accordance with Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
• in accordance with Art. 7 para.3 GDPR, to revoke your consent given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future; and
• complain to a supervisory authority in accordance with Art. 77 GDPR. Usually you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

11. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you wish to exercise your right to object, an email to hartmann@mct-agentur.com will suffice.

12. Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13. Actuality and change of this privacy policy

This privacy policy is currently valid and has the status of September 2023. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed at any time on our website at https://mct-agentur.com/disclaimer.

MCT Agentur GmbH
Date: 15.09.2023

Privacy Policy for the Facebook Fanpage of the MCT Agency

1. Data protection, Controller and Data Protection Officer

In the following, we inform you about the collection of personal data when using our Facebook fan page. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior. This privacy policy explains what kind of data we collect and what we use it for. It also explains how and for what purpose this is done, what rights you have and how you can assert them.

We are jointly responsible with the operator of the social media platform for the triggered data processing operations.

The primary Controller and provider of the Facebook service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta).

You can contact the data protection officer of the provider Facebook at the following link: https://www.facebook.com/help/contact/540977946302970.

Second Controller and operator of the Fanpage is
MCT Agency GmbH
Strausberger Platz 2
10243 Berlin

Phone: +49 30 5363 8200
Fax: +49 30 5363 8222

Email:hartmann@mct-agentur.com
Website: https://mct-agentur.com/

Managing Director: Scumeck Sabottka

You can reach our data protection officer at the email datenschutz@mct-agentur.com.

We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

We would like to point out that despite the joint responsibility, we do not have full influence on the data processing operations of the social media portal. Our options are largely determined by the corporate policy of the provider.

2. General notes and mandatory information

Our social media presences are intended to ensure the most comprehensive possible presence on the Internet. We want to communicate with our users and inform them about events and news. This is a legitimate interest within the meaning of Art. 6 para. lit. f GDPR. The analysis processes initiated by the social network may be based on deviating legal grounds to be specified by the operator of the social network (e.g. consent within the meaning of Art. 6 para. lit. a GDPR).

With the exception of the anonymized data provided by Meta (see point 5), no further processing or storage of data takes place by us. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular regarding retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operator of the social network for its own purposes. For details, please contact the operator directly (e.g. in their privacy policy https://www.facebook.com/about/privacy/).

3. Data collection on our fanpage

Social networks such as Facebook can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence also triggers numerous processing operations relevant to data protection. In detail: If you are logged into your Facebook account and visit our fan page, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account. In this case, the data is collected, for example, via cookies that are stored on your end device or by recording your IP address. According to Facebook, this IP address is anonymized (for "German" IP addresses).

With the help of the data collected in this way, operators of social media portals can create user profiles in which your preferences and interests are stored. This data can be used to offer content or advertising tailored to you. You can adjust advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

We would also like to point out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Please note that we don’t have knowledge of all processing operations on the social media portal. The operator of the social media portal may carry out further processing operations. You can find details about this in Facebook's privacy policy. mailto: https://www.facebook.com/about/privacy/.

4. Disclosure of personal data to third parties and Transfer to third countries

We do not pass on any personal data to third parties, as we do not obtain any information about users. To what extent data from a visit to the site is passed on to third parties by Facebook is not conclusively and clearly stated by Facebook and is not known to us. However, Meta states that the collected data may also be transferred to the USA and other third countries. The data transfer to the USA is based on the Data Privacy Framework and/or the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://help.Facebook.com/272603474673152/?helpref=uf_share.

5. Data processing by Meta

The operation of the Facebook Fanpage includes the Insights function, which provides us with anonymized statistical data of the users and allows us to design our offers according to their needs. The visitor statistics created via this are transmitted to us exclusively in anonymized form by Meta. We have no access to the underlying data. Details about Insights from Facebook can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

6. Data subject rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the persons responsible:
- Right to information about your personal data stored by us or Facebook
- Right to rectification
- Deletion or restriction of the processing of your personal data
- Right to data portability
- Right to complain to a supervisory authority
- Right to revoke your consent to the collection, processing and use of your personal data at any time with effect for the future

If you wish to make use of your rights, you can address your request to both us and Facebook. For this purpose, you can, for example, use the contact options listed above. If you contact us, we will forward your request to Facebook as far as it concerns questions regarding the processing of Insights data.

7. Right of objection

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. lit. f GDPR, you have the right to object to processing - unless we or Facebook can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If you wish to exercise your right to object, simply send an e-mail to hartmann@mct-agentur.com

8. Up-to-dateness of this privacy information

This privacy information is currently valid and has the status of September 2023.

Privacy Policy for the Instagram Fanpage of the MCT Agency

1. Data protection, Controller and Data Protection Officer

In the following, we inform you about the collection of personal data when using our Instagram fan page. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior. This privacy policy explains what kind of data we collect and what we use it for. It also explains how and for what purpose this is done, what rights you have and how you can assert them.

We are jointly responsible with the operator of the social media platform for the triggered data processing operations.

The primary Controller and provider of the Instagram service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta).

You can contact the data protection officer of the provider Instagram at the following link: https://www.facebook.com/help/contact/540977946302970.

Second Controller and operator of the Fanpage is
MCT Agency GmbH
Strausberger Platz 2
10243 Berlin

Phone: +49 30 5363 8200
Fax: +49 30 5363 8222

Email: hartmann@mct-agentur.com
Website: https://mct-agentur.com/

Managing Director: Scumeck Sabottka

You can reach our data protection officer at the email datenschutz@mct-agentur.com.

We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Instagram page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

We would like to point out that despite the joint responsibility, we do not have full influence on the data processing operations of the social media portal. Our options are largely determined by the corporate policy of the provider.

2. General notes and mandatory information

Our social media presences are intended to ensure the most comprehensive possible presence on the Internet. We want to communicate with our users and inform them about events and news. This is a legitimate interest within the meaning of Art. 6 para. lit. f GDPR. The analysis processes initiated by the social network may be based on deviating legal grounds to be specified by the operator of the social network (e.g. consent within the meaning of Art. 6 para. lit. a GDPR).

With the exception of the anonymized data provided by Meta (see point 5), no further processing or storage of data takes place by us. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular regarding retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operator of the social network for its own purposes. For details, please contact the operator directly (e.g. in their privacy policy https://www.facebook.com/about/privacy/).

3. Data collection on our fanpage

Social networks such as Instagram can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence also triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your Instagram account and visit our fan page, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, operators of social media portals can create user profiles in which your preferences and interests are stored. Based on this data, content or advertising can be offered tailored to you. You can adjust advertising settings and other privacy settings yourself in your user account. https://help.instagram.com/478880589321969/?helpref=hc_fnav and https://help.instagram.com/811572406418223/?helpref=hc_fnav.

We would also like to point out that you use this Instagram page and its functions under your own responsibility.

4. Disclosure of personal data to third parties and Transfer to third countries

We do not pass on any personal data to third parties, as we do not obtain any information about users. To what extent data from a visit to the site is passed on to third parties by Instagram is not conclusively and clearly stated by Instagram and is not known to us. However, Meta states that the collected data may also be transferred to the USA and other third countries. The data transfer to the USA is based on the Data Privacy Framework and/or the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and . https://help.instagram.com/272603474673152/?helpref=uf_share.

5. Analysis tools

The operation of the Instagram Fanpage includes the Insights function, which provides us with anonymized statistical data of the users and allows us to design our offers according to their needs. The visitor statistics created via this are transmitted to us exclusively in anonymized form by Meta. We have no access to the underlying data. Details about Insights from Instagram can be found here: https://help.instagram.com/788388387972460 and https://www.facebook.com/legal/terms/information_about_page_insights_data.

6. Data subject rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the persons responsible:
- Right to information about your personal data stored by us or Instagram
- Right to rectification
- Deletion or restriction of the processing of your personal data
- Right to data portability
- Right to complain to a supervisory authority
- Right to revoke your consent to the collection, processing and use of your personal data at any time with effect for the future

If you wish to make use of your rights, you can address your request to both us and Instagram. For this purpose, you can, for example, use the contact options listed above. If you contact us, we will forward your request to Instagram as far as it concerns questions regarding the processing of Insights data.

7. Right of objection

Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. lit. f GDPR, you have the right to object to processing - unless we or Instagram can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If you wish to exercise your right to object, simply send an e-mail to hartmann@mct-agentur.com

8. Up-to-dateness of this privacy information

This privacy information is currently valid and has the status of September 2023.