Datenschutzerklärung

Controller within the meaning of the GDPR:

Mitteldeutsche Card Conventions
Florian Bauer
Breitenfelder Straße 56
04157 Leipzig

E-Mail: info@cardconventions.de

1. Controller

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website as well as our content and services.

Personal data is generally processed only with the consent of the data subject or where processing is permitted by applicable law. The legal bases for processing include, in particular, Art. 6 (1) (a), (b), (c) and (f) GDPR.

3. Hosting by Wix

This website is hosted by Wix.com Ltd., 500 Terry Francois Blvd., San Francisco, CA 94158, USA.

When you visit our website, Wix processes personal data, including in particular:

IP address
Browser information
Device data
Time of access
Technical usage data

The processing is carried out for the purpose of providing and securing the website.

The legal basis for the processing is Art. 6 (1) (f) GDPR.

This may involve the transfer of personal data to third countries, in particular the USA. Wix.com Ltd. is certified under the EU-U.S. Data Privacy Framework. Where data is processed in the USA, this provides an adequate level of data protection. In addition, Wix uses appropriate safeguards in accordance with Art. 46 GDPR, in particular the European Commission’s Standard Contractual Clauses.

Further information:
https://de.wix.com/about/privacy

4. Cookies and Consent Management

Our website uses cookies.

Technically necessary cookies are required for the operation of the website. The storage of these cookies is based on Section 25 (2) No. 2 TDDDG. The subsequent processing of data is based on Art. 6 (1) (f) GDPR. Analytics and marketing cookies are only set with your express consent pursuant to Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR.

Consent is managed via the cookie consent tool used on the website.

You may withdraw or modify your consent at any time with effect for the future.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of how the website is used. Google Ireland Limited is a subsidiary of Google LLC, based in the USA. The information generated by the cookies about your use of this website may be transferred to and processed on servers operated by Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, under which an adequacy decision by the European Commission applies to data transfers to the USA.

Google Analytics is activated only with your express consent. IP anonymization is enabled on this website, meaning that Google truncates your IP address within the European Union or other EEA member states before further processing.

The legal basis for storing the cookie is your consent pursuant to Section 25 (1) TDDDG. The subsequent processing of personal data is based on Art. 6 (1) (a) GDPR.

You may withdraw your consent at any time with effect for the future via the cookie banner.

Further information on data protection at Google can be found at:
https://policies.google.com/privacy

You can download and install a browser add-on to disable Google Analytics here:
https://tools.google.com/dlpage/gaoptout

5. Google Analytics

For measuring the effectiveness of our advertising activities and optimizing our online advertising, we use the Meta Pixel and Meta Conversion API provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”).

These technologies enable us to determine whether visitors perform certain actions on our website after clicking on a Facebook or Instagram advertisement (e.g. purchasing a ticket or contacting us).

The following data may be processed in particular:

IP address
Browser and device information
Pages visited and click paths
Referrer URL (the previously visited page)
Access timestamps
Event data (e.g. page view, ticket purchase, form submission)
Where applicable, hashed contact information (e.g. email address), provided that such information is transmitted as part of the Conversion API

Joint Controllership: We have entered into an agreement with Meta regarding joint controllership (Joint Controller Addendum). This agreement defines which party is responsible for fulfilling the respective data protection obligations. The agreement can be viewed at the following link:
https://www.facebook.com/legal/controller_addendum

Legal basis: The setting of the Pixel and the accessing of information on your device take place exclusively with your express consent pursuant to Section 25 (1) TDDDG. The subsequent processing of the collected data is based on your consent pursuant to Art. 6 (1) (a) GDPR.

Transfer to third countries: The collected data may be transferred to servers of Meta Platforms Inc. in the USA. Meta Platforms Inc. is certified under the EU-U.S. Data Privacy Framework, under which an adequacy decision by the European Commission applies to data transfers to the USA. In addition, Meta uses Standard Contractual Clauses as appropriate safeguards pursuant to Art. 46 GDPR.

Further information can be found in Meta’s Privacy Policy:
https://www.facebook.com/privacy/policy/

You may withdraw your consent at any time with effect for the future via our cookie banner.

6. Meta Pixel and Conversion API

7. Ticket Sales via Pretix

As part of our event services, we integrate functions and content provided by pretix, operated by pretix GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, Germany. This includes the ticket shop, which is integrated via a JavaScript widget.

When you purchase a ticket, pretix uses a technically necessary cookie to enable the ordering process and to remember which shopping cart belongs to you. The cookie is set as soon as you interact with the widget.

pretix does not store IP addresses, browser information or other unnecessary metadata beyond the duration of your request.

Further information on data protection at pretix can be found here:
https://pretix.eu/about/de/privacy

8. Payment Processing

PayPal

When paying via PayPal, personal data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

The legal basis is Art. 6 (1) (b) GDPR.

Further information:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe

For payment processing, we use Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

When paying via Stripe, payment data is transmitted to Stripe and processed there.

The legal basis is Art. 6 (1) (b) GDPR.

Further information:
https://stripe.com/de/privacy

9. Vendor Registration by Email

Vendors may submit requests for booth or table bookings to us by email.

In doing so, we process in particular:

Name or company name
Contact details
Billing address
Payment and booking information

The processing is carried out for the performance of pre-contractual measures and for the fulfillment of the contract pursuant to Art. 6 (1) (b) GDPR.

Data relevant for invoicing is stored in accordance with statutory retention obligations.

10. Contact Form

If you contact us via the contact form, the information you provide will be stored for the purpose of processing your inquiry.

This includes in particular:

Name
Email address
Content of the message

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and/or Art. 6 (1) (f) GDPR (legitimate interest in processing inquiries).

The data will be deleted as soon as it is no longer required for the purpose for which it was processed and provided that no statutory retention obligations apply.

11. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL/TLS encryption.

You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock icon displayed in your browser’s address bar.

Personal data is stored only for as long as necessary to fulfill the respective purposes or as required by statutory retention obligations.

12. Data Retention Period

13. Your Rights

Under the applicable statutory provisions, you have the right at any time to:

Access pursuant to Art. 15 GDPR
Rectification pursuant to Art. 16 GDPR
Erasure pursuant to Art. 17 GDPR
Restriction of processing pursuant to Art. 18 GDPR
Data portability pursuant to Art. 20 GDPR
Object to processing pursuant to Art. 21 GDPR
Withdraw consent previously given pursuant to Art. 7 (3) GDPR

To exercise your rights, an informal notification to the contact address stated above is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

In particular, the competent authority is the data protection supervisory authority of your habitual place of residence or of the location of the Controller.

An overview of the data protection supervisory authorities can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

14. Right to Lodge a Complaint with a Supervisory Authority

15. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to ensure that it remains compliant with current legal requirements or to reflect changes to our services.

The version of the Privacy Policy applicable at the time of your next visit shall apply.

As of: July 2026

Ticket and Event Terms and Conditions

Legal Notice

Contact