Privacy Policy

The TYPO3camp Berlin (referred to as “T3CB“ and “we“ in the following paragraphs) is in charge of the internet page www.typo3camp-berlin.de including all subsites (referred to as “typo3camp-berlin.de”). This privacy policy will help you understand what personal data we collect, why we collect it and what we do with it when you visit typo3camp-berlin.de and when you register for online services such as our newsletter.

We take the protection of our user’s personal data very seriously and consider all relevant data protection directives. T3CB only processes your personal data when you have given us your permission to do so or if it is allowed under the EU General Data Protection Regulation (GDPR).

1. Responsible Office and Contact Details of the data security officer

The responsible office is

Consulting Piezunka & Schamoni - Information Technologies GmbH
(Private Limited Company)
Gustav-Meyer-Allee 25 | Gebäude 13/5
13355 Berlin
Germany

Tel.: (+49) 30.2009549.0
Fax: (+49) 30.2009549.29
E-mail: info(at)cps-it(at)de

Managing Directors: Sascha Böttcher, Andre Redlich, Claudio Gallio

About

2. Processing of personal data and on which data protection directives this is based on

2.1. Personal data

According to the EU General Data Protection Regulation (GDPR) personal data is “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (…)”

2.2. Which of your data we use and where we get them from

2.2.1. Website visit

Upon the visit of our website we collect the data of each server that our service is located on (so called ’server logs’), according to the GDPR Article 6 (1) f).

The access logs of our webservers record which pages are requested at which time. They contain the following data: IP, secured access user, date, time, viewed sites, protocols, status code, data volume, referrer, user agent, viewed host name.
The IP-addresses are saved anonymously by discarding the last three digits, i.e. 127.0.01 is saved as 127.0.*. IPv6-addresses are also rendered anonymous.

Error-logs record faulty page requests. Besides the error notifications, these logs contain the requesting IP-address and, depending on the error, the details of the requested page.
The mail-logs for the delivery of e-mails are also recorded. The pseudonymization function processes your and the receiver´s personal data in such a manner that the personal data can no longer be attributed to a specific data subject. Only the date and time, and the information on how the e-mails were processed, are stored (Queue-ID or 'not delivered').

2.2.2. Contact form and e-mail

The current contact form on the website collects the following information:

  • First name (optional)
  • Last name (optional)
  • E-Mail (optional)
  • Message

Additionally you can get in touch with us via e-mail. When you send us a message via e-mail, you disclose your e-mail address to us, and where necessary your name and other personal information.

2.2.3. Newsletter

For our newsletter and to sign up for invitations to annual events your name and e-mail address will be saved.

2.2.4. Registering as a participant

The registration for the event is done in cooperation with the service provider XING Events GmbH, Sandstr. 33, 80335 Munich, Germany.

The data below is collected upon registration. Some of this information must be provided:

  • Ticket number
  • Category (standard, discount, support, crew, or pre-event only)
  • E-mail
  • Cancellation (date)
  • Status (ordered, sent, paid, cancelled)
  • Pre-event participation (yes/no)
  • Twitter name
  • Personal tags (3 tags related to TYPO3 and bar camp)
  • Personal info (TYPO3 and community)
  • Session suggestions (own information)
  • Languages (own information)
  • First bar camp (yes/no)
  • Interest in certificates (yes/no)
  • Interest in child care (yes/no)
  • Other contact details (own information)
  • Eating preferences (own information)
  • T-Shirt Size
  • Other comments
  • Agree with terms and conditions

We use payment service providers for the registration process, based on GDPR Article 6 (1) b). Additionally we use external payment service providers based on our rightful interest according to Article 6 (1) f) of the GDPR to offer our users effective and secure payment options. The required data, which is processed by the payment service providers, consists of user-related data, such as name and address, financial details, such as account no. and credit card no., passwords, TANs, check sums, as well as information about your contract, the total amount and the beneficiary.

2.3. Uses and regulations for data processing

2.3.1. Website Visit

The data you provide when you contact us, is used for the response of each request. Your legal basis for this data processing can be found in Article 6 (1) f) (GDPR). Here, our rightful interest is to give you the best response possible.

We use hosting services such as platform and infrastructure services, for computing capacity, storage capacity and databank services, e-mail delivery and security services as well as maintenance support. All of these help to run and maintain our website.

The alias analysis of your user behavior on our website is done based on Article 6 (1) f) (GDPR). It is our rightful interest to analyze the usage of our website for market research and a needs-based and accessible design.

2.3.2. E-Mail

Personal data that we get from requests and messages via our contact form or e-mail is processed for the response process.

2.3.3. Newsletter

Your information you have provided when you signed up for the newsletter, is used to send you information and news via e-mail (GDPR, Article 6 (1) b)). All other processes conducted in relation to this are based on Article 6 (1) f) (GDPR). It is our rightful interest to process your data for invitations or send you tailored and interesting information.

2.3.4. Registering as a participant

Personal data that is provided upon registration for the event, is used for funding, the organization of the location, the catering, the production of visitor passes and other additional services, such as the pre-event and child care.

At the end of the event, this pseudonymized data is used for the evaluation of the past event and for the preparation of the next one.

3. Who gets your personal data from us

Your personal data is shared with the responsible persons and organizers listed on our website. The members of our organization team are in charge of registration, the organization and the execution of the camp. Additionally we use external service providers for tasks and services we cannot appropriately conduct ourselves. These are listed below.

Any other forwarding of data to third parties only occurs if this is required for the execution and organization of the event, if it is required by law, or if you have agreed to this.

3.1. Participant Registration

The registration process for the event is operated by our delivery service provider XING Events GmbH, Sandtr.33, 80335 Munich, Germany. To view their privacy policy, follow this link: https://privacy.xing.com/en/privacy-policy 

The delivery service provider is contracted on the base of our rightful interest according to Article 6 (1) f) and an agreement for the processing of personal data on behalf of a controller in accordance with Article 28 (3) p.1 of the GDPR.

3.2. Print

The personal data that we received before the 16th of May 2018 was transmitted to the printer for the production of your visitor passes:

Laserline Druckzentrum Berlin GmbH & Co. KG, Scheringstr. 1, 13355 Berlin, Germany, www.laserline.de 

This data was collected at registration and was partially adjusted:

  • Category (standard, discount, support, crew, or pre-event only)
  • First and last name
  • Twitter account
  • Personal tags (3 tags related to TYPO3 and bar camp)

3.3. Catering

No direct personal data is transmitted for catering purposes. Only the sums of the different eating preferences of all participants will be shared with the caterer.

4. How long we keep your data

4.1. Usage of our Website

Upon requesting our website, all IP-addresses will be stored anonymously in the access-logs for 60 days. Details of the user of a password protected site are pseudonymized within one day. Error-logs, which record faulty page requests, are deleted after seven days.

4.2. Contact & E-mail

The mail-logs for the delivery of e-mails from the web are pseudonymized within one day and subsequently stored for 60 days.

Mail-logs for the delivery through our mail server is deleted after four weeks. This extended period of storage time is necessary in order to secure the safe functionality of mail-services and avoid junk mail and spam.

If you have reached out to us via e-mail or our contact form, we save this data until we have established an active flow of communication and we have responded to your request and until the data is redundant for the organization of the event.

4.3. Newsletter

If you have subscribed to our newsletter all relevant information is saved until you revoke your agreement to this. After you have done so, all data will be deleted immediately.

4.4. Participant registration

All data for registering as a participant is collected and stored for the duration of registration, organization and the execution of the event. All data is pseudonymized after a period of two years subsequent to the end of the event.

All data that we have forwarded to our printing service provider are part of requirements, which the service provider must transmit to the fiscal authorities upon examination (record retention six to 10 years) according to Article 17 (3) b) and e) in the GDPR.

5. Your rights

The EU General Data Protection Regulation guarantees you certain rights, which you can claim against us.

  • Article 15 GDPR -  Right of access by the data subject: You have the right to obtain from us, the controller, a confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information.
  • Article 16 GDPR – Right of rectification: You have the right to obtain from us, the controller, without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Article 17 GDPR – Right to erasure: You have the right to obtain from us, the controller, the erasure of personal data concerning you without undue delay.
  • Article 18 GDPR – Right to restriction of processing: You have the right to obtain from us, the controller, restriction of processing.
  • Article 20 GDPR – Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance, provided that the processing is carried out by automated means.
  • Article 21 GDPR – Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, also to the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. If you object, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
  • Article 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringe this Regulation.

If you have given us permission – i.e. by signing up to the newsletter – to use your data, you can object to this at any time. All data processing that we have conducted up to your time of objection remains rightful in this case. To opt out of our e-mail service you can click the link provided in every e-mail that we send you. Or you can send us a message to team(at)typo3camp-berlin(dot)de. When you let us know that you no longer wish to receive any e-mails, we will stop sending messages to your e-mail address.

6. Your obligation to provide your personal data

You have no duty or obligation to provide us with any personal data. However, with no information we are unable to offer you our services or the participation of our event.

7. Existing of automatized decision-making (including profiling)

We do not use any automatized decision making that limits you or has any regulating effects.

8. Internet-specific data processing

8.1. Cookies

Our website typo3camp-berlin.de uses cookies.

A browser cookie is a small piece of data that is stored on your device. Through the source established by the cookie, certain information can flow. Cookies cannot operate any programs or transmit a virus on your device. They serve to make the internet more user friendly and more effective.

Through these cookies we receive information about your browser type, its version, the URL-click stream (order of our webpages that you view), the date and time of your visit, as well as the cookie number. We do not receive names, postal address, e-mail address or IP-address of our users. The immediate cookies placed by T3CB only serve statistical purposes, so that we can learn things such as which contents are most popular and to make our website more user-friendly.

Through these statistical findings about the browser and system we can also optimize our website design. Moreover we always aim to offer our users relevant content and services. For these purposes we and our partners analyze the information contained in log files and cookies automatically.

If you wish to object to the use of cookies and stop the acceptance and placement of new cookies, you can adjust this in your browser settings as the majority of browser types automatically accepts cookies. You can find the instructions for this in the help function of your internet browser. The browser settings only apply to each device, where you change the settings. If you are using a different device, you have changed your browser software, or you have reinstalled your browser, you will need to re-adjust the settings.

8.2. Use of Matomo

Our website uses Matomo, a web and mobile analytics software, to analyze the use of our site so we can continuously improve our website and make it more interesting for you. The legal basis for our use of Matomo is Article 6 (1) p.1 (f) of the GDPR.

For this evaluation, cookies are saved on your computer. The collected information is stored exclusively on the server of the responsible party. You can stop the evaluation by deleting the existing cookies and by changing the settings in your browser so that no additional cookies are saved on your device. We want to point out that you might not be able to fully use our website if you choose to do so.

8.3. Google Maps

We embed maps of the service “Google Maps” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in our website. The processed data contains IP-addresses and the user´s location data. This data can be processed in the USA. You can view Google LLC ´s privacy policy here:

https://policies.google.com/privacy?hl=en&gl=de 

8.4. Social Media

We do not use so-called “social plugins”.

9. If you have any comments or questions

We take all precautions we can for your safety and the security of your data. Your questions and comments on data security are very important to us, please feel free to message us on team(at)typo3camp-berlin(dot)de.

Berlin, May 2018

 

Contact

General Questions

Send us an email to team(at)typo3camp-berlin(dot)de. You can also reach us via Twitter and Facebook of course.

New: Our contact form. through which you can also send us feedback anonymously.

Sponsoring

Contact person for all questions regarding sponsoring is Hannes Gräf.