Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use, insofar as this results in said third parties processing data under their own control.
I. Information about us as controllers of your data
The party responsible for this website (the “controller”) for purposes of data protection law is:
Stefan Momm
Am Wasserwerk 16a
41564 Kaarst, Germany
E-mail: hello@intherookery.com
This website is a non-commercial, private fan archive. A data protection officer does not have to be appointed under Art. 37 GDPR.
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Cookies
This website sets no cookies. Nothing is stored on your device for analysis or for recognition, and there is no cookie notice. The one exception is a consent you gave yourself — see the section below. Because it records nothing but the answer you gave, storing it needs no further consent under § 25 (2) no. 2 TDDDG.
Stored consent
If you have loaded a map or a video, this site remembers that decision in your browser’s local storage for six months, so you do not have to click again on every page. All that is stored is which service you allowed and when — no identifier, nothing about you, and none of it leaves your device.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your browser to our hosting provider. These server log files record the type and version of your browser, the operating system, the website from which you came (referrer URL), the pages of our site you visit, the date and time of access, and the IP address of the connection from which our site is used.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the stability, functionality, and security of our website.
Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When a page is requested, the server data described above is transmitted there and processed. The legal basis is Art. 6 Para. 1 lit. f) GDPR; our legitimate interest lies in the reliable operation of the website. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF); transfers to the USA rely on the European Commission’s adequacy decision for that framework. Further information: vercel.com/legal/privacy-policy.
Audience measurement (Vercel Web Analytics)
To evaluate the use of our website we use Vercel Web Analytics, a service of Vercel Inc. The service works without cookies and without storing anything on your device. To distinguish visits, a hash is derived from the IP address, the browser identification, and a value that changes daily; it allows no recognition beyond that day and cannot be reversed.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in a data-minimising evaluation of usage. Further information: vercel.com/docs/analytics/privacy-policy.
Maps (CARTO)
To show the location of venues we use map material from CARTO (CARTO Technologies, Inc.), retrieved from the domains basemaps.cartocdn.com and tiles.basemaps.cartocdn.com. The map software itself (MapLibre GL) is served from our own server.
No connection to CARTO is made when a page is loaded. Instead of the map, only a placeholder is shown. Map tiles are requested from CARTO only once you actively click it; your IP address, the date and time, and the requested map section are transmitted to CARTO in the process. The legal basis is your consent, given by that click, under Art. 6 Para. 1 lit. a) GDPR. The consent applies to that page view only; it is not stored, and reloading the page withdraws it with effect for the future.
The map material is based on data from OpenStreetMap, which is available under the Open Database License. There is no connection to OpenStreetMap itself; the credit shown on the map is a licensing requirement. Further information on data protection at CARTO: carto.com/privacy.
Videos (YouTube)
Where videos are embedded in our website, these are embeds from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The embed uses the domain youtube-nocookie.com in what YouTube calls privacy-enhanced mode.
No connection to YouTube or Google is made when a page is loaded. The preview image is not loaded from there either. Only a placeholder is shown at first. The video is loaded only once you actively click it; at least your IP address, the date and time, and the page you visited are transmitted to YouTube, and YouTube stores cookies or comparable identifiers on your device. If you are logged in to YouTube at the same time, YouTube can assign this information to your account.
The legal basis is your consent, given by that click, under Art. 6 Para. 1 lit. a) GDPR. Further information: Cookies set by YouTube may be stored for up to two years. Transfers to the USA are based on the Data Privacy Framework (DPF). Further information: business.safety.google/privacy.
Contact
If you contact us by e-mail, the data you provide will be used to process your request. The legal basis is Art. 6 Para. 1 lit. b) or lit. f) GDPR. Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store it. We do not use a contact form.
External links
Our website links to external sites, for instance to setlist.fm as the source of individual entries, or to the pages of venues and festivals. Those sites are only contacted once you follow such a link. The respective provider is responsible for the data processing on the linked pages.
Parts of this notice are based on the model data protection statement of Anwaltskanzlei Weiß & Partner.