Privacy Policy of Event Photowall

1. Privacy at Event Photowall

Using our software (Event Photowall) is generally possible without providing personal data. Where personal data (such as name, address or email addresses in the context of a booking) is collected on our pages, this is done on a voluntary basis wherever possible.

When guests upload photos, this is done anonymously. No IP addresses or device IDs are permanently linked to photos in a way that would allow identification of the person, unless this is strictly necessary to combat misuse.

2. Hosting & Content Delivery

We host the content of our website with the following provider:

We have concluded a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. Handling of Photos (Image Data)

The core purpose of Event Photowall is the temporary storage and display of image files.

• Visibility: Uploaded photos are visible to the organiser (administrator) and - depending on settings - to all guests on the screen.
• Storage period: Data is automatically deleted by default 30 days after the event date.
• Right to one's own image: The organiser is responsible for informing their guests that photos will be shown on a screen. We provide templates for notice signs for this purpose.

4. General Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

We point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

This privacy policy informs users about the nature, scope and purposes of the processing of personal data by the responsible provider, "Event Photowall". It applies to the website www.event-photowall.com operated by "Event Photowall" and our Interactive Slideshow App for live events.

5. Legal Bases

With regard to the terms used, such as "personal data", "user" or "processing", we refer to Art. 4 of the General Data Protection Regulation (GDPR).

We process personal data of users exclusively in compliance with the relevant data protection regulations. Pursuant to Art. 13 GDPR, we inform you of the legal basis for our data processing.

Where the legal basis is not stated in this privacy policy, the following applies: the legal basis for processing personal data with separate consent is Art. 6 para. 1 lit. a GDPR, the legal basis for processing data to fulfil our services and carry out contractual measures is Art. 6 para. 1 lit. b GDPR, the legal basis for processing personal data to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing personal data to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR.

6. Cookies and Browser Settings

You can configure cookie settings in your browser, including which cookies you wish to allow, block or delete.

A note on blocking or deleting cookies: some features on the event-photowall.com website may not function as expected.

If you use different browsers, this must be configured in each browser. Instructions for the most common browsers:

• Internet Explorer
• Google Chrome
• Mozilla Firefox
• Opera
• Safari

7. Disclosure of Data to Third Parties and Third-Party Providers

Within the framework of legal regulations, we are entitled to commission other companies and individuals to carry out tasks on our behalf for the fulfilment of which the transfer of personal data is required. This includes, for example, companies specialising in payment processing, dispatch of goods, newsletter sending, etc.

Personal data is only passed on to third parties on the basis of legal permissions and within the framework of legal requirements. We only share user data with third parties where this is required for contractual purposes pursuant to Art. 6 para. 1 lit. b GDPR, or where we use services within the scope of our legitimate interests (Art. 6 para. 1 lit. f GDPR). Where we commission third parties to process data under a so-called "data processing agreement", this is done on the basis of Art. 28 GDPR.

Where we use third-party services to provide our offerings, we take appropriate legal precautions as well as technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal provisions.

Personal data may also be transferred to servers outside the EU or to trusted third parties based outside the EU so that they can process this data on our behalf. Where the EU Commission has not issued a decision on an adequate level of data protection for the country in question, we conclude contracts in accordance with EU data protection requirements, aimed at ensuring that your rights and freedoms are adequately protected and guaranteed.

8. Data Security

All communication between your browser and our services is conducted via an encrypted TLS connection using HTTPS (Hypertext Transfer Protocol Secure) to protect your information from unauthorised access by third parties. Only selected administrators have access to the data, and only to the extent necessary to maintain the services.

We also employ appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

9. Contact Form

If you submit enquiries to us via the contact form, your details from the enquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The processing of data for the purpose of contacting us is carried out pursuant to Art. 6 para. 1 lit. a GDPR on the basis of your voluntarily granted consent.

10. Access Data and Log Files

Access logs are automatically maintained on our servers, i.e. access data is collected. Access data includes the name of the website accessed, file, date and time of the request, data volume transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The data is collected exclusively on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, namely for the maintenance and improvement of our services and for security purposes (e.g. investigation of misuse).

11. Data Subject Rights

You have the right:

• pursuant to Art. 7 para. 3 GDPR, to withdraw any consent you have given us at any time with future effect,
• pursuant to Art. 15 GDPR, to request free information about your personal data processed by us;
• pursuant to Art. 16 GDPR, to immediately request the correction of inaccurate or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, insofar as the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data;
• pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, workplace or our registered office.

12. Right to Object

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are grounds relating to your particular situation, or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, a simple email to mail@event-photowall.com will suffice.

13. Google Analytics 4 (with Consent)

What is Google Analytics?

This website uses features of the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). Google Analytics uses so-called "cookies" - text files stored on your computer that enable analysis of your use of the website.

Legal Basis & Consent

The legal basis for using Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. We use Google Consent Mode v2, which ensures that Google Analytics only collects data after your active consent. Without your consent, no data is transmitted to Google.

IP Anonymisation & Data Protection

We have activated IP anonymisation (anonymize_ip: true). Your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being stored. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

Purpose of Data Processing

Google will use this information on our behalf to:

• Evaluate your use of the website
• Compile reports on website activity
• Provide further services related to website and internet usage

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data held by Google.

Retention Period

We have set the retention period for data collected by Google Analytics to 14 months. After this period expires, the data is automatically deleted.

14. Microsoft Clarity (with Consent)

What is Microsoft Clarity?

This website uses Microsoft Clarity, a web analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (represented in the EU by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity helps us understand user behaviour on our website by creating anonymised session recordings (mouse movements, clicks, scroll behaviour) as well as aggregated heatmaps.

Legal Basis & Consent

The legal basis for using Microsoft Clarity is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Without your active consent, Clarity is not loaded and no data is transmitted to Microsoft.

Collected Data & Anonymisation

Clarity does not capture sensitive input fields (e.g. passwords, payment data) and masks text entries in form fields by default. The following are collected: anonymised mouse movements, clicks, scroll behaviour, visited pages, browser type, operating system, screen size, as well as a truncated IP address for geolocation at country/city level.

Transfer to Third Countries (USA)

Microsoft Clarity transfers data to the USA. Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023). This ensures an adequate level of data protection within the meaning of Art. 45 GDPR. In addition, we have concluded the EU Standard Contractual Clauses with Microsoft as a supplement.

Purpose of Data Processing

We use the data exclusively to:

• improve the usability of our website
• identify weaknesses in the booking and usage process
• detect and fix UX issues

Retention Period

Microsoft stores the data collected by Clarity for a maximum of 13 months by default and then deletes it automatically.

15. Changes to the Privacy Policy

We reserve the right to amend this privacy policy from time to time to reflect changes in the legal situation or the expansion of the functional scope of our website. You should therefore read the privacy policy regularly to stay informed about the protection of your data. By continuing to use our services, you agree to this privacy policy in its current version.