1.1 I, DJ Thommy, attach great importance to the protection and security of your personal data. I treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Please read the data protection declaration carefully and carefully. If you have any questions, please contact the person in section 1.4 persons responsible for data protection.

1.2 This data protection declaration applies to the collection, processing and use of personal data when using the website

dj-thommy-hamburg.com hereinafter referred to as ("website") and clarifies the type, scope and purpose of the processing of personal data on my website.

1.3 This data protection declaration applies to you regardless of whether you as a customer or a visitor get an overview of my offer. The data protection declaration also applies regardless of the end (device) used, e.g. desktop or mobile.

1.4 Provider of the website and responsible for data protection within the meaning of Art. 4 No. 7 GDPR is:

dj-thommy-hamburg.com

Owner: Thomas Karpinski

At the paddock 2

22844 Norderstedt

E-mail: djthommy@gmx.de

Tel .: 49 160 577 55 76

For further information I refer to my imprint.

The person responsible for the processing of personal data is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data.

If you believe that dj-thommy-hamburg.com does not adhere to the principles of data protection, please contact me via. I will make every effort to resolve the problem.

2.1 The subject of data protection is personal data. This includes all information relating to an identified or identifiable natural person (hereinafter "data subject"); An identifiable person is a natural person who can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, the expression of the physical , physiological, genetic, psychological, economic, cultural or social identity of this natural person. Data that is anonymized or aggregated and that can no longer be used to identify a specific natural person is not considered personal.

2.2 In the following, the term “user” encompasses all categories of data subjects. This includes both general visitors to the website who do not contact us, and those who, for example, use the contact form to provide us with their data or register with us. The terms used, such as “user”, are to be understood as gender-neutral.

2.3 I collect your data, for example, by notifying me of this, for example in the course of registration or booking (for details, please refer to section 6 of this data protection declaration). Other data is automatically collected by my or external IT systems when you visit the website. This is primarily technical usage data (e.g. internet browser, operating system or time of page visit). This data is recorded automatically as soon as you enter my website.

2.4 The personal data of users processed within the scope of this online offer basically includes inventory data (e.g. names and addresses of customers or service providers), contract data (e.g. previous bookings, payment information) and usage data (e.g. the visited sub-pages of my online offer, which are provided by third-party providers such as eg web analysis systems).

2.5 I only process users' personal data in compliance with the relevant data protection regulations in accordance with the requirements of data economy and data avoidance. This means that the data of the users are only processed if there is legal permission. Ie, in particular if the data processing is necessary for the provision of my contractual services or is required by law, the user has given consent, as well as based on and my legitimate interests, i.e. interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art 6 para. 1 lit. f. GDPR, in particular when measuring range, creating profiles for advertising and marketing purposes, and collecting access data and using third-party services.

2.6 With regard to the processing of personal data on the basis of the GDPR, I hereby inform you in accordance with Art. 13 GDPR that the legal basis for consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures Art. 6 Para. 1 lit. b GDPR, the legal basis for processing to fulfill my legal obligations Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect my legitimate interests Art. 6 Para. 1 lit. f GDPR.

3.1 Right to information

According to Art. 15 GDPR, you have the right to information about your personal data processed by me, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if I have not collected it from you, the existence of an automated one Decision making including profiling and, if necessary, meaningful information about the logic involved and the scope that affects you and the intended effects of such processing, as well as your right to be informed about the guarantees according to Art. 46 GDPR when your data is forwarded to third countries b exist.

3.2 Right to rectification

According to Art. 16 GDPR you have the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by me. If you have access to your personal data, e.g. by logging in, you are obliged to make changes to your personal data yourself. You can therefore easily make corrections yourself. If there are problems with the correction, you are of course welcome to use the number 1.4 Contact those responsible for data protection mentioned in this data protection declaration.

3.3 Right to deletion

According to Art. 17 GDPR, you have the right to request the deletion of your personal data if the conditions specified there are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. If and insofar as the customer has made a booking that has not yet been processed, the deletion can only be requested when the booking has been processed, because before processing, the data is saved by the in section 1.4. those responsible for data protection mentioned in this data protection declaration is necessary.

3.4 Right to restriction of processing

According to Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted, as long as the correctness of your data, which you disputed, is checked, if you refuse to delete your data due to unauthorized data processing and instead request that the processing of your data be restricted , if you need your data to assert, exercise or defend legal claims, after I no longer need this data after the purpose has been achieved or if you have objected for reasons of your particular situation, as long as it is not certain whether my legitimate reasons prevail.

3.5 Right to information

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing in accordance with Art. 19 GDPR , unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

3.6 Right to data portability

According to Art. 20 GDPR, you have the right to have data that I process automatically based on your consent or in fulfillment of a contract handed over to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.

3.7 Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which my company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

3.9 You can also object to the future processing of your personal data at any time in accordance with the legal requirements, cf. Art. 21 GDPR.

3.10 The data stored by me will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. If the user's data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be kept for commercial or tax reasons.

3.11 I would like to point out that we have no automated decision-making according to Art. 22 GDPR.

4.1 I take organizational, contractual and technical security measures according to the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by me against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons .

4.2 The security measures include, in particular, the encrypted transmission of data between your browser and my server. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line. The https encryption is also used on my site. If SSL or TLS encryption is activated, the data that you transmit to me cannot be read by third parties.

5.1 In the case of a mere visit to the platform (= access), ie if you are not registered or do not otherwise provide me with information, I will only process the personal data that your browser transmits to my server. I use a transmission method that is based on the SSL protocol (Secure Sockets Layer protocol: TLS 1.2). If you would like to view my website, I collect the following data, which is technically necessary for me to display my website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):

IP address (storage period 30 days)

· Date and time of the request

Time zone difference to Greenwich Mean Time (GMT)

· Content of the request (specific page)

· Access status / HTTP status code

· Amount of data transferred in each case

Website from which the request comes

Browser

Operating system and its interface

· Language and version of the browser software.

5.2 In addition, cookies are also used on my website. Cookies are information that is transmitted from my web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage. The use of cookies is necessary to enable my service or to further develop it technically. The legal basis is accordingly Article 6 (1) sentence 1 lit. f GDPR.

Changes to the privacy policy

From time to time, it may be necessary to adjust the content of this data protection declaration. I therefore reserve the right to change this data protection declaration if necessary. I will also publish the modified version here.