DATA PROTECTION

Privacy policy | SIDELINES - Agentur für Kommunikation GmbH, as of 04.10.2023

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

SIDELINES - Agency for Communication GmbH

Löwengasse 27 G

60385 Frankfurt am Main

Frankfurt am Main, Germany

069 38098210
info[at]sidelines.agency
https://sidelines.agency/

Contacting the data protection officer

The data protection officer of the controller is

DataCo GmbH

Dachauer Str. 65

80335 Munich

Germany

+49 89 7400 45840 www.dataguard.de

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data if we have a legitimate purpose and a legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)- You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections "Exercising your rights" in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) - We need to use your data to fulfil a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - We need to use your data to comply with the law.

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) - The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) - The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that we may not be able to provide you with our website services if your data is processed to fulfil a contract or a legal obligation and you do not provide the requested data.

Data sharing and international transfer

As explained in this Privacy Policy, we use various service providers to help us provide our services and keep your data secure. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, which oblige them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" level of data protection or because the country to which your data is transferred has an "adequate" level of data protection.

country to which your data is transferred has an "adequate" standard of data protection according to the European Commission, or by applying another protection measure, such as an extended

contractual agreement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.

Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. the right to information (Art. 15 GDPR)
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this data and to the following information:

Processing purposes

Categories of personal data

Recipients or categories of recipients

the planned storage period or the criteria for determining this period the existence of the rights to rectification, erasure, restriction or objection

Right to lodge a complaint with the competent supervisory authority

If applicable, origin of the data (if collected from a third party)

If applicable, the existence of automated decision-making, including profiling, with meaningful

information about the logic involved, the scope and the expected effects

If applicable, transfer of personal data to a third country or international organisation

2. right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request that the personal data be corrected or completed without undue delay.

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.

In the case of unlawful processing, you oppose the erasure of the personal data and request the restriction of their use instead.

We no longer need your personal data for the purposes of the processing, but you require your personal data for the establishment, exercise or defence of legal claims, or

after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. right to erasure ("right to be forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand that your personal data be erased without undue delay

Your data is no longer necessary for the processing purposes for which it was originally collected.

You withdraw your consent and there is no other legal basis for the processing.

You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.

Your personal data is processed unlawfully.

The deletion is necessary to fulfil a legal obligation under Union law or the law of the member state to which we are subject.

The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if processing is necessary:

For exercising the right of freedom of expression and information;

For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject

For reasons of public interest in the area of public health.

For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

For the establishment, exercise or defence of legal claims.

5. right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If the personal data concerning you is processed for direct marketing purposes, you have the right to

you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

7 . Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of

the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR

Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

Information about the browser type and version used

The user's operating system

Date and time of access

Websites from which the user's system accesses our website

Websites that are accessed by the user's system via our website

This data is stored in the log files of our system.

This data is not stored together with other personal data of the user.

2 Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

3 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f

GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

5 Exercising your rights

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

Use of cookies

1. description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Below we describe the type of cookies we use:

We use technically necessary cookies, which are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies

Language settings

Frequency of page views

Utilisation of website functions

We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.

The following data is processed when cookies that are not technically necessary are set

IP address

Location of the internet user

Date and time the website was accessed

Tracking of the surfing behaviour

Linking the website visit with other social media platforms

2. purpose of the data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require technically necessary cookies for the following applications:

Adoption of language settings

Functionality of the website

Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can thus constantly optimise our offer. In particular, these cookies serve the following purposes:

3. legal basis for data processing

The provisions of the Telecommunications and Telemedia Data Protection Act (TTDSG) apply to the storage of information in the end user's terminal equipment and/or access to information already stored in the end user's terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored and accessed on your terminal equipment on the basis of Section 25 (2) No. 2 TTDSG. The purpose of storing and accessing the information in your terminal equipment is to make it easier for you to use our website and to be able to offer you our services as you have requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted at the end of the session (e.g. logging out or closing the browser) or after a specified period of time. Information on different storage periods for cookies can be found in the following sections of this privacy policy.

If cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG i.V.m. Art. 6 para. 1 lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or grant it again at a later date by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.

4 Exercising your rights

You can revoke your consent to the use of cookies at any time and change your

consent preferences under the following link: When you open the website, a banner asks whether cookies are accepted. This setting can be subsequently adjusted using a button at the bottom left labelled "Cookie settings".

Newsletter

1. description and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us.

In order to provide this service, we collect the following data from you:

Email address

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

2 Purpose of data processing

The purpose of collecting the user's email address is to send the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

3 Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given his consent.

4. duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected during the registration process is generally deleted after a period of seven days.

5 Exercising your rights

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.

This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.

Email contact

1. description and scope of data processing

It is possible to contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.

The data is used exclusively for processing the conversation.

2 Purpose of data processing

If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.

3. legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to answer your enquiry that you send by email in the best possible way.

If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5 Exercising your rights

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

Company websites

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate.

If you perform an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

However, as we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our corporate presence on social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for

The use of SIDELINES - Agentur für Kommunikation GmbH's corporate presence on social media serves the purpose of self-presentation and acquisition of potential customers.

The publications on the company website may contain the following content:

Information about services

projects, stories and employees

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data generated by the company website is not stored in our own systems.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of

standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our

Instagram company presence at any time and assert your data subject rights mentioned under IV. of this

of this privacy policy. To do so, send us an informal email to info@sidelines.agency. You can find more information on the processing of your personal data by Instagram and the corresponding objection options here:

Instagram:

https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States

On our company website, we provide information and offer YouTube users the opportunity to communicate.

If you perform an action on our YouTube company page (e.g. comments, contributions, likes, etc.), you may make personal data (e.g. your real name or photo of your user profile) public.

However, as we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our corporate presence on social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for

The use of SIDELINES - Agentur für Kommunikation GmbH's corporate presence on social media serves the purpose of self-presentation and acquisition of potential customers.

The publications on the company website may contain the following content:

Information about services

projects, stories and employees

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

For the processing of your personal data in third countries, we have appropriate guarantees in the form of

standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our

YouTube company website at any time and assert your data subject rights mentioned under IV. of this

of this privacy policy. To do so, send us an informal email to info@sidelines.agency. You can find further information on the processing of your personal data by YouTube and the corresponding objection options here:

YouTube:

https://policies.google.com/privacy?gl=DE&hl=en

Use of company presences in professional networks

1. scope of data processing

We provide information on our website and offer users the opportunity to communicate.

The company website is used for applications, information/PR and active sourcing. For the

We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:#

LinkedIn

XING

On our website we provide information and offer users the opportunity to communicate.

The company website is used for job applications, information/PR and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/de

If you carry out an action on our company website (e.g. comments, posts, likes

etc.), you may make personal data (e.g. real name or photo of your user profile) public.

2 Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. purpose of the data processing

The purpose of our company website is to inform users about our services. Every user is free to publish personal data through activities.

4 Duration of storage

The data generated by the company website is not stored in our own systems.

5 . Exercising your rights

You can object to the processing of your personal data that we collect in the context of your use of our company website at any time and assert your data subject rights mentioned under IV. of this privacy policy. To do so, please send us an informal email to the email address stated in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/en

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

Host Europe GmbH, Hansestraße 111 , 51149 Cologne, Germany

Further information on the processing of personal data by HostEurope can be found at: https://www.hosteurope.de/AGB/Datenschutzerklaerung/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

Information about the browser type and version used

The user's operating system

Date and time of access

Websites from which the user's system accesses our website

Websites that are accessed by the user's system via our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions.

The website server is geographically located in Germany.

Registration

1. description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

Email address

As part of the registration process, the user's consent to the processing of this data is obtained.

2 Purpose of data processing

Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

3. legal basis for data processing

If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

This is the case for the data collected during the registration process for the fulfilment of a contract or for the

fulfilment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

5 Exercising your rights

As a user, you have the option of cancelling your registration at any time. You can have the data stored about you amended at any time.

Specifically, you can request deletion in the following ways:

You can delete your profile for the Prediction Game at any time by cancelling your membership via the "Profile" menu item. The final deletion of your data will take place 2 weeks after the termination of your membership. 

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

Integrated third-party services

We use various service providers to provide the services we offer on the website.

In general, we have a legitimate interest in sharing your data with the relevant service

service providers if these services are essential for the provision of the basic service offered on the website in order to provide the relevant website service.

If such services are required for additional services, enhanced functions or additional purposes, your personal data will only be shared with service providers if you give your consent.

Here you can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings: When you open the website, a banner asks whether cookies are accepted. This setting can be subsequently adjusted using a button at the bottom left labelled "Cookie settings".