We give great importance to the protection of your personal data and compliance with data protection laws. Below, specific information about which personal data is processed for which purposes and on which legal basis, can be found.
1. Who is responsible for data processing?
HolidayPirates GmbH, Wallstraße 59, 10179 Berlin, Germany is the data controller. The Data Protection Commissioner of the HolidayPirates GmbH is Mr. Roman Maczkowsky. He can be contacted via: [email protected]
2. Which categories of personal data are being used?
We process the Instagram username, the date of participation and type of engagement.
2.1 The winner’s personal information
We only process contact data such as forename, surname, address, email address and Instagram username of the winners of prizes in this competition.
3. Where do these data come from?
The data comes directly from you, they have been collected in the course of participating in the competition.
4. For which purposes are my data being processed? What is the legal basis that the company bases this on?
a. Art 6 para 1 b) GDPR
We process personal data within the framework of contractual negotiations and the performance of the contract for the prize draw that has been concluded between you and us.
Processing takes place for the provision of contractually guaranteed services like e.g. the fulfilment of a possible claim for the prize offered as part of the competition.
Legal basis is Art. 6 para. 1 b) GDPR. Within the scope of contract fulfilment and performance we process the data that you provide to us upon formation of the contract or in the course of the contractual relationship. This includes in particular your master information (name, surname, date of birth, address, e-mail address).
b. Art. 6 para 1 a) GDPR
If you have provided us with your consent to process data, we do so for the purposes informed about in the course of the declaration of consent. Consent that you have provided may be revoked at any time.
c. Art. 6 para 1 f) GDPR
We process your data in order to protect our own legitimate interests or those of third parties. This applies in particular to internal communication between affiliated companies and other administrative purposes.
5. Will data be transferred?
Within our company respectively the group of companies those employees receive access to your data who need the data in order to fulfil the contractual or legal responsibilities.
6. What are my rights?
Basically you have the following rights:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to object (Art. 21 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
7. Do I have a right to complain?
Yes, you have the possibility to address your complaint directly to us or towards the competent data protection authority.
We attach great importance to transparency. Please do not hesitate to contact us if you have any questions.
8. How long will my data be saved?
We process and store your personal data for the period of the existing contract. We will regularly delete the data when data is not required for contractual or legal purposes anymore. However, we need to take into account legal retention periods (in particular § 257 HGB and § 147 AO). These are up to 10 years.
Insofar as data is to be retained to ensure enforcement of legal claims, the limitation periods can be up to 30 years, whereby the regular limitation period is three years.
If your data is used for advertising purposes, we will only process the data until you object to its use or have revoked your consent or until usage is no longer permitted by law.
9. Do I have to give you my data?
In the context of our contractual relationship, you must provide the personal data that is necessary for the performance and fulfilment of the contract or the processing of which we are legally bound. Failure to make them available would mean that we would regularly are unable to conclude the contract with you.