Data Protection Policy

1. General

Your personal data are processed by us only in accordance with the provisions of the GDPR. The following provisions describe the type, scope, and purpose of collecting, processing and utilizing personal data. This data privacy policy applies only to our web pages. If links on our pages route you to other pages, please inquire there about how your data are handled in such cases.

ATTENTION: cookies set up by services used on this website such as Twitter, YouTube, Vimeo, may lead to your personal data being processed outside of the EU/EEA. In some countries, and especially in the USA, there is no adequate level of protection to personal data. There is, among others, a risk that authorities may access your personal data for security and surveillance purposes without informing you or giving you the right to appeal. If you consent to this, the transfer of your data will be based on article 49, paragraph 1, point “a” of the GDPR, instead of on the articles indicated in the respective sections below. You can revoke your consent at any time with effect for the future by changing your browser settings, clicking on our cookie banner or accessing https://bioplasticseurope.eu/cookies .

The latter is our dedicated page listing all operational cookies. Please read your rights as a data subject in section 4 of this document.

2. Contact Details of the Data Controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection provisions is:

Heyhoo Events - Tamara Strika e.U. c/o Datscha-Projekt GbR, Karostar Musikhaus St. Pauli Neuer Kamp 32 20357 Hamburg E-MAIL: contact@heyhoo.io

3. Contact details of the data protection officer at Heyhoo Events - Tamara Strika e.U.:

Data Protection Officer at Heyhoo Events - Tamara Strika e.U.
Tamara Strika
c/o Karostar Musikhaus St. Pauli
Neuer Kamp 32
20357 Hamburg

E-MAIL: dataprotection@heyhoo.io

4. Scope of Processing the Personal Data

4.1 Log files

When you visit our website, you transmit data to our web server via your Internet browser. The following data are temporarily recorded in a log file via an active connection that is established for communication purposes between your Internet browser and our web server:

The IP address of the requesting computer
The date and time of access
The name, URL, and the size of the retrieved file that has been transferred
Access status (the requested file was transferred, not found, etc.)
Identification data about the used browser and operating system (if transmitted by the requesting web browser)
Referring website (if transmitted by the requesting web browser)

In individual cases, i.e., in response to reported faults, errors, and security incidents, a manual analysis is performed. The legal basis for processing this data is article 6, paragraph 1, point “ e” and article 6, paragraph 3, both of the GDPR. Logs are automatically deleted after 2 weeks.

4.2 Data storage in forms

We use forms on our websites in order, for example, to allow users to register for events or courses or to sign up for the press release mailing list or a newsletter. The personal data that you provide to us via our websites are accepted only with your consent and are used exclusively for the purposes stated in the forms insofar as there is no legal basis to collect them otherwise. If you wish to withdraw your consent please contact us under dataprotection@heyhoo.io. Please note the corresponding notices that are provided on the forms. All of the forms are only used to collect personal information that is strictly necessary. Your data will not be disclosed to third parties unless this is explicitly stated in the form. The legal basis for processing this data is the informed consent according to article 6, paragraph 1, point “a” of the GDPR.

4.3 E-mail contacts

Contact is possible via HEYHOO and EMAIL.

In this case, the user's personal data transmitted by e-mail will be stored in the recipient's inbox. This data is not passed on to third parties.

By using any HEYHOO online service or sending us e-mails, text messages or other communications from your computer or mobile device, including messages exchanged with us through our social networking profiles, you are communicating with us electronically. For contractual purposes, you agree to receive communications from us electronically and that all authorizations, notices, disclosures, and other communications we provide to you electronically will be in writing, unless otherwise required by applicable law.

The legal basis for processing this data is article. 6, paragraph 1, point “e”, and article 6, paragraph 3, both of GDPR.

4.4 Information about Cookies

To optimize our web presence, we use necessary session cookies. These are small text files stored in your computer's main memory. These cookies are deleted after you close the browser. Other cookies remain on your computer (long-term cookies) and permit its recognition on your next visit. The legal basis for processing this data is article. 6, paragraph 1, point “e”, and article 6, paragraph 3, both of GDPR.

4.5 Incorporation of third-party services and content

Our users can access content from third parties, such as YouTube videos, on Heyhoo. This requires that the providers of this content (hereinafter referred to as "third party providers") can see the IP addresses of the users, as the content cannot be sent to the browser of the respective user without the IP address. However, we have no influence on whether such third-party providers store the IP address, e.g. for statistical purposes. We will inform users about the information available to us in this regard.

4.5.1 Regarding the usage of YouTube plug-ins

Our users can link to YouTube content on Heyhoo. YouTube is operated by Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

If you access YouTube content through a link shared on Heyhoo, you will be connected to the YouTube servers and the plug-in will be displayed on the website by communicating with your browser. The plug-in will send back data to the YouTube server about which IP address you used to access our Internet sites. If you are logged in as a member of YouTube/Google, YouTube will associate this information with your respective personal user accounts on these platforms. When you use these plug-ins, by, for example, clicking on the video or its play button or by submitting a comment, this information will be associated with your YouTube user account.You can this by logging out of your personal Google account before using our website.

Additional information about how data are collected and used by YouTube/Google or plug-ins can be found in the YouTube Data Privacy Policy at https://policies.google.com/privacy?hl=en-GB  The legal basis for processing this data is the informed consent according to article 6, paragraph 1, point “a” of the GDPR.

4.5.2 Google reCAPTCHA

Google reCAPTCHA sets to distinguish between humans and bots. This is beneficial to make valid user reports. The following data is collected to check whether you are a human or a computer:

IP address of the device used,
which of our pages with the captcha you visit,
the date and duration of the visit,
the identification data of the device used
Browser and operating system type,
Google account if you are logged in to Google,
mouse movements on the reCaptcha areas and tasks for which you have to identify images.

This tool is only functional if you have accepted Marketing Cookies, or if you directly click on the confirmation banner to access the reCAPTCHA.

You have the right to object at any time to such processing of personal data relating to you, based on article 6, paragraph 1, point “f” of the GDPR, by blocking Marketing Cookies in our Cookie Banner.

You can find more information about Google reCAPTCHA and the corresponding privacy policy at https://www.google.com/privacy.

4.5.3 Regarding social networks

Our users may share links to content social networks through HEYHOO, such as:

- Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland),
- Instagram (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).

By accessing those social networks via links shared on Heyhoo, the company Facebook Ireland Ltd. as their platform operator in the EU will be able to process your data (e.g. personal data, IP address, etc.). The company Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. may offer advertisements both inside and outside Instagram and Facebook based on your interests. If you are logged into Instagram or Facebook at the time you access our website, Facebook Ireland Ltd. will also associate this data with your user account. Facebook Ireland Ltd. may also set cookies when processing your data.

If you do not agree to this processing, you have the option to prevent the installation of cookies by making the appropriate settings in your browser. Cookies that have already been stored can be deleted at any time. The instructions for doing so depend on your browser and the system you are using. In the case of Flash cookies, processing cannot be prevented by the settings in your browser, but only by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, it may not be possible to fully use all the features of Instagram.

For details on processing activities, their deletion and the deletion of data processed by Facebook and Instagram, please refer to their privacy policies: https://help.instagram.com/519522125107875 and https://www.facebook.com/policy.php. Processing by Facebook Ireland Ltd. may also be carried out in the United States by Facebook Inc. of 1601 Willow Road, Menlo Park, California 94025.

The legal basis for the processing of this data is informed consent pursuant to Article 6, paragraph 1, subsection 1, letter "a" of the GDPR.

4.5.4 Google Tag Manager

HEYHOO uses the Google Tag Manager service. Google Tag Manager is a solution operated by Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), which allows to manage the tags of the marketed website through an interface. The tag manager tool itself (which implements the tags) is a cookie-free domain and does not record any personal data. The tool causes other tags to be activated, which in turn may record data under certain circumstances. Google Tag Manager does not access this information. If registration has been disabled at the domain or cookie level, this setting remains in effect for all tracking tags implemented with Google Tag Manager.

The legal basis for this data processing is Art. 6 paragraph "f" of the GDPR. The aim and legitimate interest is to increase the visibility of this website and the attractiveness and usability of our services.

4.5.5 SoundCloud

On HEYHOO, you may listen to audio files which are hosted on SoundCloud. In this case, you may receive cookies and other tracking technologies used by SoundCloud, for which we undertake no liability. According to Soundcloud, their tracking technologies have the purposes of helping provide, protect and improve the platform. Those technologies store your preferences, personalize content, display ads based on your interests, combat fraud and abuse, and rationalize the operation as well as access to the platform. SoundCloud may allow certain service providers to place cookies and similar technologies for those purposes. A complete overview of those, as well as explanations regarding your choices and controls, can be found at https://soundcloud.com/pages/cookies

4.5.6 Jitsi

HEYHOO uses Jitsi Meet (“Jitsi”) for the video chat tool. Jitsi is owned by 8x8 Research and Developments SRL (B-DUL 21 DECEMBRIE 1989 NR. 77, 400604, CLUJ-NAPOCA, Romania).

Users may choose to enter personal information such as their name or e-mail address, which is in no way mandatory and only shared with other meeting participants. This information is not retained after the meeting. Chat data and speaker stats are stored for the duration of the meeting and then destroyed when it ends. Be aware that If you use the chat function, chat content is stored during the meeting. If you record a meeting, the recording of the meeting is temporarily stored until it is uploaded to your file hosting service (e.g. DropBox). If you livestream your meeting, video content is temporarily stored to buffer the livestream. More information about Jitsi can be found at: https://jitsi.org/meet-jit-si-privacy/ ; https://jitsi.org/meet-jit-si-terms-of-service/ and https://jitsi.org/security/

4.5.7 Vimeo

HEYHOO uses Vimeo plugins to integrate and share video content. This content is provided by Vimeo Inc (555 West 18th Street, New York, New York 10011, USA).

If you access a website page featuring a Vimeo plugin, a connection will be established to the servers of Vimeo. This will result in the Vimeo server being informed which of our pages you have accessed. Vimeo will also be given your IP address. This will even be the case if you are not logged in with Vimeo or do not have an account with Vimeo. The information gathered by Vimeo will be transferred to the Vimeo server in the United States.

If you are logged into a Vimeo account, you allow Vimeo to match your surfing activity to your personal profile. You can prevent this happening by logging out of your Vimeo account.

For further information on how your user data is processed, go to the data protection policy of Vimeo: https://vimeo.com/privacy.

Rights of the Data Subject

Users of our website have the following rights:

Right to access your personal data that is stored by us (Art. 15 GDPR).
Right to request rectification of incorrect or incomplete personal data (Art. 16 GDPR).
Right to the erasure of personal data concerning you, unless the processing of such data is required for purposes of exercising the right of freedom of expression and information or of complying with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (Art. 17 GDPR).
Right to the restriction of the processing of personal data (Art. 18 GDPR).
Right to object to any processing that is in the public interest or is used for purposes of profiling, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Art. 21 GDPR). Right to revoke your previously given consent to the collection, processing and use of your personal data at any time for future collection, processing and use (Art. 7 (3) GDPR). If you exercise this right, we may no longer perform the data processing that we had been performing on the basis of such consent.
Right to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the terms of the GDPR (Art. 77 GDPR).

Inquiries can be directed to the following e-mail address: dataprotection@heyhoo.io

Last Updated 05.01.2021