Aachen-Laurensberger Rennverein e.V. (ALRV)

Albert-Servais-Allee 50, 52070 Aachen / P.O. Box 50 01 01, 52085 Aachen, Germany

Office – T: (49) 241-9171-0, F: (49) 241-9171-199, E: info@chioaachen.de, www.chioaachen.com

Registered seat in: Aachen, Register of Associations Aachen under Register No. 1234

Changes to these Data Privacy Policy – For legal reasons and/or for organisational reasons it may from time to time become necessary to change or adapt our Data Privacy Policy. Keeping this in mind please refer to the respective current version of our Data Privacy Policy.

Data Privacy Policy

The Aachen-Laurensberger Rennverein e.V., Albert-Servais-Allee 50, 52070 Aachen (“ALRV”) takes the protection of your personal data very seriously. We process your personal data exclusively within the legal framework of the laws and regulations applicable in the Federal Republic of Germany. Hereinafter, we explain the type, extent and purpose of processing thereof. We protect our website and other systems against the access of unauthorised persons using suitable technical and organisational measures. The responsible party within the meaning of the DSGVO shall be the ALRV. You can contact the Data Protection Supervisor of the ALRV, Mr. David Reimes, by phone +49 (0) 241-99034276 or by email datenschutz@edv-reimes.de, at any time regarding this issue and any possible further queries on the topic of the protection of personal data. In addition, you as well may contact a surveillance authority acc. to Art. 77 DSGVO, this being in general the surveillance authority of your regular place of residence or pace of work or our company’s registered business seat.

Your Data Protection Rights - the collection, processing and use of personal data by the ALRV is based on the German Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). You shall be entitled to the following rights at any time:

-to request information about the personal data processed in accordance with Art. 15 DSGVO. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom the data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to file a complaint with a surveillance authority, the origin of the data if they have not been collected by the ALRV, as well as the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) DSGVO and significant information about its details;

-to demand the correction of inaccurate or incomplete personal data stored in accordance with Art. 16 DSGVO without undue delay;

-to demand the deletion of the stored personal data in accordance with Art. 17 DSGVO. The right to deletion shall not apply to the extent that the processing is required for exercising of the fundamental right to freedom of expression, for compliance with legal obligations, for reasons of public interest with respect to public health or for the enforcement, pursuit or defence of legal claims;

-in accordance with Art. 18 DSGVO, to request restriction on processing of personal data in case the accuracy of the personal data is in dispute, the processing is unlawful and the participant refuses the deletion of the personal data and instead requests the restriction of the use of the personal data or the personal data is no longer required for the purposes of processing but the participant requires them for the enforcement, pursuit or defence of legal claims or the participant has filed an objection to the processing in accordance with Art. 21 (1) DSGVO;

-to receive the personal data in a structured, common and machine-readable format or to request the transfer to another responsible party in accordance with Art. 20 DSGVO;

-at any time to revoke the consent once given vis-à-vis the ALRV in accordance with Art. 7 (3) DSGVO. As a result, the processing of data that was based on this consent may no longer be continued for the future.

Changes to this data privacy policy – Due to legal and/or organisational and/or jurisdictional reasons, amendments or adjustments to our data privacy policy may become necessary from time to time. In this regard, please make sure you refer to the current version of our data privacy policy available and permanently storable at www.chioaachen.com and www.chioaachencampus.de.

Ticket Shop – Entrancetickets can be purchased without providing any personal data whatsoever at our head office or at ticket sales offices authorised by us. ALRV is the provider of the ticket shop. Personal data is collected and processed if and to the extent necessary for the establishment, execution or termination of the respective legal transaction (purchase). For this purpose, the necessary personal data (title, first and last name, email address, postal address, payment data, product-specific data, order history) required to fulfil the respective order is collected and processed. The legal basis for the processing is Art. 6 (1) lit. b) DSGVO. The data provided by the customer will also be collected, processed and used for the purpose of legal prosecution ("Ticket Enforcement") of violations of the GTC for the purchase of entrance tickets and the stay on the Show Ground in an automated procedure. The web-based online platform for the sale of entrance tickets is provided by SAP Deutschland SE & Co. KG. Their data privacy policy can be viewed here: https://www.sap.com/germany/about/legal/privacy.html.

An automatic plausibility check and address authentication takes place during the entry of your address in an effort to avoid mistakes and to simplify the ordering process.  This service is provided by UNISERV GmbH based in 75179 Pforzheim, Germany, Rastatter Str. 13. (Their data privacy policy can be viewed here: https://www.uniserv.com/datenschutz).

Personal data (acc. to Art. 6 (1) a,b,c DSGVO) is only collected, if you voluntarily provide us with such, for example for the purpose of processing your orders, when registering for personalised services or for obtaining information und newsletters by mail, email or other channels. Such personal data will be stored until revoked or for as long as is required by law. The processing of your stored personal data takes place in states of the European Economic Area (EEA) or otherwise in countries providing data protection which is not comparable to the data protection within the EEA. Such a transmission is then governed by the standard contractual clauses according to the resolution of the EU-Commission 2010/87/EU or its successor, in order to warrant the protection of your personal data equivalent to the EEA level of protection by contractual means. An edited version of these standard contractual clauses (without commercial content and information, which is not relevant) can be requested from datenschutz@edv-reimes.de. If we pass on personal data, we do so exclusively to service providers and partner companies that support us with processing orders and supplying customers with information. These companies are only allowed to use your personal data for the fulfilment of the tasks assigned by us and they are obliged to observe the data protection regulations applicable in the Federal Republic of Germany. From time to time, we may be forced to disclose your data due to legal regulations or legal procedures. Otherwise, personal data is not passed on to third parties.

For handling your entrance ticket order with certain forms of payment (e.g. MasterCard, Visa Card, ec-Card) we use the services of the following providers: BS Payone GmbH, which is located in 60528 Frankfurt/Main, Lyoner Straße 9, Germany (their data privacy policy can be viewed here:  https://www.bspayone.com/de/privacy) and Computop Wirtschaftsinformatik GmbH, which is located in 96050 Bamberg, Schwarzenbergstr. 4, Germany (https://www.computop.com/de/datenschutz/), the SOFORT GmbH, located in 80339 München, Germany, Theresienhöhe 12, which is part of the Klarna Group, Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden (https://www.klarna.com/sofort/datenschutz) and American Express Services Europe Limited, located in 60486 Frankfurt am Main, Germany, Theodor-Heuss-Allee 112 (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html).

Websites/Internet presence - The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the laws and regulations of the Federal Republic of Germany. If personal data, except for the ticket shop, (i.e. names, addresses, or email addresses) is collected on our site, this only occurs where possible on a voluntary basis. This data is not passed on to third parties without your explicit consent in cases other than the following: (i) if an explicit consent has been granted in accordance with Art. 6 (1) S. 1 lit. a) DSGVO, (ii) if the transfer in accordance with Art. 6 (1) S. 1 lit. f) DSGVO is necessary for the assertion, exercise or defence of legal claims (e.g. ticket enforcement) and there is no reason for the assumption that there is an overriding legitimate interest in the non-transfer of the respective data,(iii) if the transfer in accordance with Art. 6 (1) S. 1 lit. c) DSGVO, (iv) if this is legally admissible and required pursuant to Art. 6 (1) S. 1 lit. b) DSGVO for the execution of contractual obligations with the customer, or (v) if the transfer is conducted to a carefully selected service provider (Art. 28 (1) DSGVO) with whom a contract for order processing (Art. 28 (3) DSGVO) has been concluded (e.g. for the shipping of entrance tickets). We would like to point out that data transmission via the Internet (i.e. when communicating per email) is subject to security breaches. It is not possible to guarantee complete protection against the data being accessed by third parties.

CHIO Aachen Campus - Hereinafter, we provide information about the processing of personal data in relation to the CHIO Aachen CAMPUS ("CAMPUS"), in particular, with regard to visiting the CHIO Aachen CAMPUS Online Shop ("CAMPUS-Shop"):

When creating a Customer Account in the CAMPUS-Shop, the following personal data will be collected about you: First and last name, e-mail address and password, address, telephone number, date of birth, data for payment processing, photos.

The aforementioned data will be processed by the ALRV exclusively for the purpose of and within the scope of processing the CAMPUS-Offers purchased, ordered or booked by you via the CAMPUS-Shop. The legal basis for processing the data is Art. 6 Para. 1 lit. b DSGVO. Furthermore, we request data on your horse, on starting and results lists as well as statistics and your association membership, in accordance with Art. 6 para. 1 lit. f DSGVO. We delete this data as soon as the statutory limitation period with regard to our contractual relationship with you has expired (usually three (3) years from the end of the year in which the last contractual claim arose), unless for legal reasons (e.g., retention periods under tax law) or legitimate interests in identifying individual customers for a longer period. Processing your personal data takes place in countries of the European Economic Area or in countries with a level of data protection that is comparable to the level of data protection within the EEA. Such transfer of data shall then be subject to the standard contractual clauses as set out in EU Commission Decision 2010/87/EU or any successor version, in order to contractually ensure protection of your personal data by a level of protection applicable within the EEA. You can request an edited version of these standard contractual clauses (excluding commercial content and non-relevant information) at datenschutz@edv-reimes.de. When we share personal data, we only do so with service and partner companies that help us process orders and provide information to Customers. These companies may only use your personal data to fulfil their obligations on our behalf and are obliged to comply with the data protection regulations applicable in the Federal Republic of Germany. Sometimes we may be forced to disclose your data due to legal regulations or legal processes. However, in all other cases personal data is not passed on to third parties. In particular, data will not be transferred to a third country or to an international organisation, unless this is necessary in the context of the payment service provider you have chosen. In this case, the data transfer to a third country (e.g., USA) takes place on the basis of standard contractual clauses (Art. 46 para. 2 lit. d) DSGVO) and additional technical security measures. When processing your orders or bookings with the payment service provider Stripe, Inc., we use the services of third parties to whom we provide the payment information of the orders and who carry out the billing for us. Our service provider for this is Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA (you can view their data privacy policy here: https://stripe.com/de/privacy#translation).

For the use and operation of the CAMPUS-Shop, the ALRV also uses a licence from a service provider (Black Horse One GmbH - Martin-Luther-Ring 3 - 85598 Baldham), which means that the above-mentioned data is, therefore, passed on to that service provider. The service provider also processes this data exclusively for the purpose of processing the transactions made via the CAMPUS-Shop and is also obliged to process and secure data properly by means of a data processing agreement within the meaning of Art. 28 DSGVO. The service provider's servers are located exclusively in Germany and its data privacy policy can be found here: https://blackhorse-one.com/privacy.

Prize Competitions - Insofar as the ALRV organises prize competitions, we optionally collect the following data from you in addition to the data essential for the organisation of the respective prize competition: name, first name, e-mail address, postal address, date of birth, profession, interests/hobbies, media consumption, consumer behaviour/habits, preferred brands. The purpose of the collection and processing of such data is the organisation of prize competitions. Participation in the prize competition requires either sending the fully completed form or via the respective channels on social media platforms. The personal data collected from the participants will be exclusively used for the purpose of organising and carrying out the prize competition, including the prize competition itself, notifying the winner by e-mail and mailing and shipping the prize. The winner may be published with his or her full name. In order to deliver the prize, your personal data may, if necessary, be passed on to the respective cooperation partner. No later than six (6) months after the end of the prize competition, all data collected will be deleted in full, unless a longer storage period is required for contractual or legal reasons. The winners' data will be stored in accordance with Art. 6 para. 1 p. 1 lit. c DSGVO due to tax and commercial law storage and documentation obligations (pursuant to the German Commercial Code (HGB), German Criminal Code (StGB) or German Fiscal Code (AO)) with regards to accounting documents for 10 years pursuant to sec. 147 para. 1 German Fiscal Code (AO) and with regards to business documents for 6 years pursuant to sec. 257 para. 1 German Commercial Code (HGB). The ALRV may use the data received as part of the prize competition for so-called "direct marketing". Beyond this, personal data will not be processed or used and, in particular, will not be passed on to third parties without authorisation. Data will only be passed on for advertising purposes with the explicit and express consent of the participants. Participants may at any time request information about the data stored about them and/or object to the storage and/or use of their data with effect for the future and request the deletion or blocking of their personal data here. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. b and f and a - in the case of consent - DSGVO.

Insofar as additional data is collected from you with respect to a prize competition, this is done exclusively for the purpose of organising and carrying out the respective prize competition. In each case the legal basis for the respective processing of data is Art. 6 (1) lit. b DSGVO.

Cookies - The web pages partly use so-called cookies. Cookies do not cause any damage to your computer and they contain no viruses. Cookies serve to make our contents more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer, which your browser saves. Most of the cookies we use are so-called “session cookies”. These are automatically deleted after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser the next time you visit our site. You can set your browser so that you are informed about the placement of cookies, can enable cookies only in each individual case, accept cookies in certain cases or generally block them as well as activate the automatic deletion of cookies on closing the browser. Deactivating cookies can limit the functionality of the website.

Server log files - The provider of the site automatically collects and saves information in so-called server log files, which your browser automatically transmits to us. These are: The browser type/browser version, the operating system used, the referrer URL, the host name of the accessing computer, the time of the server enquiry. This data is not directly assignable to specific persons. We reserve the right to check this data subsequently, if we become aware of any concrete evidence of unlawful use.

Newsletter data - If you would like to subscribe to the newsletter offered on this website, we require an email address from you as well as information that allows us to check that you are the owner of the stated email address and that you consent to receiving the newsletter. No further data is collected. We solely use this data to dispatch the requested information and do not pass it on to third parties. You can withdraw the consent given to store data, including the email address and the usage thereof to send out the newsletter, for instance by clicking on the unsubscribe link in the newsletter.

Data privacy policy for the use of Google Analytics - This website uses functions of the web analysis service, Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and which enable an analysis of your usage of the website. The information on your utilisation of this website that is generated by the cookie is generally transferred on to a Google server in the USA and stored there. In the case of the activation of the IP anonymization on this website, your IP address will however be truncated beforehand within the member states of the European Union or in other states that are contract partners of the European Economic Area agreement. The full IP address will only be transmitted to a Google server in the USA in exceptional cases and then truncated there. Google uses this information on behalf of the operator of this website, in order to evaluate your usage of the website, to put together reports on the website activities and to provide the website operator with further services related to the website or Internet usage. The IP address transmitted by your browser in the scope of the Google Analytics is not merged together with other Google data. You can prevent the storage of the cookies by ensuring that the right setting is made in your browser software; however, we would like to point out that in the latter case it is possible that not all functions of this website can be used to the full extent. Beyond this, you can also prevent the collection of the data generated by the cookie and the data related to your usage of the website (incl. the IP address) from being passed on to Google and also the processing of this data by Google, by downloading and installing the available browser plug-in under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Data privacy policy for the use of Facebook plug-ins (Like button) - Plug-ins of the social network Facebook, provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA are integrated into our website. The Facebook plug-ins on our website can be recognised by the Facebook logo or the “Like button”. An overview of the Facebook plug-ins can be found here: http://developers.facebook.com/docs/plugins/ . When you visit our website, a direct connection is established between your browser and the Facebook server. In this way, Facebook receives the information, that you have visited our site from your IP address. If you click on the Facebook “Like button” while you are logged in to your Facebook account, the contents of our site can be linked to your Facebook profile. This enables Facebook to assign your visit to our site to your user account. The legal basis for the processing of your personal data within the scope of the use of Facebook plug-ins is Art. 6 (1) S. 1 lit. f) DSGVO. We have a legitimate interest in ensuring that content on our website marked by you with the Facebook Like button is also displayed on your private Facebook page. We point out that in our capacity as provider of the site we receive no knowledge about the contents of the transmitted data and its usage by Facebook. Further information on this subject can be found in the data privacy policy of Facebook at http://de-de.facebook.com/policy.php. If you do not want Facebook to be able to assign your visit to our site to your Facebook user account, please log out of your Facebook user account.

Data privacy policy for the use of Twitter - Functions of the Twitter service are integrated into our website. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. On using Twitter and the “Re-tweet” function the websites you visit are linked to your Twitter account and made known to other users. Hereby data is also transmitted to Twitter. The legal basis for the processing of your personal data within the scope of using Twitter is Art. 6 (1) S. 1 lit. f) DSGVO. We have a legitimate interest in ensuring that content "re-tweeted" by yourself through Twitter on our website is also displayed on your private Twitter page. We point out that in our capacity as provider of the site we receive no knowledge about the contents of the transmitted data and its usage by Twitter. Further information on this subject can be found in the data privacy policy of Twitter at http://twitter.com/privacy. You can change your data privacy settings on Twitter under the account settings at http://twitter.com/account/settings.

Data privacy policy for the use of Instagram - Functions of the Instagram service are integrated into our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account you can link the contents of our website to your Instagram profile by clicking on the Instagram button. This enables Instagram to assign your visit to our site to your user account. We point out that in our capacity as provider of the site we receive no knowledge about the contents of the transmitted data and its usage by Instagram. Further information on this subject can be found in the data privacy policy of Instagram: http://instagram.com/about/legal/privacy/. The legal basis for the processing of your personal data within the scope of the use of Instagram is Art. 6 (1) S. 1 lit. f) DSGVO. We have a legitimate interest in ensuring that content integrated by Instagram on our site, marked by yourself with the Instagram button, is also displayed on your private Instagram page.

Data privacy policy for the use of YouTube - Our website uses plug-ins of YouTube, which is operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages that is equipped with a YouTube plug-in, a connection to the servers of YouTube is established. The YouTube server is hereby notified as to which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this from happening by logging out of your YouTube account. Further information on the handling of user data can be found in the data privacy policy of YouTube at https://www.google.de/intl/de/policies/privacy. The legal basis for the processing of your personal data within the scope of using YouTube plug-ins is Art. 6 (1) S. 1 lit. f) DSGVO. We have a legitimate interest in integrating YouTube plug-ins for the purpose of designing an informative website within the conditions of use specified by YouTube.

We use cookies to optimise our website and offer you the best possible online experience. By clicking on “Accept all”, you give your consent to these. Further information and the possibility to allow individual cookies or deactivate them, can be found under “Cookies”.