Privacy Policy

Großmarkt Stuttgart

Märkte Stuttgart GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

  1. Controller as defined in Art. 4 (7) GDPR

The controller as defined in Art. 4 (7) GDPR is:

Märkte Stuttgart GmbH
Langwiesenweg 30
70327 Stuttgart
Germany
Email: info@maerkte-stuttgart.de
Tel.: +49 711 480 410

 

  1. Contact details of our data protection officer: 

Dr Christian Borchers
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Germany
datenschutz@maerkte-stuttgart.de

 

  1. Data processing on our website
  1. Usage data 

Purpose and legal basis of data processing 

When you visit this website, we process: 

 

  • Your IP address 
  • Date and time of your visit 
  • Information about the browser you are using, including language settings, and 
  • potentially about your operating system 
  • the address of the website from which you accessed our website (referrer URL) 
  • Information about the files you have accessed 

 

Your browser automatically transmits this data to your internet service provider, who then sends it to us. We process this data to enable you to open our website, for the purpose of testing and, on occasion, restoring system security and stability, and for statistical purposes. We cannot assign this data to any specific person. The legal basis for this processing is Art. 6 Par. 1 (f) GDPR. We have a legitimate interest in ensuring that our website appears correctly on your screen and that we are able to determine and rectify the causes of any faults that may occur.

 

Data recipients / categories of recipients: Your data will not be sent to third parties.

 

Storage period / criteria for determining storage period:

This data is stored for a maximum of 7 days in log files. 

 

  1. Data processing relating to contact persons

 

Purpose of data processing / legal basis:

Märkte Stuttgart GmbH processes the contact details of the people with whom it corresponds at customers, prospective customers, suppliers and other business partners, so that it can communicate with them by email, telephone, fax and post. The legal basis for this data processing is Art. 6 Par. 1 (f) GDPR. Märkte Stuttgart GmbH's legitimate interest lies in its aim to initiate and maintain business relations with customers, prospective customers, suppliers and other business partners, and to maintain personal contact with people there.

Recipients / categories of recipients:

As a rule, we never send this data to third parties who are not part of Märkte Stuttgart GmbH. Within Märkte Stuttgart GmbH, your data will be passed on for purposes such as initiating and conducting business relations. There can be circumstances under which data is processed on our behalf by other processors. If so, they are carefully selected, audited by us, and contractually bound under Art. 28 GDPR.

Storage period / criteria for determining storage period:

Personal data is stored for the purpose of conducting business relations for as long as our legitimate interest in doing so remains.

  1. Storage of cookies

Some of the pages of our website use cookies. Cookies do not damage your computer or contain viruses. They help make our website more user-friendly, effective and secure. Cookies are small text files stored on your computer by your browser.

 

Purpose and legal basis of data processing

Most of the cookies we use are "session cookies". They are automatically deleted at the end of your visit. The legal basis for the data processing done by "necessary cookies", of which session cookies are a sub-category, is Art. 6 Par. 1 (f) GDPR. Necessary cookies enable basic functions and are needed to allow the website to work properly. We have a legitimate interest in making our website as user-friendly as possible.

 

Storage period / criteria for determining storage period:
Session cookies are deleted when you close your browser. You can also visit our website without cookies; there is no obligation to use them. Most browsers accept cookies automatically. You can set your browser not to allow them; you will have to do so separately for each browser and for each device you use.

 

  1. Google Analytics and Google Tag Manager

This website uses Google Analytics if you give your consent as defined in Art. 6 (1) (a) GDPR. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC (USA) ("Google"). Google Analytics is only used if you have expressly consented to your data being sent to Google in the USA in accordance with Art. 49 Par. 1 (a) GDPR.Levels of data protection in the USA are inadequate. This means there are risks, such data subjects' rights not being enforced and the possibility of access by state authorities. You can revoke your consent at any time with effect for the future.

User and event data are deleted after two months.

Google Analytics uses cookies. These are text files that are stored on your computer and allow Google to analyse the way you use the website. The information generated by these cookies about how you use this website is usually transferred to a Google server in the USA and stored there. Furthermore, this data processing is essentially performed by Google. Both Google and US state authorities have access to this data. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states that are signatories to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent transmitted to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of this website's operator, Google uses this information to evalaute your use of the website, compile reports on website activity and provide the website operator with other services relating to website activity and internet usage.
The IP address sent by your browser as part of Google Analytics is linked to other data about you, such as search history, personal accounts, usage data from other devices and any other data Google may have about you. 

 We store user and event data for a period of two months.

These cookies are only set if you have consented to all technically non-essential cookies by clicking on the cookie banner. 

You can prevent the use of cookies by setting your browser accordingly, but if you do so, you may not be able to use all of our website's features. Furthermore, you may prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address), and prevent Google from processing this data, by downloading and installing the browser plugin available at the following link:
tools.google.com/dlpage/gaoptout As an alternative to the browser add-on, and for browsers on mobile devices, you can use the following link Set Google Analytics Opt-Out Cookieto prevent Google Analytics from collecting data within this website going forward (this opt-out only works in the given browser and only for this domain). This places an opt-out cookie on your device. If you delete this cookie in your browser, you will have to click the link again.
The following cookies set by this website are related to Google Analytics:

Name of cookie

Storage duration of cookie

_ga

2 years

_ga_#

2 years

 

This website uses Google Tag Manager, provided you consent to it in accordance with Art. 6 Par. 1 a) GDPR. If data is transferred to the USA in this context, the legal basis for this is your express consent in accordance with Art. 49 (1) a) GDPR. By using Google Tag Manager, we collect and process [personal data] from you so that we can provide you with further services for marketing and statistical purposes. We store your data for [period]. You can revoke your consent at any time in the cookie banner, with effect for the future.

 

  1. Google Maps 

Our website features embedded maps from Google Maps, which are not stored on our servers. Google Maps is operated by Google LCC, based in the USA. You can give your consent to the use of Google Maps to ensure that opening pages with embedded maps doesn't automatically lead to this third-party content being reloaded, which will only happen once you have given consent. Doing so tells this third-party provider that you have visited our site and sends them the usage data they need for technical purposes. We have no influence on how they then process your data.

You can only use Google Maps if you have consented to the transfer of your data to Google in the USA in accordance with Art. 49 (1) a) GDPR. Levels of data protection in the USA are inadequate. This means there are risks, such data subjects' rights not being enforced and the possibility of access by state authorities. You can revoke your consent at any time with effect for the future.

 

  1. Ordering a Freshness Ticket or applying for a stall at the markets

Purpose and legal basis of data processing 

We process data for the purpose of fulfilling contracts you have concluded with us, or for pursuing pre-contractual activities. 

This involves processing data for purposes such as: 

  • Correspondence 
  • Checking whether you are a trader and therefore entitled to a Freshness Ticket 
  • Issuing and sending you your Freshness Ticket or permits to allow you to sell goods at our markets; invoicing 
  • Collection 
  • Checking (if relevant) whether you have a valid travel trade permit and that trade prohibition proceedings are not pending against you (only when applying for a stall at flea markets); 
  • Settling and asserting potential (liability) claims. 

The legal basis is Art. 6 Par. 1 (b) General Data Protection Regulation (GDPR). If you have provided consent (e.g. to be included on trader lists), the legal basis is Art. 6 Par. 1 (a) GDPR.

Data recipients / categories of recipients: Your data will not be sent to third parties.

 

Storage period / criteria for determining storage period:
We are allowed to store a lot of your data at least until the contract has been fulfilled and, after that and where applicable, for up to the regular limitation period of three years. We can also store data until the end of the maximum limitation periods, in order to assert or defend against legal claims. If we are obliged to retain certain data, then we are entitled to store it until the end of the retention periods specified in Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code. These periods are up to ten years.

 

  1. YouTube

Our website features embedded YouTube videos that are not stored on our servers. YouTube is operated by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you play an embedded video, a connection is established to YouTube's servers in the USA and certain personal data (such as your IP address) is sent to that provider, even if you are not logged in with them. We are not told what kind of data YouTube collects or how much of it, and we have no say about how it is used. 

Playing embedded videos is only possible if you have consented to the transfer of your data to YouTube in the USA in accordance with Art. 49 Par. 1 (a) GDPR. Levels of data protection in the USA are inadequate. This means there are risks, such data subjects' rights not being enforced and the possibility of access by state authorities. You can revoke your consent at any time with effect for the future.

 

  1. Communication by email / telephone / contact form

 

Purpose of data processing / legal basis:

Personal information that you provide to us by email, telephone, post or contact form will of course be treated confidentially. We use your data exclusively for the purpose for which it is intended, which is to process your enquiry. The legal basis for this data processing is Art. 6 Par. 1 (f) GDPR. Märkte Stuttgart GmbH’s legitimate interest in doing this is its interest in answering enquiries from its customers, business partners and prospective customers, thereby maintaining and promoting customer satisfaction.

Recipients / categories of recipients:

As a rule, we never send this data to third parties. 

Storage period / criteria for determining storage period:

Any personal information you send to us in connection with enquiries will be stored by us until we no longer need it for that purpose.

  1. Applications

As part of their joint responsibility under data protection law (Art. 26 GDPR), in.Stuttgart Veranstaltungsgesellschaft mbh & Co. KG and Stuttgart Märkte GmbH have come to an arrangement as to which of them fulfils which obligations under GDPR. This particularly concerns the fulfilment data subjects’ rights and providing information pursuant to Articles 13 and 14 GDPR.

 

Data processing stage /

duty

 

Duties fulfilled by

Providing information pursuant to Art. 13, 14 GDPR

 

 

Collection

 

 

Storage

 

 

Transmission

 

 

Use

 

 

Amendment

 

 

Blocking

 

 

Deletion

 

 

Informing pursuant to Art. 15 GDPR

 

 

 

Notwithstanding their shared responsibility, the companies shall fulfil their obligations under data protection law in accordance with their respective responsibilities for the various process stages as follows:

  • As part of their joint responsibility, each company is responsible according to the above table.
  • The companies shall make the information required under Articles 13 and 14 GDPR available to data subjects free of charge in a precise, transparent, comprehensible and easily accessible form involving plain and simple language. To this end, each company shall provide the other with all the information it needs from within its own sphere of influence.
  • The companies shall inform each other without delay of any legal positions adopted by data subjects. They shall provide each other with any information needed to respond to requests for information.
  • Data protection claims can be asserted against the aforementioned companies. As a rule, data subjects shall receive information from the entity against which they are lodging their claim.
  •  

Purpose of data processing / legal basis:If you do not feel like sending us your application documents by post, you can email them to make the application process quick and convenient. We use any application documents we receive exclusively for the purpose of the application procedure. Please note that applications sent to us by email are transmitted in unencrypted form and the data they contain could potentially be accessed or falsified by unauthorised persons. You are also welcome to send us your documents by post.

The purpose of processing your personal data is to respond to your application to our company and, potentially, to establish a new employment relationship.

The legal basis for this processing is Art. 88 (1) GDPR in conjunction with Section 26 Par. 1 sentence 1 BDSG (German Federal Data Protection Act).

Recipients / categories of recipients:

As a rule, we never send your data to anyone outside our company. Within our company, only those involved in the decision-making process will have access to your personal data. 

Storage period / criteria for determining storage period:

In the event of a successful application, your personal data will be stored for the duration of your employment. Furthermore, once you are no longer employed by us, your tax-relevant data will be archived for a period of up to ten years within the statutory retention periods pursuant to Sections 257 Par. 1 No. 1, Par. 4 HGB (German Commercial Code), 147 AO (German Revenue Code). If your application is unsuccessful, your personal data will be stored for three months after you are turned down. 

 

  1. 10.Data processing on our social media platforms

Purpose of data processing / legal basis:

We are present on the following social media channels:

  • Facebook:
  • Instagram:

Our contact details are in the Legal section.

Aside from us, there are also the operators of the social media platforms. In this respect, they are additional controllers who process data in a way over which we have only limited influence. Wherever we can exert influence and parameterise data processing, we strive within the possibilities available to us to ensure that social media platform operators handle data in compliance with data protection. But often we cannot influence the way social media platform operators process data, nor do we know exactly what data they process. Operators do however tell you about this in their privacy policies.

Data processing by us

The data you enter on our social media pages, such as comments, videos, pictures, likes and public messages, are published by the social media platforms and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if necessary. We may share your content on our site if this is a feature of the social media platform, and we may communicate with you via the social media platform. The legal basis for this is Art. 6 Par. 1 (f) GDPR. This data processing is done in the interests of our public relations and communication.

We use Page Insights on our Facebook page. Page Insights are aggregated data that helps us understand how people interact with our Facebook Page. Page Insights may be based on personal data collected in connection with a person’s visit to or interaction with our Facebook Page and its content. The legal basis for this is Art. 6 Par. 1 (f) GDPR. This data processing is done in the interests of our public relations and communication.

If you wish to object to any aspects data processing over which we have control, please contact us using the contact details provided in the Legal section. We will then review your objection, or forward it to the social media platform.

If you submit a request to us on a social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You can always send confidential enquiries to our address given in the Legal section.

As stated earlier, wherever social media platform providers allow, we take care to ensure that our social media pages are as compliant as possible with data protection. In particular, therefore, we do not use the demographic, interests-based, behaviour-based or location-based target group definitions for advertising that operators of social media platforms may provide us with. Generally speaking, we do not use social media platforms for advertising. With regard to statistics provided to us by social media platform providers, we can only influence these to a limited extent and we cannot deactivate them. But we do make sure that we are not provided with any additional, optional statistics.

Data processing by social media platform operators

Social media platform operators use web tracking. Web tracking can happen regardless of whether you are logged in or registered with a social media platform. As explained above, we can exert little influence on social media platforms’ web tracking methods. We cannot deactivate them, for example.

Please be aware that social media platform providers may conceivably use your profile and behavioural data to ascertain things like your habits, personal relationships and preferences. In this respect, we have no influence over how social media platform operators process your data.

Please refer to the social media platform provider's privacy policy to find out more about how they process data and about how you can object:

  • Facebook: [https://www.facebook.com/policy.php]
  • Instagram: [https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20Sicherheit]

 

In cases where we share responsibility for processing with the social media platform, you can find the principal substance of this joint processing of your data here:

 

  1. Provision

Unless stated otherwise in the previous sections, the provision of personal data is neither required by law or contractually, nor necessary for the conclusion of a contract. You are not obliged to provide personal data unless told otherwise beforehand. Failure to provide your personal data may mean that we are unable to respond to your request for contact, or that you cannot engage in the application process.

 

  1. Your rights as a data subject

GDPR grants you certain rights as a data subject when your data is processed:

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if it is, you have the right to be told what that personal data is and to know about the things listed in detail in Article 15 GDPR.

Right of rectification (Art. 16 GDPR)

You have the right to have any inaccurate personal data concerning you corrected and, where relevant, any incomplete data completed, without undue delay.

Right to erasure (Art. 17 GDPR)

You have the right to have personal data concerning you erased without undue delay, provided one of the grounds listed in detail in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to demand restriction of processing if one of the conditions listed in Art. 18 GDPR applies, such as if you have objected to processing, for as long as it takes for the controller to review your case.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to have this data transmitted to another controller.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 Par. 1 (f) GDPR (data processing for the purposes of legitimate interests) or on the basis of Art. 6 Par. 1 (e) GDPR (data processing for the performance of a task carried out in the public interest or in the exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend against legal claims. Objections can also be emailed to info@maerkte-stuttgart.de.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of data relating to you infringes data protection provisions. The right to lodge a complaint may in particular be exercised before a supervisory authority in the Member State of your habitual residence, place of work or place of alleged infringement.

Date:  November 2021