Legal basis for processing personal data
The data processing necessary for the prize draw is carried out in accordance with Art. 6 Sect. 1 lit. a of the General Data Protection Regulation (GDPR) and based on your consent.
Scope and purpose of data processing and storage period
We inform participants in the announcement of the prize draw what information is required for participation. To enable you to enter the prize draw, we generally process your email address as well as your first name and last name (necessary to identify and notify winners by email); if you win a prize, we might also process your address (if necessary for processing the prize).
The personal data collected as part of the prize draw will only be used to conduct the prize draw (including raffle, notification of winners, and, if applicable, shipping of prizes). Without the respective data, participation in the prize draw and/or shipping of the prizes is not possible. Participants’ personal data will only be transmitted to third parties insofar as this is necessary for conducting the prize draw (e.g. to send/provide prizes) or if a participant has consented to the transmission.
We will not make further use of the personal data collected as part of the prize draw. This does not apply to personal data that we are allowed to use independently of the prize draw, e.g. in case you have agreed to receive a newsletter. In such cases, the processing and storage period of such data shall be governed by the corresponding provisions in our general privacy policy.
After the prize draw is closed, the data collected as part of the prize draw will be deleted as soon as it is no longer required and no further queries regarding the prize draw can be expected (generally after six months at the latest). If you have been selected as a winner, your data may be stored longer, e.g. to ship the prize, to handle queries and possible warranty requests, and/or to fulfil legal record keeping obligations; in this case the data will generally be deleted after ten years.
Carrying out of the prize draw
To implement the prize draw and the online form for participating, the organizer uses the service provider Newsletter2Go/Sendinblue (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). The data you provide will be stored on Sendinblue’s servers in Germany. Sendinblue GmbH is obliged to protect your data and not to pass it on to third parties. The company is a German provider that has been selected in accordance with the requirements of the GDPR and the German Federal Data Protection Act. For more information, please refer to our privacy policy.
Rights of data subjects
As a data subject, you are entitled to the data subject rights listed in the general privacy policy of the organizer Karg und Petersen Agentur für Kommunikation GmbH, given the corresponding data protection conditions; your rights in particular arise from Articles 15 to 18 and 21 GDPR.
- Right to object: In the event that data is processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis on which any processing of data is based, please consult this privacy notes or our general privacy policy. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection-worthy grounds for the processing of your data that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising, or defense of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).
If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).
- Revocation of consent: A wide range of data processing transactions are possible only subject to your express consent. You can revoke at any time any consent you have already given us and object the future processing of your personal data in accordance with the legal requirements under Art. 21 GDPR at any time. This shall be without prejudice to the lawfulness of any data processing and/or collection that occurred prior to your revocation.
- Information about, rectification and eradication of data: Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients, as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated.
- Right to demand processing restrictions: You also have the right, under certain circumstances, to demand the imposition of restrictions regarding the processing of your personal data. For details, please refer to our privacy policy.
- Right to data portability: You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract to you or a third party in a commonly used, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if technically feasible.
- Right to log a complaint with the competent supervisory agency: In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint applies without prejudice to any other administrative or judicial remedies.
To exercise your rights against the organizer, simply send us an informal email or contact us at the address provided above.
