Privacy Policy

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Xtreme Event GmbH, owner: Marius Spürkmann, Broicher Straße 9, 41179 Mönchengladbach

Telephone: +49 (0) 2161 8212040, fax: +49 (0) 2161 8212049, e-mail: info@xtreme-events.de

If you have any questions about data protection, you can contact us at any time using the contact details above.

2. What is personal data?

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, your address, your telephone number, your e-mail address and your IP address.

You are under no obligation to provide us with personal data. Without certain details, however, we cannot deal with your enquiry or prepare an offer for you.

3. Data collected when you visit our website

If you use our website purely for information purposes, we collect only the personal data that your browser transmits to our server. This data is technically necessary in order to display the website to you and to ensure stability and security.

The following is collected: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (the specific page), access status or HTTP status code, the volume of data transferred in each case, the website from which the request originates (referrer), browser, operating system and its interface, and the language and version of the browser software.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website. Server log files are deleted or anonymised after 30 days at the latest.

4. Enquiry basket and enquiry form

Our enquiry basket lets you put together event modules and send us an enquiry without obligation. No contract is concluded via this website; there is neither payment processing nor an ordering or checkout process in the shop.

As part of the enquiry we process: first name, surname, e-mail address, event period and event location as mandatory details, and optionally company, VAT identification number, telephone number and your free-text comment. We also transmit the modules you have selected, including quantities and the option "branding/customisation requested".

The processing serves to deal with your enquiry and to prepare an offer. The legal basis is Art. 6(1)(b) GDPR (taking steps prior to entering into a contract) and, for enquiries from companies, Art. 6(1)(f) GDPR.

The details are transmitted by e-mail to our sales team and stored there. You will receive an acknowledgement of receipt at the e-mail address you have provided. Enquiry data is additionally logged in the shop system.

We delete your enquiry data as soon as it is no longer required for the purpose it was collected for, at the latest once the statutory retention periods have expired. If a contract is concluded, the retention periods under commercial and tax law of six and ten years respectively apply.

5. Contact form, consulting enquiry and contact by e-mail

If you contact us via the contact form, the guided consulting enquiry, by e-mail, by telephone or via WhatsApp Business, we process the data you provide in order to answer your enquiry.

For the consulting enquiry we process in particular: name, company, e-mail address, telephone number, event location, event date, budget range and preferred theme.

The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in answering enquiries.

When WhatsApp Business is used, communication runs via the provider’s servers. Please do not send any sensitive data through this channel. Use e-mail or the telephone instead.

6. Newsletter

We use the double opt-in procedure for subscriptions to our newsletter. After signing up, you will receive an e-mail in which you confirm your subscription. Only then do we add you to the distribution list.

For this we process your e-mail address and your language selection. As a record, we log the time of subscription, the time of confirmation and the IP address used.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 7(2) no. 3 UWG. You can withdraw your consent at any time with effect for the future — via the unsubscribe link in every newsletter e-mail or by sending a message to info@xtreme-events.de.

The newsletter is usually published twice a year and reports on new attractions and event modules. We use an external service provider for the mailing, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. This may involve a statistical analysis of opening and click behaviour.

7. Cookies and similar technologies

Our website uses cookies. Cookies are small text files stored on your device. Transient cookies (session cookies) are deleted automatically when you close your browser; they hold in particular the contents of your enquiry basket and your language setting. Persistent cookies are deleted automatically after the period stated for each of them.

We use technically necessary cookies on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All non-necessary cookies and comparable technologies are used only with your consent pursuant to § 25(1) TDDDG and Art. 6(1)(a) GDPR.

We manage your consent by means of a consent management tool. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. You can also deactivate or delete cookies in your browser settings; this may limit how the website works.

8. Google Analytics 4 and Google Tag Manager

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is integrated via Google Tag Manager, which does not itself store any personal data but controls the delivery of the tags.

Google Analytics uses cookies and similar technologies to evaluate how the website is used. The data collected includes a truncated IP address, device and browser information, approximate location, pages viewed and events triggered — in our case in particular enquiries sent from the enquiry basket, consulting enquiries sent, contact form submissions, newsletter subscriptions and WhatsApp clicks.

IP anonymisation is activated. We also use Google Consent Mode v2. A transfer of data to the USA cannot be ruled out; Google relies on the EU-US Data Privacy Framework or on standard contractual clauses pursuant to Art. 46 GDPR.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings.

9. Google Ads and conversion measurement

With your consent, we use Google Ads including conversion tracking in order to measure the effectiveness of our advertisements. A cookie is set as soon as you reach our website via a Google advert. If a user opens certain pages or sends an enquiry, Google and we can see that a user has clicked on the advert.

In doing so, we receive no information that would allow users to be identified personally, only statistical evaluations. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

10. Product analysis with Posthog

With your consent, we use Posthog for product and usage analysis, including session recording. This allows us to analyse anonymously how visitors use our pages, in order to improve navigation, forms and the enquiry process.

The data collected covers interactions such as page views, clicks, scrolling behaviour, form interactions (without the contents of input fields), device type, browser and truncated IP address. Entries in form fields and personal content are masked during the recording.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent, no recording takes place.

11. Embedded videos

On our pages we embed videos, among others from YouTube (Google Ireland Limited). For this we use a two-click solution: videos are loaded only after you have actively confirmed this.

Only once you have confirmed is a connection to the provider’s servers established and your IP address transmitted. If you are logged into your account at that moment, the provider can link your browsing behaviour to your profile. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

12. Hosting and processing on our behalf

Our website is hosted by an external service provider within the European Union. The provider processes the data arising from the operation of the website exclusively on our instructions.

We have concluded data processing agreements pursuant to Art. 28 GDPR with all the service providers we use — in particular for hosting, newsletter dispatch, analytics and consent management.

13. Disclosure of data

Your data is not passed on to third parties for purposes other than those stated in this policy.

We disclose your data only where you have expressly consented (Art. 6(1)(a) GDPR), where the disclosure is necessary for the performance of the contract (Art. 6(1)(b) GDPR), where there is a legal obligation (Art. 6(1)(c) GDPR) or where the disclosure is necessary to establish, exercise or defend legal claims and no overriding interest of yours worthy of protection stands in the way (Art. 6(1)(f) GDPR).

In order to run your event, it may be necessary to pass the required data to subcontractors or hauliers engaged by us — limited to what is necessary to provide the service.

14. Your rights

You have the right to obtain information about the data stored about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to object to the processing (Art. 21 GDPR).

You may withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of the processing carried out up to the withdrawal remains unaffected.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

To exercise your rights, an informal message to info@xtreme-events.de or to the postal address given in the legal notice is sufficient.

15. Data security

We use technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Transmission is encrypted via TLS. Our security measures are improved on an ongoing basis in line with technological developments.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always meets the current legal requirements, or in order to reflect changes to our services — for example when new services are introduced. The version then in force applies to your next visit.