1. Data Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
QueerOS e.V.
Hannoversche Straße 35
49084 Osnabrück
2. Collection and Processing of Personal Data
As part of ticket sales for Hot Queer Summer we process personal data of ticket purchasers and event participants. This may include, in particular:
- First and last name
- Postal address
- Email address
- Order and ticket information
- Payment information related to bank transfers
Personal data is processed exclusively for the purposes of ticket sales, contract fulfillment, admission control, and compliance with legal obligations.
3. Legal Basis for Processing
The processing of personal data is based on:
- Article 6(1)(b) GDPR (performance of a contract and pre-contractual measures)
- Article 6(1)(c) GDPR (compliance with legal obligations, particularly retention obligations under tax and commercial law)
- Article 6(1)(f) GDPR (legitimate interest in the secure and efficient organization of the event)
4. Ticket Sales via Pretix
We use the ticketing system **Pretix** for the sale and management of tickets.
When using the ticket shop, the data required for ticket purchases is processed. Pretix processes this data on our behalf as a technical service provider.
Further information about data protection at Pretix can be found at:
https://pretix.eu/about/de/privacy
5. Payment Processing
Tickets are paid for by bank transfer.
To assign incoming payments correctly, we process the information transmitted as part of the bank transfer, including:
- Name of the account holder
- Payment reference
- Transfer amount
- Date of payment
This data is processed solely for payment processing and accounting purposes.
6. Website Usage
When visiting our website, information transmitted by your browser is automatically collected by the hosting provider. This may include:
- IP address
- Date and time of access
- Browser type and browser version
- Operating system
- Referrer URL
This data is processed to ensure the technical security and stability of the website.
7. Data Retention
We store personal data only for as long as necessary to conduct ticket sales, organize the event, and comply with statutory retention obligations.
Documents relevant for tax and commercial law purposes are retained in accordance with applicable legal requirements.
8. Recipients of Data
Personal data is only disclosed where necessary for the performance of a contract or where there is a legal obligation to do so.
Recipients may include:
- Pretix as the ticketing service provider
- Website hosting providers
- Authorized representatives of the association
- Public authorities where legally required
9. Rights of Data Subjects
Data subjects have the right to:
- Access their personal data pursuant to Article 15 GDPR
- Rectification pursuant to Article 16 GDPR
- Erasure pursuant to Article 17 GDPR
- Restriction of processing pursuant to Article 18 GDPR
- Data portability pursuant to Article 20 GDPR
- Object to processing pursuant to Article 21 GDPR
10. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with a supervisory authority regarding the processing of their personal data.
The competent supervisory authority in Lower Saxony is:
The State Commissioner for Data Protection of Lower Saxony
11. Contact for Data Protection Inquiries
If you have any questions regarding data protection or wish to exercise your rights, please contact:
Hot Queer Summer