1. Responsible party
This privacy policy applies to data processing by:
Merrem IT Works
Owner: Marius Merrem
Schloßberg 17 69117 Heidelberg, Germany
Email: kontakt@merrem-it-works.de
2. Collection and storage of personal data when visiting the website
When you visit our website merrem-it-works.de, information is automatically transmitted from your device's browser to our server. This data is temporarily stored in log files and is not viewed or evaluated.
The following are recorded in particular:
- IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser type and version
- operating system
- Name of the access provider
This data is technically necessary in order to:
- to ensure a stable connection,
- display the website correctly,
- evaluate system security and stability,
- Recognizing and preventing abuse.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
This data is not combined with other data.
3. Cookies
We use cookies to:
- to enable the use of the website (session cookies),
- Save settings,
Cookies do not cause any damage and do not contain malware.
You can disable cookies at any time via your browser. However, if you disable cookies completely, parts of the website may no longer function correctly.
4. Processing of personal data within the scope of our services
4.1 Photo box
A user account is required to use Photobox. Registration is done via the Keycloak authentication system.
Processed data:
- Email address
- username
- Password (encrypted)
Storage of photos:
- Photos are stored anonymously.
- Storage takes place in S3 buckets (cloud storage).
- No personal data is stored together with the images.
- Metadata (e.g., event ID, technical parameters) remains exclusively on our own systems.
Payment processing: When you take out a paid subscription, the necessary payment details are transmitted to Stripe. This includes, among other things:
- Email address
- First and last name
- invoice data
- payment details
Stripe processes this data on its own responsibility in accordance with Art. 6 (1) (b) GDPR.
Responsibility: The organizer is responsible for obtaining the consent of the persons depicted.
4.2 Signuply (event management service)
Signuply enables the registration and management of event participants.
Processed data may include:
- Name
- Email address
- Event data
- Check-in information
- Additional data entered by the organizer
Distribution of roles:
- The organizer is responsible for participant data in accordance with data protection laws.
- Merrem IT Works acts as a technical service provider/processor, if contractually agreed.
4.3 Establishing contact
If you contact us by email or contact form, we will process your details for the purpose of handling your inquiry.
Legal basis: Art. 6(1)(b) GDPR.
5. Disclosure of data
Information will only be disclosed if:
- You have expressly consented (Art. 6 para. 1 lit. a GDPR),
- this is necessary for the performance of a contract (Art. 6 para. 1 lit. b GDPR),
- there is a legal obligation (Art. 6 (1) (c) GDPR),
- this is necessary to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR).
No data will be passed on to third parties for advertising purposes.
6. Rights of data subjects
You have the right at any time to:
- Information (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Deletion (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent (Art. 7(3) GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)
7. Right to object
If your data is processed on the basis of Art. 6 (1) (f) GDPR, you may object at any time.
There is a general right to object to direct marketing.
To object, simply send an email to: kontakt@merrem-it-works.de
8. Data security
We use SSL encryption (at least 128-bit, usually 256-bit). We also use technical and organizational measures to protect your data from loss, misuse, or unauthorized access.
9. Timeliness and changes to this privacy policy
This privacy policy is currently valid. It will be updated as necessary to reflect legal or technical changes.
8. Timeliness and changes to this privacy policy
This privacy policy is currently valid and was last updated on: