Privacy Policy

Information pursuant to Art. 13 GDPR and Section 25 TDDDG

This privacy policy explains which personal data we process when you use www.aicodingdays.de, for which purposes, and which rights you have.

Controller

The controller for data processing on this website is SEO-DAY GmbH, Adolf-Kaschny-Straße 19, 51373 Leverkusen, Germany. Phone: 016097742917. Email: datenschutz[AT]seo-day.de (please replace [AT] with @). Further details are set out in the imprint.

Hosting, server logs, website, orders and user account

When you access the website, technically required access data are processed in server log files (e.g. IP address, date and time, requested URL, referrer, user agent). The purpose is delivery and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Log files are generally deleted after a short period unless security incidents require longer retention.

For ticket or workshop orders and for contact or application forms, we process the data you provide (e.g. name, email, company, order details) to prepare and perform the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations (Art. 6(1)(c) GDPR), such as commercial and tax retention.

If you register a user account, we process access and profile data to provide the account (Art. 6(1)(b) GDPR). Session and consent cookies that are strictly necessary for the service you requested are based on Section 25(2) TDDDG and/or Art. 6(1)(f) GDPR.

Email marketing for similar own services

Where legally permitted and unless you have objected, we may use the email address obtained in connection with a purchase to inform you about our own similar goods or services (Section 7(3) German Unfair Competition Act, Art. 6(1)(f) GDPR).

You may object at any time without costs other than basic transmission rates. Use the unsubscribe link in the email or contact datenschutz[AT]seo-day.de.

Cookies and consent

We use cookies and similar technologies. Strictly necessary cookies (e.g. session, storage of your cookie choice `site_cookie_consent`) are required for operation (Section 25(2) TDDDG). Analytics and marketing cookies are used only after your consent via the cookie notice (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Via the cookie notice you can accept or decline. You can change your decision later by deleting the consent cookie and reloading the page or reopening the cookie notice if offered. Note: cookies may contain identifiers; the blanket statement that cookies contain no personal data is incorrect. Xing Pixel: After consent or paid-ads attribution we load the New Work SE (XING) tracking script from static.xingcdn.com and initialise it with our pixel ID. Purpose: reach and campaign measurement. On each public page view we send the page_views event once. After a ticket or workshop purchase we send the purchases event once. Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR, or the paid-ads attribution described in the Meta/GTM sections. Localhost and admin areas do not load the Xing Pixel. XING privacy policy: https://privacy.xing.com/en/privacy-policy

Recipients, processors and transfers to third countries

Personal data are disclosed only if necessary to perform a contract, if you have consented, if a legal obligation exists, or if a legitimate interest applies and your interests do not override (Art. 6 GDPR). We may use hosting/IT providers as processors (Art. 28 GDPR) and, where consent or paid-ads attribution applies, Google Ireland Limited / Google LLC, Meta Platforms Ireland Limited / Meta Platforms, Inc. and New Work SE (XING). Data may be transferred to third countries; where required we rely on adequacy decisions or EU Standard Contractual Clauses. Details on Meta, Google and XING are set out below and in their privacy policies.

Google Tag Manager

We use Google Tag Manager (container ID GTM-WCC9NQ5P) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager usually does not set its own analytics cookies but may trigger other tags. Loading occurs after consent in the cookie notice or in the context of paid-ads attribution (see below). Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR, or Art. 6(1)(f) GDPR for technically necessary management of already permitted tags.

More information on Google’s data processing: https://policies.google.com/privacy?hl=en

Opt-out information for personalized Google ads: https://adssettings.google.com/authenticated and the Network Advertising Initiative page:

Localhost and admin areas do not load the Tag Manager. https://optout.networkadvertising.org/

Meta Pixel and Conversions API

We use the Meta Pixel (Facebook Pixel) and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. This allows us to measure reach and conversions (e.g. ticket or workshop purchases) and to deliver ads. Data (including IP address, cookie IDs, event data such as PageView, FormStart, Purchase) may be transmitted to Meta and processed in the USA.

By default, the pixel and client-side CAPI calls load only after consent in the cookie notice (`site_cookie_consent=accepted`). Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Meta privacy policy: https://www.facebook.com/privacy/policy/

Paid-ads attribution: If Meta or Google campaign traffic is detected (e.g. certain UTM/click parameters or ads referrers), the Meta Pixel may load for attribution even if you declined marketing cookies; this is marked via a separate attribution cookie. Localhost: no pixel. Objection/withdrawal: cookie settings or deletion of consent/attribution cookies and Meta ad settings at https://www.facebook.com/settings?tab=ads

Google Ads and conversion measurement

Via Google Tag Manager, tags for Google Ads or conversion measurement may be loaded after consent. Provider: Google Ireland Limited (possibly with Google LLC, USA).

Cookies may be set and information on ad interaction and conversion processed. Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

Without consent and without paid-ads attribution, corresponding marketing tags are not loaded. You can disable personalized Google ads in the ads settings.

Further information: https://policies.google.com/technologies/ads?hl=en

Reach measurement via Tag Manager

There is no direct Google Analytics integration (gtag.js / measurement ID) in the website code. Via Google Tag Manager, analytics tags (e.g. Google Analytics) may be delivered from the container after your consent.

Where analytics tags are loaded, usage data including a truncated or full IP address may be transmitted to Google. Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You may withdraw consent via the cookie notice. Additional browser opt-outs for Google Analytics clients: https://tools.google.com/dlpage/gaoptout?hl=en

Contact, ticket and workshop forms

If you use forms (contact, speaker application, ticket shop, workshop shop), we process the data entered to handle your request or order (Art. 6(1)(b) GDPR) and, where applicable, to prevent abuse/spam (Art. 6(1)(f) GDPR).

Classic Facebook social plugins (Like/Share buttons with immediate data transfer on page load) are not embedded. Marketing measurement uses Meta Pixel/CAPI, Google Tag Manager and the Xing Pixel as described in the sections above.

Mandatory form fields are marked. Without data required for contract performance, the order or request cannot be processed. Imprint and contact: https://www.aicodingdays.de/impressum

Retention and contact

We store personal data only as long as necessary for the stated purposes or as long as statutory retention periods (in particular commercial and tax law, often six to ten years) require longer storage.

Order and invoice data are retained according to statutory periods. Account data remain until the account is deleted or opposing periods expire. Server logs and consent records are stored only as long as necessary.

No WhatsApp or other messenger customer service is operated via this website. Please contact datenschutz[AT]seo-day.de or use the contact form.

No company data protection officer has been appointed. For privacy requests, the controller (SEO-DAY GmbH) is responsible under the contact details above.

Your rights

You have the rights of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR). You may withdraw consents at any time with effect for the future without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular the authority competent for your place of residence or our registered office (for North Rhine-Westphalia, among others, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).