We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the CandyGlam Events. The use of the Internet pages of the CandyGlam Events is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the CandyGlam Events. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the CandyGlam Events has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
Legal basis for the processing
Art. 6(1) (a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) (b) GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) (c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) (d) GDPR. Finally, processing operations could be based on Article 6(1) (f) GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
Collection of general data and information
When you access our website or retrieve a file, data about this process is stored in a log file on our web server. In detail, the following data can be stored:
IP address (if possible, this is stored anonymously)
Domain name of the website from which you came
Names of the retrieved files
Date and time of a retrieval
Name of your Internet service provider
and possibly the operating system and browser version of your device
IP addresses are only stored for data security reasons in order to ensure the stability and security of our system (legal basis: Art. 6 (1) (f) GDPR). The statistical analysis of anonymous data records remains reserved.
If you contact us via e-mail or contact form, the information you provide will be saved for the purpose of processing the inquiry and for possible follow-up questions. The data processing takes place according to Art. 6 (1) (a) GDPR based on your voluntarily granted consent. You can contradict this at any time (right of withdrawal).
Personal data collected: name, address, e-mail and telephone number.
Data processing for order processing
For the processing of your order, we work with the following service providers who support us wholly or partly in the execution of closed contracts. These personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of the contract, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned bank as part of the payment process, if this is necessary for the payment process. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of the data is Art. 6 (1) (b) GDPR.
Deletion or blocking of the data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as this is necessary to achieve the purposes mentioned here or as provided for by the legislator's various storage periods. After termination of the respective purpose or expiry of these periods, the corresponding data will be blocked or deleted routinely and in accordance with the legal regulations.
Right to information, Right to rectification, blocking, deletion, opposition
You have the right to receive information about your personal data stored by us at any time. You also have the right to correction, blocking or, with the exception of the mandatory data storage for business purposes, deletion of your personal data. Please contact our data protection officer. The contact details can be found at the bottom of this page.
In order for a data lock to be taken into account at any time, this data must be kept in a lock file for control purposes. You can also request that the data be deleted if there is no legal archiving obligation. As far as such an obligation exists, we block your data on request.
You can change or revoke your consent by notifying us accordingly with effect for the future.
Right of revocation
If your personal data are compiled on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or if the objection is directed against direct mail. In addition, in addition, the data subject has a general right of objection, which is implemented by us without stating a particular situation. If you would like to exercise your right of revocation or objection, an e-mail to our contact our data protection officer.
Right of data portability
You have the right to receive the personal data that you have provided us in a structured, common and machine-readable format.
Duration for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.
“This website uses Google Analytics, a web analytics service provided by Google, Inc. (” Google “), Google Analytics uses” cookies “, text files that are stored on your computer and enable you to analyze the use of the website (Including your IP address) generated by the cookie will be transferred to a Google server in the United States and stored there. This website uses Google Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymization of the IP address by curtailment and excludes a direct personal reference. The extension will truncate your IP address beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
Google will use this information to evaluate your use of the website to provide reports on website activity for the website Google will not transfer this information to any third party, unless required by law or to the extent that third parties process such data on behalf of Google, in no case will Google be your IP address with other data from Google. You can prevent the installation of cookies by setting your browser software accordingly. However, we would point out that in this case you may not be able to fully utilize all the functions of this website. By using this website you agree to the processing of the data collected about you by Google in the manner described above and for the purpose set out above.
The general data collection and storage by Google Analytics at any time using a browser extension, available under http://tools.google.com/dlpage/gaoptout?hl=en be contradicted, with effect for the future. For information about privacy when using Google Analytics, see
Responsibility and contact person
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
Phone: +49 178 6940862