Privacy Policy

Last updated: 02/05/2025

1. Controller
Upsala-Circus gGmbH Steinsgraben 39 06712 Zeitz Email: hello@upsalacircus.com Website: www.upsalacircus.de

2. Collection and Processing of Personal Data
2.1 When Visiting Our Website
When using our website for informational purposes only, we collect only the personal data that your browser transmits to our server:

• IP address
• Date and time of request
• Browser type and version
• Operating system
• Referrer URL

2.2 When Using Our Contact Form
When you use our contact form, we collect the following data:

• Name
• Email address
• Phone number (optional)
• Message content
• Time of submission

3. Purposes of Data Processing
We process your personal data for the following purposes:

• To enable the use of our website
• To process your inquiries
• To improve our services

4. Legal Bases
The processing of your data is based on the following legal grounds:

• Art. 6(1)(a) GDPR (consent)
• Art. 6(1)(b) GDPR (contract performance)
• Art. 6(1)(f) GDPR (legitimate interests)

5. Storage Duration
5.1 Contact Data for Newsletter and Communication

• Email addresses and phone numbers: Until withdrawal of consent or newsletter unsubscription
• Registration log data (Double-Opt-In): 3 years after unsubscription (proof requirement)

5.2 Website Usage

• Server logs: 7 days
• Session cookies: Until browser closure
• Analytics cookie data: As specified in the Cookie Policy

5.3 Business-Related Data

• Contract data: 10 years (statutory retention period)
• Billing data: 10 years (statutory retention period)

6. Your Rights
You have the following rights:

• Right to access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

7. Contact
For questions about the processing of your personal data, you can contact us at any time: Vera Zhukova Email: hello@upsalacircus.com

8. Right to Complain
You have the right to file a complaint with a data protection supervisory authority.