Data Privacy

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data includes all data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

Data Collection

Your data is collected in two ways: Some data is provided directly by you when you share it with us. Other data is automatically collected by our IT systems when you visit our website. This includes primarily technical data (e.g., internet browser, operating system, or the time you accessed the website). The collection of this data occurs automatically as soon as you access our website.

Data Usage

Part of the data is collected to ensure the website functions correctly. Other data may be used to analyze your user behavior.

Analytics Tools and Third-Party Tools

When you visit our website, your browsing behavior may be statistically analyzed. This is primarily done using cookies and analytics programs. The analysis of your browsing behavior is usually conducted anonymously, meaning it cannot be traced back to you.

You have the right to object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options to opt out can be found in the Privacy Policy below.

1. Name and Contact Information of the Data Controller

The operators of this website take the protection of your personal data very seriously. We handle your personal information confidentially and in compliance with legal data protection regulations, as well as this Privacy Policy.

When you use this website, various personal data is collected. Personal data refers to information that can be used to personally identify you. This Privacy Policy explains what data we collect and how we use it. It also outlines how and for what purposes the data is processed.

The responsible entity (data controller) is the individual or legal entity that, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.):

NUE digital GmbH
Hessestraße 5-7
90443 Nuremberg, Germany
Phone: +49 911 23735338
Email: info@nuernberg.digital

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and a lock symbol appears in the browser's address bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

2. Hosting and Server

Our website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). Data processing is carried out exclusively within the EU/EEA.

3. Consent management tool

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net) into our website to manage consent for data processing, cookies, or similar functionalities.

Using "consentmanager," you can grant or deny consent for specific functionalities of our website, such as embedding external elements, streaming content, statistical analysis, audience measurement, or personalized advertising. You have the option to approve or reject all functionalities or give consent for individual purposes or functions. You can also adjust your settings at any time afterward.

The purpose of integrating "consentmanager" is to provide users with control over these decisions and allow changes to the settings during their continued use of the website. During the use of "consentmanager," personal data and information about the devices you use (e.g., IP address, language, browser, etc.) are processed and transmitted to consentmanager AB. The information about your chosen settings is also stored on your device.

The legal basis for this processing is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, as far as the processing is necessary to fulfill legal obligations to document consent. Beyond this, Article 6(1)(f) GDPR serves as the legal basis for processing. Our legitimate interest lies in storing user preferences and settings regarding cookie usage and analyzing consent rates.

Consent will be requested again no later than 24 months after the user settings are made. These settings will then be stored again for this period unless you delete the stored information from your device beforehand.

You may object to the processing of your data if it is based on Article 6(1)(f) GDPR. Your right to object applies if there are reasons arising from your particular situation. To lodge an objection, please contact mail@consentmanager.net.

4. Data Collection on Our Website

4.1 Registration on This Website

You can register on our website to access additional features, such as profile management and maintenance. The data you provide during registration is used exclusively for the purpose of accessing the specific offer or service for which you registered. All required fields in the registration form must be completed; otherwise, we will be unable to process your registration.

We use the email address provided during registration to notify you of important changes, such as updates to our services or technical modifications.

The processing of data provided during registration is based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by sending an informal email to us. The legality of any data processing carried out before your withdrawal remains unaffected.

The data collected during registration is stored as long as your account remains active. You may delete your profile at any time, either yourself or by requesting us to do so via email. Once deleted, all personal data will be removed, subject to any mandatory legal retention periods.

4.1.1 Event Registration for the Nürnberg Digital Festival as a Participant

You can register for Nürnberg Digital Festival events on this website. The following data is required for registration: First name, last name, email address. Additional profile data that you may add voluntarily. These can be used by event organizers for orientation and communication but are not required.

Use of Photo and Audio Recordings: By participating in the Nürnberg Digital Festival, you consent to photo and audio recordings being made during the events. These recordings may be used, reproduced, broadcast, and published by the Nürnberg Digital Festival and its organizers for documentation and promotional purposes without any compensation. This consent is valid indefinitely and without geographic limitation.

Use and Storage of Participant Data: The data you provide will be used for the following purposes:

- Managing event registrations
- Providing personalized event suggestions

The processing is based on Article 6(1)(b) GDPR (contract performance), as the data is necessary to facilitate your participation in events and provide relevant information.

Additionally, the website may analyze your saved events and interests to recommend other relevant events. The data will be stored until your user profile is deleted or the purpose of processing is no longer applicable.

Sharing Data with Organizers: The data (first name, last name, email address) will be shared with event organizers for the purpose of event management. Organizers are contractually required to delete this data after the festival and not use it for other purposes.

4.1.2 Event Management for the Nürnberg Digital Festival

As an event organizer, you can create a profile on this website to register and manage events for the Nürnberg Digital Festival. To create an organizer profile, you must first register as a user by providing the following mandatory information: first name, last name, and email address.

Submitting an Event: Additional mandatory information is required when submitting an event to facilitate event organization.

Use of Billing Data: The billing information provided in the "Billing Address" section of the user profile is used solely by NUE digital GmbH staff for event billing purposes.

Publication of Event Data: All other data submitted during event registration will be published after active submission and approval by NUE digital GmbH staff.

The processing of your data is based on Article 6(1)(b) GDPR (contract performance), as it is necessary for the registration, management, and billing of events. Additional obligations and rights related to event registration and management are governed by the General Terms and Conditions (GTC) between the organizers and NUE digital GmbH.

4.1.3 Inquiries via Email, Phone, or Fax

When you contact us via email, phone, or fax, the personal data you provide (e.g., your name and inquiry) is stored and processed for the purpose of handling your request. This data will not be shared without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry relates to the fulfillment of a contract or pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) and/or our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in effectively handling inquiries.

The data you send us via contact inquiries will remain with us until you request its deletion, withdraw your consent, or the purpose for storage no longer applies (e.g., once your request has been fully processed). Mandatory legal provisions, particularly statutory retention periods, remain unaffected.

4.2 Cookies

Our website uses cookies in certain areas. Cookies do not harm your device or contain viruses. Their purpose is to make our website more user-friendly, efficient, and secure. Cookies are small text files stored on your device by your browser.

Most of the cookies we use are “session cookies,” which are automatically deleted at the end of your visit. Other cookies remain on your device until you delete them, allowing us to recognize your browser on subsequent visits.

You can configure your browser to notify you about cookie use, allow cookies on a case-by-case basis, block cookies altogether, or enable automatic cookie deletion when you close your browser. However, disabling cookies may limit the functionality of this website.

Cookies necessary for the electronic communication process or to provide specific functionalities requested by you (e.g., shopping cart) are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. Other cookies, such as those used to analyze browsing behavior, are addressed separately in this privacy policy.

4.2.1 Technically Necessary Cookies and Logs

When you visit our website, the following technically necessary cookies are used, and log data is collected:

- Session cookies: Valid for the session duration.
- Cookie settings: Valid for 3 months.
- Consent manager cookies: Valid for 24 months.

The website provider automatically collects and stores information in server log files, which your browser transmits to us. These include: IP address, Browser type, Operating system, Access timestamp.

This data collection is based on Article 6(1)(f) GDPR, as the website operator has a legitimate interest in ensuring the secure and optimized functionality of the website. Collecting server log files is necessary to maintain the security and stability of the website.

Server log files are deleted or anonymized automatically after 7 days. This data is not combined with other data sources.

Technically necessary cookies are documented using the Consent Manager Tool ("consentmanager") to ensure compliance with legal requirements. This documentation guarantees that all legal obligations are met.

4.2.2 Analytics and Marketing Cookies (Only with Consent)

You can object to the transmission of data to third countries by rejecting the respective cookies or services via the consent banner. The consent management tool ensures that data processing begins only after your active consent.

After you provide consent, the following cookies are used:

Google Analytics 4

- _ga:
Valid for 2 years.
- _gid: Valid for 24 hours.

Our website uses Google Analytics 4 (GA4), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
GA4 enables us to analyze user behavior on our website to measure and improve its effectiveness. Pseudonymized data such as interactions, visited pages, time spent on pages, and click behavior is collected.

This data is used for statistical evaluations, market research, and improving content. While the data collected by GA4 is anonymous to us, Google may link it with other services, associate it with your Google account, and use it for personalized advertising.

Google may transfer this data to servers in the USA, where it is processed. Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection according to Article 45 GDPR.

If you do not want Google Analytics 4 to associate your data with your Google profile, you can:

1. Disable cookie storage in your browser settings.
2. Install the browser add-on to disable Google Analytics (https://tools.google.com/dlpage/gaoptout).

Further information about Google Analytics 4’s data protection policies can be found here:
https://support.google.com/analytics/answer/12017362?hl=en

Google Ads

- Conversion:
Valid for 90 days.
- Remarketing: Valid for 390 days.

Our website uses Google Ads, an advertising service by Google Ireland Limited. Google Ads allows us to place ads on Google Search and partner sites to promote our offerings. When you click on a Google ad, a conversion tracking cookie is placed on your device to track specific actions on our website (e.g., purchases, inquiries).

Data collected includes pages visited, completed actions, and the timestamp of the ad click. This data helps us measure ad effectiveness and optimize future campaigns.

The processing of your data is based solely on your consent (Article 6(1)(a) GDPR). Google may transfer this data to the USA, and its compliance with the EU-US Data Privacy Framework ensures appropriate data protection.

To deactivate conversion tracking, you can restrict cookie storage in your browser or opt-out via this link: https://adssettings.google.com/authenticated

Meta Pixel (Facebook)

- fr:
Valid for 90 days.
- _fbp: Valid for 6 months.

Our website uses the Facebook Pixel, provided by Facebook Inc. (Meta), 1601 S. California Ave, Palo Alto, CA 94304, USA. This tool tracks user behavior after clicking a Facebook ad and being redirected to our website. The collected data allows us to evaluate the effectiveness of ads and optimize future campaigns.

Although the data collected is anonymized for us, Facebook may link it to your user profile and use it for personalized advertising. Data processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in effective advertising on social media platforms.

You can opt out of Facebook’s "Custom Audiences" feature here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
If you don’t have a Facebook account, you can opt out of interest-based ads via the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement

TikTok Pixel

- tt_sessionId:
Valid for 24 hours.
- _ttp: Valid for 18 months.

Our website uses the TikTok Pixel, provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. This tool allows TikTok to track user behavior after clicking on a TikTok ad and being redirected to our website. This tracking helps us evaluate the effectiveness of TikTok ads for statistical and market research purposes, as well as optimize future marketing efforts.

The data collected is anonymized for us, meaning it does not allow us to identify you personally. However, TikTok stores and processes the data, making it possible to associate it with your TikTok user profile. TikTok may use this data for its own advertising purposes, in accordance with its Privacy Policy, which you can view here:
https://www.tiktok.com/legal/page/eea/privacy-policy

Data may be transferred to the USA under appropriate safeguards, such as standard contractual clauses, in compliance with Article 46(2) and (3) GDPR.

If you do not want TikTok to associate your visit to our website with your TikTok account, please log out of your TikTok account before visiting our website.

LinkedIn Insight Tag

- UserMatchHistory:
Valid for 30 days.
- li_gc: Valid for 2 years.

Our website uses the LinkedIn Insight Tag, a service provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This tool enables us to track user actions after they view or click on a LinkedIn ad. The data collected helps us evaluate the effectiveness of LinkedIn ads for statistical and market research purposes and optimize future marketing efforts.

The data transmitted to LinkedIn includes pseudonymous information, such as ad interactions and website activity, which LinkedIn uses to provide us with statistical reports and deliver personalized advertising to users. While this data remains anonymous to us as the website operator, LinkedIn may link it to individual user profiles and use it for its own advertising purposes in accordance with the LinkedIn Privacy Policy, which you can view here:
https://www.linkedin.com/legal/privacy-policy

If you wish to object to the use of LinkedIn Insight Tag and prevent your data from being used for LinkedIn ads, you can adjust your ad preferences within your LinkedIn account under the following link:
https://www.linkedin.com/psettings/advertising

You can also opt out of LinkedIn’s interest-based advertising here:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For mobile users, you can disable interest-based advertising by activating the "Limit Ad Tracking" option (iOS) or "Disable Personalized Ads" (Android) on your device.

4.2.3 External Services

Google Tag Manager:
Our website uses the Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is used to manage website tags (small code snippets) required for implementing and managing services like Google Analytics, Google Ads, or other tracking and analysis tools. The Tag Manager itself does not collect personal data but acts as a tool to deploy other services.

The Google Tag Manager allows us to centrally manage tracking tags and ensures that the integrated services (e.g., Google Analytics) function correctly on our website. The processing of personal data is handled exclusively by the integrated services.

Since the Google Tag Manager does not process personal data itself, no separate legal basis is required. For integrated services, processing is based on your consent in accordance with Article 6(1)(a) GDPR, which you can provide through our consent management tool.

Data may be transmitted to servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection in compliance with Article 45 GDPR.

For more information about the Google Tag Manager, visit:
https://support.google.com/tagmanager/answer/9323295?hl=en 

Mapbox:
Our website uses the Mapbox service, provided by Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, D.C. 20005, USA, to display interactive maps and provide location-based features. The integration of Mapbox is essential to ensure the basic functionality of our website, particularly for displaying map information.

When loading a map, data such as your IP address and usage statistics are transmitted to Mapbox to enable the service. Data processing is carried out based on Article 6(1)(b) GDPR (contract performance) and Article 6(1)(f) GDPR (legitimate interest), as the website’s functionality would be significantly limited without Mapbox.

For more information on data processing by Mapbox, refer to their privacy policy:
https://www.mapbox.com/privacy

Airtable:
We use the Airtable service, provided by Airtable Inc., 799 Market Street, San Francisco, CA 94103, USA, to display external calendars and handle contact inquiries. Airtable is not directly embedded in our website but accessed via an external link that redirects you to Airtable’s platform.

When using Airtable, any data you provide will be processed on Airtable’s servers in the USA. Before entering your data, you must agree to Airtable’s privacy policy.

The use of Airtable is based on Article 6(1)(f) GDPR (legitimate interest), as it is necessary for efficiently providing calendar and contact form functionality. Data transfers to the USA are safeguarded by standard contractual clauses to ensure an adequate level of data protection.

For more information on data processing by Airtable, see their privacy policy:
https://www.airtable.com/company/privacy

YouTube:
Our website uses plugins from YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode prevents YouTube from storing information about visitors to our website unless they play a video. However, data may still be shared with YouTube partners even in enhanced privacy mode. For example, YouTube connects to the Google DoubleClick network regardless of whether you watch a video.

When you start a YouTube video on our website, a connection to YouTube’s servers is established. This notifies the YouTube server about which of our pages you visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Once you start a YouTube video, YouTube may store cookies on your device. These cookies collect information about website visitors to generate video statistics, improve usability, and prevent fraud. These cookies remain on your device until you delete them. Additional data processing by YouTube may occur after starting a video, which we cannot control.

The use of YouTube is based on our legitimate interest in presenting our online content attractively (Article 6(1)(f) GDPR).

For more information about YouTube’s privacy practices, visit:
https://policies.google.com/privacy?hl=en

MailChimp:
Our website uses MailChimp for sending newsletters. This service is provided by The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp helps us organize and analyze newsletter distribution. When you subscribe to our newsletter (e.g., by providing your email address), your data is stored on MailChimp’s servers in the USA.

MailChimp is certified under the EU-US Privacy Shield, which is designed to ensure compliance with EU data protection standards.

MailChimp allows us to analyze newsletter campaigns. For example, when you open an email sent via MailChimp, a web beacon connects to MailChimp’s servers to determine if the email was opened and which links were clicked. Technical information such as your IP address, browser type, and operating system is also collected. These analytics help us tailor future newsletters to recipient preferences.

If you do not want your data to be analyzed by MailChimp, you can unsubscribe from the newsletter. A link for unsubscribing is included in every newsletter email.

Data processing is based on your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The legality of prior data processing remains unaffected.

Your data will be stored for as long as you remain subscribed to the newsletter and deleted after you unsubscribe. Other data stored by us for different purposes remains unaffected.

For more information, see MailChimp’s privacy policy:
https://mailchimp.com/legal/terms/

We have entered into a Data Processing Agreement (DPA) with MailChimp, requiring them to protect customer data and prohibit sharing it with third parties.

Data Transfer to Third Countries :
Data transfers to the USA occur based on EU-approved standard contractual clauses. While safeguards are in place, the level of protection may not be equivalent to EU standards. US authorities may access data without offering EU-comparable legal remedies.

Data transfers to third countries are based on your consent (Article 6(1)(a) GDPR) or for contract performance (Article 6(1)(b) GDPR).

5. Newsletter

If you would like to subscribe to the newsletter offered on our website, we require your email address and information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter.

We use the double opt-in process for newsletter registration. This means you will receive a confirmation email after signing up, which contains a verification link. You must click this link to complete your registration. This process ensures that your consent is securely documented. No additional data will be collected unless provided voluntarily. The data you provide will only be used to send the requested information and will not be shared with third parties.

The processing of data entered into the newsletter registration form is based solely on your consent (Article 6(1)(a) GDPR). You can revoke your consent to the storage of your data, email address, and its use for sending the newsletter at any time, for example, by clicking the "Unsubscribe" link in the newsletter. The legality of data processing carried out before your withdrawal remains unaffected.

The data you provide for receiving the newsletter will be stored by us until you unsubscribe. Once you unsubscribe, your data will be deleted. Data stored by us for other purposes remains unaffected.

6. Your Rights

You have the right to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction, restriction, deletion, or blocking of this data. For this and any further questions about data protection, you can contact us at any time using the contact details provided in the legal notice (Impressum). Additionally, you have the right to file a complaint with the appropriate supervisory authority.

You may also request the restriction of the processing of your personal data under certain circumstances. Details on this can be found below in the section "Right to Restriction of Processing."

Right to Access, Correction, Blocking, or Deletion

In accordance with applicable legal provisions, you have the right to access (Article 15 GDPR) your stored personal data, including its origin, recipients, and the purpose of processing, free of charge. You also have the right to request the correction (Article 16 GDPR), blocking, or deletion (Article 17 GDPR) of your personal data.

For these requests or any other questions regarding personal data, you can contact us at any time using the address provided in the legal notice.

Right to Restriction of Processing

You have the right to request the restriction of processing (Article 18 GDPR) of your personal data. You can contact us at any time via the address provided in the legal notice. This right applies in the following cases:

Disputing Data Accuracy

If you dispute the accuracy of the personal data we store, you have the right to request a restriction of processing while we verify its accuracy.

Unlawful Data Processing

If the processing of your personal data is or was unlawful, you can request restriction instead of deletion.

Retention for Legal Claims: If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request restriction instead of deletion.

Pending Objection Resolution

If you have filed an objection to processing in accordance with Article 21(1) GDPR, you can request restriction while determining whether your interests outweigh ours.

If processing is restricted, your personal data—other than being stored—may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the European Union or a Member State.

Right to Data Portability

You have the right (Article 20 GDPR) to receive data that we process based on your consent or to fulfill a contract, in a commonly used, machine-readable format. You may also request that we transfer this data directly to another data controller, where technically feasible.

Right to Withdraw Consent

Many data processing operations are only possible with your explicit consent. You have the right to withdraw consent at any time (Article 7(3) GDPR). Simply send an informal email to us. The withdrawal of consent does not affect the legality of any data processing carried out prior to withdrawal.

Right to Object to Data Collection in Specific Cases or to Direct Marketing (Article 21 GDPR)

Objection to Processing Based on Legitimate Interest: If data processing is carried out based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons related to your specific situation. This also applies to profiling based on these provisions.
If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

Objection to Direct Marketing: If your personal data is processed for direct marketing purposes, you have the right to object to this at any time. This also applies to profiling related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes.

Right to File a Complaint with a Supervisory Authority

In the event of violations of the GDPR, you have the right to file a complaint with a supervisory authority (Article 77 GDPR). This right applies in particular in the Member State of your habitual residence, place of work, or the location of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

7. Amendments

We reserve the right to modify this Privacy Policy in accordance with applicable data protection regulations.

Last updated: January 2025