Order full pass

Privacy policy

This privacy policy explains which personal data (“data”) we process when you visit colognesalsacongress.com, for what purpose, on what legal basis and for how long. We only process data where this is necessary to operate this website, process pass orders and answer your enquiries, or where you have given your consent.

This website does not use any analytics, tracking or advertising services and does not embed third-party content without your consent. Fonts and images are loaded from our own server.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Cologne Salsa Congress GbR
Mehdi Harris
Rosenhügel 102
51143 Köln (Cologne)
Germany

Phone: +49 177 5630477
Email: info(at)colognesalsacongress.com

2. Your rights

You have the following rights regarding your data:

  • right of access (Article 15 GDPR),
  • right to rectification (Article 16 GDPR),
  • right to erasure (Article 17 GDPR),
  • right to restriction of processing (Article 18 GDPR),
  • right to data portability (Article 20 GDPR),
  • right to withdraw consent at any time with effect for the future (Article 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal.

Right to object (Article 21 GDPR): Where we process data on the basis of legitimate interests (Article 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, simply send an informal message to info(at)colognesalsacongress.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

3. Providing the website and server log files

This website is operated by an external service provider (web host) that processes data on our behalf. When you visit the website, your browser automatically sends data to the server, which is stored in server log files: IP address, date and time of access, requested page or file, amount of data transferred, status code, previously visited page (referrer), browser type and version, and operating system.

This processing is necessary to deliver the website and ensure its stability and security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of the website. The data is not combined with other data.

Log files are deleted after seven days at the latest, unless further retention is necessary to investigate a specific security incident. In that case, they are kept until the incident has been fully resolved.

This website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

4. Cookies, local storage and consent management

We do not set any cookies ourselves. On your first visit, a notice asks whether external content (currently only the Google Maps map) may be loaded. You can accept all services, allow only the necessary ones, or choose individually under “Settings”.

We store your choice in your browser’s local storage (localStorage) under the key “csc-consent”: your decision for each service, the date of the decision and a version number. This information does not leave your device and is not transmitted to us or to third parties. We ask again after twelve months or when the embedded services change.

Storing this is strictly necessary so that we can respect and demonstrate your decision (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). The legal basis for the processing is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR.

You can change or withdraw your choice at any time using the “Cookie settings” link at the bottom of every page. You can also clear local storage in your browser settings; the notice will then appear again on your next visit.

5. Ordering passes

When you order a pass using the order form, we process the data you enter: first and last name, email address, the passes and quantities selected, the total amount, any promo code entered and the language of the page. Promo codes are checked only in your browser.

The data is sent to us by email. You receive a confirmation with the bank details for payment by bank transfer at the email address you provided. There is no online payment and no payment service provider is involved. When you make the transfer, your bank and ours process the payment data (for example name, IBAN and payment reference).

This processing is necessary to carry out your order. The legal basis is Article 6(1)(b) GDPR (contract or pre-contractual measures). We cannot process your order without this information.

We delete the data once it is no longer needed to hold the event and complete the order. Where commercial and tax retention obligations apply (Section 257 of the German Commercial Code, HGB, and Section 147 of the German Fiscal Code, AO), we keep the relevant records for the statutory period of up to ten years; the legal basis is then Article 6(1)(c) GDPR.

6. Contact form and contact by email

If you write to us using the contact form, we process your name, email address, subject, message, the language of the page and the time of the enquiry. This information is sent to us by email so that we can answer your enquiry. If you email us directly, we process the data contained in your email.

The legal basis is the consent you give using the checkbox in the form (Article 6(1)(a) GDPR). If your enquiry relates to an order or to taking part in the event, Article 6(1)(b) GDPR also applies. For other enquiries by email, the legal basis is our legitimate interest in answering them (Article 6(1)(f) GDPR).

You can withdraw your consent at any time with effect for the future by emailing info(at)colognesalsacongress.com. We delete your enquiry once it has been fully dealt with and no statutory retention obligations apply, or earlier if you ask us to.

To protect against automated messages, the form contains a decoy field that is invisible to visitors. We also limit submissions to two valid sending attempts per IP address within 60 minutes. For this purpose, the IP address is hashed on our server and stored with the times of the attempts in a file in the server’s temporary directory. These timestamps are no longer counted after one hour; outdated files are removed during subsequent requests. No external CAPTCHA service is used. The legal basis is our legitimate interest in protecting the contact form from abuse (Article 6(1)(f) GDPR).

7. Google Maps (only with consent)

In the “Venue and getting there” section we can show a Google Maps map. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The map only loads once you agree in the notice or directly at the map. Before that, no connection to Google is made; instead you see a placeholder with the address. Once the map loads, Google receives data including your IP address, information about your browser and the address of the page you are on. Google may store cookies or similar technologies on your device. We have no influence over this processing.

The legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” at the bottom of every page; the map is then immediately replaced by the placeholder again. You can delete cookies already set by Google in your browser.

Data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR).

For more information, see Google’s privacy policy.

The “Directions in Google Maps” link opens Google Maps in a new window. Data is only transmitted once you click the link.

8. Links to other websites

This website contains links to third-party websites, for example hotels, booking.com and our partners. Data (in particular your IP address) is only transmitted to the respective provider once you click such a link. The respective provider is responsible for processing on its website, and its privacy policy applies.

9. Changes to this privacy policy

Last updated: October 2026. We update this privacy policy when the website or the legal requirements change.