Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Abdullah Tanidir, Steinweg 18, 40625 Düsseldorf, Germany, e-mail: kontakt@neuindus.de
2. General information on data processing
We process personal data only to the extent necessary to provide a functional website and our content and services. The legal bases are in particular Art. 6(1) GDPR.
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, technical access data (e.g. IP address, date/time, file requested, browser type) are processed in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable provision). A data processing agreement (Art. 28 GDPR) is in place with Vercel. Any transfer to the USA takes place on the basis of the EU Standard Contractual Clauses.
4. Database (Supabase)
We use Supabase, hosted in the EU region (Frankfurt), to store the event data displayed. Only public event content is stored here; no personal data of website visitors is stored. A data processing agreement is in place. Legal basis: Art. 6(1)(f) GDPR.
5. Reach & performance measurement (Vercel Analytics / Speed Insights)
We use Vercel Web Analytics and Vercel Speed Insights (Vercel Inc., USA) for anonymous, data-minimising measurement of website usage and loading performance (Core Web Vitals). These services do not use cookies and do not combine any identifiers that could be linked to a person; only aggregated, anonymised metrics are collected. No consent is required as there is no access to your end device. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a stable, high-performance website). Any transfer to the USA is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses.
6. Newsletter (Brevo, double opt-in)
If you subscribe to our newsletter, we process your e-mail address and the language version of the website you used to send the newsletter via Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). Subscription uses the double opt-in procedure: after signing up you receive a confirmation e-mail and are only added to the list after confirming. Sign-up, confirmation and unsubscribe are logged. A data processing agreement is in place with Brevo; processing takes place on servers in the EU. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every e-mail. To render the newsletter, we additionally store the colour scheme (light/dark) you use on the website as a contact attribute; a functional token is kept in your browser (localStorage) solely to update this setting.
7. Maps (OpenStreetMap)
To display event locations we embed maps from OpenStreetMap (OpenStreetMap Foundation, UK). The map is loaded only after your active click ("Load map"). Only then is your IP address transmitted to OpenStreetMap's servers so that the map tiles can be delivered. No transmission takes place before your click. Legal basis: Art. 6(1)(f) GDPR.
8. Affiliate links / partner programmes
This website contains affiliate links to ticket providers (including via the partner networks Awin and Impact as well as to Eventim, Ticketmaster and universe.com). If you click a correspondingly marked link and purchase a ticket via the partner, we may receive a commission; this incurs no additional cost for you. No cookies are set for this purpose on our website. When you click, you are forwarded to the provider or partner network; any cookie for commission attribution is only set there, and the privacy policy of the respective provider then applies. The forwarding to Eventim is handled technically via the Awin partner network; a reference parameter ("clickref") contains only the event identifier (slug) for click attribution and no personal data. The legal basis for the forwarding is Art. 6(1)(f) GDPR.
9. Contacting us (contact form and e-mail)
If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, message) to handle your request. The form is sent via our e-mail provider's mail server. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data are deleted once your request has been conclusively processed and no statutory retention obligations apply.
10. Local storage (watchlist)
When you save events, we store them exclusively locally in your browser (localStorage). This data remains on your device and is not transmitted to us. The storage is necessary for the function you requested (§ 25(2) TDDDG). You can delete this data at any time via your browser settings.
11. Fonts
We embed fonts locally (self-hosting). No data is transmitted to external font servers (e.g. Google Fonts).
12. Consent management (cookie consent tool CookieYes)
On this website we use the consent management tool CookieYes (CookieYes Limited, Ireland) to obtain and document your consent to the use of consent-requiring cookies and services. A consent banner appears on your first visit. The consent-requiring services listed below (Google Analytics, Meta Pixel, Awin affiliate tracking (Publisher MasterTag) and the client-side error capture of Sentry) are only loaded or activated, and data is only transmitted, after you have given your consent; until then they are blocked. CookieYes stores your consent decision (incl. a consent ID, time and scope) as proof pursuant to Art. 7(1) GDPR; the cookies required for this are technically necessary (§ 25(2) TDDDG). You can withdraw or adjust your consent at any time with effect for the future via the "Cookie Settings" link in the site footer. The legal basis for the consented services is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
13. Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Tag Manager is a tool for managing website tags; it does not itself set cookies or collect personal data for analysis or marketing purposes. It serves to integrate other services (e.g. Google Analytics, Meta Pixel) and only fires these after your consent via the consent tool. When the container loads, your IP address is transmitted to Google. Any transfer to the USA is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses.
14. Google Analytics 4
After your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited (parent company: Google LLC, USA). Google Analytics uses cookies and similar technologies that enable a pseudonymous analysis of your use of the website (incl. pages visited, time spent, approximate location based on the truncated IP address, device/browser information). This information is transmitted to and stored on Google's servers. We use Google Consent Mode so that, without consent, no analytics cookies are set and no personal data is processed for analytics purposes. Any transfer to the USA is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future.
15. Meta Pixel (Facebook Pixel)
After your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA). The Meta Pixel allows us to track user behaviour after users have reached our website via a Meta advertisement, to build advertising audiences (Custom Audiences) and to evaluate the effectiveness of ads. Cookies are set and data (incl. IP address, browser/device information, pages visited) are transmitted to Meta; Meta may attribute this data to an existing Meta account and use it for its own purposes. For the collection and transmission of this data we and Meta are joint controllers (Art. 26 GDPR). Any transfer to the USA is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time; you can also adjust your ad settings in your Meta account.
16. Awin affiliate tracking (Publisher MasterTag)
After your consent, we use Awin's Publisher MasterTag (script loaded from www.dwin2.com) to more reliably attribute ticket purchases you make with our partner Eventim after clicking one of our affiliate links to a commission (tracking optimisation, "Bounceless Tracking"), including when third-party cookies are blocked by your browser. For this purpose, an Awin click identifier is stored in your browser — depending on availability, as a cookie, in local storage and/or in your browser's cache — for up to one year. No further Awin plugins (e.g. automatic link conversion) are activated. The MasterTag is only loaded after your consent to the "Advertising/Marketing" category via CookieYes; without consent it remains blocked. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time. Further information on Awin's data processing is available in Awin's privacy policy.
17. Error monitoring (Sentry)
To detect and fix technical errors we use Sentry (Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, San Francisco, CA 94105, USA). Sentry collects error messages, stack traces and technical diagnostic data; IP addresses and other personal data are not collected (setting "sendDefaultPii=false"), and no session replay takes place. Processing takes place in Sentry's EU data region. Server-side error logging is based on Art. 6(1)(f) GDPR (legitimate interest in system stability and error diagnosis). Client-side (in-browser) error capture is only activated after your consent to the "Statistics/Analytics" category via our consent tool (Art. 6(1)(a) GDPR, § 25(1) TDDDG); without consent, no activation takes place in the browser. A data processing agreement (Art. 28 GDPR) is in place with Sentry; any transfer to the USA is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses.
18. Retention period
Server log files are generally deleted after no later than 30 days, unless retention for security reasons is required for longer. Newsletter data is stored until you unsubscribe. Contact enquiries are deleted once conclusively processed, at the latest after 6 months, provided no statutory retention obligations apply. The watchlist remains locally on your device until you delete it. Vercel Analytics and Speed Insights do not process personal data. Error data collected by Sentry is deleted in accordance with Sentry's policies (generally within 90 days). Cookies from Google Analytics and the Meta Pixel have different retention periods (generally up to 2 years); usage and event data stored in Google Analytics is automatically deleted after 14 months. The click identifier stored by the Awin Publisher MasterTag automatically expires after no later than one year. Your consent given via CookieYes is logged for proof purposes for up to 12 months.
19. Your rights
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Germany).
20. Status of this privacy policy
This privacy policy is dated July 2026 (last updated: July 2026 — addition of Awin affiliate tracking (Publisher MasterTag); previously June 2026 — removal of Plausible; addition of Vercel Analytics/Speed Insights and the Sentry error monitoring).