This privacy policy is intended to inform the users of this website about the type, scope and purpose of the collection and use of personal data by the website operator CityHunters GmbH & Co. KG (hereinafter: CityHunters).
CityHunters takes your privacy very seriously and treats your personal data confidentially and in accordance with the legal provisions, in particular the so-called General Data Protection Regulation (GDPR). CityHunters has taken appropriate technical measures to ensure that your personal data is protected as securely as possible. Nevertheless, internet-based data transmission may have security gaps. Absolute protection can therefore not be guaranteed. Users of our website are therefore free to transmit personal data to us by other means, such as telephone.
As new technologies and the constant further development of this website may result in changes to this privacy policy, we recommend that you read the privacy policy again at regular intervals.
Definitions of the terms used (e.g. "personal data" or "processing") can be found in Art. 4 GDPR.
CityHunters GmbH & Co. KG Weinmarkt 1 90403 Nuremberg Germany
CityHunters GmbH & Co. KG (Register Court Nuremberg, HRA 17564) Personally liable partner: CityHunters Verwaltungs-GmbH (registered office: Nuremberg, Nuremberg registration court, HRB 32748) Management: Dr. Daniel Sekula & C.-Philipp Steiner
Companies that employ at least ten people permanently involved in processing personal data must appoint a data protection officer. Since CityHunters is not affected by this regulation, no data protection officer has been appointed. If you have any questions regarding data protection at CityHunters, you can contact us via
We also process the following
of our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
In accordance with Art. 13 GDPR we inform you about the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 Lit. a and Art. 7 GDPR, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering inquiries is Art. 6 Para. 1 Lit. b GDPR, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Para. 1 Lit. c GDPR, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Para. 1 Lit. f GDPR. In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 Para. 1 Lit. d GDPR serves as the legal basis.
We kindly ask you to update yourself regularly about the content of our privacy policy. We will adapt the data protection declaration as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes make it necessary to cooperate (e.g. to give your consent) or to receive other individual notifications.
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the following basis:
If we commission third parties to process data on the basis of a so-called "data processing agreement", this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 et seqq. GDPR applies. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized establishment of a level of data protection equivalent to that in the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
CityHunters, or our hosting provider, collects data about access to the website due to its legitimate interest (see article 6 Para. 1 Lit. f. GDPR) and stores them as "server log files" on the server of the website. The following data is logged in this way:
Server log files do not allow any conclusions about the person concerned. They are needed for the following reasons:
The anonymous data of the server log files are stored separately from all personal data for a maximum of 7 days and then deleted. If data has to be kept for reasons of evidence, it is excluded from deletion until the incident is finally clarified.
The hosting services used by CityHunters serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online service.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 Para. 1 Lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of contract processing agreement).
Our websites are delivered through the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare serves pages and files from servers close to you and protects our infrastructure against attacks.
When you open our pages, Cloudflare processes your IP address, information about your browser and device, and the address you requested. The legal basis is our legitimate interest in a fast and attack-resistant provision of our offer (Art. 6(1)(f) GDPR). A data processing agreement is in place; the transfer to the USA is covered by standard contractual clauses. Privacy policy: https://www.cloudflare.com/privacypolicy/.
Photos, videos and other large files of our offer are stored with Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The storage region is Frankfurt am Main, so the files are held within the European Union.
When such a file is retrieved, the provider processes your IP address and technical details of the request. The legal basis is our legitimate interest in a reliable and fast provision of our content (Art. 6(1)(f) GDPR); a data processing agreement is in place. Privacy policy: https://aws.amazon.com/privacy/.
This website uses cookies for pseudonymous range measurement, which are transferred to the user's browser either from our server or the server of a third party. Cookies are files which are stored on your end device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website. If you do not want cookies to be stored on your end device for range measurement, you can decline the use of these files here:
Before we use services that require consent, we ask for it through the consent tool „CookieScript“ (operated by Objectis Ltd, Lithuania). It stores your decision and passes it on to the services concerned, so that they only run once you have agreed.
In doing so we process your consent settings, the date and time of your decision, information about your browser and device, and your IP address. The legal basis is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) GDPR) and our legitimate interest in a lawful use of cookies (Art. 6(1)(f) GDPR). You can change or withdraw your decision at any time by opening the consent window again. Privacy policy of the provider: https://cookie-script.com/privacy-policy.
CityHunters will only collect, use and disclose your personal data if this is permitted by law or if you consent to the collection of data.
Personal data includes all information that is used to determine your identity and which can be traced back to you - for example your name, e-mail address and telephone number.
You can also visit this website without providing any personal information. However, to improve our online service, we store (without personal reference) your access data to this website. This access data includes, for example, the files and web pages you request, the type of browser you use or the name of your internet provider. By making the data anonymous, it is not possible to draw conclusions about your person.
When contacting us (e.g. via contact or inquiry form, e-mail, telephone or social media), the user's details are processed for the purpose of dealing with the contact inquiry and its handling in accordance with Art. 6 Para. 1 Lit. b GDPR. The user's details may be stored in a customer relationship management system ("CRM system") or a comparable system. We process the following personal data:
Personal data is collected voluntarily and only to the extent that you provide the relevant information via the respective communication channel, in compliance with the applicable data protection regulations. We will delete contact requests if they are no longer necessary. We review the necessity every two years. Furthermore, the statutory archiving obligations apply.
We use Google Tag Manager and the analysis service „Google Analytics 4“ of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users outside Europe: Google LLC, USA).
Google Analytics uses cookies and similar identifiers to evaluate how our website is used. It processes the shortened IP address, information about your browser and device, the pages you visit and where your visit came from. The IP address is shortened within the European Union before it is passed on.
The service is only loaded once you have given your consent. The legal basis is your consent under Art. 6(1)(a) GDPR together with the national implementation of the ePrivacy Directive; you can withdraw it at any time with effect for the future by opening the consent window again. A data processing agreement with Google is in place; the transfer to the USA is covered by standard contractual clauses and the recipient’s certification under the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy, opt-out: https://tools.google.com/dlpage/gaoptout.
Within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 Lit. f. GDPR), we use content or service offers from third parties to integrate their content and services, such as videos or fonts (hereinafter referred to uniformly as "content").
This always presupposes that the third-party providers of these contents are aware of the IP address of the users, since without the IP address they would not be able to send the contents to their browsers. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain technical information about the browser and operating system, referring websites, visiting times and other details about the use of our online offer, as well as being linked to such information from other sources.
The maps on our pages come from Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA.
A map is not loaded with the page; it is loaded when you open it. Until then you see a preview and no data is transmitted to Mapbox. Once you open the map, Mapbox processes your IP address, information about your browser and device, and the map section you have chosen. The legal basis is your consent, given by opening the map (Art. 6(1)(a) GDPR), and otherwise our legitimate interest in showing places clearly (Art. 6(1)(f) GDPR). The transfer to the USA is covered by standard contractual clauses.
The city search on our pages queries Mapbox through our own server, so Mapbox does not learn your IP address. Privacy policy: https://www.mapbox.com/legal/privacy.
On some pages we embed an explainer video from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The video only loads once you start it. Until then you see a preview image served from our own server and no data is transmitted to Google. Only your click loads the player from youtube-nocookie.com; Google then processes your IP address, information about your browser and device, and which video was opened. If you are signed in to Google at that moment, Google can attribute the view to your account.
The legal basis is your consent, given by starting the video (Art. 6(1)(a) GDPR). The transfer to the USA is covered by standard contractual clauses and the recipient’s certification under the EU-US Data Privacy Framework. Privacy policy: https://policies.google.com/privacy.
In some places we offer to show you tours near you. To do so, your browser asks you for your location. The request only happens when you trigger it, and your location is only transmitted if you explicitly allow it in your browser.
We use the coordinates solely to determine the nearest cities; they are not stored and not passed on to third parties. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your browser settings.
On some pages we show the profile pictures of players who have played one of our tours. Some of these pictures are not delivered by our own servers but by Google (service „googleusercontent“, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – namely where the person concerned signed in with their Google account.
When you open such a page, your IP address is transmitted to Google. The legal basis is our legitimate interest in showing real players (Art. 6(1)(f) GDPR). Privacy policy: https://policies.google.com/privacy.
We use the service MailerLite of UAB „MailerLite“, Paupio g. 46, 11341 Vilnius, Lithuania, to send our newsletter.
When you subscribe, we process your email address and the details you provide, as well as the date and time of your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time – every newsletter email contains an unsubscribe link. A data processing agreement is in place. Privacy policy: https://www.mailerlite.com/legal/privacy-policy.
We maintain our own pages on Facebook, Instagram, YouTube and Pinterest and link to them in the footer of our website. These are ordinary links – no content of these networks is embedded in our pages, and the network only learns of your visit once you click one of those links.
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.
We process the data of our customers in the context of the ordering process in our online store, in order to enable you to select and order the products and services chosen, as well as their payment and delivery, or execution.
The data processed includes inventory data, communication data, contract data and payment data. The persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer services. For this purpose we use session cookies for the storage of the shopping cart content.
The processing is based on Art. 6 Para. 1 Lit. b (Execution of order processes) and c (Legally required archiving) GDPR. The information marked as necessary is required for the establishment and fulfillment of the contract. We disclose the data to third parties only within the scope of delivery, payment or within the scope of the legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. upon customer request for delivery or payment).
Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's need for protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 Lit. c GDPR.
For the sale of tickets and vouchers we work with Paddle. Paddle acts as the seller towards customers and handles the payment. The provider is Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom; for customers in the European Economic Area, Paddle Payments Limited, The Academy, 42 Pearse Street, Dublin 2, D02 HV59, Ireland.
When you choose a payment method, the details you enter are transmitted directly to Paddle and processed there: usually first and last name, email address, billing address, country and the payment details themselves. We never see your card or account details – they are collected and processed by Paddle alone. From Paddle we receive the information we need to fulfil the contract and for our accounts.
The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our retention obligations under tax and commercial law (Art. 6(1)(c) GDPR). The transfer to the United Kingdom is based on the adequacy decision of the European Commission. Privacy policy: https://www.paddle.com/legal/privacy.
If you leave a contribution or comment on this website, your IP address will be saved. This is done on the basis of our legitimate interests as defined in Art. 6 Para. 1 Lit. f. GDPR and serves our security as the website operator: if your comment violates applicable laws, we may be prosecuted for this, which is why we have an interest in the identity of the author of the comment or contribution.
CityHunters processes the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of the applicant data is carried out to fulfill our (pre-)contractual obligations within the application procedure in accordance with Art. 6 Para. 1 Lit. b. GDPR. Art. 6 Par. 1 Lit. f. GDPR applies if the data processing becomes necessary for us, e.g. in the context of legal procedures (in Germany, § 26 BDSG applies additionally).
The application procedure requires that applicants provide us with the applicant data. If we offer an online form, the necessary applicant data are marked or otherwise result from the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents for the application, such as cover letter, CV and certificates. In addition, applicants can voluntarily provide us with additional information.
By submitting their application to us, applicants agree to the processing of their data for the purposes of the application procedure in accordance with the type and scope described in this data protection declaration.
Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily communicated as part of the application procedure, their processing is additionally carried out in accordance with Art. 9 Para. 2 Lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are requested from applicants in the course of the application procedure, their processing is also carried out in accordance with Art. 9 Para. 2 Lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession).
If provided, applicants can send us their applications by means of an online form on our website. The data will be transmitted to us in encrypted form according to state of the art technology available at the time.
Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We can therefore not take any responsibility for the transmission path of the application between the sender and the receipt on our server and therefore recommend using an online form or the postal dispatch instead. This is because instead of applying via the online form and e-mail, applicants still have the option of sending us their application by postal mail.
The data provided by the applicants can be processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is not successful, the applicants' data will be deleted. The applicants' data will also be deleted if an application is withdrawn, which the applicants are entitled to do at any time.
Subject to a justified revocation by the applicants, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any travel expense reimbursement will be archived in accordance with tax law requirements.
We process data within the framework of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process within the scope of providing our contractual services. The basis for processing is Art. 6 Par. 1 Lit. c. GDPR, Art. 6 Par. 1 Lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose of and our interest in processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks which serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication is in accordance with the information mentioned in these processing activities.
We disclose or transfer data to the tax authorities, consultants, such as tax consultants or auditors, as well as other external agencies and payment service providers.
Furthermore, we store information on suppliers, event organizers and other business partners based on our business interests, e.g. for the purpose of contacting them at a later date. We store these mostly company-related data permanently.
CityHunters processes and stores personal data only for the period of time that is necessary to achieve the purpose of storage or as far as this is provided for by European legislators and regulators or any other legislator to which it is subject.
According to legal requirements in Germany, data is stored for 6 years in accordance with § 257 Para. 1 HGB and for 10 years in accordance with § 147 Para. 1 AO.
If the purpose of storage ceases to apply or a prescribed storage period expires, the personal data will be blocked or deleted in accordance with Art. 17 and 18 GDPR.
According to Art. 15 GDPR you have the right to request a free confirmation from CityHunters whether personal data about you is being processed or not. In order to exercise the right of confirmation, you may contact a CityHunters employee at any time.
As far as we process personal data about you, you have the right, according to Art. 15 GDPR, to receive upon request free information about which personal data CityHunters has stored about you. Furthermore, you have the right to request information about:
Furthermore, the data subject has the right of information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject shall have the right to obtain information on the appropriate safeguards relating to the transfer. To exercise the right of access, you may contact a CityHunters employee at any time.
If we process personal data about you, you have the right, in accordance with Art. 16 GDPR, to demand the correction of incorrect personal data concerning you and the completion of incomplete personal data. To exercise the right of rectification, you may contact a CityHunters employee at any time.
If we process personal data about you, you have the right to have your data deleted in accordance with Art. 17 GDPR, provided your request does not conflict with a legal obligation to retain data (e.g. data retention). Data stored by CityHunters will be deleted if they are no longer needed for their intended purpose and there are no legal retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing is restricted in accordance with Art. 18 GDPR. In this case the data will be blocked and not processed for other purposes. To exercise the right of deletion, you can contact a CityHunters employee at any time.
If we process personal data about you and you suspect that your data has been processed unlawfully, you have the right to file a complaint with the competent supervisory authority according to Art. 77 GDPR.
If we process personal data about you, you have the right to revoke your consent to the processing of personal data at any time in accordance with Art. 7, Para. 3 GDPR. To exercise the right to revoke a given consent to the processing of personal data, you may contact a CityHunters employee at any time.
Users of this website can exercise their right to object and object to the processing of their personal data in accordance with Art. 21 GDPR at any time.
If you wish to correct, block, delete or obtain information about the personal data stored about you, or if you have any questions regarding the collection, processing or use of your personal data, or if you wish to revoke any consents granted, please contact the following e-mail address:
Parts of this privacy policy were created with Datenschutz-Generator.de by lawyer Dr. Thomas Schwenke.