Wird geladen
SPRACHE
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the 'Responsible Party' section of this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us directly, e.g. via a contact form. Other data is collected automatically by our IT systems when you visit the site (e.g. browser, operating system, time of page view).
What do we use your data for?
Some data is collected to ensure the website functions properly. Other data may be used to analyse your usage behaviour.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion. Complaints may be directed to the competent supervisory authority.
We host the contents of our website with the following provider:
Vercel Inc.
340 Pine Street Suite 701, San Francisco, CA 94104, USA
vercel.com/legal/privacy-policy
Details on data processing by our service providers can be found in the following sections.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
The party responsible for data processing on this website is:
Thomas KuhlUnless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies.
You have the right to access, correct, delete, restrict processing, data portability and object to the processing of your personal data. To exercise your rights, please contact: info@nexxusclub.de
Ticket sales for our events are handled by the external provider StageDates / ticket.ag. This website only carries a link to them. Only once you click that link do you leave our website and open the provider's page.
The ticketing system is operated by Ticket AG, Schaanerstrasse 99, 9490 Vaduz, Liechtenstein, registered in the Commercial Register of the Principality of Liechtenstein under FL-0002.709.346-6. Liechtenstein is part of the European Economic Area (EEA), so no transfer to a third country is involved.
You enter your payment data exclusively on the provider's website and it is processed there. It is never transmitted to or processed by us, we receive no payment data at all.
Legal basis: Art. 6(1)(b) GDPR (contract performance, ticket purchase).
As long as you do not click the link, no data is transmitted to the provider and it sets no cookies via our website. The provider only sets its own cookies on its own website, where its privacy policy applies.
Details on data processing by the provider can be found in the provider's own privacy policy.
We use Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992, as our PostgreSQL database and file storage provider (event flyer images). The database is hosted in the AWS region eu-west-2 (London).
The database stores: member account data (email, name, encrypted password), ticket orders, event information.
Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in secure database operations).
We use Resend Inc., 2261 Market Street #4913, San Francisco, CA 94114, USA, to send the emails triggered by this website.
We use Resend for two purposes: messages from the contact form (see section 7) and sending the newsletter to subscribed addresses (see below). For the contact form, your name, email address, subject and message text are sent to our inbox info@nexxusclub.de. We do not send ticket confirmations this way, ticketing is handled entirely by the external provider (see section 4).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries), or Art. 6(1)(b) GDPR for contract-related enquiries. Resend acts as a processor for us under Art. 28 GDPR.
When you write to us via the contact form or via the form that the chatbot shows when needed, we process the data you enter there: name, email address, subject (optional) and message text. We use this data to handle your enquiry and to reply to you.
Recipients: The message is delivered via Resend (see section 6) to the mailbox info@nexxusclub.de, which is operated by the website operator. Your email address is set as the reply address. The data is not passed on to any other third parties.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Storage period: We delete your enquiry and the related correspondence once the purpose of processing no longer applies and no statutory retention obligations prevent deletion.
If you sign up for our newsletter, we store your email address with Resend Inc. (address see section 6) in a contact list to send you future event dates and club news.
The legal basis is your consent, Art. 6(1)(a) GDPR, given via the checkbox at signup. You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link in any newsletter email or by writing to info@nexxusclub.de.
Your email address is stored for as long as you remain subscribed and deleted or marked as unsubscribed once you opt out.
Our website offers an AI chatbot (Nexxy) that answers questions about the club. Chat messages are processed by Mistral AI, a French company (Mistral AI, RCS Paris 952 418 325, 15 rue des Halles, 75001 Paris, France). As Mistral AI is based in the EU, no data transfer to a third country takes place.
When you use the chatbot, your messages are sent to the Mistral API and processed there on Mistral's servers. Under Mistral AI's terms, data is retained for up to 30 days after the end of the contractual relationship with Mistral AI and deleted thereafter. Whether individual messages are also used to train Mistral AI's models depends on an account-level setting controlled by the website operator (opt-out available).
Legal basis: Art. 6(1)(a) GDPR (consent through active use of the chatbot). You may choose not to use the chatbot at any time.
This website uses exclusively cookies that are required for it to operate (session cookie for login and the storage of your cookie choice). Legal basis: Art. 6(1)(f) GDPR. Cookies of the external ticketing provider are not set via this website, see section 4.
You can change your cookie settings at any time via the link in the footer or through your browser settings.
At our events we take general and atmospheric photographs showing the room as a whole. We publish them to document and promote our events. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Our interest lies in presenting the club and its events to the public. We consider your interest in your own likeness to be preserved because we show the audience as a whole and do not single out individual guests.
Photographs centred on individual people are taken only with their express consent on site (Art. 6(1)(a) GDPR). You may withdraw that consent at any time with effect for the future. We do not take identifiable photographs of guests under 18.
The photographs are published on this website and on our Instagram and Facebook profiles. Once uploaded there, they fall under the responsibility of Meta Platforms Ireland Limited, which processes them further under its own terms and in doing so also transfers them to the USA.
You may object to both the taking and the publication of photographs at any time (Art. 21 GDPR). Tell the photographer or a member of our staff on site and the photograph will not be taken in the first place. If an image has already been published, an informal message to info@nexxusclub.de identifying the photograph is enough. We will remove it without requiring you to give reasons.
We use video surveillance at particularly sensitive locations in and around the club. It protects guests and staff, protects our property and preserves evidence of criminal offences. The legal basis is Art. 6(1)(f) GDPR. Signage on site indicates the surveillance. Recordings are disclosed only to law enforcement authorities and only in a specific incident.
Recordings are deleted as soon as they are no longer required for the purpose, unless a specific incident makes longer retention necessary to preserve evidence. The rights set out in section 3 apply here too, including the right to object under Art. 21 GDPR.