Data protection information for the use of the VainStreamRockfest app

If you want to be kept up to date about Vainstream events as a visitor or interested party, the VainstreamRockfest app is available. The Vainstream Rockfest app is available for download from the Google PlayStore and the App Store (Apple).

As an app provider, we, VainstreamFestival GmbH, will inform you below about data processing as part of using the Vainstream Rockfest app.

person responsible

This data protection information is provided to you by Vainstream FestivalGmbH (“we” or “us”) as the controller within the meaning of the General Data Protection Regulation (GDPR). In accordance with Articles 13 and 14 of the General Data Protection Regulation (hereinafter “GDPR”), [$COMPANY$] provides information on the processing of personal data.

Purposes of processing

When using the Vainstream Rockfest app, VainstreamFestival GmbH processes personal data for the following purposes:

Needs-based information and warning for users, related to Vainstream events

Ensuring the security and functionality of the VainStreamRockfest app

Analysis of users' app activities for marketing purposes and optimization of the Vainstream Rockfest app's range of services using GoogleAnalytics 4 for Firebase

If, in addition to the existing purposes, there are other purposes for data processing, we check whether these other purposes are still included within the scope of the original collection purposes and are compatible with them. If this is not the case, we will inform you of such a change of purpose. If there is no other legal basis for further data processing, we will not process the data without your consent.

Data categories

Vainstream Festival GmbH processes the following categories of personal data in particular:

usage data (e.g. IP address, date and time of access, device specification, browser, name and URL of the retrieved file)

Identifiers to identify a device or service (e.g. Firebase Cloud Messaging Token)

Security and troubleshooting information (e.g. crash stack traces, Firebase installation ID, Crashlytics installation UUID, server log files)

If consented: Data to analyze user behavior using Google Analytics 4 (e.g. Google Analytics app instance ID, analysis of user and event data, app activity)

Support requests and correspondence from users (email address, name and contact details, if applicable)

legal bases


Ensuring the security and functionality of the VainStreamRockfest app

Personal data is processed to ensure the functionality and system security and stability in the operation of the Vainstream Rockfest app. Legal basis of data processing iStart. 6 para. 1 sentence 1 lit. f DSGVO (legitimate interest).

The legitimate interest is to prevent disruptions or illegal or deliberate interventions and to ensure the security of the functions and services offered or accessible via the Vainstream Rockfest app. Google Firebase Crashlytics is used for this purpose. Firebase Crashlytics is a real-time crash reporting security tool that allows you to recognize, evaluate, prioritize, and fix the most common crashes. The operator of Firebase Crashlytics is Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google BuildingGordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. With the use of Firebase Crashlytics, anonymized real-time crash reports are automatically sent. The data transmitted in this way does not allow any conclusions to be drawn about a specific user. These are required for maintenance and troubleshooting in order to improve the app and to minimize future failures and disruptions of the app. Firebase Crashlytics thus serves to maintain the security and stability of the app in order to be able to provide the service you require.

As part of processing activities, interested users are also protected. Only the absolutely necessary personal data from you will be processed for these purposes and will only be stored for as long as is necessary for the above-mentioned purposes and there is no other legal basis for processing.

With regard to processing in accordance with Article 6 (1) (FDSGVO), you have the right to object at any time. To do so, please email info@kingstar-music.com.

push notifications

You can activate the receipt of so-called push notifications in the Vainstream Rockfest app. If you activate the sending of push notifications, you will regularly receive information about individual events, in particular security or warning messages and further information (including news, promotions, etc.). The legal basis for this processing is your consent in accordance with § 25 para. 1 TDDDG and Art. 6 para. 1S. 1 lit. a GDPR.

In order to sign up for push notifications, you must actively allow the receipt of push notifications in the push notification request (pop-up window) when you start the Vainstream Rockfest app for the first time. By confirming, you as a user consent to receive push notifications. We use Firebase Cloud Messaging (FCM) as a push notification service. The operator of Firebase CloudMessaging is Google LLC. The responsible body for users in the EU/ DeMewr and Switzerland is Google Ireland Limited, Google Building Gordon House, 4Barrow St, Dublin, D04 E5W5, Ireland. During installation, the Firebase installation ID and the Firebase Cloud Messaging Token are used to send push notifications specifically to the right device. The token is different from the Firebase installation ID and rotates over time. Both are stored in the Vainstream Rockfest app) device. The token is also transmitted to Vainstream Festival GmbH and stored. This token does not contain any personal data or unique device recognition that can be linked together by Vainstream Festival GmbH. All communication is encrypted. For this purpose, FCM uses the HTTPS protocol, which uses SSL/TLS (Secure SocketSlayer/Transport Layer Security) for the secure transmission of messages and tokens.

revocation

You can withdraw your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future. You can withdraw your consent in the settings of your device or in the app settings (notifications).

Consent for analysis of user data by Google (GoogleAnalytics 4 for Firebase)

We process your data to analyze user data by Google (Google Analytics 4 for Firebase) on the basis of your consent in accordance with Section 25 (1) TDDDG for storing technical data on the device and accessing this information on the device and Art. 6 (1) (1) lit. ADSGVO for processing personal analysis data. This consent is voluntary and is given by you when you click the relevant box in the consent banner of the Vainstream Rockfest app.

Processing of your user data by Google (Google Analytics4 for Firebase)

Google Analytics 4 for Firebase is an analytics service. The operator of Google Analytics 4 for Firebase is Google LLC. The responsible body for users in the EU/EEA and Switzerland is GoogleIreland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google).

The analysis tool makes it possible to collect, analyze and aggregate data for statistical purposes when using the app. By using Google Analytics 4 for Firebase, for example, app calls or clicks can be analyzed and determined which functions within the app are used frequently or rarely. On behalf of the app provider, Google will use this information to evaluate the pseudonymous use of the Vainstream Rockfest app (using the app instance ID) and to compile reports on app activity.

There is no need to mask IP addresses in Google Analytics 4 for Firebase, as IP addresses are neither logged nor stored. While using the Vainstream Rockfest app, your user behavior is recorded in the form of “events.” Events can include:

Start of use

click path (interactions within the Vainstream Rockfest app, such as clicks on widgets, artists, sessions, etc.)

Clicks on external links

language setting

Firebase installation ID

Device-specific data, such as operating system and device model

number of users

On behalf of the app provider, Google will use this information to evaluate your pseudonymous use of the Vainstream Rockfest app (using the app instance ID) and to compile reports on app activity.

revocation

You can withdraw your consent at any time with effect for the future by going to the privacy settings of the Vainstream Rockfest app and changing your selection there. The lawfulness of the processing carried out on the basis of consent up to the time of withdrawal remains unaffected.

For more information about Google Analytics terms of use and privacy at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

Recipients of your data

We only transfer your personal data to third parties if you expressly agree to this in advance, if it serves to prepare or fulfill a contract that you have with the third party or us, or if we are required to do so by law.

In order to fulfill the purposes described in this data protection information, we transfer your data to the following recipients:

service provider

As part of providing the Vainstream Rockfest app, Vainstream Festival GmbH is working with the service provider chaanz UG (haftungsbeschränkt) Bockenheimer Landstraße 133, 60325 Frankfurt am Main for the technical provision of the Vainstream Rockfest app, which is bound by instructions and processes your personal data on behalf of [$COMPANY$] Art. 28 GDPR.

As part of the processing of your user data by the Google Analytics 4 services for Firebase, Firebase Crashlytics and FirebaseCloud Messaging, which are used as services by chaanz UG, are or may be recipients of the data:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor in accordance with Article 28 GDPR of chaanz UG)

Google LLC, 1600 AmphitheatreParkway Mountain View, CA 94043, United States of America

Alphabet Inc., 1600 AmphitheatreParkway Mountain View, CA 94043, United States

Authorities (e.g. law enforcement agencies), lawyers, auditors, courts, experts

In the event of violations or other legal obligations, we transfer your personal data to law enforcement agencies, lawyers, etc.

Transfer to third countries

If we transfer personal data to service providers outside the EU or the European Economic Area (EEA), your data will only be processed in third countries on the basis of the so-called standard contractual clauses of the EU Commission, insofar as certain measures ensure that there is an appropriate level of data protection (e.g. adequacy decision of the EU Commission or so-called appropriate guarantees, Art. 44 et seq. GDPR) and/or insofar as Your data is processed in the United States at Basis of the EU-U.S. Data Privacy Framework.

Storage period/ deletion of your data

We delete your personal data when it is no longer required for the above-mentioned processing purposes and there are no statutory storage obligations precluding deletion.

General usage data (e.g. IP address, date and time of access, device specification, browser, name and URL of the retrieved file) are only temporarily stored. Server log files (accesses, errors, etc.) are stored for 60 days.

Identifiers to identify a device or service:

Firebase Cloud Messaging Token: 270 days after inactivity (server side), immediately when deleting or resetting the Vainstream RockfestApp (app side)

Firebase installation ID: 270 days after inactivity (server side), immediately when deleting or resetting the Vainstream RockfestApp (app side)

App instance ID: 14 months together with analysis data after inactivity or deletion or revocation of consent (server side), immediately upon uninstallation of the Vainstream Rockfest app (app side)

The storage period of information to ensure security and troubleshooting (crash stack traces and extracted minidump data, including associated identifiers such as Crashlytics installation UUID and Firebase installation ID) is 90 days before the process of removal from live and backup systems begins.

Data used to analyze user behavior using Google Analytics 4 for Firebase is automatically deleted after 14 months, provided the user consents.

Support requests and correspondence from users (email address, name and contact details, if applicable) are stored for three years after completion (legal retention period).

Your data protection rights

If the respective legal requirement is met, you can exercise the following rights in connection with the processing of your personal data:

Right to information about your personal data stored by us (Art. 15 GDPR). In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients and the planned storage period;

right to correct incorrect or incomplete data (Art. 16 GDPR);

The right to delete your data stored by us (Art. 17 GDPR), provided that there are no legal or contractual retention periods or other legal obligations or rights to further storage;

right to restrict the processing of your data (Art. 18 GDPR);

right to data portability (Art. 20 GDPR);

Right to withdraw your consent (Art. 7 GDPR), which you can declare at any time with effect for the future. If consent is given via the privacy settings, you can explain your withdrawal about the privacy settings or cookie settings;

The right to object to the processing of your personal data in accordance with Article 21 GDPR;

Right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.

Your data protection request to implement your rights can be made informally. Simply send an email to:

info@kingstar-music.com

The sole content of the data protection information for the use of Vainstream RockfestApp apply and apply to all genders (f/m/d). Insofar as only male, female or neutral personal names are used equally consistently.

Status: June 2025

‍