Oktoberfest - ein Fest der Landeshauptstadt München

Data Privacy Statement

Data Privacy Statement

Portal München Betriebs-GmbH & Co. KG (“Portal München”) is the operator of the oktoberfest.de website. Portal München highly values the protection of privacy and complies with data privacy law. We will provide below you with an explanation of how we use your personal data.

1. Who is the data controller for data processing?

The person responsible for the domain oktoberfest.de within the meaning of the data protection laws is Portal München Betriebs-GmbH & Co. KG, Fraunhoferstraße 6, 80469 Munich, Germany, registered at the Munich Register Court, HRA 80544.

The general partner is Portal München Verwaltungsgesellschaft mbH, Munich Register Court, HRB 144607, Managing Director: Dr. Lajos Csery.

The contact details of our data protection officer can be found under item 12.

Bavariashop GmbH is responsible for the subdomain shop.oktoberfest.de within the meaning of the data protection laws - click here for the data protection declaration.

2. Scope, purpose and legal basis for data processing

Oktoberfest.de collects, stores or processes data only for the business purposes of Oktoberfest.de.
As a matter of course, our website is available to all users without needing to gather personal data. You do not need to register to be able to use the services of Oktoberfest.de. Oktoberfest.de requests your personal data if you wish to register for our personalized services or fee-paying services (e.g. newsletter). If you access our website, general information will automatically be gathered. This information includes the type of web browser, the operating system used, the domain name of your Internet service provider and similar data. Such information cannot identify you personally. These data are also generated when you access any other websites on the Internet. The collection of such data therefore does not relate to a specific function of our website. The above information is gathered anonymously only and is subject to statistical analysis.

a. Accessing the website; communicating with us

You have the option of contacting us via our contact form. To that end, we gather your name and email address.

We use cookies to make our website accessible. For further information, see item 4

The use of your personal data to provide access to this website and to allow for communication with us is based on our legitimate interests. For technical reasons, it is necessary for us to process certain personal data (e.g. IP address) to provide access to this website. For you to communicate with us, it is necessary for us to handle the above personal data.

Within the context of needing to balance interests, we have balanced your interest in the privacy of your personal data against our interest in providing access to this website and to allow users to contact us. In both cases, your interest in privacy is waived. Otherwise, it would not be possible for us to provide you with access to this website or to handle your query.

The legal basis for data processing is our legitimate interest under section 6 (1) f) GDPR.

b. Registration

Required information:
Your personal data are gathered (email address) when you register for the use of personalized services (newsletter) on oktoberfest.de.

We use your personal data to allow you to access our services that require registration or services. Your personal data are thus requested, processed, and used as necessary within the scope and purpose of the contract.

The legal basis for data processing for contract performance is section 6 (1) b) GDPR.

c. Data processing with your consent

General information on consent
To the extent that you have granted us consent to process personal data for other specific purposes (e.g. to receive the newsletter), data processing is based on such consent. We provide you with the details of the content of your consent when we request your consent.

Your consent is always voluntary. Should processing of personal data depend on your consent, you have the right to revoke that consent at any time. This also applies to consent that has been granted to us prior to GDPR, i.e. 25 May 2018. You can also revoke your consent by email to Enable JavaScript to view protected content.. The legality of data processing on the basis of your consent up until you revoke your consent shall remain unaffected.

The legal basis for data processing with regard to consent is section 6(1) a) GDPR.

3. Use of your personal data

Your personal data are stored by oktoberfest.de on a highly secure server in Germany. We endeavor to take any necessary technological and organizational security measures to ensure your personal data are stored in a secure manner and cannot be accessed or misused by unauthorized persons. These security measures mean that we must occasionally ask you to provide evidence of your identity before we disclose your data.

Our employees must undertake to comply with any regulations under GDPR, the German Telemedia Act [TMG], and the Federal Data Protection Act [BDSG] when handling your data.

We often use encryption processes (e.g. SSL) to guarantee the security of your data during transfer. Our servers are protected by firewalls and anti-virus software. Back-up and recovery procedures, in addition to defining roles and authorization are a given.

oktoberfest.de shall never share your personal data with third parties without your express permission, unless it is obliged to do so by law.

4. Use of cookies and similar technologies

As is the case with many other websites, Portal München uses “cookies” and similar technologies to transfer an identifier to your computer.

These allow Portal München to automatically receive certain information about your computer and its Internet connection such as the IP address, browser and operating system. We also generate your visitor history, i.e. the pages of our website that you have searched for including the chronological order, date and time. From time to time, we use JavaScript during your visit to gather and analyze further data including how long it takes a page to load, incomplete or inadequate downloads, the duration of a visit to a specific page, data on interactions between pages (e.g. scrolling, clicks, mouseovers), and leaving the page.

The procedure allows Portal München to analyze how our websites are used, to optimize our services and to personalize our content for you, e.g. to recognize you when you visit our website on repeat occasions.

The process also means that you will be able to use personalized services without having to reregister each time.

Under no circumstances do we share your personal data with third parties or provide a link to your personal data without your consent.

As a matter of course, it is also possible for you to view our website without cookies. Internet browsers are generally set to accept cookies. If you so wish, you can disable the use of cookies at any time via your browser’s settings. Please use the help features of your Internet browser to learn how to change these settings. Please note that certain features of our website may not function if you disable cookies.

5. Social plugins

We use “social plugins” on our websites. We currently use Facebook and Twitter plugins.

Their icons and buttons act as external links, meaning that if the icons are not clicked, no information will be sent to the provider. If the user clicks on one of the icons, he or she will automatically be redirected to the website of the respective provider. The URL of the current website is transferred as a parameter. We have no control over how the provider may use this information for analysis.

For more information, see the data privacy statements of each provider:
a) Facebook: For Facebook data guidelines, see: https://de-de.facebook.com/policy.php
c) Twitter: For Twitter data privacy guidelines, see: https://twitter.com/privacy?lang=de

Insofar as you would not like the above social networks to gather information about your use of our websites, please do not click the aforementioned buttons.

6. Playbuzz

This website incorporates HTML codes from Playbuzz Playbuzz Ltd, 3 Aluf Kalman Magen St., Building A, 1st Floor, Tel Aviv, 610707, Israel ("Playbuzz"). You will recognize the integration of Playbuzz on the website by the notice "Powered by playbuzz" or the embedded Playbuzz widget. A widget is a graphical window element that can be used interactively by the user. This widget allows Playbuzz to offer you surveys and quizzes in which you can participate.

If you visit a subpage of our website where a Playbuzz widget is implemented, the browser will connect you to Playbuzz's servers. Playbuzz will transmit the HTML code content directly from Playbuzz to the browser that builds it on the page you are viewing, and Playbuzz will process your information during this process. For details of what information Playbuzz processes and for what purposes, please refer to the Playbuzz cookie banner at https://www.playbuzz.com/ and Playbuzz's privacy policy at https://www.playbuzz.com/PrivacyPolicy.

The legal basis for the data processing associated with this is Art. 6 Para. 1 f) of the Basic Data Protection Regulation (DSGVO), i.e. a weighing of interests based on our legitimate and overriding interest in offering you the most attractive website possible with special functionalities, whereby we always ensure that the processing of your data is limited to the necessary extent.


If you do not consent to the processing of your data by Playbuzz, you may object to the processing of your data in the Playbuzz cookie banner at https://www.playbuzz.com/, divided into various processing operations. With regard to the processing of data for the purpose of usage-based online advertising, you also have the option of deactivating individual providers at http://www.youronlinechoices.com/ch-de/praferenzmanagement.

7. Mapbox

The Mapbox service functions are used in the map applications. These functions are offered by the company mapbox.com. Using Mapbox transfers data to Mapbox. We would like to point out that as the provider of the pages, we do not have any knowledge of the content of the transmitted data or its use by Mapbox. For further information, please refer to Mapbox's privacy policy at https://www.mapbox.com/privacy/.

8. Third-party advertisements on our websites; third-party cookies

Our websites contains some third-party advertisements. We do not share your personal data with these third parties. We also use the systems of partners and service providers to generate information in relation to the number of times our Internet presence has been accessed or to provide advertising spaces. Some of these use their own cookies and similar technologies to increase the accuracy of analyzed access information and to offer more targeted advertising.

Hidden banners, buttons, or similar methods of advertising, do not collect any personal user data such as name, address, telephone number or email address.

We ensure that user data or profiles cannot be associated with personal data or that online user data profiles cannot be traced back to any offline address information. Cookies and similar technological processes are used in certain cases to optimize hidden advertisements only for the user. That means the user can benefit from reduced repeat advertisements, thereby increasing the quality of advertisements. Cookies are also used to build anonymized profiles. Cookies are also used to display content and advertisements that correspond to your interests. Internet browsers are generally set to accept cookies. However, a user can disable the storage of cookies or configure his or her browser to prompt before accepting cookies.

If you do not agree with the use of cookies described, you can switch them off so that they do not save or use your information and switch them back on as you wish. Switching off tracking cookies functions in much the same manner as the storage of an “opt-out cookie” and thus prevents data from being collected anonymously. If you delete your cookies, please be aware that opt-out cookies will also be lost and may have to be reset again.

Use the following link to disable a tracking cookie: Enable opt-out

The German Association for the Digital Economy (BVDW) offers an easy option to disable cookies by managing preferences: www.meine-cookies.org

9. Web analysis by Google Analytics

This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and allow analysis of your website use. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA where it is stored. Through IP anonymization on this website, Google will truncate your IP address within Member States of the European Union as well as other states party to the Agreement on the European Economic Area. In exceptional cases only, the full IP address is transferred to a Google server in the USA where it is truncated.

Google uses this information on behalf of the operator of this website to analyze your website use, generate reports on website activity and to allow the website provider to offer further services relating to website and Internet use. Google does not store your browser’s IP address that has been transferred to Google Analytics with any other data.

You can prevent your browser software from storing cookies by adjusting your settings accordingly; please be aware, however, that subsequently you may not be able to use all the functions of this website in full. Furthermore, you may be able to prevent the cookie from gathering personal data on your website use (incl. your IP address) which is shared with Google and processed by Google, by downloading and installing the browser plugin available at the following link:
Browser add-on to disable Google Analytics

Disable Google Analytics in this browser

10. How long is the data retained?

We store and process your personal data for no longer than is necessary for the purposes for which it is being processed (cf. section on “Scope, purpose and legal basis for data processing”). In all other cases, we delete your personal data; with the exception of any data that we must continue to retain to satisfy legal requirements (e.g. for tax or business purposes).

11. Your rights as a data subject

As a data subject, you have a right to information under section 15 GDPR, a right to correction under section 16 GDPR, a right to the deletion of your data under section 17 GDPR, a right to limit processing under section 18 GDPR and a right to data portability under section 20 GDPR. For the right of information and deletion of data, the limitations as set out in sections 34 and 35 of the Federal Data Protection Act [BDSG] shall apply.

You have the right on grounds relating to your personal situation to object at any time to processing of personal data on the grounds of section 6(1) e GDPR (data processing in the public interest) and section 6(1) f GDPR (data processing on the basis of balanced interests). Should you object, we shall no longer process your personal data unless we have compelling legitimate grounds for processing which override your interests, rights and freedoms, or processing is used for the establishment, exercise or defense of legal claims.

If you believe that processing of your personal data is unlawful, you have the right to lodge a complaint with a responsible authority (section 77 GDPR in conjunction with article 19 Federal Data Protection Act [BDSG]).

12. Amendments to our data privacy statement

We reserve the right to adapt this data privacy statement at times with the aim of ensuring it meets legal requirements or to add any changes to our services to the data privacy statement, e.g. on the introduction of new services. The new data privacy statement shall apply when you next visit our website.

13. Queries for our data processor

If you have any queries on data privacy for Portal München please send us an email or contact our data processor directly:

Data processor at
Portal München Betriebs-GmbH & Co. KG
Fraunhoferstrasse 6
80469 Munich, Germany
+49 (0) 89 / 23 00 18 - 0
Enable JavaScript to view protected content.