Effective: July 2026
Vision Spotlight Events Inc.
Scope: This Privacy Policy provides information about the processing of personal data in connection with this website. The EU General Data Protection Regulation (GDPR) applies because, as a data controller without an establishment in the European Union, we offer goods and services to individuals in the Union or monitor their behavior to the extent that such behavior takes place within the Union (Art. 3(2) GDPR). For users residing in California, the provisions under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) in Section 10 apply in addition to this policy.
1. Data Controller
Data controller within the meaning of the GDPR and operator of this website:
Vision Spotlight Events Inc.
301 Arizona Ave
Santa Monica, CA 90401, USA
Email: l.kast@visionspotlight.com
Phone: +49 151 1 570 88 90
2. Representative in the European Union (Art. 27 GDPR)
Since we process personal data of individuals in the European Union without being established there, we have appointed the following representative in the European Union:
Vision Spotlight Events UG
Elisabethstraße 11
40217 Düsseldorf
Germany
Email:l.kast@visionspotlight.com
Phone: +49 151 1 570 88 90
You may also contact the representative regarding any questions related to the processing of your personal data.
3. Principles of Data Processing
We process the personal data of visitors to this website only to the extent necessary to provide a fully functional website and our content and services, or where consent or another legal basis exists. The legal bases are Article 6(1) of the GDPR, in particular subparagraphs (a) (consent), (b) (performance of a contract), (c) (legal obligation), and (f) (legitimate interest).
3.1 CalOPPA: Categories of Data Collected
Depending on usage, we collect the following categories of personal data via this website: identification data (name, email address), technical data (IP address, browser and device data), usage data (pages visited, duration of visit), communication data (content of inquiries), as well as contract and payment data.
3.2 Use of Collected Data
We use the collected personal data exclusively for the following purposes:
Your data will not be used for any purposes other than those specified here. Should we wish to process your data for another purpose, we will inform you in advance in accordance with Art. 13(3) GDPR.
4. Disclosure of Data
Personal data will only be transferred to third parties if this is necessary for the performance of a contract, if there is a legal obligation to do so, if you have given your consent, or if we have a legitimate interest in doing so. CalOPPA: We disclose personal data to the following categories of recipients: hosting providers, IT service providers, and—where applicable—payment service providers and analytics and marketing services; the specific services used are listed in Section 6. We do not sell your personal data.
5. Data Transfer to Third Countries
Since the data controller is based in the United States, personal data of users from the EU or the EEA is transferred to the United States. This transfer is based on standard contractual clauses pursuant to Article 46(2)(c) of the GDPR. The same applies to the extent that we use service providers based outside the EEA. Copies of the safeguards can be requested using the contact information provided in Section 1.
6. Specific Processing Operations
6.1 Provision of the Website and Server Log Files
When you visit our website, our hosting provider automatically collects data transmitted by your browser: IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system. This data is processed to ensure the operation, stability, and security of the website. Hosting provider: IONOS SE Elgendorfer Str. 57 56410 Montabaur; a data processing agreement pursuant to Art. 28 GDPR is in place. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Retention period: Deletion after 30 days.
6.2 Cookies and Consent Management
We use cookies and similar technologies. We use technically necessary cookies based on Article 6(1)(f) of the GDPR. All other cookies (statistics, marketing) are set only with your consent (Article 6(1)(a) of the GDPR), which you provide via our consent banner and may revoke at any time with future effect via Cookie Settings. Consent tool used: CookiesYes.
6.3 Contacting Us
When you contact us, we process the data you provide (name, email address, content of the inquiry) to handle your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract); otherwise, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Retention period: Deletion upon completion of processing, provided there are no conflicting statutory retention requirements.
7. Retention Period
Unless a more specific retention period is stated in this policy, we store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Once the purpose no longer applies or the retention periods have expired, the data will be deleted or anonymized.
8. Obligation to Provide Data; Automated Decision-Making
The provision of personal data is not required by law or contract. However, without certain data (e.g., contact information for inquiries), we may not be able to process your request. Automated decision-making, including profiling as defined in Article 22 of the GDPR, does not take place.
9. Your Rights
As a data subject, you have the following rights: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to withdraw consent at any time with future effect (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. If the processing is carried out for the purposes of direct marketing, you may object to it at any time without providing a reason.
To exercise your rights, simply send an informal notice to the contact information provided in Section 1 or to the representative named in Section 2. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence (Art. 77 GDPR).
10. Information for Users in California
10.1 Information pursuant to CalOPPA
Do Not Track Signals: Our website does not respond to “Do Not Track” signals from browsers.
Third-Party Tracking: Third parties may collect data about your user behavior across various websites via this website only to the extent that you have consented to the use of statistics or marketing cookies (Sections 6.2 and 6.5).
Access and Modification: You may access, correct, modify, or have the data stored about you deleted by using the contact information provided in Section 1; the rights set forth in Section 9 apply accordingly.
10.2 Information under the CCPA/CPRA
Over the past twelve months, we have collected the following categories of personal information as defined by the CCPA: identifiers (name, email address, IP address), internet or network activity (pages visited, duration of visit, browser and device data), commercial information (contract and payment data), and approximate location data (derived from the IP address). Sources: directly from you and automatically when you use the website. Purposes: see Section 3.2. Disclosure: only to service providers for business purposes; see Sections 4 and 6.
We do not sell personal information or share it for cross-context behavioral advertising. We do not collect sensitive personal information as defined by the CPRA.
As a California consumer, you have the following rights: the right to know/access the categories and specific information collected, deletion (right to delete), correction (right to correct), the right to opt out of the sale or sharing of personal information (right to opt out), the right to limit the use of sensitive personal information (right to limit), and the right not to be discriminated against for exercising your rights (right to non-discrimination).
To exercise your rights, please contact us using the contact information provided in Section 1 (email or phone). We must verify your identity in a reasonable manner before we can respond to requests. You may authorize an agent to submit a request on your behalf. For information on retention periods, see Section 7. We do not offer financial incentives as defined by the CCPA.
11. Changes to This Policy
We reserve the right to amend this Privacy Policy if the legal situation or our data processing practices change. CalOPPA: We will notify you of material changes by posting a notice on our website.
