Privacy Policy

Privacy Policy – Effective May 20, 2026

Welcome to the website of LIMELIGHT LIVE ENTERTAINMENT GmbH. Naturally, the protection of your personal data and fair and transparent data processing are important to us. Below, we would like to provide you with the information you need to review and exercise your data protection rights.

1. Who is responsible for data processing?

The controllerwithin the meaning of the General Data Protection Regulation (GDPR) and other data protection laws applicable in the member states of the European Union, as well as other data protection regulations, is: Limelight Live Entertainment GmbH, Rheinvorlandstraße 7, 68159 Mannheim, email: info@limelight-live.de

2. How can I contact LIMELIGHT LIVE ENTERTAINMENT GmbH regarding data protection?

Youcan contact our data protection officer at: Limelight Live Entertainment GmbH, Rheinvorlandstraße 7, 68159 Mannheim, Germany.

Email address of the Data Protection Officer: datenschutz@limelight-live.de

3. For what purposes and on what legal basis do we process personal data?

Whenyou browse our website or otherwise contact us, we collect personal data from you. We generally process our users’ personal data only to the extent necessary to provide a functional website and our content and services. The processing of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.

In general, we process data based on the following legal grounds:

  • If you give us your explicit consent (Art. 6(1)(a) of the GDPR), for example, if you would like us to contact you directly or if you wish to participate in contests.
  • To fulfill our contractual obligations (Art. 6(1)(b) of the GDPR).
  • As a company, we are subject to various legal obligations (Art. 6(1)(c) of the GDPR). For example, we are required by tax and commercial law to retain certain documents.
  • In cases where the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.
  • If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override that interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

You have the right to object to data processing based on legitimate interests pursuant to Article 21(1) of the GDPR.

 

4. Data Deletion and Retention Period

The data subject’s personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

 

5. Collection of access data and server log files

We (or our web hosting provider) collect data about visits to the site and store it as “server log files.” The data collected may include the following information:

- Date and time of access

- IP address of the requesting computer

- Referrer URL (the previously visited page)

- Browser and operating system used

- Amount of data transferred

The legal basis for data processing is Article 6(1)(f) of the GDPR. The legitimate interest lies in ensuring the technical stability and security of the website, as well as in the statistical analysis of usage data to optimize our services.

 

6.1 Data Processing on Our Website

6.1.1 Contacting LIMELIGHT LIVE ENTERTAINMENT

You can useour email address toask us questions and send us messages. We process your data solely for the purpose of contacting you via your preferred method and handling your inquiry. (The legal basis is Article 6(1)(a) or (b) of the GDPR.)

6.1.2 Participation in Sweepstakes

Weoccasionally hold contests on our website. Below, we provide information about how we process your personal data when you participate in our contests.

a) Nature, scope, and purpose of data processing

To participate in our contests, we collect the following personal data:

  • First name and last name
  • Email address
  • Mailing address (street, house number, ZIP code, city)
  • [phone number, if applicable]

Data is processed for the following purposes:

  • Conduct of the Sweepstakes (Eligibility Check, Selection of Winners)
  • Contacting the winners to present their prizes
  • [Advertising and marketing, if applicable, provided you have expressly consented to this]

b) Legal basis for data processing

The legal basis for processing your data in connection with the contest is Article 6(1)(b) of the GDPR (performance of a contract). Participation in a contest constitutes a contract-like relationship within the meaning of a prize offer under Sections 657 and 661 of the German Civil Code (BGB).

If you consent to the processing of your data for marketing purposes, Article 6(1)(a) of the GDPR serves as the legal basis for such processing.

c) Transfer of data to third parties

Your data will not be shared with third parties unless it is necessary for the conduct of the contest. In particular, your data will not be shared with third parties for advertising purposes unless you have expressly consented to such sharing.

d) Retention period

Your data will be stored only for the duration of the contest and the subsequent processing (in particular, the awarding of prizes). Once the contest has ended, your data will be deleted, unless there are legal requirements to retain it or you have consented to further processing (e.g., for marketing purposes).

Specifically:

  • Non-winning participants: Accounts will be deleted after the winners are drawn
  • Winner: Account deletion upon receipt of the prize and expiration of any warranty periods

(e) Voluntary participation and prohibition of coupling

Participation in our contest is voluntary. Consent to the use of your data for promotional purposes is not a requirement for participating in the contest. Consent for promotional purposes is given through a separate declaration and may be revoked at any time.

f) Data subject rights

As part of your participation in our contest, you are entitled to the data subject rights outlined in this Privacy Policy (right of access, rectification, erasure, restriction of processing, objection, and data portability). You may exercise these rights at any time by contacting us.

 

6.1.5 Career

Weappreciate your interest in working for our company. Below, we provide information about how we process your personal data in connection with your application via our online application platform.

a) Nature, scope, and purpose of data processing

As part of the application process, we process the following personal data about you:

  • Contact information (last name, first name, address, phone number, email address)
  • Application materials (cover letter, resume, transcripts, certificates)
  • [Additional information from the application form, if applicable]
  • [Data from applicant questionnaires, if applicable]

Data is processed for the following purposes:

  • Conducting the application process (screening, selection, invitations to interviews)
  • Communication with you during the application process
  • Documentation of the application process
  • [Inclusion in a talent pool, if applicable, with your express consent]

b) Legal basis for data processing

The legal basis for processing your data in connection with the application process is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG (implementation of pre-contractual measures and establishment of an employment relationship).

If you consent to having your data included in a talent pool or to the further use of your application, Article 6(1)(a) of the GDPR serves as the legal basis for this processing.

c) Recipients or categories of recipients

Access your application data:

  • The relevant human resources department
  • The department for which the position is being advertised
  • The managers responsible for the selection decision
  • External service providers acting as data processors, e.g., for the applicant tracking system

We will not share your data with any other third parties unless it is necessary for the application process or you have expressly consented to such sharing.

d) Retention period

Your application information will be stored as follows:

  • If your application is successful: Your application will be included in your personnel file for the duration of your employment and beyond, in accordance with statutory retention periods
  • If the application is unsuccessful: Data will be deleted no later than 6 months after the conclusion of the application process (receipt of the rejection notice). Retention for this period serves to document the application process and to fulfill legal obligations to provide evidence (in particular under the General Equal Treatment Act).

Talent Pool / Prospective Candidate Database: With your express consent, we will retain your data for up to two years after the conclusion of the specific application process so that we can contact you regarding suitable job openings. You may withdraw your consent at any time. Your data will be deleted upon withdrawal of consent or upon expiration of the retention period.

(e) Voluntary nature of the disclosure and consequences of non-disclosure

Providing the information required for your application is necessary in order to process it. Without this information, we cannot consider your application. Providing additional, optional information will not affect the application process.

(f) Special categories of personal data

If your application materials contain special categories of personal data (e.g., health data, information regarding ethnic origin, religious or political beliefs, or trade union membership), we will process this data only to the extent necessary to conduct the application process, or if you have expressly consented to such processing, or if required by law (e.g., status as a person with a severe disability).

Please refrain from including information regarding special categories of personal data in your application unless such information is necessary for the position being advertised.

(g) Automated decision-making

We do not make decisions based solely on automated processing that have legal effects on you or significantly affect you. The decision regarding your application is made by human decision-makers.

h) Data subject rights

As part of the application process, you are entitled to the data subject rights outlined in this Privacy Policy (right of access, rectification, erasure, restriction of processing, objection, and data portability). You may exercise these rights at any time by contacting us.

In particular, you have the right to:

  • To obtain information about the personal data we have stored about you
  • have incorrect data corrected
  • to request the deletion of your data if the legal requirements are met
  • To revoke your consent (e.g., to be included in the talent pool) at any time

6.1.6 Integration of YouTube

a) Description and scope of data processing

We have embedded YouTube videos on our website. These videos are stored on YouTube’s servers and can be played directly from our website.

YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

b) Legal basis for data processing

YouTube videos are embedded based on your consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time via our Consent Manager.

c) Enhanced privacy mode

Our videos are embedded in what is known as "Enhanced Privacy Mode." This means that no data about you is transmitted to YouTube unless you play the videos. Only when you actively start a video is the data specified in paragraph d) transmitted.

d) Data transfer to YouTube

When you visit our website, YouTube receives information indicating that you have accessed the relevant page. In addition, the following data is transmitted:

  • IP address
  • Date and time of access
  • page visited
  • Browser type and browser version
  • operating system used
  • Referrer URL

This data is transmitted regardless of whether you are logged in to a Google account or not.

e) Processing by YouTube and Google

YouTube processes your data (even for users who are not logged in) to create user profiles and uses this information for the following purposes:

  • Display of advertisements
  • Market Research
  • designing its website to meet user needs
  • Information provided to other users of the social network about your activities on our website

If you are signed in to Google, your data will be directly associated with your Google account. If you do not want this data to be linked to your YouTube profile, you must sign out before playing the video.

f) Transfer of data to third countries

The information collected is processed on Google's servers, which may be located outside the European Union (specifically in the United States).

Google has complied with theEU-U.S. Data Privacy Framework, which ensures an adequate level of data protection in accordance with the requirements of the European Commission.

(g) Right to object

You have the right to object to the creation of these user profiles. To exercise this right, you must contact YouTube directly.

h) Cookies

YouTube places cookies on your device. These are used to save your preferences and analyze your use of YouTube. Cookies are stored only with your consent in accordance with Section 25 of the TTDSG. You can disable or delete cookies in your browser settings.

i) Additional information

For more information about the purpose and scope of data collection and processing by YouTube, please refer to Google’s Privacy Policy:

Google Privacy Policy:https://www.google.de/intl/de/policies/privacy/

Information about enhanced privacy mode:https://support.google.com/youtube/answer/171780

6.1.7 How are cookies used on this website?

Whenyou use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie. Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall. We also use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit. This website uses persistent cookies, the scope and functionality of which are explained below: These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings. Blocking Cookies You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all features of this website.

The legal basis for the use of technically necessary cookies is Article 6(1)(f) of the GDPR. The legitimate interest lies in the technical functionality of the website.

6.1.8 Website Analysis

‍Forthe purpose of analyzing and optimizing our websites, we use various services, which are described below. This allows us, for example, to analyze how many users visit our site, which information is most in demand, or how users find our site. Among other things, we collect data on which website a user came from (known as a referrer), which subpages of the website were accessed, and how often and for how long a subpage was viewed. This helps us design and improve our offerings to be more user-friendly. The data collected in this process is not used to personally identify individual users. We collect anonymous or, at most, pseudonymous data. The legal basis for this is Art. 6(1)(f) GDPR. We consider the optimization of our website to be a legitimate interest—your fundamental rights and freedoms do not override our interest in this regard, as we provide you with comprehensive information about data collection within the scope of our privacy policy and you have the option to opt out at any time. Furthermore, we use only pseudonymous tracking.

Google Analytics: This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The service uses the Universal Analytics mode. This makes it possible to associate data, sessions, and interactions across multiple devices with a pseudonymous user ID, thereby analyzing a user’s activities across devices. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. These purposes also constitute our legitimate interest in data processing. The legal basis for the use of Google Analytics is Art. 6(1)(a) GDPR. The data we send and link to cookies, user identifiers (e.g., User-ID), or advertising IDs is automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html orhttps://policies.google.com/?hl=de.

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing thehttps://tools.google.com/flpage/gaoptout?hl=de. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems you use.

7. Will my data be shared with third parties?

In order for LIMELIGHT LIVE ENTERTAINMENT to process your data in accordance with the purposes described above, it may be necessary for other recipients to view and process your data.

7.1 External Service Providers (Processors)

Yourdata will be shared with service partners provided that they are acting on our behalf and assisting LIMELIGHT LIVE ENTERTAINMENT in the provision of its services, to the extent permitted by law or where you have consented to such sharing. We distinguish between external service providers (data processors), other service providers and partners, and other third parties. The processing of your personal data by commissioned service providers takes place within the framework of commissioned processing pursuant to Art. 28 of the GDPR. These service providers are not third parties within the meaning of the GDPR, as the data is processed under our responsibility.

We enter into data processing agreements with these service providers to ensure that they:

  • process the data exclusively in accordance with our instructions
  • take technical and organizational measures to protect the data
  • Process data only to the extent necessary to provide the service
  • Do not disclose any data to third parties without our consent
  • agree to maintain the confidentiality of the data
  • help us fulfill our obligation to provide you with information

7.2 Other Service Providers, Partners, and Third Parties

LIMELIGHTLIVE ENTERTAINMENT may collaborate with other partners who process data on their own behalf (as data controllers under Article 4(7) of the GDPR) if this is necessary to fulfill our service offerings or if we are legally required to disclose data.

This disclosure will only take place if there is a legal basis under Article 6 of the GDPR, in particular:

  • Based on consent(Art. 6(1)(a) of the GDPR), if you have expressly consented to the disclosure
  • To fulfill a contract(Art. 6(1)(b) of the GDPR), if the disclosure is necessary for the provision of the agreed services
  • On the basis of legitimate interests(Art. 6(1)(f) of the GDPR), where our interests in the disclosure outweigh your legitimate interests
  • To comply with legal obligations(Art. 6(1)(c) of the GDPR), when we are legally required to disclose such information

These may include the following partners or third parties:

  • Credit institutions and payment service providers
  • Transportation, travel, and hotel companies
  • Disclosure to public authorities or by court order
  • business partner
  • Suppliers and service providers
  • Partners in joint offerings
  • Advertising partners (with your consent)
  • Marketing and advertising service provider
  • Financial institutions that process payments
  • Insurance
  • Management consultants and attorneys

7.3 Disclosure to Government Agencies and Third Parties

We are required to disclose personal data to government agencies and authorities to the extent required by law or necessary to protect our legitimate interests. This applies in particular to:

  • Disclosure to regulatory authorities to comply with statutory reporting requirements
  • Disclosure to law enforcement authorities in the context of criminal investigations
  • Disclosure to courts in connection with legal proceedings
  • Disclosure to other authorities to comply with legal obligations (e.g., tax authorities, social security agencies)

7.4. Data Transfer to Third Countries

To the extent that we transfer personal data to recipients in countries outside the European Union (third countries), we do so only in compliance with the legal requirements set forth in Articles 44 et seq. of the GDPR.

Basis for transfers to third countries:

  1. EU Commission Adequacy Decision (Art. 45 GDPR): If the EU Commission has determined that a third country provides an adequate level of data protection, data may be transferred without further measures.
  2. Appropriate safeguards (Art. 46 GDPR): In the absence of an adequacy decision, we ensure, through appropriate safeguards, that an adequate level of data protection is guaranteed.

This is achieved in particular by:

    • EU Commission Standard Data Protection Clauses
    • Binding Corporate Rules
    • Approved codes of conduct or certifications
    • Contractual representations by the recipient
    1. Exceptions in specific cases (Art. 49 GDPR): In justified individual cases, data may be transferred even without appropriate safeguards if this is necessary to safeguard legitimate interests and there are no conflicting interests worthy of protection.

      Examples of transfers to third countries:

      • Transfer to service providers based in the United States using standard data protection clauses
      • Transfer to service providers in other non-EU countries that have an adequacy decision or appropriate safeguards

      7.5 Scope of Data Disclosure

      We only disclose the data that is necessary for the specific purpose (data minimization pursuant to Article 5(1)(b) of the GDPR). The scope of the data disclosed is limited to the minimum necessary.

      7.6 Protective Measures for Disclosure

      We take appropriate measures to ensure that data recipients process the transferred data only for the agreed purposes. This includes, in particular:

      • Careful selection of data recipients
      • Entering into relevant agreements (data processing agreements, standard data protection clauses)
      • Regular review of recipients' compliance with data protection regulations
      • Records of Disclosures

      7.7. Your Rights Regarding Disclosure

      You have the right to request information about the recipients to whom your data has been disclosed (Art. 15(1)(g) of the GDPR). You may exercise this right at any time by contacting us.

      8. Is my data processed outside the EU/EEA, and how is data protection ensured?

      We place great importance on processing your data within the EU/EEA. However, we may use service providers who operate outside the EU/EEA. In such cases, we ensure that an adequate level of data protection is established before your personal data is transferred. This means that EU standard contracts are used to achieve a level of data protection that is comparable to the standards within the EU.

       

      9. What rights do I have, and how can I exercise them?

      Youhave the following rights under Articles 15–22 of the GDPR.

      9.1 Right to Confirmation

      Everydata subject has the right, granted by European legislation, to request confirmation from the data controller as to whether personal data concerning them is being processed. If you wish to exercise this right to confirmation, you may contact our Data Protection Officer or another representative of the data controller at any time.

      9.2. Right of Access

      Any individual whose personal data is being processed has the right, granted by European legislation, to obtain from the data controller, at any time and free of charge, information regarding the personal data stored about them, as well as a copy of such information. Furthermore, the data subject has the right to request the following information:

      - the purposes of processing

      - the categories of personal data that are processed

      - the recipients or categories of recipients to whom the personal data has been or will be disclosed

      - the planned duration for which the personal data will be stored

      - the right to have personal data concerning you rectified or erased, or the right to object to the processing of such data

      - the existence of a right to lodge a complaint with a supervisory authority

      9.3. Right to Rectification

      Any data subject whose personal data is being processed has the right, as granted by European legislation, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data—including by means of a supplementary statement—taking into account the purposes of the processing.

      9.4. Right to erasure

      ‍Anyindividual whose personal data is being processed has the right, granted by European legislation, to request that the controller erase their personal data without delay, provided that one of the following grounds applies and the processing is not necessary:

      - The personal data was collected or otherwise processed for purposes for which it is no longer necessary.

      - The data subject withdraws the consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR, and there is no other legal basis for the processing.

      - The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing.

      - The personal data was processed unlawfully.

      - The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

      9.5. Right to restriction of processing

      Any data subject whose personal data is being processed has the right, granted by European legislation, to request that the controller restrict the processing if any of the following conditions are met:

      - The data subject disputes the accuracy of the personal data, for a period sufficient to allow the controller to verify the accuracy of the personal data.

      - The processing is unlawful, the data subject objects to the erasure of the personal data, and instead requests that the use of the personal data be restricted.

      - The controller no longer needs the personal data for the purposes of processing, but the data subject needs it to establish, exercise, or defend legal claims.

      - The data subject has objected to the processing pursuant to Article 21(1) of the GDPR, and it is not yet clear whether the controller’s legitimate grounds override those of the data subject.

      9.6. Right to Data Portability

      Every data subject whose personal data is being processed has the right, as granted by European legislation, to receive the personal data concerning them—which they have provided to a controller—in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided.

      9.7. Right to Object

      Any data subject affected by the processing of personal data has the right, granted by European legislation, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

      9.8. Right to Withdraw Consent Under Data Protection Law

      Any individual whose personal data is being processed has the right, granted by European legislation, to withdraw their consent to the processing of personal data at any time.

      9.9 Rights Regarding Data Processing Based on Legitimate Interests

      ‍Pursuant to Article 21(1) of the GDPR, youhave the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6(1)(f) of the GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

      9.10. Rights Regarding Direct Marketing

      If we process your personal data for direct marketing purposes, you have the right, pursuant to Art. 21 Abs. 2 DSGVO, to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

      9.11. Right to lodge a complaint with a supervisory authority

      You also have the right to complain to a competent data protection supervisory authority about our processing of your personal data.

      10. SSL or TLS encryption

      This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information. You can tell that you’re using an encrypted connection when the address in your browser’s address bar changes from “http://” to “https://” and when you see the padlock icon in your browser’s address bar.

       

      11. Miscellaneous

      11.1 Changes to the Privacy Policy

      ThisPrivacy Policy is currently in effect as of May 20, 2026. This Privacy Policy is updated on an ongoing basis as the Internet and our services evolve. To stay informed about the current status of our data usage policies, please visit this page regularly.

      11.2 Links to Other Websites

      Our websites may contain links to websites of other providers. Please note that this privacy policy applies exclusively to the websites of LIMELIGHT LIVE ENTERTAINMENT. We have no influence over and do not control whether other providers comply with the applicable data protection regulations.