Privacy Policy
1. Verantwortlicher
The entity responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
BUGA Dresden 2033 gGmbH
Königsbrücker Str. 17
01099 Dresden
Gesetzlicher Vertreter: Marcel Timmroth (Geschäftsführer)
E-Mail: hallo@buga2033.de
Website: www.buga2033.de
2. Cookies
What are cookies? Cookies are small text files that are stored in your browser when you visit our website. We distinguish between technically necessary cookies and those that are set only with your consent.
2.1 Technically Necessary Cookies
The following cookies are necessary for the website to function and are set without consent.
| Cookie-Name | Purpose | Vendor | Retention period |
| wp-wpml_current_language | Saves your selected language setting | WPML (local) | 1 year |
| borlabs-cookie | Saves your cookie settings | Borlabs (local) | 1 year |
Legal basis: Art. 6(1)(f) of the GDPR / § 25(2)(2) of the TDDDG (technically necessary; no consent required).
2.2 Cookies Requiring Consent
Additional cookies are set for some services on our website, provided you have given your consent via our cookie banner. You can find details on this in the respective sections. Here is an overview:
| Cookie-Name | Service | Purpose | Retention period |
| _ga | Google Analytics | Identification of Individual Users (Pseudonymous Client IDs) | 2 years |
| _ga_3HHN95ZNMD | Google Analytics | Saving the Session Status | 2 years |
| _gid | Google Analytics | Distinguishing Between User Sessions | 24 hours |
Withdrawal: You can access your cookie settings at any time by clicking the “Cookie Settings” link in the footer of our website to withdraw or adjust your consent.
3. Contact Form
When you use our contact form, we collect the following information:
| Input | Required field |
| First Name | Yes |
| Last Name | Yes |
| E-Mail-Address | Yes |
| Phone Number | No |
| Issue (Category) | No |
| Message | No |
Purpose of processing: To process and respond to your inquiry.
Legal basis: Article 6(1)(b) of the GDPR (pre-contractual measures or contract negotiations). If your message is not related to a contractual relationship, the legal basis is Article 6(1)(f) of the GDPR (legitimate interest in processing incoming inquiries).
Retention Period: Your inquiry will be deleted once it has been fully processed. For contract-related inquiries, the statutory retention periods apply (up to 10 years in accordance with § 257 HGB / § 147 AO).
Recipients: Your data will be processed exclusively by our employees. It will not be disclosed to third parties.
4. Newsletter
If you would like to subscribe to our newsletter, we need your email address and your express consent.
Double opt-in process: After you sign up, you will receive a confirmation email containing an activation link. Your subscription will not be activated until you click this link. This ensures that you, as the owner of the email address provided, actually intended to sign up.
Purpose of processing: To send information, news, and announcements regarding the 2033 Federal Horticultural Show in Dresden.
Legal basis: Article 6(1)(a) of the GDPR (consent).
Distribution: The newsletter is distributed via the Mailster plugin on our web server.
Retention Period: Your email address will be stored for as long as you remain subscribed to the newsletter. Once you unsubscribe, your data will be deleted immediately. The confirmation of consent (timestamp, IP address used for registration) will be retained as proof for up to 3 years after you revoke your consent.
Withdrawal of Consent: You may withdraw your consent at any time by using the unsubscribe link in any newsletter email or by contacting us at hallo@buga2033.de. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
5. Instagram-Feed
What is the Instagram feed? On our website, we display the latest posts from our Instagram profile. To do this, we use the “Feed Them Social” plugin, which connects to Meta (Instagram) servers when the feed is loaded.
This feed will not be loaded until you have given your explicit consent via our cookie banner. Without your consent, you will see a placeholder message here. A connection to Meta servers will only be established after you have given your consent.
What data is transferred to Meta after consent is given?
- Your device’s IP address
- Browser Type and Operating System
- Technical Device Information
Purpose of processing: To display recent posts on our Instagram profile for public relations purposes related to the 2033 Federal Horticultural Show in Dresden.
Legal basis: Art. 6(1)(a) of the GDPR (consent) in conjunction with § 25 of the TDDDG.
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
Transfers to third countries: Data may be transferred to the United States. Meta Platforms is certified under the EU-U.S. Data Privacy Framework (DPF); an adequacy decision has been issued by the European Commission (Art. 45 of the GDPR).
For more information: Meta/Instagram Privacy Policy: https://privacycenter.instagram.com/policy
Withdrawal: You can withdraw your consent at any time via our cookie settings in the footer.
6. Our Social Media Presence
BUGA Dresden 2033 gGmbH maintains company profiles on the following platforms for public relations and to provide information about the 2033 Federal Horticultural Show in Dresden:
- Instagram: https://www.instagram.com/buga2033/
- Facebook: https://www.facebook.com/people/BUGA-Dresden-2033/61583940697976/
- LinkedIn: https://de.linkedin.com/company/buga-dresden-2033
- YouTube: https://www.youtube.com/channel/UCmFVyDwUmq84CA_jyVEMGjg
The links on our website are simple text links and do not result in any data being transmitted to the platforms.
Joint Control (Art. 26 of the GDPR)
To the extent that we, as operators of company profiles, access usage statistics from the platforms (“Insights”), we are jointly responsible with the respective platform operator in accordance with Article 26 of the GDPR. The primary responsibility for the processing of personal data on the platforms lies with the respective platform operator.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in public relations and communication regarding the 2033 Federal Horticultural Show in Dresden).
Note: When you visit our social media profiles, your data is processed by the respective platform operators in accordance with their own privacy policies. We have no control over this processing. For information on data processing, please refer to the respective privacy policies:
| Platform | Privacy Policy |
| https://privacycenter.instagram.com/policy | |
| https://www.facebook.com/policy.php | |
| https://www.linkedin.com/legal/privacy-policy | |
| YouTube | https://policies.google.com/privacy |
You can find the supplementary agreement on joint responsibility with Meta (Facebook/Instagram) at: https://www.facebook.com/legal/terms/page_controller_addendum
7. Website Analysis with Google Analytics
To analyze user behavior on our website, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited.
What is Google Analytics? Google Analytics allows us to understand how visitors use our website—which pages they view, how long they stay, and where they come from. The insights we gain help us continuously improve the website for the 2033 Federal Horticultural Show in Dresden.
Google Analytics is activated only after you have given your explicit consent via our cookie banner. No analytics data is collected without your consent.
What data is processed?
Google Analytics collects the following data based on a pseudonymous client ID:
- Pages Visited (URLs) and Time Spent on Each Page
- Traffic source (e.g., search engine, direct visit, referral)
- Website interactions (clicks, scroll depth, events)
- Device information (device type, operating system, browser, screen resolution)
- Browser language settings
- Approximate geographic location (country/region)
When you access the site, your IP address is transmitted to Google; this data may be processed in the United States. According to Google, the IP address is not logged or stored in Google Analytics 4, but is used solely to determine your approximate geographic location (country/region) and is subsequently discarded.
Legal basis: Art. 6(1)(a) of the GDPR (consent) in conjunction with § 25 of the TDDDG.
Data Processing: The data processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have a data processing agreement with Google in accordance with Article 28 of the GDPR (Data Processing Terms, available at https://business.safety.google/adsprocessorterms/).
Transfer to a Third Country: Data may be transferred to the United States (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The legal basis for this transfer to a third country is as follows:
• EU Commission Adequacy Decision of July 10, 2023, on the EU-U.S. Data Privacy Framework (DPF) pursuant to Article 45 of the GDPR — Google LLC is certified under the DPF (https://policies.google.com/privacy/frameworks?hl=de)
• In addition: EU Standard Data Protection Clauses (SCCs, Implementing Decision (EU) 2021/914) pursuant to Article 46(2)(c) of the GDPR
Retention Period: The retention period we have set for usage and event data in Google Analytics is a maximum of 2 months. Please refer to the “Cookies” section for information on cookie expiration dates.
Withdrawal: You can withdraw your consent at any time via the cookie settings in the footer of our website. In addition, a browser add-on is available to completely disable Google Analytics: https://tools.google.com/dlpage/gaoptout
For more information about Google’s data processing, please visit: https://policies.google.com/privacy?hl=de
8. Rights of Data Subjects
As a data subject, you have the following rights:
Right of Access (Art. 15 of the GDPR)
You have the right to know whether we process any personal data about you and, if so, what data we process, as well as to receive information about the purposes of processing, the recipients, and the retention period.
Rectification (Art. 16 of the GDPR)
You have the right to request the correction of inaccurate data and the completion of incomplete data concerning you.
You have the right to request the immediate deletion of your personal data, provided that the legal requirements are met.
Restriction of Processing (Art. 18 GDPR)
Under certain conditions, you have the right to request that the processing of your data be restricted.
Data Portability (Art. 20 of the GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller.
Right to Object (Art. 21 of the GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out on the basis of Article 6(1)(f) of the GDPR (legitimate interest).
Withdrawal of Consent (Art. 7(3) of the GDPR)
If you have given your consent to data processing (e.g., newsletters, social media integrations, cookies), you may revoke that consent at any time with future effect. The lawfulness of the processing carried out up until the revocation remains unaffected.
Right to File a Complaint (Art. 77 of the GDPR)
If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the competent data protection supervisory authority:
Sächsische Datenschutz- und Transparenzbeauftragte (SDTB)
Devrientstraße 5
01067 Dresden
Website: www.datenschutz.sachsen.de
9. Current Status of This Privacy Policy
We update this Privacy Policy when legal requirements change or when we introduce new services on our website. The most recent version will apply to your next visit.
Last Update: 27. May 2026