Privacy Policy
Introduction and terminology
1. Introduction
In operating our website https://muk.online-ticket.de/ (hereinafter referred to as the “website”), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws – in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-neu). With our privacy policy, we inform you which personal data we collect from you, for what purposes and on what legal basis we use such data and, if applicable, to whom we disclose it. We will also explain the rights you have to protect and assert your data privacy.
2. Terminology
Our data protection provisions contain technical terminology which is used in the GDPR and the BDSG-neu. For your better understanding, we would firstly like to explain this terminology in simple language:
2.1 Personal data
“Personal data” means any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, their name or email address. However, personal data also includes data where the identity is not immediately apparent, but can be determined by combining personal or third-party information to find out who the person is. A person can be identified, for example, by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. In this case, all information that can be used to identify a person in any way is relevant.
2.2 Processing
Art. 4 No. 2 GDPR defines “processing” as any operation involving personal data. This applies in particular to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Data controller and data protection officer
3. Data controller
Responsible for data processing (the data controller):
Company: Lübecker Musik- und Kongreßhallen GmbH
Legal representative: Ms. Ilona Jarabek
Address: Willy-Brandt-Allee 10, 23554 Lübeck
Telephone: 0451 7904 0
Fax: 0451 7904 100
Email: kontakt@muk.de
4. Data protection officer
We have appointed an external data protection officer for our company. Their contact details are as follows:
Name: Attorney Martin Glänzer
Address: Eppendorfer Landstraße 33, 20249 Hamburg
Telephone: 040 355 10 70
Fax: 040 355 10 711
Email: datenschutzbeauftragter@muk.de
Processing framework
5. Processing framework: website
Within the framework of the website with the URL https://muk.online-ticket.de/, we process your personal data as listed in detail in sections 6-23.9 below. We only process data that you actively provide on our website (e.g. by filling out forms) or that you automatically provide when using our website.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this takes place within the framework of order processing, in which we as the client are authorised to issue instructions to our contractors. We use external service providers to operate our website for the purposes of hosting, maintenance, care and further development. If other external service providers are used for individual processing operations listed in sections 6-23.9, they will be named there.
A transfer of data to third countries does not in principle take place and is not planned. We will provide information about exceptions to this principle in the processing described below.
Processing operations in detail
6 Provision of the website and server log files
6.1 Description of the processing
Each time you visit our website, we automatically collect information that your browser transmits to our server. This information is also stored in the log files of our system. This encompasses the following data:
- your IP address
- the browser software you are using, as well as its version and language
- the operating system you are using
- the website from which you accessed our website (the referrer)
- the subpages you have accessed on our website
- the date and time of your visit to our website
- the amount of data transferred
The temporary storage of your IP address by our system is necessary for us to be able to deliver our website to the users end device. For this purpose, the users IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files.
6.2 Purpose
The processing takes place to enable the website to be accessed and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.
6.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 6.2.
6.4 Storage period
The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this occurs when the respective session has ended.
7 Registration and profile
7.1 Description of the processing
Individual functions and offers on our website are only available to you as a registered user. By registering, you conclude a free user agreement with us. By registering, you will receive your own user account on our website. You register by completing the registration form at https://muk.online-ticket.de/ and sending it to us electronically. To register, you must enter your email address, a user name of your choice and a password of your choice. By clicking on the “Register” button, you submit the form to us. You will then receive an automatic welcome email. This contains a link to confirm your email address. Your account will only be activated on our website once you have successfully verified your email address by clicking on the confirmation link.
As a registered user, you can shop faster and more conveniently on our website by entering your billing and delivery addresses as well as your preferred payment method in your user profile. This means that you do not have to re-enter your personal data for subsequent (further) purchases.
In addition to the information you provide during registration, we process the following personal data from you to set up and maintain your user account:
- first name and surname
- email address
- postal address
- date of birth
- delivery address (if different from address)
- telephone number
- company name
7.2 Purpose
The processing takes place to provide you with the functions of our website for registered users.
7.3 Legal basis
The processing is necessary for the conclusion and fulfilment of the user contract (point (b) of Art. 6(1) GDPR). Without providing your personal data as part of the registration process, we cannot provide our contractually owed services.
7.4 Storage period
The data will be automatically erased by us upon termination of your user contract. You can terminate the user contract yourself by informing us by email at datenschutzbeauftragter@muk.de or by informing us by fax on 0451 7904 100 that you no longer wish to be a registered user of our website. We will then erase your user account immediately. In addition, as a logged-in user you can edit your own details and information at any time.
8. Purchasing
8.1 Description of the processing
You can shop on our website as a guest or as a registered user. We will process your personal data as part of your order process. The mandatory fields marked with an asterisk “*” in our online store must be completed by you. Otherwise, we will not be able to conclude a purchase contract with you or send you the requisite goods, such as event tickets, vouchers, gift packaging and merchandise products. All other information is voluntary. When making a purchase on our website, you can also select one of the payment methods offered (credit card, instant bank transfer, advance payment) to settle the purchase price. When you complete your order, the data required for payment will be forwarded to the relevant payment service provider. If you shop on our website as a registered user, you can enter your billing and delivery addresses as well as your preferred payment method in your user profile for faster and more convenient ordering.
8.2 Purpose
The processing takes place in order to conclude and process purchase contracts.
8.3 Legal basis
The processing is necessary for the conclusion and fulfilment of the purchase contracts (point (b) of Art. 6(1) GDPR).
8.4 Storage period
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we shall restrict such processing after two years. This means that your data will then only be stored separately in order to comply with the statutory retention periods and will be erased immediately after these have expired.
8.5 Recipients
To process your payment, personal data will be forwarded to one of the external payment service providers listed below and selected by you as part of your purchase:
- Sofortüberweisung: Sofort GmbH. Further information on data protection at Sofortüberweisung is available at https://www.klarna.com/sofort/datenschutz/
- Credit card: Saferpay SIX Payment Services AG, Hardturmstrasse 201, P.O. Box 1521, CH-8021 Zurich
- Advance payment
9. Contact form and contact by email
9.1 Description of the processing
We have provided a contact form on our website for contacting us. In this form, you are asked to enter your email address, your name and a message to us. If you click the “Send” button, the data will be transmitted to us. The contact form can only be transmitted if you accept our privacy policy by clicking on the corresponding checkbox. You can also contact us via the email addresses provided on the website. In this case, the personal data transmitted with the email will be processed by us.
9.2 Purpose
By providing a contact form on our website, we want to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your email will be used exclusively for the purpose of processing and responding to your enquiry.
9.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 9.2. If the email contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (point (b) of Art. 6(1) GDPR).
9.4 Storage period
We will erase the data as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. Such communication ends when it can be inferred from the circumstances that your enquiry has been conclusively clarified. If statutory retention periods prevent its erasure, the data will be erased immediately after the statutory retention period has expired.
10. Cookies
10.1 Description of the processing
Our website uses cookies. Cookies are small text files that are stored on the users end device when they visit a website. Cookies contain information that enables the recognition of an end device and, if necessary, certain functions of a website. In most cases, we only use “session cookies”. These are automatically deleted when you end your internet session and close the browser. Other cookies remain stored on your end device for a longer period of time and enable partner companies to recognise your browser or computer (persistent cookies). Depending on the cookie, persistent cookies are automatically deleted after the specified storage period.
10.2 Purpose
When you visit our website, we display a “cookie banner” to you to inform you that we use cookies and, as the case may be, other tracking technology to improve the user experience on our website and for the purposes of web analysis and interest-based advertising.
We ask for your consent - revocable at any time - for the use of various types of cookies that are not technically necessary. If you give your consent, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
Most of the cookies we use are “session cookies”. These are automatically deleted at the end of your visit to our website. Other cookies remain stored on your end device until you delete them yourself. These cookies make it possible for us to recognise your browser the next time you visit our website.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of point (f) of Art. 6(1) GDPR. Our legitimate interest in the storage of such cookies results from the technically error-free and optimised provision of these services. Insofar as other cookies (e.g. to analyse your surfing behaviour) are stored, this is referred to separately in our privacy policy.
You can view and change the cookie settings in the browser(s) on your end device. Most such browsers are usually set to accept cookies automatically. You can disable the storage of cookies in your browser and also have the option of deleting them from your hard disk. The use of our offer on our website is only possible to a limited extent without cookies, however.
Cookie categories
Depending on their function and purpose, we classify cookies into different categories as described below:
- Technically necessary cookies
Essential or technically necessary cookies enable basic functions and are necessary for the proper functioning of our website.
- Functional cookies
These cookies enable our website to store information already provided (e.g. user name and/or language selection) and improve the users ability to offer personalised functions. These cookies collect anonymised information and can track your movements on other websites.
- Performance cookies
These cookies collect information about the use of our website (e.g. which of our pages are visited most frequently). These cookies do not store any information that allows the user to be identified. The information collected is aggregated and anonymised. These cookies are used exclusively to improve the performance of our website and thus its user-friendliness.
- Cookies from external media & services
Content from social media and/or video platforms is blocked by default. If cookies from such external media are accepted by the user, access to this content no longer requires manual consent.
10.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 10.2.
10.4 Storage period
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your end device, you as the user also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your Internet browser.
Below we have compiled the links that will take you to instructions on how to change the settings in the most commonly-used browsers. Further information is provided in the support menu of your browser:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, however, individual functions of our website cannot be used or can only be used to a limited extent.
11. Newsletter
11.1 Description of the processing
We send out a newsletter at irregular intervals. We use the newsletter to inform you about goods and services that you can purchase at our store and other information in this context. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by filling out and submitting a newsletter registration form on our website. You only need to enter your email address to subscribe to the newsletter. All other details (such as your first name and surname) are voluntary and are used solely to personalise the emails.
We use the double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an email from us at the email address you have provided. In this email, we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it. Confirmation is provided by clicking on a confirmation link in the email. Only after successful confirmation will we add you to our newsletter mailing list and send you future emails. As part of the double opt-in procedure, we store the date, time and your IP address both when you register and when you confirm.
11.2 Purpose
The processing takes place in order to offer the newsletter function and to be able to send subscribers newsletter emails. The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document the consent given and to protect against the misuse of email addresses.
11.3 Legal basis
The processing of our subscriber newsletter is based on consent in accordance with point (a) of Art. 6(1) GDPR. You can access the declaration of consent on our website. Your consent is voluntary. The collection and storage of date, time and IP addresses when registering for the newsletter is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 11.2.
11.4 Storage period and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration email, your data will be erased automatically. We process your personal data for the duration of your newsletter subscription. You can unsubscribe from our newsletter at any time by withdrawing your consent. A simple declaration is sufficient for this (by email to datenschutzbeauftragter@muk.de or by fax to 0451 7904 100). You can also unsubscribe from the newsletter by clicking on the unsubscribe link which is included in every newsletter email. If you withdraw your consent, we will no longer send you newsletters and your personal data will be removed from our active mailing list. We will add your email address to our black list to safeguard your revocation. This allows us to ensure that you do not receive any newsletters from us in future and that your email address is not misused by third parties.
11.5 Recipients and transfer to third countries
We use the services of the newsletter provider Mailjet to manage our newsletter mailing list and to send emails. This takes place within the framework of order processing. Mailjet is a service provided by Mailjet SAS, 13-13 bis, rue de lAubrac, 75012 Paris, France. The privacy policy of the provider Mailjet is available here: https://www.mailjet.com/de/rechtliches/datenschutzerklaerung/
12 Social networks
12.1 Description of the processing
Our website does not use any social media plugins. The social network logos displayed on our website are merely linked to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.
13 Google Web Fonts
13.1 Description of the processing
Our website uses “Google Web Fonts”, a font replacement service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With Google Web Fonts, the standard fonts of your end device are replaced by fonts from Googles catalogue when displaying our website. If your browser prevents the integration of Google Web Fonts, the text on our website will be displayed in the standard fonts of your end device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Web Fonts does not store any cookies on your end device. According to Google, data processed as part of the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. Such data is not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at Google Webfonts is available at https://developers.google.com/fonts/faq?hl=de-DE&csw=1. General information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
13.2 Purpose
The processing takes place in order to display the text on our website in a more legible and aesthetically pleasing way.
13.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 13.2.
13.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
14 YouTube videos
14.1 Description of the processing
Our website uses services from “YouTube”, a video platform operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use YouTube by embedding individual videos from the platform on our website as iFrames so that they can be played directly on our website. The videos are embedded in the “extended data protection mode” offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only when you play a video will data be transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be informed which subpage you have visited and which video you have watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
14.2 Purpose
The processing takes place to be able to show you videos on our website.
14.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 14.2.
14.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
15 Google Maps
15.1 Description of the processing
Our website uses “Google Maps”, a service for displaying maps provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). We use Google Maps by embedding a map with our business address on our website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Maps does not store any cookies on your end device. If you are logged in to Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
15.2 Purpose
The processing takes place to be able to show you an interactive map on our website.
15.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 15.2.
15.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
16 Google Analytics
16.1 Description of the processing
Our website uses “Google Analytics”, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). Google Analytics uses cookies (see section 10), which enable your use of our website to be analysed. We use Google Analytics in the “Universal Analytics” version offered, which allows this analysis across end devices by assigning the data to a pseudonymous user ID. The information generated by the cookie is usually transferred to a Google server in the USA and stored there. However, we only use Google Analytics with IP anonymisation. This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics compiled by Google Analytics record in particular how many users visit our website, the country or location from which access is made, which subpages are accessed and which links or search terms visitors use to reach our website.
The terms and conditions of use for Google Analytics are available at http://www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Googles privacy policy can be viewed at http://www.google.de/intl/de/policies/privacy.
16.2 Purpose
The processing takes place to evaluate the use of our website. The information obtained is used to improve our online presence and design it in accordance with requirements.
16.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 16.2.
16.4 Storage period and right to object
We have explained the storage period as well as your control and setting options for cookies in section 10. You can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link. This will place an opt-out cookie on your end device that will prevent your data from being collected on future visits to this website: Deactivate Google Analytics. The analysis data processed and stored with Google Analytics will be automatically erased by us after 14 months.
16.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
17 Google Tag Manager
Our website uses the “Google Tag Manager”, a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). No personal data is collected via Google Tag Manager and no cookies are set. This service only enables us to integrate and manage tags on our website. Tags are small code elements on our website that are helpful for measuring traffic and visitor behaviour with other tools, measuring the impact of online advertising and social channels, using remarketing and targeting, testing and optimising the website. More information about Google Tag Manager is available here: https://www.google.com/intl/de/tagmanager/use-policy.html
18 Google Adword Conversion and Google Remarketing
18.1 Description of the processing
Our website uses the advertising service “Google Adword Conversion”, which is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With the help of Google Adwords Conversions, we can place advertisements on external websites to draw your attention to our offers. The service also enables us to determine the reach and success of individual advertising measures. Our advertisements are delivered by Google via “ad servers”. For this purpose, Google uses “Ad Server” cookies, which measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your end device (see section 9). According to Google, these cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. The cookies enable Google to recognise your internet browser. If you visit the website of an Adwords customer and the cookie stored on your end device has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to our website. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not process any personal data with our Google Adwords advertising measures. Google only provides us with statistical evaluations. Based on these evaluations, we can recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. When you visit our website, a connection to the Google servers is therefore established. We have no influence on the scope and further use of the data collected by Google through the use of Google Adwords Conversion and therefore inform you according to our state of knowledge: through the integration of Google Adwords Conversion, Google receives the information which subpage of our website you have accessed or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address.
Our website also uses the “Google Remarketing” advertising service, which is also operated by Google. With Google Remarketing, we can address you again with advertisements for our offers after you have visited our website on other websites that have joined the Google advertising network. Google also uses cookies for this purpose, which are stored in your browser and through which your usage behaviour is recorded and evaluated by Google when you visit various websites. This enables Google to determine your previous visit to our website and to show you advertisements for our offers on other websites. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.
Further information on data protection at Google is available here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
18.2 Purpose
The processing takes place to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.
18.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point() of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 18.2.
18.4 Storage period and right to object
We have explained the storage period as well as your control and setting options for cookies in Section 10. You can object to data processing by Google Adwords Conversion and Google Remarketing at any time at the following website: http://www.google.com/ads/preferences.
18.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
19 Facebook Pixel
19.1 Description of the processing
Our website uses the remarketing service “Facebook Pixel”, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The “Facebook Pixel” enables us to place advertisements on the social network that are targeted precisely to those Facebook users who have shown an interest in our offer - e.g. through a previous visit to our website. With the help of the “Facebook Pixel”, we can also track and evaluate the effectiveness and reach of our advertising on Facebook by recording whether Facebook users interact with our ads on the social network by clicking on the ads and being redirected to our website. When you visit our website, a connection to the Facebook servers is therefore established and the “Facebook pixel” is embedded in our website. In addition, Facebook may store a cookie on your end device (see section 10 above). If you are logged in to Facebook or log in to Facebook later, your visit to our website will be assigned to your user account. The data collected about you by the “Facebook pixel” is anonymous to us. It does not allow us to draw any conclusions about your person. However, it is possible for Facebook to connect to your user profile. Data processing by Facebook takes place in accordance with the companys data policy, which is available at https://www.facebook.com/policy.php.
19.2 Purpose
The processing takes place to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.
19.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 19.2.
19.4 Storage period and right to object
We have explained the storage period and your control and setting options for cookies in section 10. You can object to the collection of data by the “Facebook Pixel” and the use of your data to display Facebook ads at any time. To do so, you can click on the following opt-out link: disable Facebook pixel.
19.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
20 Google reCAPTCHA
20.1 Description of the processing
Our website uses “reCAPTCHA”, a service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With reCAPTCHA, we can check in forms whether the input is made by a human or by automated software - in particular bots. This allows us to protect our website from spam and misuse. In this context, your IP address, the time spent on the website, mouse movements made by you and any other data required for the reCAPTCHA service are transmitted to Google. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
20.2 Purpose
The processing takes place to protect forms on our website against misuse and spam.
20.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 20.2.
20.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
21 Content Delivery Networks (CDN)
21.1 Description of the processing
This webshop uses Amazon Cloudfront, a CDN (content delivery network) from Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855 Luxembourg (“Amazon”). A CDN sends files from a very fast server that is as close as possible to your location. This shortens the loading time of the website, as only a small amount of data has to be loaded directly from our slower actual server. Amazon operates numerous servers in Europe (including in Frankfurt and Milan) to be able to send our files to you as quickly as possible.
Amazons privacy policy is available here: https://www.amazon.de/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ
21.2 Purpose
The processing takes place to shorten the loading time of our website.
21.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in Section 21.2.
21.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
Security measures
22. Security measures
To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the users end device. You can recognise active SSL or TLS encryption by the small padlock logo displayed on the far left of the browser address bar.
Your rights
23. Rights of data subjects
With regard to the data processing described above by our company, you have the following rights as a data subject:
23.1 Access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right of access to this personal data and to the further information listed in Art. 15 GDPR under the conditions set out in Art. 15 GDPR.
23.2 Rectification (Art. 16 GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
23.3 Erasure (Art. 17 GDPR)
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes pursued by us.
23.4 Restriction of data processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that enables us to verify the accuracy of your data.
23.5 Data portability (Art. 20 GDPR)
You have the right, under the conditions set out in Art. 20 GDPR, to request the surrender of the data concerning you in a structured, commonly used and machine-readable format.
23.6 Withdrawal of consent (Art. 7 (3) GDPR)
You have the right to withdraw your consent to processing based on consent at any time. The revocation applies from the time of its assertion. In other words, it is effective for the future. Therefore, the withdrawal of consent does not retroactively render the processing unlawful.
23.7 Complaint (Art. 77 GDPR)
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.
23.8 Prohibition of automated decision-making/profiling (Art. 22 GDPR)
Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.
23.9 Objection (Art. 21 GDPR)
If we process your personal data on the basis of point (f) of Art. 6(1) GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies if there are grounds relating to your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - regardless of a particular situation - you have the right to object to the processing of your personal data for direct marketing purposes at any time.
24. Supervisory authority
The data protection supervisory authority is:
Marit Hansen, Independent Centre for Data Protection Schleswig-Holstein (institution under public law), Holstenstraße 98, 24103 Kiel, phone: 0431 988 1200, fax: 0431 988 1223, mail@datenschutzzentrum.de
1. Introduction
In operating our website https://muk.online-ticket.de/ (hereinafter referred to as the “website”), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws – in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-neu). With our privacy policy, we inform you which personal data we collect from you, for what purposes and on what legal basis we use such data and, if applicable, to whom we disclose it. We will also explain the rights you have to protect and assert your data privacy.
2. Terminology
Our data protection provisions contain technical terminology which is used in the GDPR and the BDSG-neu. For your better understanding, we would firstly like to explain this terminology in simple language:
2.1 Personal data
“Personal data” means any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, their name or email address. However, personal data also includes data where the identity is not immediately apparent, but can be determined by combining personal or third-party information to find out who the person is. A person can be identified, for example, by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. In this case, all information that can be used to identify a person in any way is relevant.
2.2 Processing
Art. 4 No. 2 GDPR defines “processing” as any operation involving personal data. This applies in particular to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Data controller and data protection officer
3. Data controller
Responsible for data processing (the data controller):
Company: Lübecker Musik- und Kongreßhallen GmbH
Legal representative: Ms. Ilona Jarabek
Address: Willy-Brandt-Allee 10, 23554 Lübeck
Telephone: 0451 7904 0
Fax: 0451 7904 100
Email: kontakt@muk.de
4. Data protection officer
We have appointed an external data protection officer for our company. Their contact details are as follows:
Name: Attorney Martin Glänzer
Address: Eppendorfer Landstraße 33, 20249 Hamburg
Telephone: 040 355 10 70
Fax: 040 355 10 711
Email: datenschutzbeauftragter@muk.de
Processing framework
5. Processing framework: website
Within the framework of the website with the URL https://muk.online-ticket.de/, we process your personal data as listed in detail in sections 6-23.9 below. We only process data that you actively provide on our website (e.g. by filling out forms) or that you automatically provide when using our website.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this takes place within the framework of order processing, in which we as the client are authorised to issue instructions to our contractors. We use external service providers to operate our website for the purposes of hosting, maintenance, care and further development. If other external service providers are used for individual processing operations listed in sections 6-23.9, they will be named there.
A transfer of data to third countries does not in principle take place and is not planned. We will provide information about exceptions to this principle in the processing described below.
Processing operations in detail
6 Provision of the website and server log files
6.1 Description of the processing
Each time you visit our website, we automatically collect information that your browser transmits to our server. This information is also stored in the log files of our system. This encompasses the following data:
- your IP address
- the browser software you are using, as well as its version and language
- the operating system you are using
- the website from which you accessed our website (the referrer)
- the subpages you have accessed on our website
- the date and time of your visit to our website
- the amount of data transferred
The temporary storage of your IP address by our system is necessary for us to be able to deliver our website to the users end device. For this purpose, the users IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files.
6.2 Purpose
The processing takes place to enable the website to be accessed and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.
6.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 6.2.
6.4 Storage period
The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this occurs when the respective session has ended.
7 Registration and profile
7.1 Description of the processing
Individual functions and offers on our website are only available to you as a registered user. By registering, you conclude a free user agreement with us. By registering, you will receive your own user account on our website. You register by completing the registration form at https://muk.online-ticket.de/ and sending it to us electronically. To register, you must enter your email address, a user name of your choice and a password of your choice. By clicking on the “Register” button, you submit the form to us. You will then receive an automatic welcome email. This contains a link to confirm your email address. Your account will only be activated on our website once you have successfully verified your email address by clicking on the confirmation link.
As a registered user, you can shop faster and more conveniently on our website by entering your billing and delivery addresses as well as your preferred payment method in your user profile. This means that you do not have to re-enter your personal data for subsequent (further) purchases.
In addition to the information you provide during registration, we process the following personal data from you to set up and maintain your user account:
- first name and surname
- email address
- postal address
- date of birth
- delivery address (if different from address)
- telephone number
- company name
7.2 Purpose
The processing takes place to provide you with the functions of our website for registered users.
7.3 Legal basis
The processing is necessary for the conclusion and fulfilment of the user contract (point (b) of Art. 6(1) GDPR). Without providing your personal data as part of the registration process, we cannot provide our contractually owed services.
7.4 Storage period
The data will be automatically erased by us upon termination of your user contract. You can terminate the user contract yourself by informing us by email at datenschutzbeauftragter@muk.de or by informing us by fax on 0451 7904 100 that you no longer wish to be a registered user of our website. We will then erase your user account immediately. In addition, as a logged-in user you can edit your own details and information at any time.
8. Purchasing
8.1 Description of the processing
You can shop on our website as a guest or as a registered user. We will process your personal data as part of your order process. The mandatory fields marked with an asterisk “*” in our online store must be completed by you. Otherwise, we will not be able to conclude a purchase contract with you or send you the requisite goods, such as event tickets, vouchers, gift packaging and merchandise products. All other information is voluntary. When making a purchase on our website, you can also select one of the payment methods offered (credit card, instant bank transfer, advance payment) to settle the purchase price. When you complete your order, the data required for payment will be forwarded to the relevant payment service provider. If you shop on our website as a registered user, you can enter your billing and delivery addresses as well as your preferred payment method in your user profile for faster and more convenient ordering.
8.2 Purpose
The processing takes place in order to conclude and process purchase contracts.
8.3 Legal basis
The processing is necessary for the conclusion and fulfilment of the purchase contracts (point (b) of Art. 6(1) GDPR).
8.4 Storage period
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we shall restrict such processing after two years. This means that your data will then only be stored separately in order to comply with the statutory retention periods and will be erased immediately after these have expired.
8.5 Recipients
To process your payment, personal data will be forwarded to one of the external payment service providers listed below and selected by you as part of your purchase:
- Sofortüberweisung: Sofort GmbH. Further information on data protection at Sofortüberweisung is available at https://www.klarna.com/sofort/datenschutz/
- Credit card: Saferpay SIX Payment Services AG, Hardturmstrasse 201, P.O. Box 1521, CH-8021 Zurich
- Advance payment
9. Contact form and contact by email
9.1 Description of the processing
We have provided a contact form on our website for contacting us. In this form, you are asked to enter your email address, your name and a message to us. If you click the “Send” button, the data will be transmitted to us. The contact form can only be transmitted if you accept our privacy policy by clicking on the corresponding checkbox. You can also contact us via the email addresses provided on the website. In this case, the personal data transmitted with the email will be processed by us.
9.2 Purpose
By providing a contact form on our website, we want to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your email will be used exclusively for the purpose of processing and responding to your enquiry.
9.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 9.2. If the email contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (point (b) of Art. 6(1) GDPR).
9.4 Storage period
We will erase the data as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. Such communication ends when it can be inferred from the circumstances that your enquiry has been conclusively clarified. If statutory retention periods prevent its erasure, the data will be erased immediately after the statutory retention period has expired.
10. Cookies
10.1 Description of the processing
Our website uses cookies. Cookies are small text files that are stored on the users end device when they visit a website. Cookies contain information that enables the recognition of an end device and, if necessary, certain functions of a website. In most cases, we only use “session cookies”. These are automatically deleted when you end your internet session and close the browser. Other cookies remain stored on your end device for a longer period of time and enable partner companies to recognise your browser or computer (persistent cookies). Depending on the cookie, persistent cookies are automatically deleted after the specified storage period.
10.2 Purpose
When you visit our website, we display a “cookie banner” to you to inform you that we use cookies and, as the case may be, other tracking technology to improve the user experience on our website and for the purposes of web analysis and interest-based advertising.
We ask for your consent - revocable at any time - for the use of various types of cookies that are not technically necessary. If you give your consent, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
Most of the cookies we use are “session cookies”. These are automatically deleted at the end of your visit to our website. Other cookies remain stored on your end device until you delete them yourself. These cookies make it possible for us to recognise your browser the next time you visit our website.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of point (f) of Art. 6(1) GDPR. Our legitimate interest in the storage of such cookies results from the technically error-free and optimised provision of these services. Insofar as other cookies (e.g. to analyse your surfing behaviour) are stored, this is referred to separately in our privacy policy.
You can view and change the cookie settings in the browser(s) on your end device. Most such browsers are usually set to accept cookies automatically. You can disable the storage of cookies in your browser and also have the option of deleting them from your hard disk. The use of our offer on our website is only possible to a limited extent without cookies, however.
Cookie categories
Depending on their function and purpose, we classify cookies into different categories as described below:
- Technically necessary cookies
Essential or technically necessary cookies enable basic functions and are necessary for the proper functioning of our website.
- Functional cookies
These cookies enable our website to store information already provided (e.g. user name and/or language selection) and improve the users ability to offer personalised functions. These cookies collect anonymised information and can track your movements on other websites.
- Performance cookies
These cookies collect information about the use of our website (e.g. which of our pages are visited most frequently). These cookies do not store any information that allows the user to be identified. The information collected is aggregated and anonymised. These cookies are used exclusively to improve the performance of our website and thus its user-friendliness.
- Cookies from external media & services
Content from social media and/or video platforms is blocked by default. If cookies from such external media are accepted by the user, access to this content no longer requires manual consent.
10.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 10.2.
10.4 Storage period
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your end device, you as the user also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your Internet browser.
Below we have compiled the links that will take you to instructions on how to change the settings in the most commonly-used browsers. Further information is provided in the support menu of your browser:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, however, individual functions of our website cannot be used or can only be used to a limited extent.
11. Newsletter
11.1 Description of the processing
We send out a newsletter at irregular intervals. We use the newsletter to inform you about goods and services that you can purchase at our store and other information in this context. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by filling out and submitting a newsletter registration form on our website. You only need to enter your email address to subscribe to the newsletter. All other details (such as your first name and surname) are voluntary and are used solely to personalise the emails.
We use the double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an email from us at the email address you have provided. In this email, we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it. Confirmation is provided by clicking on a confirmation link in the email. Only after successful confirmation will we add you to our newsletter mailing list and send you future emails. As part of the double opt-in procedure, we store the date, time and your IP address both when you register and when you confirm.
11.2 Purpose
The processing takes place in order to offer the newsletter function and to be able to send subscribers newsletter emails. The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document the consent given and to protect against the misuse of email addresses.
11.3 Legal basis
The processing of our subscriber newsletter is based on consent in accordance with point (a) of Art. 6(1) GDPR. You can access the declaration of consent on our website. Your consent is voluntary. The collection and storage of date, time and IP addresses when registering for the newsletter is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 11.2.
11.4 Storage period and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration email, your data will be erased automatically. We process your personal data for the duration of your newsletter subscription. You can unsubscribe from our newsletter at any time by withdrawing your consent. A simple declaration is sufficient for this (by email to datenschutzbeauftragter@muk.de or by fax to 0451 7904 100). You can also unsubscribe from the newsletter by clicking on the unsubscribe link which is included in every newsletter email. If you withdraw your consent, we will no longer send you newsletters and your personal data will be removed from our active mailing list. We will add your email address to our black list to safeguard your revocation. This allows us to ensure that you do not receive any newsletters from us in future and that your email address is not misused by third parties.
11.5 Recipients and transfer to third countries
We use the services of the newsletter provider Mailjet to manage our newsletter mailing list and to send emails. This takes place within the framework of order processing. Mailjet is a service provided by Mailjet SAS, 13-13 bis, rue de lAubrac, 75012 Paris, France. The privacy policy of the provider Mailjet is available here: https://www.mailjet.com/de/rechtliches/datenschutzerklaerung/
12 Social networks
12.1 Description of the processing
Our website does not use any social media plugins. The social network logos displayed on our website are merely linked to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.
13 Google Web Fonts
13.1 Description of the processing
Our website uses “Google Web Fonts”, a font replacement service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With Google Web Fonts, the standard fonts of your end device are replaced by fonts from Googles catalogue when displaying our website. If your browser prevents the integration of Google Web Fonts, the text on our website will be displayed in the standard fonts of your end device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Web Fonts does not store any cookies on your end device. According to Google, data processed as part of the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. Such data is not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at Google Webfonts is available at https://developers.google.com/fonts/faq?hl=de-DE&csw=1. General information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
13.2 Purpose
The processing takes place in order to display the text on our website in a more legible and aesthetically pleasing way.
13.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 13.2.
13.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
14 YouTube videos
14.1 Description of the processing
Our website uses services from “YouTube”, a video platform operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use YouTube by embedding individual videos from the platform on our website as iFrames so that they can be played directly on our website. The videos are embedded in the “extended data protection mode” offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only when you play a video will data be transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be informed which subpage you have visited and which video you have watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
14.2 Purpose
The processing takes place to be able to show you videos on our website.
14.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 14.2.
14.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
15 Google Maps
15.1 Description of the processing
Our website uses “Google Maps”, a service for displaying maps provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). We use Google Maps by embedding a map with our business address on our website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Maps does not store any cookies on your end device. If you are logged in to Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
15.2 Purpose
The processing takes place to be able to show you an interactive map on our website.
15.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 15.2.
15.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
16 Google Analytics
16.1 Description of the processing
Our website uses “Google Analytics”, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). Google Analytics uses cookies (see section 10), which enable your use of our website to be analysed. We use Google Analytics in the “Universal Analytics” version offered, which allows this analysis across end devices by assigning the data to a pseudonymous user ID. The information generated by the cookie is usually transferred to a Google server in the USA and stored there. However, we only use Google Analytics with IP anonymisation. This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics compiled by Google Analytics record in particular how many users visit our website, the country or location from which access is made, which subpages are accessed and which links or search terms visitors use to reach our website.
The terms and conditions of use for Google Analytics are available at http://www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Googles privacy policy can be viewed at http://www.google.de/intl/de/policies/privacy.
16.2 Purpose
The processing takes place to evaluate the use of our website. The information obtained is used to improve our online presence and design it in accordance with requirements.
16.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 16.2.
16.4 Storage period and right to object
We have explained the storage period as well as your control and setting options for cookies in section 10. You can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link. This will place an opt-out cookie on your end device that will prevent your data from being collected on future visits to this website: Deactivate Google Analytics. The analysis data processed and stored with Google Analytics will be automatically erased by us after 14 months.
16.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
17 Google Tag Manager
Our website uses the “Google Tag Manager”, a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. (hereinafter referred to as “Google”). No personal data is collected via Google Tag Manager and no cookies are set. This service only enables us to integrate and manage tags on our website. Tags are small code elements on our website that are helpful for measuring traffic and visitor behaviour with other tools, measuring the impact of online advertising and social channels, using remarketing and targeting, testing and optimising the website. More information about Google Tag Manager is available here: https://www.google.com/intl/de/tagmanager/use-policy.html
18 Google Adword Conversion and Google Remarketing
18.1 Description of the processing
Our website uses the advertising service “Google Adword Conversion”, which is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With the help of Google Adwords Conversions, we can place advertisements on external websites to draw your attention to our offers. The service also enables us to determine the reach and success of individual advertising measures. Our advertisements are delivered by Google via “ad servers”. For this purpose, Google uses “Ad Server” cookies, which measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your end device (see section 9). According to Google, these cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. The cookies enable Google to recognise your internet browser. If you visit the website of an Adwords customer and the cookie stored on your end device has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to our website. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not process any personal data with our Google Adwords advertising measures. Google only provides us with statistical evaluations. Based on these evaluations, we can recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. When you visit our website, a connection to the Google servers is therefore established. We have no influence on the scope and further use of the data collected by Google through the use of Google Adwords Conversion and therefore inform you according to our state of knowledge: through the integration of Google Adwords Conversion, Google receives the information which subpage of our website you have accessed or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address.
Our website also uses the “Google Remarketing” advertising service, which is also operated by Google. With Google Remarketing, we can address you again with advertisements for our offers after you have visited our website on other websites that have joined the Google advertising network. Google also uses cookies for this purpose, which are stored in your browser and through which your usage behaviour is recorded and evaluated by Google when you visit various websites. This enables Google to determine your previous visit to our website and to show you advertisements for our offers on other websites. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.
Further information on data protection at Google is available here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
18.2 Purpose
The processing takes place to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.
18.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point() of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 18.2.
18.4 Storage period and right to object
We have explained the storage period as well as your control and setting options for cookies in Section 10. You can object to data processing by Google Adwords Conversion and Google Remarketing at any time at the following website: http://www.google.com/ads/preferences.
18.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
19 Facebook Pixel
19.1 Description of the processing
Our website uses the remarketing service “Facebook Pixel”, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The “Facebook Pixel” enables us to place advertisements on the social network that are targeted precisely to those Facebook users who have shown an interest in our offer - e.g. through a previous visit to our website. With the help of the “Facebook Pixel”, we can also track and evaluate the effectiveness and reach of our advertising on Facebook by recording whether Facebook users interact with our ads on the social network by clicking on the ads and being redirected to our website. When you visit our website, a connection to the Facebook servers is therefore established and the “Facebook pixel” is embedded in our website. In addition, Facebook may store a cookie on your end device (see section 10 above). If you are logged in to Facebook or log in to Facebook later, your visit to our website will be assigned to your user account. The data collected about you by the “Facebook pixel” is anonymous to us. It does not allow us to draw any conclusions about your person. However, it is possible for Facebook to connect to your user profile. Data processing by Facebook takes place in accordance with the companys data policy, which is available at https://www.facebook.com/policy.php.
19.2 Purpose
The processing takes place to carry out targeted online advertising for our own offers and to be able to evaluate their effectiveness and reach.
19.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 19.2.
19.4 Storage period and right to object
We have explained the storage period and your control and setting options for cookies in section 10. You can object to the collection of data by the “Facebook Pixel” and the use of your data to display Facebook ads at any time. To do so, you can click on the following opt-out link: disable Facebook pixel.
19.5 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
20 Google reCAPTCHA
20.1 Description of the processing
Our website uses “reCAPTCHA”, a service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). With reCAPTCHA, we can check in forms whether the input is made by a human or by automated software - in particular bots. This allows us to protect our website from spam and misuse. In this context, your IP address, the time spent on the website, mouse movements made by you and any other data required for the reCAPTCHA service are transmitted to Google. Further information on data protection at Google is available at http://www.google.com/intl/de-DE/policies/privacy/.
20.2 Purpose
The processing takes place to protect forms on our website against misuse and spam.
20.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in section 20.2.
20.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
21 Content Delivery Networks (CDN)
21.1 Description of the processing
This webshop uses Amazon Cloudfront, a CDN (content delivery network) from Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 38 avenue John F. Kennedy, L-1855 Luxembourg (“Amazon”). A CDN sends files from a very fast server that is as close as possible to your location. This shortens the loading time of the website, as only a small amount of data has to be loaded directly from our slower actual server. Amazon operates numerous servers in Europe (including in Frankfurt and Milan) to be able to send our files to you as quickly as possible.
Amazons privacy policy is available here: https://www.amazon.de/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ
21.2 Purpose
The processing takes place to shorten the loading time of our website.
21.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (point (f) of Art. 6(1) GDPR). Our legitimate interest lies in the purpose stated in Section 21.2.
21.4 Recipients and transfer to third countries
If this tool is used, data may also be transferred to companies in third countries outside the EU without an adequate level of protection under data protection law (in particular also to the USA). There is a possibility that public authorities may also access the data without there being any legal remedy or legal recourse against this.
Security measures
22. Security measures
To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the users end device. You can recognise active SSL or TLS encryption by the small padlock logo displayed on the far left of the browser address bar.
Your rights
23. Rights of data subjects
With regard to the data processing described above by our company, you have the following rights as a data subject:
23.1 Access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right of access to this personal data and to the further information listed in Art. 15 GDPR under the conditions set out in Art. 15 GDPR.
23.2 Rectification (Art. 16 GDPR)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
23.3 Erasure (Art. 17 GDPR)
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes pursued by us.
23.4 Restriction of data processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that enables us to verify the accuracy of your data.
23.5 Data portability (Art. 20 GDPR)
You have the right, under the conditions set out in Art. 20 GDPR, to request the surrender of the data concerning you in a structured, commonly used and machine-readable format.
23.6 Withdrawal of consent (Art. 7 (3) GDPR)
You have the right to withdraw your consent to processing based on consent at any time. The revocation applies from the time of its assertion. In other words, it is effective for the future. Therefore, the withdrawal of consent does not retroactively render the processing unlawful.
23.7 Complaint (Art. 77 GDPR)
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.
23.8 Prohibition of automated decision-making/profiling (Art. 22 GDPR)
Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.
23.9 Objection (Art. 21 GDPR)
If we process your personal data on the basis of point (f) of Art. 6(1) GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies if there are grounds relating to your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - regardless of a particular situation - you have the right to object to the processing of your personal data for direct marketing purposes at any time.
24. Supervisory authority
The data protection supervisory authority is:
Marit Hansen, Independent Centre for Data Protection Schleswig-Holstein (institution under public law), Holstenstraße 98, 24103 Kiel, phone: 0431 988 1200, fax: 0431 988 1223, mail@datenschutzzentrum.de
Vorkasse
Sofortüberweisung
Paypal
Kreditkarte
