INFORMATION ON THE DECLARATION OF CONSENT
pursuant to the processing of personal data
Contents
III. Use of your data (data processing purposes),primary and secondary purposes, other purposes
VII. Especially pursuant to the type of processing: storage (as continued storage)
VIII. Withdrawal of consent and other rights to which you are entitled in relation to your data
The purpose of this "Information on the Declaration of Consent" is to enable you to make an informed decision on your consent. This means the following: if you provide us your consent that we may process your personal data, then you should know what this means specifically for you. This includes not only knowledge of the data we collect in this context, but also the purposes for which we do so, and what data processing activities we then perform to achieve these purposes. We would furthermore like to point out, at least briefly, that data may also be processed for purposes other than those upon which the original situation in which consent was granted was based, and that in special situations (e.g. when there is a public interest) data must also be disclosed whether consent has been provided or not, for example. Furthermore, you should know how we deal specifically with the subject of storage periods and, in addition to the possibility of withdrawing your consent, become acquainted with those rights to which you are additionally entitled and which may also have influence on the (further) processing of data, even if you made these data available by way of consent "back then".
When reference is made to "data" in the following, this refers to personal data in the meaning of the General Data Protection Regulation ("GDPR") - Regulation (EU) 2016/679, which entered into effect on 25 May 2018.
We, Ticketbande B.V., can only provide services, in particular those of a contractual nature, whether these be in the online business or on site, if a minimum amount of necessary data is provided by the party to whom the service is rendered. Nevertheless, collection of data or your cooperation in such, in particular the provision of data about you, is always a voluntary process. If certain data are not made available, this may lead to a restriction of our services, however. For example, it is not possible to deliver goods if no (delivery) address is stated. Once granted, consent to the processing of data can be withdrawn at any time (please refer to section VIII below for more detailed information).
In the course of the current contact situation between yourself and us, and in order to fulfil the resulting requirements / obligations, we collect the following data about you / you provide us with the following data:
Last name, first name
Company
Date of birth
Postal address
E-mail address
(If applicable) bank information (if non-cash payment for payable services is offered and selected by you)
Optional: telephone number and / or fax no. (in case of urgency)
Optional: […]
III. Usage of your data (data processing purposes),primary and secondary purposes, other purposes
The use of data by us is for primary business purposes to the extent that such is necessary for fulfilment of the request you would like to submit/have submitted to our company or by us to you and for secondary purposes.
The primary business purposes are to secure:
- orderly receipt, such as the awarding of contracts (irrespective of the type of legal transaction),including their execution, whereby we are essentially involved (without limitation) in the following type of business: search service for tickets and similar entitlements to access concerts, events etc. to the benefit of parties interested in respective attendance, as well as offering online space of advertisements concerning such events (thus bringing together a willing seller and a willing buyer),plus the contractual dealings, frameworks etc. going along with such activities (rental contracts for online space, service contracts for ticket searching etc.);
- the possibility of preparing cost estimates, quotations and similar;
- the ability to formulate and execute contracts together with their payment and despatch-related processing;
- adherence to statutory warranty obligations and any applicable contractual guarantees or also to assert these ourselves against third parties (e.g. suppliers);
- (possibly also judicial) traceability and enforcement / enforceability of claims against customers as well as the defence of claims asserted against us; and
- guarantee a high level of customer service, which can be received by and can support customers in various ways if necessary and at the same time meet their high expectations regarding our merchandise and provision of services.
For such primary purposes, it may also be necessary to pass on your data to third parties to a limited extent, namely:
- the fulfilment of business obligations, whereby such forwarding is restricted to companies associated with us (parent company, subsidiaries and affiliates, i.e. companies which we either control or which control us or are under the joint control of a third party and us) or other companies if we are contractually associated with them in order to fulfil operational purposes towards you (e.g. subcontractors, freight forwarders, consignors) or parties to whom you may be contractually (or otherwise) bound in connection with our performance under whatever contract (e.g. a cooperation partner of yours whom we directly serve upon your respective instruction);
- coordination with our (external) advisors in tax, business and legal matters, which as a rule involves persons who are already subject to statutory confidentiality requirements due to their professional status;
- the execution of payment transactions, regardless of whether we are the paying party or the party that is to effect payment;
- enabling assessment of the (in particular) financial risk of a contemplated or already agreed-upon, but not yet fully completed, legal transaction with regard to various characteristics of the (future) contracting partner, such as its creditworthiness, liquidity, payment history, etc.
If you have also agreed to the processing of your data for the purpose of optimising our range of services ("secondary purposes"),we will use this data in addition and in particular for:
- determination of the satisfaction of our customers with our products / services (incl. website);
- improvement of our products and services (incl. website);
- enabling the development of tailor-made offers for customers;
- support / (and if necessary) goodwill for our products / services above and beyond the warranty periods;
It may also be necessary to a limited extent to pass on your data to third parties for such secondary purposes, particularly if we have commissioned external service providers to analyse satisfaction or in connection with product innovations or we have outsourced support / goodwill services to such providers.
If we wish to process your data for purposes other than those for which it was collected, and if we do not have your (separate) consent, we will only do so if the current purpose is still compatible with the original purpose. In determining compatibility, we comprehensively weigh out interests while taking into account inter alia: the context of the data collection at the time, the degree of connection between the purposes of collection at the time and current processing, the type (sensitivity) of the data and the consequences of further processing such for you as well as the existence of guarantees accompanying processing (e.g. encryption).
Every time you access the contents of our website, data is temporarily stored which may allow identification. The following data are saved every time a page is called up at www.ticketbande.de: date and time of the call-up, name of the Internet service accessed, the resource called up and the action/enquiry used by the client, amount of data transmitted, message as to whether the call-up was successful, IP address of the accessing computer. The stored data is collected for the purpose of statistical evaluation of the use of the website and summarized anonymously. Furthermore, it is used to defend against or analyse attacks on the website. If necessary, cookies may also be used in connection with your use of our website, in which case we shall keep a corresponding notice ready for you directly on the website and request your consent, which you are (of course) completely free to grant. You can also set your browser (see its "help" menu for more details) to block all cookies (and hence automatically those from our website as well) or alternatively to notify you before such a cookie is set. In this case, however, you may no longer be able to use our website to its full extent and/or only with considerable delay, and user-specific default settings for the purpose of more convenient use (e.g. correct language setting) may no longer be available. Once cookies have been set, you can delete them yourself at any time with the help of your browser.
Tracking and analysis tools also use cookies. We use such cookies as well. In particular, we use ff. tracking and analysis tools:
Google Analytics
Web analysis service of Google Inc. (https://www.google.de/ intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). Pseudonymised user profiles are created and cookies used in this context. The information generated by the cookie about your use of this website such as browser type/version, operating system used, referrer URL (the previously visited page),host name of the accessing computer (IP address) and time of the server request are transmitted to a Google server in the USA and stored there. This data is assessed to determine how the website is used. The assessment is issued in the form of reports on activities that then form the basis for market research. This data is then passed on to third parties to the extent that this is permissible or necessary. Your IP address will remain anonymous, however, and will not be merged with other Google data. You may furthermore refuse to allow cookies to be used by selecting the appropriate settings on your browser. Please note, however, that if you do this you may not be able to use the full functionality of this website. Finally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will then be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie once again. For more information on privacy in connection with Google Analytics, please visit Google Analytics Help (https://support.google.com/analytics/answer/ 6004245?hl=en).
Google Adwords Conversion Tracking
We also use Google Conversion Tracking to statistically record the use of our website and evaluate it for the purpose of optimising it for you. Google Adwords sets a cookie on your computer if you have accessed our website via a Google advertisement. After 30 days, these cookies become invalid and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the advertisement and has been redirected to this page. Each Adwords customer receives a different cookie. Cookies can therefore not be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers see the total number of users who have clicked on their advertisement and have been redirected to a site with a conversion tracking tag. They do not receive any information that personally identifies users, however. If you do not wish to participate in the tracking process, you can also reject the setting of a cookie required for this - for example by using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain. Google's privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).
Social Media
We also use social networks to promote awareness of our law firm. Commercial aims and objectives which we pursue underlie this. Responsibility for data protection-compliant operation lies in the respective hands of providers of the corresponding service. We have integrated these services into our website using the so-called "two-click" procedure in order to protect your data.
We use the Facebook plugin on our website to personalize its use. We use the corresponding button as a service offered by Facebook. When you visit a site on our website that is equipped with such a plugin, your browser establishes a direct connection to Facebook servers.
The content of this plugin is transmitted directly through Facebook to the browser you are using and integrated into the website. This informs Facebook that your browser has called up the corresponding page of our web presence. This process takes place even if you do not have a Facebook account or if you do have one, but are not logged in. This information, including your IP address, is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can associate your visit to our website directly with your account. If you interact with the plugins, for example by pressing the "like" or "share" button, this information will also be forwarded to Facebook servers. It will be stored there. Facebook publishes this information and it will be displayed to your Facebook friends. Facebook will use this information for the purposes of advertising, market research and demand-oriented design of Facebook sites. To this end, Facebook creates interest and relationship profiles, for example to evaluate your use of the website with regard to the advertisements you display and to suggest this information as advertising to other users whose profiles are similar. If you do not want Facebook to associate the information collected through our site with your Facebook account, you have the possibility to log out of Facebook before visiting our website. The purpose and scope of data collection and the further processing and use of data by Facebook as well as your rights and setting options to protect your privacy can be found in Facebook data protection policy information (https://www.facebook.com/about/privacy/).
There are also data processing purposes which can or even must be pursued even if you have not issued any declaration of consent. These could be legal obligations that apply to us, under which we may also be required by way of exception to use your data for purposes which are imposed on us by third parties, namely sovereign powers in the specification of public law (statutory) obligations. If there is a public interest in such, this could involve, for example, the forwarding of your data to a government authority at its request.
In addition to the aforementioned types of processing (collection, use, disclosure by transmission to third parties),in connection with the collection of data we will store the data obtained in this manner, i.e. in an organised, orderly manner in our database and keep it there in retrievable form. The data can then be retrieved and read from the (digital) place of storage, for example to manage the business process in the context of which we have collected the data. The data may also be adjusted / changed, for example in response to a correction request from you. You may also take the appropriate initiative to restrict or erase your data, whereas such restriction etc. may – unrequestedly – also be triggered by the mere fact that the applicable storage period for the data in question has expired. While data processing is automated as a rule, manual data processing may still occur, whereby in such case we owe you the same scope of protection. The latter type of processing is being phased out.
Contract processor
The company uses contract processors. Guarantee contracts obligate contractors to comply in particular with our Data Protection Guidelines as well as the GDPR itself.
VII. Especially for the processing type: Storage (as continued storage)
The GDPR does not specify any specific storage obligations / erasure dates, but merely states in a quite general manner that data must be erased if the purpose of collection has ceased to exist unless - to put it in simplified terms - there is a continuing obligation to store the data or such is necessary to assert, exercise or defend against legal claims. In order to make this more transparent for you, we have decided (with the exception of special cases in which we may be subject to an earlier erasure obligation) to work with specific deadlines which we set at the time of our last contact with you. By final contact we mean that contact with you after which we have "heard" nothing more from you, whereby it is not the acoustic nature of the contact that matters. Rather, each kind of contact between you and ourselves that is perceivable to us (for example via email, letter or short message as well) is sufficient in order to constitute a new last contact replacing the previous last contact. Our storage periods are therefore as follows:
(1) if there has been no contractual relationship between you and us, nor is such to be expected any longer; nor has a situation come about from which liability (even if only of a pre-contractual nature) could arise; business letters or the like have not been exchanged: 2 years since the last contact, the period is to begin at the end of the year in which the last contact took place;
(2) if no contractual relationship has come about between you, nor is such to be expected any longer, no business letters or the like have been exchanged, but a situation from which liability (even if only of a pre-contractual nature) could arise cannot be completely ruled out: 3 years since the last contact, commencement of the period at the end of the year in which the last contact took place;
(3) a contractual relationship has come about between you and us or, however, not come about, business letters or similar have been exchanged with you: 6 years since receipt or sending of the business letter or similar. If the final contact takes place within the 6-year period and, calculated from this event, the period stipulated in (1) or (2) would end later than the 6-year period, the later date is to apply as the end of the period. Data other than that of the business letter, if not related thereto, will only be stored from the date of the last contact for the period stipulated in (1) or (2);
(4) if a contractual relationship has come about between you and us or, however, has not come about; in any case, accounting documents exist for this or your data are part of a compendium of business documentation (e.g. a management report) or are contained in customs documents in accordance with Art. 15 I and/or Art. 163 of the EU Customs Code: 10 years from the booking date, the date of the aforementioned documentation or the date of transmission to the customs authorities. If the final contact is within this 10-year period and, calculated from this event, the period stipulated in (1) or (2) would end after this 10-year period, the later date shall apply as the end of the period. Data other than those in the accounting document / annual report, etc. or customs documents, if not related thereto, are only to be stored beginning with the date of the last contact during the period stipulated in (1) or (2).
VIII. Withdrawal of consent and other rights to which you are entitled in relation to your data
You have the right to withdraw your consent at any time. Such withdrawal does not affect the lawfulness of consent-based data processing performed before the point in time of withdrawal, but means that beginning at such point in time we may no longer perform any activities relating to your data if the consent withdrawn in the meantime was the only legal basis for this. This is not the case, for example, if we are still obligated to store the data. The withdrawal can be notified without adhering to any formal requirements and is in any case also possible in the form in which you previously provided your consent. Withdrawal of consent is to be declared to:
Ticketbande B.V., Heerlenseweg 21, 6371 HP Landgraaf, The Netherlands,
E-Mail: contact@ticketbande.nl">contact@ticketbande.nl, Website: www.ticketbande.de, Tel. no.: 0031 455 432 127
You have the right to obtain information from us as to whether we process personal data relating to you. If this is the case, the information also extends to inter alia:
(a) what kind of data are processed and for what purposes;
(b) to whom data may have been passed on (and which guarantees, if applicable, have been provided by the recipient with respect to handling of your data in compliance with law governing data protection, for example in the event that a third country is involved);
(c) duration - or criteria for the duration - of the (planned) storage of this data;
(d) if applicable, origin of the data (in the case of collection from third parties);
(e) if necessary, pertinent information on the (system) logic used and the scope and intended effects of data processing on you if these were the subject of an automated decision-making process (note: we do not perform such processes at our company ourselves).
You will receive a copy of this information from us, in the case of an electronic application on your part in electronic form (i.e. in a common electronic format). We may charge a reasonable fee for additional copies in accordance with the administrative expenses associated with this.
You have the right to request us to correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you furthermore have the right to request completion of incomplete personal data, including by means of a supplementary declaration. If your data has been disclosed to third parties, we will inform them of the correction unless this is impossible or would be associated with unreasonable effort and expense. If you so request, we will disclose the aforementioned third parties to you.
(a) Claim to erasure
Subject to the exceptions set out in subsection (c) below, you may request us to delete your personal data without undue delay if:
(aa) this/these data (in particular their further storage) is/are no longer necessary for the purposes of the collection;
(bb) you have withdrawn your consent in the case of consent-based data processing;
(cc) you object to further processing;
(dd) the processing of data was unlawful;
(ee) the erasure is necessary in order to fulfil a legal obligation under European Union law or national law;
(ff) the data have been collected from a child (under 16 years of age) relating to services of the information society, which in this context is understood as a service generally provided subject to charge, and which is performed electronically by means of distance selling (i.e. without direct physical contact between the parties involved) and by individual call-up.
In the event your data is erased, we usually assume that you consent to our including your name in our list of persons who do not (no longer) wish to be contacted by us. This minimises the chance that you will be contacted in the future, for example if your data is collected in another context. If you do not desire this, please let us know.
(b) Additional rights in the event of publication of your data and third-party participation
If we have disclosed the data to which your erasure claim relates, we will (while taking into account the technology available and implementation costs) undertake reasonable measures to ensure that the controllers responsible for such data are informed that you have requested the erasure of the data (including links to and reproductions of the data). If your data has been disclosed to third parties (in another manner),we will inform them of the erasure unless this is impossible or would involve unreasonable effort and expense. Upon your request, we will disclose the aforementioned third parties to you.
(c) Exceptions from the claim to erasure
You are not entitled to an erasure claim - even only temporarily if applicable - especially if data processing is necessary:
(aa) to exercise freedom of expression and information;
(bb) to fulfil a legal obligation applicable to us under European Union law or national law (this may be e.g. a legal obligation to keep records [before their expiry]);
(cc) to assert, exercise or defend legal claims,
or if
(dd) in the event of your withdrawal in the above meaning (section VIII 1),there is another legal basis for data processing;
(ee) in the event of your objection in the below meaning (section VIII 10),firstly, there are overriding legitimate grounds for data processing and, secondly, your objection is not only directed against direct advertising and any possibly related profiling (in the latter case - involving direct advertising, profiling relating to such - you are always entitled to a right of erasure).
(d) Rights similar to erasure
If you (at least temporarily) have no claim to erasure, you may nevertheless have a claim to a limitation on (further) data processing by us. For more information, please refer to section 5 immediately following.
If we have collected data unlawfully and you are therefore (actually) entitled to a erasure claim, you can demand from us that we restrict data processing instead of such erasure. The same applies to lawfully collected data in the case we have in the meantime achieved the purpose, but you need the data to assert, exercise or defend legal claims. If you have filed an objection to the data processing involving you (and we do not have to comply with this if only because it is directed against direct advertising/related profiling) or if you dispute the accuracy of data, you can request us to restrict the use of your data during the corresponding review phase (weighing of interests in the event of an objection, examination of the data for actual inaccuracy). This means that we may only process such limited data (aside from its storage and special cases of overriding public interest) with your consent or in order to assert, exercise or defend against legal claims or to protect the rights of another natural or legal person.
Even without your initiative, we will limit the use of your information to the extent described above if the last contact with you (cf. section VII) goes back longer than a period corresponding to 3 (three) years plus the remainder of the year in which the last contact occurred. This shall not affect any rights of restriction or erasure that may have arisen at an earlier point in time.
If data restriction in the aforementioned meaning has occurred and is due to be revoked (e.g. because it could be determined that the data is not accurate),we will inform you before this step is taken. If your data has been disclosed to third parties, we will inform them of the data restriction unless this is impossible or would involve unreasonable effort and expenses. If you so request, we will name the aforementioned third parties to you.
If we process your data automatically on the basis of consent given by you or within the scope of a contractual relationship, you can require us to receive the corresponding data in a structured form in a common, machine-readable format, for example in order to be able to forward it yourself (and without any influence whatsoever by us) to another data controller. As far as is technically feasible and such does not affect the rights of other persons, you may also request that we forward such data stocks directly to another data controller selected by you (e.g. a company with whom you wish to conclude a contract). An additional claim to erasure in your favour, if applicable, will not be affected by a data transfer request.
If a situation occurs in which the violation of data (e.g. a so-called data breach) poses a great risk to your personal rights and freedoms, we will inform you immediately. Such notification includes inter alia the data of your contact person in this context as well as information on the impending consequences of injury and the measures already taken or planned to be taken to contain these consequences. Such notification may be waived if we have subsequently initiated such effective containment measures that no great risk in the aforementioned meaning can be assumed any longer and if the data have already been significantly secured against unauthorised access - particularly by means of technical measures (e.g. encryption) - or if the notification would involve unreasonable efforts and expenses (in which case we would arrange a public announcement or measure having a similarly broad impact).
In principle (i.e. except in exceptional cases),you have the right not to be subject to a decision based exclusively on automated processing - including profiling - if this has legal effect towards you or has a significantly negative effect on you in a similar manner. Our company does not use such decision-making structures at the present time and we would inform you separately should this change and your data be affected.
You may complain at any time about our conduct relating to the processing of data to the supervisory authority in charge. Of course, you can also file a complaint with us, and we will try to solve any problems that may arise together.
The (data protection) authority in charge is:
Data security officer of the State of The Netherlands, Mr Aleid Wolfsen, Chairman of the “Autoriteit Persoonsgegevens”, Bezuidenhoutseweg 30, NL 2509 AJ The Hague, The Netherlands Haag, Tel. no.: +31-70-8888500, Fax: +31-70-8888501, E-Mail: info@autoriteitpersoonsgegevens.nl
If we have processed your data to protect our legitimate interests (or to fulfil a task in the public interest),you can object to this at any time. Further processing by us is then (still) only permissible if we can demonstrate reasons for processing which are so important that they override your interests, rights and freedoms, or if such serves the purpose of asserting, exercising or defending against legal claims. If your objection is directed against the use of your data for purposes of direct advertising/related profiling, we will (no longer) use / process your data in this context. You may send us your objection in any form.
If you assert rights under this section VIII, we will inform you without undue delay, but at the latest - subject to the following clause - within a period of one month after receipt of your application about the effects this will have in your specific case (in particular what legal consequences this may have). If your application is based on a complex issue and at the same time we are confronted with a large number of applications, we are entitled to only react within a period of 3 months, whereby we will notify you of and justify such a delay within the aforementioned one-month period. We must also respond to you within one month and state the grounds for such if we do not wish to take action at your request.
All rights under this section VIII – with the exception however of the right stipulated in sub-section 9 – are to be asserted towards:
Ticketbande B.V., Heerlenseweg 21, 6371 HP Landgraaf, The Netherlands,
Managing director: Mr Frank Laurini, E-Mail: contact@ticketbande.nl">contact@ticketbande.nl, Website: www.ticketbande.de
Tel. no.: 0031 455 432 127
This section VIII does not contain an exhaustive list of your rights under this "Information on the Declaration of Consent". To promote readability, we have not explained every right to which you may or actually are entitled down to the last detail, and we have also looked at which cases may arise for our company or for you in your capacity as the data subject in practical terms through the data processing to be carried out by us. The summary of rights contemplated herein is therefore not exhaustive with regard to the rights to which you are entitled, but is supplemented (especially in marginal areas) by the GDPR and other pertinent legislation wherever applicable. No special form or formal requirements must be met to assert your rights, i.e. this can also be done by telephone or e-mail. Notification of your rights, the fulfilment of other information obligations by us and measures taken to implement your rights are free of charge to you, subject to the arrangements laid down in section VIII, sub-section 2 sentence 3. We are only entitled to charge a reasonable fee corresponding to our time and effort or to refuse to process the request in the case of manifestly unfounded or (in particular) excessive requests.
The controller responsible for processing your data in connection with your Declaration of Consent is:
Ticketbande B.V., Heerlenseweg 21, 6371 HP Landgraaf, The Netherlands,
Due to the (small) size of our company, there is no legal obligation to appoint a data protection officer, nor have we appointed one on a voluntary basis
However, our entire company staff will be pleased to help you with all your questions in connection with this "Information on the Declaration of Consent", the Declaration of Consent as such, other questions regarding the processing of your data and, of course, your rights under section VIII and the assertion of these rights.
Forasmuch as your consent forms the basis for the processing of your data (be it through ourselves or through a contract processor),same is legally based on art. 6 sec. 1 a) of the GDPR. For the processing of data assotiated to consented processing, art. 13 sec. 3 GDPR may form the legal basis for same. Even for data processing beyond your consent, provisions exist within the GDPR which may legally cover such action as well. For example, such processing may be legally backed if conducted for the sake of fulfilling a task of public interest (art. 6 sec. 1 e) GDPR) or safeguarding justified interests of the processing party which may, from case to case, prevail over conflicting interests of the party who is affected by the processing of respective data (art. 6 sec. 1 f) GDPR).