Source: https://kunstblockbalve.com/?page_id=1781&lang=en
Timestamp: 2019-04-26 15:36:08+00:00

Document:
KUNST BLOCK BALVE, Friedrich von Pauli Straße 21, 80687 Munich, Germany.
The protection of personal data is very important to us. Whether data is collected and for what purpose it is processed is explained in the following data protection declaration. We comply with all applicable legal provisions for the protection of personal data and data security. Our employees also receive extensive training and are obliged to maintain confidentiality and comply with all data protection regulations.
The legal basis for data processing is Art. 6 para. 1 a) and Art. 7 EU-DSGVO for consent, Art. 6 para. 1 b) EU-DSGVO for performance of services and implementation of contractual obligations, Art. 6 para. 1 c) EU-DSGVO for fulfilment of legal obligations and Art. 6 para. 1 f) EU-DSGVO for safeguarding legitimate interests.
II. What data is collected?
The legal basis for data processing is Art. 6 para. 1 lit. f) EU-DSGVO.
When ordering a ticket, the following data must be provided: First name, last name, e-mail address, city and telephone number.
The following fields are optional when ordering as a company: Company, street, house number and postal code.
We store the data you provide in our database. In addition, the purchased “product” or the respective event, user agent, IP address and payment method are stored.
The contact form allows you to easily contact us. The collection of your e-mail address is essential in order to answer your request. If data, such as name, address or similar, is also processed, this serves to individualise the respective user and to be able to respond to his request in the best possible way and to prevent any misuse of the contact form.
The purpose of the newsletter is to give the subscriber the opportunity to receive current information. The collection of the e-mail address serves to deliver the newsletter.
III. For what purposes is the data used?
Personal data is only collected, stored and processed to the extent necessary for the provision of the service, the execution of the contract or the response to the enquiry.
We process your personal data only in strict compliance with data protection regulations. In particular, corresponding data will only be processed if legally permitted.
The above data is processed by us in order to establish a connection to our website. The processing is necessary to ensure the security and stability of the system.
The user’s IP address is only used to decode the GeoIP to ensure that the localization is working properly.
The order data is used to process the order and to deliver the ticket to the customer via e-mail. We ask for the telephone number to be able to contact you in the event of an event being cancelled at short notice or a change of location.
The artists can download a guest list before the event. Within the guest list only the first and last name of the participants will be listed. The artists do not have access to the e-mail address or telephone numbers of the guests.
IV. Will data be passed on to third parties and if so, which ones?
In principle, the data you provide will not be made available to third parties. In individual cases, however, it may be necessary to pass on your personal data to companies entrusted by us with the provision of individual services in order to implement the contract. For their part, the third parties are obliged to comply with the statutory regulations when handling and processing this data. They have been carefully selected and commissioned by us. These service providers use your data only for order processing.
A transmission to authorities entitled to receive information and state institutions only takes place within the framework of the legal obligations to provide information and in the event of a binding court decision. In these cases we can provide the information, e.g. for the assertion, exercise and defence of legal claims, enforcement of existing contracts, in the context of allegations of fraud, security measures or generally legally valid regulations.
We use the services of external payment service providers to process payments. When placing an order, you can choose the type of payment you require. Depending on the payment method you choose, your payment details (card number, validity and security code for credit card payments) will be transmitted to the payment service provider cooperating with KUNST BLOCK BALVE for the purpose of payment processing. KUNST BLOCK BALVE does not store the data.
Personal data will not be passed on outside the scope described here without the express consent of KUNST BLOCK BALVE.
Under no circumstances will we sell or rent personal data to third parties.
V. How long will the data be stored?
Your data will only be stored for as long as is necessary to fulfil the above-mentioned purposes. As soon as this is no longer the case, e.g. after complete execution of the contract, they will be deleted or blocked if required by commercial or tax law. The data will be deleted from the point in time at which legal storage obligations no longer stand in the way, unless you have expressly consented to further use.
Personal data of our customers can be manually deleted from the database at any time if this is required.
As a data subject*r affected by the processing of personal data, you are entitled to the rights listed below. These rights arise in particular from the provisions of the Basic Data Protection Regulation and are reproduced here in a partially simplified form.
Pursuant to Art. 15 EU-DSGVO, you have the right to request confirmation from us as to whether personal data concerning you will be processed. If this is the case, you have the right to information about this personal data and the information specified in Art. 15 para. 1 Hs. 2 EU-DSGVO. This includes in particular the purpose of the processing, the categories of data processed, the recipients to whom data has been disclosed or will be disclosed, the planned duration of storage as far as possible or the criteria for the duration of storage.
Pursuant to Art. 16 EU-DSGVO, you have the right to demand that we correct any incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
According to Art. 17 EU-DSGVO you have the right to demand that we delete your personal data immediately. We are obliged to delete personal data immediately if one of the provisions of Art. 17 para. 1 EU-DSGVO applies. These reasons include, for example, that the data are no longer necessary for the purposes for which they were collected or otherwise processed.
Pursuant to Art. 18 EU-DSGVO, you have the right to demand that we restrict processing if one of the conditions set out in Art. 18 EU-DSGVO applies. This includes, for example, that you dispute the accuracy of the personal data. Then we may only process the data to a limited extent as long as it takes to verify the accuracy of the personal data.
Pursuant to Art. 20 EU-DSGVO, you have the right to receive the personal data concerning you which it has provided to us in a structured, common and machine-readable format. You have the right to transfer this data to another data controller, i.e. another entity that processes the data, without hindrance, if the original processing was based on consent or was necessary for the execution of a contract.
Pursuant to Art. 21 EU-DSGVO, you have the right to object at any time to the processing of personal data concerning you if these data are processed on the basis of Art. 6 para. 1 lit. e) or f) EU-DSGVO and if there are reasons arising from your personal situation. You may object to the processing of data for the purpose of direct marketing at any time. Personal data will then no longer be processed for this purpose. The right of objection can be exercised by an informal declaration. A written declaration or optionally an e-mail to the above contact address is sufficient.
According to Art. 7 para. 3 EU-DSGVO you have the right to revoke your consent to the processing at any time. The lawfulness of the processing carried out on the basis of the consent up to the revocation is not affected. The right of revocation can be exercised by an informal declaration. A written declaration or optionally an e-mail to the above contact address is sufficient.
Pursuant to Art. 22 EU-DSGVO you have the right not to be subject to a decision based exclusively on automated processing – including profiling – which has legal effect on you or similarly significantly affects you. Art. 22 para. 1 EU-DSGVO provides for exceptions to this rule, whereby Art. 22 para. 4 EU-DSGVO in turn contains some exceptions to withdrawal.
Pursuant to Art. 77 of the EU Data Protection Regulation and without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is in breach of this Regulation.
It is possible that the seat of a third party provider is located in a third country, i.e. a country in which the DSGVO has no direct legal effect. In this case, data will only be transferred if you have given your consent, if an appropriate level of data protection prevails or if other legal permission exists.
Google, Facebook/Instagram and Twitter operate under the Privacy Shield Agreement, which means that the requirements of the Privacy Shield Agreement are the same as those of the European Union and that the data will be treated accordingly.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. Information such as operating system, browser, IP address, referrer URL are recorded. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
This website uses Google Maps, a product of Google Inc. By using this website, you consent to the collection, processing and use of automated data by Google Inc., its agents and third parties.
We take technical and organisational measures to ensure that the security and protection requirements of the EU-DSGVO are met and that the personal data is protected against loss, destruction, manipulation or access by unauthorised persons. The measures are always adapted to the current state of the art.
Our company has online presences on various platforms. This makes it easier for interested parties to search for our services and provides an additional channel of communication.
The purpose of the processing of user data by the respective platforms is usually a user-specific advertisement, i.e. individualised advertisements can be placed that correspond to the presumed interests of the user or result from the user’s previous usage behaviour. For this purpose, cookies are stored on the user’s terminal devices. These cookies can store the user behaviour and thus represent the areas of interest.
The headquarters of a platform may be located in a third country, i.e. in a country in which the DSGVO has no direct legal effect. In this case, data will only be transferred if you have given your consent, if an appropriate level of data protection prevails or if other legal permission exists. U.S. providers may operate under the Privacy Shield Agreement, which means that the requirements of the Privacy Shield Agreement are similar to those of the European Union and that data will be treated accordingly.
We would like to make it clear that users should contact the respective third party provider directly in the event of requests for information and/or the assertion of other data subject rights. They have access to the user data stored and processed there and can provide information and/or take measures accordingly. Should you contact us directly, we will try to support your request in the best possible way. However, since we have no access to the data stored by third parties, our options are limited.
Please inform yourself about the principles of data processing of the respective companies by means of the corresponding data protection declarations.

References: Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6

V. 
 Art. 15
 Art. 15
 Art. 16
 Art. 17
 Art. 17
 Art. 18
 Art. 18
 Art. 20
 Art. 21
 Art. 6
 Art. 7
 Art. 22
 Art. 22
 Art. 22
 Art. 77