Source: https://www.eventimsports.de/ols/fcstpauli/en/hs/channel/shop/index/privacy
Timestamp: 2019-04-22 22:34:58+00:00

Document:
Thank you for visiting the Ticketshop. Conscientious data protection is of particular importance for us and forms the foundation of a trusting relationship with our customers. In accordance with Art. 12, 13 et seqq. GDPR (EU), we would therefore like to inform you about the importance of data protection and the handling of your personal data.
FC St. Pauli v. 1910 e.V.
We basically process your personal data only to the extent necessary for the performance of our services. The processing of your personal data routinely takes place only on the basis of your consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons or where processing of your personal data is permitted by law.
Insofar as we obtain your consent for the processing of personal data, Art. 6 Para. 1 lit. a GDPR (EU) constitutes the legal basis.
In the processing of personal data which is necessary for the fulfilment of a contract between you and us, Art. 6 Para. 1 lit. b GDPR (EU) constitutes the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 Para. 1 lit. c GDPR (EU) constitutes the legal basis.
In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR (EU) constitutes the legal basis.
If the processing is necessary to protect a legitimate interest of ours or a third party and your interests, fundamental rights and freedoms do not outweigh the first interest, Art. 6 Para. 1 lit. f GDPR (EU) constitutes the legal basis for processing.
Your personal data will be erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this period if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Unless there is a need for further storage of the data for the conclusion or fulfilment of a contract, the data are also blocked or erased if a storage period prescribed by the aforementioned standards expires.
Art. 6 Para. 1 lit. f GDPR (EU) constitutes the legal basis for processing your personal data within the scope of providing the website and creating log files.
The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must remain stored for the duration of the session.
Your personal data are stored in log files to ensure that the website functions properly. We also use your personal data to optimise our website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context.
For these purposes, our legitimate interest in data processing is in accordance with Art. 6 Para. 1 lit. f GDPR (EU).
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of your personal data for the provision of the website, this is the case at the end of the respective session..
If your personal data are stored in log files, they are erased after seven days at the latest. Further storage is possible. In this case, your personal data will be erased or altered so that it is no longer possible to assign the visiting client.
The collection of your personal data for the provision of the website and the storage of your personal data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for you to object.
Art. 6 Para. 1 lit. f GDPR (EU) constitutes the legal basis for processing your personal data within the framework of the use of technically necessary cookies.
Our legitimate interest in the processing of your personal data for this purpose is in accordance with Art. 6 Para. 1 lit. f GDPR (EU).
Your personal data are erased as soon as they are no longer necessary to achieve the purpose of their collection; this is particularly the case when cookies are deactivated.
You cannot prevent the transfer of Flash cookies via the settings of your Internet browser. This requires changes to the Adobe Flash Player settings.
Art. 6 Para. 1 lit. b GDPR (EU) constitutes the legal basis for the processing of your personal data in the context of ticket sales.
In the context of ticket sales, the purpose of processing your personal data is the fulfilment of the contract between you and us.
Your personal data are erased as soon as it is no longer necessary to achieve the purpose for which they were collected. In the case of processing your personal data within the framework of ticket sales, this is the case if any claims arising from the contractual relationship have become time-barred and there are no longer any legally prescribed retention periods.
In the context of ticket sales, the processing of your personal data is absolutely necessary for ticket sales. Consequently, there is no possibility for you to object.
Art. 6 Para. 1 lit. b GDPR (EU) constitutes the legal basis for the processing of your personal data within the framework of registration.
Your registration facilitates the conclusion of contracts between you and us. The processing of your personal data within the framework of registration is therefore necessary for the fulfilment of a contract between you and us or for the implementation of pre-contractual measures.
You can cancel your registration at any time. You can have the personal data stored about you changed at any time. If your personal data are required to fulfil a contract or to carry out pre-contractual measures, premature erasure of your personal data is only possible if any contractual or statutory obligations do not prevent erasure.
Art. 6 Para. 1 lit. b GDPR (EU) constitutes the legal basis for the processing of your personal data in the context of direct marketing by post.
In the context of direct marketing by post, the purpose of processing your personal data is to promote ticket revenues. For this purpose, we have a legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR (EU).
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this is particularly the case when the objection is received.
In the context of direct marketing by post, you can object to the processing of your personal data at any time for the future.
Art. 6 Para. 1 lit. f GDPR (EU) constitutes the legal basis for processing your personal data.
The processing of your personal data enables us to analyse your surfing behaviour. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, we also have a legitimate interest in the processing of your personal data in accordance with Art. 6 Para. 1 lit. f GDPR (EU). In the anonymisation your IP address, your interest in the protection of personal data is sufficiently taken into account.
Your personal data will be erased as soon as they are no longer needed for the purposes mentioned above. In our case, this is the case after three months.
On our website, we offer you the possibility of an opt-out from the analysis procedure. To do this, please click on the corresponding link. In doing so, another cookie is placed on your computer, which signals us not to collect your personal data. If you erase the corresponding cookie, we must set the opt-out cookie again.
Art. 6 Para. 1 lit. f GDPR (EU) constitutes the legal basis for the processing of your personal data in the context of legal defence and legal enforcement.
The purpose of processing your personal data in the context of legal defence and legal enforcement is to defend ourselves against unauthorised claims as well as the legal enforcement of claims and rights. For this purpose, we have a legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR (EU).
Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.
In the context of legal defence and legal enforcement, the processing of personal data is absolutely necessary for legal defence and enforcement. Consequently, there is no possibility for you to object.
You can ask us to confirm whether personal data relating to you is being processed by us.
(8)	the existence of automated decision making including profiling under Article 22 Para. 1 and 4 GDPR (EU) and – at least in these cases – meaningful information about the logic involved as well as the scope and the intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data relating to you are transferred to a third country or to an international organisation. In this context, in accordance with Art. 46 GDPR (EU), you can request the appropriate safeguards in connection with the transfer.
If the personal data processed relating to you are incorrect or incomplete, you have a right of rectification and/or completion against us. We must make the rectification without delay.
(4)	if you object to the processing pursuant to Art. 21 Para. 1 GDPR (EU) and it is not yet clear whether our justified reasons outweigh your reasons.
If the processing of personal data relating to you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
(6)	the personal data relating to you have been collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR (EU).
If we have made the personal data relating to you public and according to Art. 17 (1) GDPR (EU) we are obliged to erase them, we will take appropriate measures (including technical measures taking into account the available technology and implementation costs) to inform controllers who process the personal data that you as the data subject have requested the erasure of all links to this personal data or of copies or replications of this personal data.
(5)	to assert, exercise or defend legal claims.
If you have exercised against us your right of rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data relating to you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against us to be informed about these recipients.
(2)	processing is carried out by means of automated methods.
In exercising this right, you also have the right to request that the personal data relating to you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us.
For reasons arising from your particular situation and in accordance with Art. 6 Para. 1 lit. e or f GDPR (EU), you have the right at any time to object to the processing of personal data relating to you; this also applies to profiling based on these provisions.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, the personal data relating to you are no longer processed for these purposes.
You have the right to revoke your consent for the data protection declaration at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
(3)	is made with your express consent.
However, according to Art. 9 Para. 1 GDPR (EU), these decisions may not be based on special categories of personal data unless Art. 9 Para. 2 lit. a or g GDPR (EU) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), we will take reasonable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain an individual's intervention from us, to state his or her position and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data relating to you is contrary to the GDPR (EU).
The supervisory authority to which you have lodged your complaint shall inform you of the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR (EU).
For further questions, please contact our Data Protection Officer.
Did you receive an authorisation code?

References: Art. 12
 v. 
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78