Source: https://shop.cablecarrecords.de/service/privacy-policy.html
Timestamp: 2019-04-18 20:35:24+00:00

Document:
Insofar as we obtain the consent of the data subject for processing of his or her personal data, Art. 6 (1) (a) GDPR is the legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR is the legal basis. This also applies to processing operations, which are necessary for the implementation of pre-contractual measures.
Insofar as data processing is necessary for compliance with a legal obligation, Art. 6 (1) (c) GDPR is legal the basis.
(2) The legal basis for this data processing is Art. 6 (1) (f) DSGVO. On the one hand, legitimate interests arise from the need to present and optimize the content of the website in a technically correct manner. Furthermore, the data collection is necessary to ensure the functionality of the website in case of attacks by third parties and to allow prosecution of such attacks.
(3) The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. Therefore, the user's IP address must be stored for the duration of the session. In these purposes, our legitimate interest of data processing is justified in the sense of Art. 6 (1) (f).
(5) The date collection for the providing the website and the storage of the data in log files is essential for the operation of the website. As a result, the user has no possibility to object.
(1) Some of our website features ask the user to enter personal data, such as name, e-mail or postal address. Entering names and details is voluntary here. The data processing is preceded by the consent of the user, Art. 6 (1) (a) GDPR, or a voluntary basis.
(2) The processing of the above-mentioned data takes place on the basis of Art. 6 (1) (b) GDPR for that matter. The data processing is necessary for contact for contracting, the fulfilment of a possible contract, or of other pre-contractual measures given. If there should be a legal obligation requiring the personal data processing, such as the exercise of tax obligations, the basis for the processing is Art. 6 (1) (c). GDPR.
(2) There are cookies which will be deleted after the end of the browser session (so-called session ID cookies). The cookies are used for the purpose of authorization, identification and obtaining specific information such as information on whether you wish to remain logged in. After one hour the cookies will be automatically deleted .
(8) The utilization of data from set cookies is done on the basis of Art. 6 f) GDPR for the protection of legitimate interests, whereas we assume that your interests, fundamental rights and freedoms are not restricted by this, as personal data is neither gained by us nor by third parties. Additionally, it is basically statistical data adjusted to your user behavior and, if necessary, other factors like pricing, but not data that may lead to an individual identification.
2) You should always keep your access information confidential and close the browser window, when you have stopped using it, to prevent misuse of your account, especially if you share the computer with others.
(2) Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
(3) In this context, there will be no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
(4) Legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR in case of consent of the user.
(5) The legal basis for the processing of the data transmitted in the course of sending an e-mail is article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
(6) The processing of the personal data from the input mask serves us only for processing the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
(7) Additional personal data collected during the sending process will be deleted at the latest after a time period of seven days.
(8) The user has the possibility to give his consent to the processing of the personal data by means of communication by e-mail or post to the responsible office (s.u.) at any time.
3) The legal basis for the processing of the data after registration for the newsletter by the user is in the presence of a consent Art. 6 para. 1 lit. a GDPR.
(1) Depending on the current design of the website and the offer, we offer our users the opportunity to register on our website by providing personal information. The data is entered into an input mask, transmitted to us and stored. A transfer of data to third parties does not take place. The registration will only collect the data necessary for the purpose of the registration.
(2) As part of the registration process, the consent of the user to process this data is obtained. Legal basis for the processing of the data is the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. If the registration serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
(3) The registration is required for the provision of certain contents and services as well as for the fulfillment of a contract with the user, or for the execution of pre-contractual measures.
(4) The data will be deleted as soon as the purpose of their collection is no longer necessary.
(5) As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time.
This website uses SSL encryption for safety matter as well as to protect the transfer of confidential data like contact inquiries you send to us. An encrypted connection can be identified by a symbolized lock in the address-bar of your browser as well as by the address being “https://” instead of “http://”. If SSL is activated, data may be transferred without third parties being abled to read this data.
You may ask the controller to confirm if your personal data is processed by us.
(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information, if your personal have been transferred to third countries or international organisations. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
(4) if you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether the legitimate grounds of the controller override yours.
(6) Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
But these shall not be based on special categories of personal data referred to in Art. 9 (2)1) GDPR, unless Art. 9 (2) (a) or (g) of GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. In the cases referred to in points (1) and (3), the data controller implements suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 8
 Art. 9
 Art. 9