Source: https://www.united-pop.online/privacy
Timestamp: 2019-04-24 12:08:00+00:00

Document:
Your privacy and the protection of your personal data is very important to United POP B.V.. For your information, we provide the following overview about the collection and processing of personal data on basis of data protection law in force from 25 May 2018 and the implementation of the applicable provisions of the EU General Data Protection Regulation (GDPR) and explain the general conditions under which we collect and process personal data and in particular what rights you have as a customer and interested party. What kind of data are processed in particular and how they are used depends largely on the requested or agreed services.
2. Who is responsible for the processing of your data and who can you contact?
3. What kind of data do we use?
We process personal data that we receive from you as a customer or interested party within the framework of our business relationship. In addition, we process personal data that are transmitted to us by other entities of our group of companies or by other third parties in a permissible manner, to the extent as this is necessary for the provision of our services. Personal data which are necessary for the purpose of processing are personal data (e.g. name, address, other contact data such as telephone number, E-Mail address, birthday, nationality). It may also be order data, data deriving from the fulfilment of our contractual obligations, advertising and sales data, documentation data or data similar to the before mentioned categories. Data collection and processing must be appropriate and relevant to the purpose and limited to what is necessary for the purpose of the processing.
4. For what purposes and on what legal basis is the data processed and how long is it stored?
We only process personal data if this is necessary to provide a functioning website including our contents and services. As a rule, processing only takes place with the consent of the data subject. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.
If we obtain your consent as data subject for the processing of personal data, Art. 6 (1 a) of the EU General Data Protection Regulation (GDPR) is the legal basis for such processing. Insofar as we have been obtained such consent for certain purposes, which are explained to you in detail and to which you have agreed to, the lawfulness of such processing is given on the basis of this consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before the 25th of May 2018. The revocation of the consent does not affect the lawfulness of the data processed until the revocation.
In case of processing personal data which is necessary for the performance of a contract to which you are a party as a data subject, Art. 6 (1 b) GDPR applies as legal basis. This also applies to such processing that is necessary for the steps, which need to be taken prior to entering into a contract. If the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 (1 c) GDPR is the legal basis. If vital interests of you as a data subject or another natural person require the processing of personal data, Art. 6 (1 d) GDPR applies. And if processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of you as the person concerned do not outweigh the former interest, Art. 6 (1 f) GDPR shall apply as the legal basis for processing.
- Voluntary surveys (to provide and improve offers and services).
Your data will only be used for marketing, market research and advertising purposes if you have expressly consented to this use or the use is legally permissible. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before the 25th of May 2018. The revocation is only effective for the future. The revocation of the consent does not affect the lawfulness of the data processed until the revocation.
The legal basis for the temporary storage of data and log files is Art. 6 (1f) GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data help us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1 f) GDPR.
Personal data will be erased where the personal data are no longer necessary in relation to the purposes for which they are collected. If data are collected for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 30 days at the latest. An extended storage is possible. In this case, the IP addresses of the users are erased or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user cannot object here.
On our website, we offer users the opportunity to register by providing personal data. Data are entered into an input mask and transmitted to us and then stored. The data will not be passed on to third parties. The following data are collected within the scope of the registration process: First name, last name, country, mobile number, E-Mail address, area(s) of interest. In the case of entries in a competition, a postal address may also be provided to enable the prize to be handed over. For the protection of minors, the date of birth is also requested.
At the time of registration, the following data is also stored: The user’s IP address and the date and time of registration. In the course of the registration process, the user’s consent to the processing of this data is obtained.
The legal basis for the processing of data is Art. 6 (1 a) GDPR if the user has given his or her consent. If the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, the additional legal basis for the processing of the data is Art. 6 (1 b) GDPR.
A registration of the user is on the one hand necessary for the provision of certain contents and services on our website. Furthermore, the registration can also take place for the conclusion of a contract with the user, if it is necessary for the fulfilment of the contract or in order to take steps prior to entering into a contract Such services/contracts essentially refer to the following: Registration for workshops and events, participation in competitions, voluntary surveys (to create and improve offers and services).
Personal data will be erased where the personal data are no longer necessary in relation to the purposes for which they are collected. In case that the registration on our website is not necessary for the conclusion of a contract with the user, this applies to all data collected during the registration if the registration on our website is canceled or modified. If the registration serves to conclude a contract with the user, this applies for the implementation of all measures to conclude a contract or pre-contractual measures during the registration process, if the data are no longer required for the implementation of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations. Perpetual obligations require the storage of personal data during the term of the contract. In addition, warranty periods must be observed as well as storage of data for tax purposes. Which storage periods are to be observed cannot be determined across-the-board, but must be determined for the contracts and contractual parties concluded in each individual case.
If the registration serves to conclude a contract with the user: If the data is necessary for the performance of a contract or to take steps prior to entering into a contract, premature erasure of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
First name, surname, country, mobile number, E-mail address, postal address (if a brochure is requested by post), desired training location, start date of a possible education, areas of interest, date of birth (to protect minors) and we ask you how you did find us.
At the time of registration, the following data are also stored: The IP address of the user as well as date and time of registration, information about the browser type and the version used, the operating system, as well as websites from which the user’s system reaches our website.
The legal basis for the processing of data is Art. 6 (1 a) GDPR if the user has given his or her consent. The legal basis for the processing of data transmitted in the course of sending an E-mail is Art. 6 (1 f) GDPR. If the E-mail contact is aimed at the conclusion of a contract, then the additional legal basis for the processing is Art. 6 (1 b) GDPR.
The processing of personal data from the input mask serves us only for the processing of the contact. In the event of contact by E-mail, this also constitutes the necessary legitimate interest in the processing of the data. All other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Personal data will be erased where the personal data are no longer necessary in relation to the purposes for which they are collected. This is the case for the personal data from the input mask of the contact form and those that were sent by E-mail, when the respective conversation with the user is finished. The conversation is terminated when it can be assumed from the circumstances that the facts in question have been finally clarified. Personal data, which was additionally collected during the sending process will be deleted after a period of seven days at the latest.
In this case, the processing of data takes place in order to provide services in course of the performance of our contracts with our customers or for taking steps prior to entering into a contract, which take place on request. The purposes of data processing are primarily based on the specific product (individual course agreement, training course agreement, diploma course agreement, bachelor course agreement, workshops, etc.) and, in addition to carrying out the corresponding teaching and examination services, include advising and supporting the participants in the respective specialist area and location. Further details on the corresponding data processing purposes can be found in the relevant contractual documents and general terms and conditions. The following data are collected within the scope of the contract process: First name, last name, street, house number, country, postcode, mobile number, E-mail address, area(s) of interest, information on possible promotions, date of birth, bank details.
If the personal data is necessary for the performance of a contract to which you are a data subject, Art. 6 (1 v) GDPR is the legal basis. This also applies to such processing that is necessary for the implementation of pre-contractual measures.
The data is used for the execution or performance of the contract, i.e. as a rule for the provision of the contractually owed teaching and examination management including the consultation and support of the customers and, if necessary, for the performance of seminars and workshops, to the extent as these have also been agreed or are part of the contract.
Personal data will be erased where the personal data are no longer necessary in relation to the purposes for which they are collected. With regard to the conclusion of a contract with you, this applies to the performance of a contract or to the implementation of pre-contractual measures, provided that the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations. Perpetual obligations require the storage of personal data during the term of the contract. In addition, course/examination-related additional periods must be observed as well as the storage of data for tax purposes. Which storage periods are to be observed cannot be determined across-the-board, but must be determined for the contracts and contractual parties concluded in each individual case.
or directly to United POP B.V.
The legal basis for the processing of personal data using cookies is Art. 6 (1 f) GDPR. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1 f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 (1 a) GDPR.
10. Is automated individual decision making and/or profiling implemented?
To establish and conduct our business relations with you, we do not use fully automated decision making as referred to in Art. 22 GDPR. Should we use such procedures in individual cases, we will inform you separately, if required by law.
12. What are the consequences of not providing personal data?
As part of our business relationship, you as customer/prospective customer must provide personal data required for the establishment and execution of a business relationship of your choice and the performance of the associated contractual obligations or such personal data, which we are required to collect by law. Without this information, we will generally not be able to conclude the contract or to perform the contract or service.
13. How long are personal data stored and will the data be erased?
We commit ourselves to the principles of data avoidance and data minimization. Insofar as the storage and erasure of personal data of a data subject has not already been explained above, we like to point out that personal data will be erased or blocked as soon as the purpose of the storage, which originates from a contractual or statutory obligation, ceases to apply, i.e. your personal data will only be stored as long as the respective purpose lasts, in the case of a contractual relationship only during the contract period. If the data are no longer required for the performance of contractual or statutory obligations, they are regularly deleted in accordance with the statutory provisions. In exceptional cases, data may also be stored if this has been provided for by European or national legislators in EU regulations, laws or other provisions. The data will also be blocked or erased if a storage period determined by the aforementioned standards expires, unless a further storage of the data for the conclusion or performance of a contract is necessary.
14. Who receives personal customer data?
Insofar as you have made personal data available to us, such data will only be passed on or otherwise transmitted by us if this is necessary for the purpose of contract processing, in particular for the disclosure of order/contract data or for billing purposes, or if you have previously consented to the onward transfer or the disclosure is required by law (in particular, onward transfers to state authorities). A given consent can be revoked at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before the 25th of May 2018. The revocation is only effective for the future. The revocation of the consent does not affect the lawfulness of the data processed until the revocation.
Within our company, only those departments obtain access to customer data as necessary to fulfil our contractual and legal obligations. In addition, service providers and vicarious agents employed by us may also receive data for such purposes if they process the personal data transmitted to them exclusively in accordance with the given data protection regulations and within the factual and temporal framework of the respective order and in accordance with instructions from us as customer. They may not use the provided data for any other purposes and are obliged to take technical and organisational measures required by law to adequately protect the data transmitted by us.
To execute of a business relationship with you and depending on the service/contract we may transfer personal data to other companies of the music support group (in particular msg Beteiligungs- und Verwaltungs-GmbH, msg GmbH & Co. KG, music support group GmbH, United POP online GmbH, United POP Australia Pty Ltd and possibly other affiliated companies); to companies in the categories of credit and financial services institutions or comparable institutions/payment providers, IT services, logistics, printing services, telecommunications, debt collection, consulting and sales and marketing; to public bodies and institutions (e.g. tax authorities, law enforcement authorities) in case of an existing legal or official obligation. Other possible recipients of the data can be such entities for which you have given us your consent to the transfer of data.
15. Will personal data be transferred to third countries or international organisations?
Pursuant to Art. 44 DSGVO, data will only be transferred to offices in countries outside the European Union (so-called third countries) if this is necessary for the execution of customer orders or if this is required by law or if we have received your consent as data subject. Data may be transferred to third countries if the Commission has established an adequate level of data protection in accordance with Art. 45 GDPR, if there are appropriate safeguards to ensure an adequate level of data protection, such as binding company regulations or standard contractual clauses, or if the data subject expressly consents.
16. What data protection rights exist?
Each data subject has the right of access as referred in Art. 15 GDPR, the right to rectification as referred in Art. 16 GDPR, the right to erasure as referred in Art. 17 GDPR, the right to restriction of processing as referred in Art. 18 GDPR, the right to object as referred in Art. 21 GDPR and the right to data portability as referred in Art. 20 GDPR. Furthermore, there is a right to lodge a complaint with a supervisory authority (Art. 77 GDPR). A given consent you have given us to process your personal data may at any time be revoked. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before the 25th of May 2018. The revocation is only effective for the future. Processings made before the revocation are not affected.
You may ask the Controller to inform you whether personal data relating to you as a data subject will be processed by us.
(8) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data relating to you as a data subject is transferred to a third country or to an international organisation. In this context, you may request to obtain information in regard to appropriate safeguards pursuant to Art. 46 GDPR in connection with the data transfer.
You have a right to rectification and/or completion against the Controller if the personal data processed relating to you are incorrect or incomplete. The Controller shall make the rectification without undue delay.
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the Controller are more important than your reasons.
If the processing of personal data relating to you as a data subject has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is repealed.
(2) You withdraw your consent, on which the processing was based pursuant to Art. 6 (1 a) or Art. 9 (2 a) GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(5) The erasure of personal data relating to you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the Controller is subject.
If the Controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 (1) GDPR, he shall take reasonable steps, including technical measures and taking into account the available technology and the implementation to inform controllers which are processing the personal data that you as the data subject have requested the erasure of any links to, or copy or replication of, those personal data.
If you have asserted your right to rectification, erasure or restriction of the processing against the Controller , he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed about this rectification or erasure of the data or restriction of the processing, unless this is not possible or involves a disproportionate effort.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to pursuant to Art. 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data relating to you as a data subject for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
In connection with the use of Information Society service, you have the right to object by means of automated procedures using technical specifications, notwithstanding the Directive 2002/58/EC.
Decisions shall not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points (1) and (2), the Controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
As a customer, you have the right to object at any time for reasons arising from a particular situation to the processing of personal data concerning you, which is carried out on the basis of Art. 6 (1 e) GDPR (data processing in the public interest) and Art. 6 (1 f) GDPR (data processing on basis of a balance of interests). If an objection is lodged, we will no longer process the personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms as a data subject, or if the processing should serve to assert, exercise or defend legal claims.
In individual cases we process personal data in order to implement marketing/advertising measures. As a customer, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing/advertising measures. If you object to the processing for such purposes, the personal data will no longer be processed for these purposes.
is usually transmitted to a Google server in the USA and will be stored there. The IP address transmitted by Google Analytics from your browser will not be merged with other data of Google. We have also added the code "anonymizeIP" to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases the complete IP address will be transmitted to a Google server in the USA and truncated there.
You can also prevent the collection of the data generated by the cookie from Google and related to your use of the website (including your IP address) to Google and the processing of these data by Google if you download and install the subsequent browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link (please set the corresponding link!). An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie only works in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Furthermore, we use Google Analytics to evaluate data from double-click cookies and AdWords for statistical purposes. If you do not wish this, you can deactivate it using the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).
Further information on data protection in connection with Google Analytics can be found in the Google Analytics(https://support.google.com/analytics/answer/6004245?hl=de).
Our website uses the remarketing function of Google Inc. to present interest-based advertisements to website visitors within the Google advertising network. A “cookie” is stored in the visitor’s browser, which makes it possible to recognize the visitor when he or she visits websites that belong to Google’s advertising network. These pages may contain advertisements that refer to content that the visitor has previously viewed on websites that use Google's remarketing feature.
Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Adwords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on an advertisement served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users.
To present our contents correctly and graphically appealing across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/). Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
We embed YouTube videos on some of our websites. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the corresponding plug-ins. When you visit a page with the YouTube plugin, a connection to Youtube servers is established. Youtube will be informed which pages you visit. If you are logged into your Youtube account, Youtube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
If you have deactivated the storage of cookies for the Google Ad programme, you will not have to reckon with such cookies when viewing YouTube videos. Youtube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.
In addition, Microsoft may be able to track your usage across multiple electronic devices through cross-device tracking, making the display of personalised advertising on or in Microsoft Web pages and apps possible. You can deactivate this procedure athttp://choice.microsoft.com/de-de/opt-out.
Within the framework of our Internet presentation, we use the “Facebook Pixel” of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. So-called tracking pixels are integrated on our pages. When you visit our pages, the pixel-code establishes a direct connection between your browser and the Facebook server.
Among other things, Facebook receives information from your browser,e.g. that our page has been called up by your terminal device. If you are a Facebook user, Facebook can assign your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted by Facebook or of their use. We can only choose which segments of Facebook users (such as age, interests) our advertising should be displayed.
By calling up the pixel from your browser, Facebook can also recognize whether a Facebook ad was successful, e.g. whether it led to an online purchase. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes.
Alternatively, you can deactivate the Facebook Pixel on the Digital Advertising Alliance page using the following link: http://www.aboutads.info/choices/.
The transfer of data to the USA is permitted according to Art. 45 GDPR, as Facebook Privacy Shield is certified and therefore has an adequate level of data protection according to the Commission Implementing Decision (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE).
The certification can be seen under https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Legal basis is a legitimate interest as referred to in Art. 6 (sentence 1 (1f)) GDPR, here the processing is necessary for the pursuit of our business purposes and the targeted advertising of our services.
Despite careful control of the contents, we assume no liability for the contents of the Internet pages of third parties and external links. The operators of the linked pages are exclusively responsible for their content. We expressly declare that we have no influence whatsoever on the design and content of the linked and imported pages. For this reason, we expressly distance ourselves from all contents of all linked pages on the website and do not adopt these contents as our own. This declaration applies to all pages to which links lead.
If we plan to process your data for other purposes than they were originally collected, we will inform you in advance in compliance with the statutory provisions.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 44
 Art. 45
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 45
 Art. 6