Source: https://nisp.online/privacy-policy/
Timestamp: 2019-04-26 12:28:56+00:00

Document:
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term covers practically every handling of data.
In accordance with Art. 13 DSGVO, we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consents is Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the performance of our services and performance of contractual measures as well as for answering inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c DSGVO, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f DSGVO. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.
on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called “processing contract”, this is done in accordance with the relevant requirements of Art. 28 DSGVO.
Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. DSGVO are fulfilled. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
You have the right to receive information about your personal data stored by us.
You can request us to rectify incorrect data and – insofar as the legal requirements are fulfilled – to delete your data.
As far as the legal requirements are fulfilled, you can demand that we restrict the processing of your data.
If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another person responsible.
You have the right to object to our processing of your data at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of “legitimate interest”. If you use your right of objection, we will stop processing your data unless we can – in accordance with the statutory provisions – prove compelling reasons worthy of protection for further processing, which exceed your rights.
You may also lodge a complaint with the competent supervisory authority if you believe that the processing of your data is contrary to applicable law. You can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.
Furthermore, you can contact us free of charge with questions regarding the processing of your personal data, your data subject rights and any consent given. To make use of all your aforementioned rights, please contact datenschutz@src-gmbh.de or via post to the address indicated under point 1 above. Please ensure that we can uniquely identify you.
Objection to data processing on the legal basis of “legitimate interest”: You have the right, for reasons arising from your particular situation, to object at any time to the future processing of the data concerning you by us, insofar as this is based on the legal basis of “legitimate interest”. If you exercise your right of objection, we will stop the processing of your data unless we can – in accordance with the statutory provisions – prove compelling reasons worthy of protection for further processing, which outweigh your rights.
“Cookies” are small files that are stored on the user’s computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes the browser. In such a cookie, for example, the content of a shopping basket can be stored in an online shop or a login jam. Cookies are referred to as “permanent” or “persistent” if they remain stored even after the browser is closed. For example, the login status can be saved when users visit it after several days. Likewise, the interests of users used for range measurement or marketing purposes may be stored in such a cookie. “Third-party cookies” are cookies that are offered by providers other than the person responsible for operating the online offer (otherwise, if they are only operator cookies, they are referred to as “first-party cookies”).
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO. Our legitimate interests are the simplification of the use of our website and the recognition of the user’s browser even after a switch of the website.
The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 DSGVO. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory storage obligations. If the data is not deleted because it is necessary for other and legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
We process our customers’ data as part of the ordering process in our online ticket management system to enable them to select and order the selected products and services, as well as their payment and delivery or execution.
The processed data includes inventory data, communication data, contract data, payment data. The persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services in the context of operating an online shop, billing, delivery and customer services. We use session cookies for storing the contents of the shopping cart and permanent cookies for storing the login status.
When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests as well as the users’ interest in protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in general, unless it is necessary to pursue our claims or there is a legal obligation according to Art. 6 para. 1 lit. c DSGVO.
When using our online services, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user’s protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation according to Art. 6 Abs. 1 lit. c DSGVO.
We process data within the framework of administrative tasks as well as the organisation of our company, financial accounting and compliance with legal obligations, e.g. archiving. We process the same data that we process as part of the performance of our contractual services. The processing bases are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, prospects, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, thus tasks which serve the maintenance of our business activities, and the provision of our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information provided in these processing activities.
In order to operate our business economically and to identify market trends, customer and user requirements, we analyse the data available to us on business transactions, contracts, enquiries, etc., in order to ensure that we are able to offer our customers the best possible service. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. DSGVO, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the online offer.
The analyses are carried out for the purpose of economic evaluations, marketing and market research. In doing so, we can consider the profiles of registered users with information e.g. about their purchase processes. The analyses serve us to increase the user-friendliness, the optimization of our offer and the economic efficiency. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with aggregated values.
Applicants can send us their applications via an online form on our website. The data is encrypted and transmitted to us according to the state of the art.
Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and that the applicants themselves must ensure that they are encrypted. We cannot therefore accept any responsibility for the transmission of the application between the sender and receipt on our server and therefore recommend that you use an online form or the postal dispatch. Instead of applying via the online form or by e-mail, applicants can still send us their application by post.
If the application is successful, the data provided by the applicants can be further processed by us for the purpose of employment. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which the applicants are entitled to do at any time.
When contacting us (e.g. via contact form, e-mail or telephone), the user’s data will be processed in order to process the contact request and to handle it in accordance with Art. 6 Para. 1 lit. b) DSGVO. User information can be stored in a customer relationship management system (“CRM system”) or comparable request organization.
We delete the requests if they are no longer necessary. We review the necessity every two years; the statutory archiving obligations also apply.
With the following information we inform you about the contents of our newsletter as well as the registration, mailing and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter you agree to the reception and the described procedures.
We will only send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletters”) with the consent of the recipients or a legal permission. If the contents of a newsletter are specifically described within the scope of a registration, they are decisive for the consent of the users. In addition, our newsletters contain information about our services and us.
To subscribe to the newsletter, simply enter your e-mail address. Optionally we ask you to indicate a name for the purpose of personal address in the newsletter.
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the e-mail addresses we have unsubscribed for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
The newsletter is sent by the mailing service provider MailJet GmbH, Rankestr. 21, 10789 Berlin, Germany. The data protection regulations of the shipping service provider can be viewed here: https://www.mailjet.de/privacy-policy/. The mailing service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f DSGVO and an order processing contract according to Art. 28 Para. 3 S. 1 DSGVO.
The mailing service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.
Within the scope of Matomo’s range analysis, based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) processes the following data: The browser type and version you use, the operating system you use, your country of origin, date and time of the server request, the number of visits, your time spent on the website and the external links you clicked. The IP address of the users is anonymized before it is stored.
Within our online offer, we provide information based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 letter f). DSGVO) of content or service offerings of third parties in order to embed their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always requires that the third party providers of this content perceive the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the display of this content. We endeavour to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as be linked to such information from other sources.

References: Art. 13
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6