Data protection
Responsible
ZSL Betreibergesellschaft mbH
Am Sportforum 2
04105 Leipzig
Commercial register/No.: HRB 18466 Leipzig District Court
Managing Director: Prof. Dr. Michael Koelmel, Matthias Koelmel, Philipp Franke
Telephone number: +49 341 2341 0
Email address: office@arena-leipzig.de
Data Protection Officer
Email address: datenschutz@arena-leipzig.de
Telephone number: +49 341 2341 166
The protection of your personal data is very important to us. We treat this topic very carefully and will therefore inform you below about how we handle your personal data. Due to the new GDPR coming into force on May 25, 2018, we have adapted our data protection guidelines accordingly. To the extent that we collect, manage, process or use personal data from you as part of the ordering processes necessary for the purchase, this only happens within the framework of German and European data protection law and the new General Data Protection Regulation.
You can visit our website at any time and obtain information without having to provide any personal information. As a general rule, you remain anonymous during your visit to our site. The connection data transmitted by your Internet browser each time you access a page, such as the date, length of stay or the name of your Internet service provider, is used by us without any personal reference, unless you have logged in yourself with your user name and password. You provide personal information voluntarily, for example when you register on our site, place an order, subscribe to a newsletter or use similar functions.
1. Basic information on data processing and legal bases
1.1. The websites www.arena-leipzig.de, www.sportforum-leipzig.de, www.quarterback-immobilien-arena.de, www.arena-ticket.com and https://tickets.arena-ticket.com (hereinafter referred to as websites) are internet presences of ZSL Betreibergesellschaft mbH, hereinafter referred to as "we" or "operator".
We are pleased that you are interested in our online offering and would like to take this opportunity to provide information about how we handle personal data and also guarantee your right to informational self-determination. The legal basis here is in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG new) and the Telemedia Act (TMG).
This data protection declaration gives you an overview of the type, scope and purpose of the processing of personal data within our online offering and the websites, functions and content associated with it (hereinafter collectively referred to as the “online offering” or “website”). The data protection declaration applies regardless of the domains, systems, platforms and devices used (e.g. desktop or mobile) on which the online offering is run.
1.2. With regard to the terms used, such as: For example, “personal data” or its “processing”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
1.3. The users' personal data processed as part of this online offering includes inventory data (e.g. names and addresses of customers), usage data (e.g. the websites of our online offering visited, interest in our services) and content data (e.g. entries in the contact form).
1.4. The term “user” includes all categories of persons affected by data processing. These include our business partners, customers, interested parties and other visitors to our online offering. The terms used, such as: B. “Users” are to be understood as gender-neutral.
1.5. We only process users’ personal data in compliance with the relevant data protection regulations. This means that the user's data will only be:
- processed if there is legal permission. i.e. in particular if data processing is necessary or required by law to provide our contractual services (e.g. processing orders) and online services,
- the users have given their consent,
- as well as due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR, in particular when measuring reach, creating profiles for advertising and marketing purposes as well as collection of access data and use of third-party services).
- and of course in some cases we are legally obliged to process data (e.g. to release data to investigative authorities).
1.6. We would like to point out that the legal basis for the consent is Article 6 Paragraph 1 Letter a. and Art. 7 GDPR, the legal basis for processing to fulfill our services and implement contractual measures Art. 6 Para. 1 lit. b. GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c. GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 Para. 1 lit. f. GDPR.
2. Security measures
2.1. We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are adhered to and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
2.2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.
3. Disclosure of data to third parties and third parties
3.1. Data will only be passed on to third parties within the framework of legal requirements. We only pass on user data to third parties if this is based, for example, on the basis of Article 6 Paragraph 1 Letter b) GDPR for contractual purposes or for legitimate economic interests in accordance with Article 6 Paragraph 1 Letter f GDPR and effective operation of our business operations.
3.2. If we use subcontractors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.
3.3. If content, tools or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used within the scope of this data protection declaration and whose headquarters are in a third country, it can be assumed that data is transferred to the countries where the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area. Data will be transferred to third countries either if there is an adequate level of data protection or if there is legal permission.
4. Purchase of tickets and vouchers
The operator uses your data to properly fulfill your order or provide the requested service, to process complaints and to answer questions and provide advice as part of our customer service. When you register on our site, your data will be saved to create a customer account in order to enable you to make purchases more quickly and conveniently in the future. At the same time, you also have the option of placing your order as a guest. In this case, no customer account will be created. We need your telephone number for any questions and to ensure proper delivery of the products. We need your email address to confirm receipt of your order and to be able to communicate with you further. When you register for our newsletter, your email address will be used with your consent exclusively for your own Used for advertising purposes and only until you unsubscribe from the newsletter. You can unsubscribe at any time directly at the bottom of each newsletter using the “Unsubscribe from newsletter here” option.
Name, address, age, email address and payment details are recorded here for the purpose of fulfilling the contract. We also record a phone number exclusively for queries in the event of problems with purchasing or payment processing.
According to the selected payment method, the data will be transmitted to the respective payment provider exclusively for the purpose of payment processing. These are:
• SIX Payment Services (Europe) SA
Branch Germany
Theodor-Heuss-Allee 108
60486 Frankfurt/Main
• PayPal (Europe) S.à rl et Cie, SCA
22-24 Boulevard Royal
L-2449 Luxembourg
• Computop GmbH
Schwarzenbergstrasse 4
96050 Bamberg
The respective data protection declarations of the payment providers apply.
If you have provided personal data in your customer account on www.arena-ticket.com, you can correct this - if incorrect - in your user profile at any time after logging in. If you are processing the booking process as a guest and would like to correct the personal data provided after completing the purchase, please contact the following email address ticket{at}arena-ticket.com.
5. Contact us
When you contact us (via contact form or email), we process your information to process the contact request and process it in accordance with Article 6 Paragraph 1 Letter b) GDPR.
6. Newsletters
6.1. If the user registers for the newsletter, we use the data required for this or provided separately by the user in order to regularly send the user the email newsletter we send in accordance with the user's consent. You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option listed at the beginning of this data protection declaration or via the link provided - which is located at the end of every newsletter email.
6.2. The declaration of consent to register for the newsletter is made using the double opt-in procedure. This means that the user agrees twice. After first granting consent through his opt-in, he declares his inclusion in the corresponding distribution list in the second step after receiving a short email containing a confirmation link and only when the consent and his identity have been confirmed. You can unsubscribe later at any time.
6.3. We use Newsletter2Go to send and manage user data. All data protection information about the application can be found at the following link: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
6.4. We record clicks from our newsletter in our offers using the above-mentioned statistical services and also analyze the opening and click rates as well as other usage data of the newsletter with our service provider Newsletter2Go in order to enable the newsletter to be designed in line with interests and to improve our service.
6.5. You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your wish using the contact option provided at the end of this data protection notice.
7. Collection of access data and log files
7.1. Based on our legitimate interests within the meaning of Article 6 Paragraph 1 Letter f of the GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider .
7.2. Log file information is stored in its entirety for security reasons (e.g. to investigate acts of abuse or fraud).
8. Cookies
8.1. Cookies are information that is transmitted from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
8.2. Out of legitimate interest in accordance with Art. 6 Para. 1 lit f GDPR, we use “session cookies”, which are only stored for the duration of the current visit to our online presence. A randomly generated, unique identification number is stored in a session cookie, a so-called session ID. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offering, e.g. B. close the browser.
8.3. If you do not want cookies to be stored on your computer, you are asked to deactivate the corresponding option in the system settings of your browser. Saved cookies can be deleted in the browser's system settings. The exclusion of cookies can lead to functional restrictions of this online offer.
8.4. You can opt out of the use of cookies, which are used to measure reach and for advertising purposes, via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and also the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) contradict.
9. Children
Children's data may not be processed without the consent of their parents or guardians.
We recommend that all parents and guardians instruct their children in the safe and responsible use of personal data on the Internet.
If data is sent to us without consent, we will stop processing it as soon as we become aware of it.
If you are under 18 years old, please ask your parent or guardian for permission to register on our website. For children under 14, their legal guardians must agree to this data protection declaration.
10. Google Analytics
10.1. Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR), we use Google Analytics, a web analysis service from Google LLC (“Google”). a. Google uses cookies. The information generated by the cookie about your use of the online offering is usually transmitted to a Google server in the USA and stored there.
10.2. We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activities on our pages across devices (e.g. access via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment occurs, for example, when you register for a customer account or log in to your customer account. However, no personal data will be passed on to Google. Even if Universal Analytics adds additional functions to Google Analytics, this does not mean that there is a restriction on data protection measures such as IP masking or the browser add-on.
10.3. Google is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
10.4. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services (related to the use of this online offering and internet usage). Pseudonymous user profiles can be created from the processed data.
10.5. We use Google Analytics to show the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which can be determined based on the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users and do not appear annoying.
10.6. We only use Google Analytics with IP anonymization activated. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
10.7. The IP address transmitted by your browser is not combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offering and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
10.8. You can find out more information about Google's use of data, settings and objection options on Google's websites: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use our partners’ websites or apps”) http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”) http://www.google.de/settings/ads (“Manage information Google uses to show you advertising”).
11. Facebook
11.1 Our pages contain links to the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square , Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) is integrated. The Facebook links can be recognized by the Facebook logo on our site.
11.2. Facebook is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
11.3. When you visit our pages, the link creates a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to assign your visit to our pages to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.
Further information can be found in Facebook's privacy policy.
11.4. If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook account.
12. Competitions
All personal data of participants will be collected, processed, stored and used for the purpose of conducting the competition and for the purposes expressly stated in the respective terms and conditions of participation. After the competition has ended and the winners have been finally determined, the participants' data will be deleted immediately. Unless the personal data is still needed to process the prize (e.g. handing over concert tickets). In this case, the data can also be passed on to partners who make the prize available. The details are always explained in the relevant conditions of participation. Each participant is free to revoke their participation in the competition and their consent to the storage and use of their data. If the data is deleted, participation in the competition is excluded.
13. Links to other websites
Links to other websites are provided for informational purposes only. Other websites are beyond our control and are not covered by this policy. When you visit other websites via the links provided, the operators of those websites may collect information about you, which may then be used by the operators in accordance with their respective privacy policies in a manner that may differ from our policy.
We assume no liability or responsibility for these unrelated policies and procedures.
14. Rights of Users
14.1. You have the right to receive information, free of charge, about the personal data we have stored about you.
14.2. In addition, you have the right to correct incorrect data, restrict the processing and delete your personal data, if applicable, assert your rights to data portability and, in the event of unlawful data processing, to lodge a complaint with the responsible supervisory authority.
14.3. You can also revoke your consent, in principle with effect for the future.
15. Deletion of data
15.1. The data we store will be deleted as soon as it is no longer required for its intended purpose and deletion does not conflict with any legal retention obligations. Unless the user data is deleted because it is required for other legally permissible purposes, its processing will be restricted. i.e. the data will be blocked and not processed for other purposes. This applies e.g. B. for user data that must be retained for commercial or tax reasons.
15.2. According to legal requirements, storage takes place for six years in accordance with Section 257 Paragraph 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for ten years in accordance with Section 147 Paragraph 1 AO (books, records, management reports, Booking receipts, commercial and business letters, documents relevant to taxation, etc.).
16. Right to object
You can object to the future processing of your personal data at any time in accordance with legal requirements. The objection can in particular be made against processing for direct advertising purposes.
17. Changes to the Privacy Policy
17.1. We reserve the right to change the data protection declaration in order to adapt it to changes in the legal situation or in the event of changes to the service or data processing. However, this only applies with regard to declarations on data processing. If your consent is required or if parts of the data protection declaration contain provisions relating to the contractual relationship with you, the changes will only be made with your consent.
17.2. We ask you to regularly inform yourself about the content of the data protection declaration.
18. Competent supervisory authority
The Saxon data protection officer
Office at the state parliament
Devrientstrasse 1
01067 Dresden
Telephone: 0351/493-5401
Fax: 0351/493-5490
Email: saechsdsb{at}slt.sachsen.de
19. Data Protection Officer
If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data or revocation of consent given, please contact:
Email address: datenschutz@arena-leipzig.de
Telephone number: +49 341 2341 166
Status: 04.04.2024