Data Protection

The following privacy policy applies to the use of the website https://www.immling.de (hereinafter referred to as "Website").

We attach great importance to data protection. The collection and processing of your personal data is carried out in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to provide you with the aforementioned portal. This statement describes how and for what purpose your data is collected and used, and what options you have regarding personal data.

By using this website, you consent to the collection, use, and transfer of your data in accordance with this privacy policy.

1 Responsible Entity

The responsible entity for the collection, processing, and use of your personal data within the meaning of Art. 4 No. 7 GDPR is:

Unsere Oper e.V.
Gut Immling
D-83128 Halfing

Represented by
Hermann-Josef Hoffmann

1st Chairman
Gut Immling
83128 Halfing

Phone: +49 (0)8055 / 90 34-0
Email: sekretariat@immling.de

If you wish to object to the collection, processing, or use of your data by us in accordance with these data protection provisions in total or for individual measures, you can direct your objection to the aforementioned responsible entity.
You can save and print this privacy policy at any time.

2 Order Processing

The website is technically operated and maintained by the following order processor:

München Ticket GmbH,
Seidlstraße 30
80335 München

We have contractually obligated our order processor in accordance with Art. 28 GDPR to comply with the applicable data protection regulations.

3 General Use of the Website

3.1 Access Data

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, store, and use data about each access to our online offering (so-called server log files). Access data includes:

• Name and URL of the retrieved file
• Date and time of retrieval
• Amount of data transferred
• Notification of successful retrieval (HTTP response code)
• Browser type and browser version
• Operating system
• Referrer URL (i.e., the previously visited page)
• Websites accessed from the user's system via our website
• Internet service provider of the user
• IP address and the requesting provider

We use this log data without assigning it to your person or any other profiling for statistical evaluations for the purpose of operation, security, and optimization of our online offering, but also for the anonymous collection of the number of visitors to our website (traffic) as well as the extent and nature of the use of our website and services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content, analyze traffic, search for and fix errors, and improve our services. We reserve the right to review the log data retrospectively if there are concrete indications of a legitimate suspicion of unlawful use. We store IP addresses for a limited period in the log files if this is necessary for security purposes or for the provision of a service or billing of a service, e.g., when you use one of our offers. After the order process is aborted or after payment is received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a criminal offense in connection with the use of our website. In addition, we store as part of your account the date of your last visit (e.g., upon registration, login, clicking links, etc.).

3.2 Email Contact

If you contact us (e.g., via contact form or email), we store your information for processing the request as well as in case follow-up questions arise. We only store and use additional personal data if you consent to this or if it is legally permissible without special consent.

3.3 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

In the event that IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. IP anonymization is active on this website. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website usage and internet usage to us.

The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all features of this website to their full extent.

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

3.4 Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of the data entered in the contact form is thus carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. A simple message by email to us is sufficient for this. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage ceases to exist (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

3.4.1 Cookies

We use so-called session cookies to optimize our online offering. A session cookie is a small text file that is sent by the respective servers when visiting a website and temporarily stored on your hard drive. This file as such does not contain any personal data and is deleted after you close your browser. Session cookies serve, for example, to allow you to use the shopping cart function across multiple pages.

We also use a small number of persistent cookies (also small text files that are stored on your device), which remain on your device and allow us to recognize your browser on your next visit. These temporary or permanent cookies (lifespan 1 month to 10 years) are stored on your hard drive and delete themselves after the specified time. This allows us to present our offering to you in a more user-friendly, effective, and secure manner. For example, we can display information tailored to your interests on the page.

Only pseudonymous data is stored in the cookies we use. When the cookie is activated, it is assigned an identification number, and a mapping of your personal data to this identification number is not carried out. Your name, your IP address, or similar data that would allow the cookie to be assigned to you are not stored in the cookie. Based on cookie technology, we only receive pseudonymized information, for example, about which pages of our shop were visited, which products were viewed, etc. You can set your browser to inform you in advance about the setting of cookies and decide on a case-by-case basis whether to accept cookies for specific cases or generally exclude them, or that cookies are completely prevented. This may limit the functionality of the website.

3.4.2 Newsletter2Go

This website uses Newsletter2Go for sending newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service that can be used to organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter is stored on the servers of Newsletter2Go in Germany.

If you do not want analysis by Newsletter2Go, you must unsubscribe from the newsletter. We provide a corresponding link in each newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

Data Analysis by Newsletter2Go

With the help of Newsletter2Go, we can analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links were clicked. In this way, we can determine which links were clicked particularly often.

We can also see whether certain predefined actions were performed after opening/clicking (conversion rate). For example, we can determine whether you made a purchase after clicking on the newsletter.

Newsletter2Go also allows us to segment the newsletter recipients into various categories ("clustering"). For example, the newsletter recipients can be segmented by age, gender, or location. This allows us to better tailor the newsletters to the respective target groups.

As part of the newsletter registration, you agree that your entered data will be transmitted to Sendinblue GmbH. Please note the data protection provisions and general terms and conditions of Sendinblue GmbH.

3.6 Social Media

3.6.1 Facebook Plugin

Our pages integrate plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like button" ("Gefällt mir") on our page. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. This gives Facebook the information that you have visited our page with your IP address. If you click the Facebook "Like button" while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by Facebook. For more information, please refer to Facebook's privacy policy at: https://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

3.6.2 Twitter Plugin

Our pages incorporate functions of the service Twitter. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by Twitter. For more information, please refer to Twitter's privacy policy at: https://twitter.com/privacy.

You can change your privacy settings on Twitter in the account settings under https://twitter.com/account/settings.

3.6.3 YouTube Plugin

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed about which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information on how user data is handled, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

3.7 Legal Bases and Retention Period

The legal basis for data processing according to the preceding sections is Art. 6 para. 1 letter f) GDPR. Our interests in data processing are particularly ensuring the operation and security of the website, investigating how the website is used by visitors, and simplifying the use of the website.
Unless specifically stated, we only store personal data as long as necessary to fulfill the pursued purposes.

4 Processing of Inventory Data

We generally do not process inventory data within the framework of our own online shop, as we fully refer to the external ticket shop of München Ticket for ticket sales.

4.1 Use of Inventory Data

No master, communication, or payment data is collected or stored by us when ordering tickets. All information necessary for the purchase is processed exclusively directly in the ticket shop of München Ticket. The applicable data protection regulations there apply.

4.2 Customer Account

No customer account is available on our website. Accordingly, no personal data is collected or stored for a customer account.

4.3 Newsletter

In order to send you our newsletter, we use the so-called double opt-in procedure. Only if you have expressly confirmed to us beforehand that you want to receive the newsletter will we send you an activation email and ask you to confirm that you want to receive our newsletter by clicking on a link contained in this email.

You can revoke your registration at any time without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details mentioned in section 1 (e.g., email, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter.

4.4 Legal Bases and Retention Period

The legal basis for data processing according to the preceding sections is Art. 6 para. 1 letters a), b), and f) GDPR. Our interests in data processing are particularly the initiation, conclusion, and fulfillment of contracts as well as direct advertising and product information.

Unless specifically stated, we only store personal data as long as necessary to fulfill the pursued purposes or as legally required.

5 Your Rights as a Data Subject

No personal customer data is stored on our website, as we do not operate a login, customer account, or our own online shop. Ticket purchases are made exclusively through the external ticket shop of München Ticket. All necessary personal data for this is collected and processed exclusively there; no storage or processing takes place on our website in this context.

Data processing on our website is limited exclusively to technically necessary processes (e.g., server log files, security systems, or possibly data from contact inquiries). For this limited processing of personal data, you have the following rights under applicable data protection laws. If you wish to exercise these rights, please direct your request to the address mentioned in section 1, clearly identifying yourself.

5.1 Right to Confirmation and Information

You have the right to obtain confirmation as to whether personal data concerning you is being processed by us. If this is the case, you have the right to receive free information about this data as well as the following information:

• the purposes of processing,
• the categories of personal data,
• the recipients to whom data has been disclosed or will be disclosed,
• the planned retention period or criteria for its determination,
• the existence of rights to rectification, deletion, or restriction of processing as well as a right to object,
• the existence of a right to lodge a complaint with a supervisory authority,
• the source of the data, if it was not collected from you,
• the existence of automated decision-making including profiling (such a process does not take place on our website),
• appropriate safeguards in the case of transmission to third countries.

5.2 Right to Rectification

You have the right to request the rectification of inaccurate or the completion of incomplete personal data without delay.

5.3 Right to Deletion ("Right to be Forgotten")

You have the right to request the deletion of your personal data if legal requirements are met (e.g., cessation of purpose, unlawful processing, revocation of consent, legal obligation to delete).

If we have made personal data public – which is not the case on our website – we would inform other responsible parties of your deletion request.

5.4 Right to Restriction of Processing

You can request the restriction of processing if

1. the accuracy of the data is contested,
2. the processing is unlawful and you oppose deletion and request restriction instead,
3. the data is no longer needed, but you need it for legal claims, or
4. there is an objection under Art. 21 para. 1 GDPR and a balancing is still pending.

5.5 Right to Data Portability

You have the right to receive data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another responsible party, provided that the processing is based on consent or contract and is automated.

5.6 Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, provided that it is based on Art. 6 para. 1 lit. e or f GDPR.

In the case of direct advertising, there is a comprehensive right to object.

5.7 Automated Decisions Including Profiling

Automated decision-making including profiling does not take place on our website.

5.8 Right to Withdraw Consent to Data Protection

You have the right to withdraw any consent given at any time.

5.9 Right to Lodge a Complaint with a Supervisory Authority

You can lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you violates data protection law. The competent authority is the state data protection officer of the federal state in which our company is based:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

6 Data Security

We are committed to ensuring the security of your data within the framework of applicable data protection laws and technical possibilities.
Your personal data is transmitted to us encrypted. This applies to your orders as well as to the customer login. We use the SSL (Secure Socket Layer) encoding system, but we would like to point out that data transmission over the internet (e.g., when communicating via email) may have security gaps. Complete protection of data against access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually adapt to the state of the art.
We also do not guarantee that our offering will be available at certain times; disruptions, interruptions, or failures cannot be excluded. The servers we use are regularly backed up carefully.

7 Disclosure of Data to Third Parties, No Data Transfer Outside the EU

In principle, we only use your personal data within our company.

If and to the extent that we involve third parties in the fulfillment of contracts (e.g., logistics service providers), they receive personal data only to the extent necessary for the corresponding service.

In the event that we outsource certain parts of data processing ("order processing"), we contractually obligate order processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject. To process the payment of your ticket purchase, we work with the certified payment services of Computop International GmbH (computop) and Sofort AG (Sofortüberweisung) to ensure increased security of your payment data.

No data transfer to entities or persons outside the EU takes place outside the cases mentioned in this statement in section 3.3 and is not planned.

8 Data Protection Officer

If you have any questions or concerns regarding data protection, please contact our data protection officer:

Maximilian Ulrich
datenschutz@immling.de