Privacy Policy
The Friedrich Ebert Foundation attaches the utmost importance to the protection of your personal data. It adheres strictly to the legal provisions governing the permissibility of handling personal data – in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) – and has taken the necessary technical and organisational measures to safeguard data.
The following information is intended to give you an overview of how we ensure this protection, in particular what type of data we collect, process and use for what purposes and what rights are granted to you by law.
Person responsible for data processing
The controller within the meaning of Article 4(7) of the GDPR is
Friedrich Ebert Foundation
Godesberger Allee 149
53175 Bonn, Germany
+49 (0)228 883-0
Info(at)fes.de
Data protection officer, supervisory authority
The contact address of the data protection officer of the Friedrich Ebert Foundation is:
DMC Datenschutz Management & Consulting GmbH & Co. KG
represented by Mr Thomas Müthlein
datenschutz(at)fes.de
You have the right to address complaints to the data protection supervisory authorities (Article 77 GDPR). The competent supervisory authority for the Friedrich Ebert Foundation is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.
1. General
Your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). If we are no longer using this data, it will be deleted after a retention period of 90 days. In addition to processing purposes, recipients, legal bases and storage periods, the following paragraphs also inform you about your rights. This Privacy Policy only applies to our website (www.karlmarxshop.ticketfritz.de). If you are redirected to other sites via links on our site, please refer to these sites for information on how they handle your data.
When you access our website (www.karlmarxshop.ticketfritz.de), some personal data will be transmitted to the server in so-called log files. This includes your IP address, the date and time of access, the operating system used, the browser used and other similar data and information. This data is used to provide the content of the website and to ensure its functionality. This also constitutes our legitimate interest pursuant to Article 6(1)(f) GDPR.
2. Data processing for contract fulfilment
(1) Purpose of processing
The personal data you provide to us during the ordering process is required for the conclusion of a contract with us. You are not obliged to provide us with your personal data, but it is not possible to send the ordered goods without providing your address. Certain payment methods require the release of necessary payment data, which we pass on to a commissioned payment service provider. The data entered during the ordering process therefore serves the purpose of contract fulfilment.
If you send us an enquiry by email, via a contact form or similar before concluding a contract, we will use the data received in this way to carry out pre-contractual measures or to answer any questions you may have about our products.
(2) Legal basis
The legal basis for this processing is Article 6(1)(b) GDPR.
(3) Categories of recipients
Payment service providers, shipping service providers, merchandise management system if applicable, suppliers if applicable (dropshipping).
(4) Storage period
We store the data required for contract processing until the expiry of the statutory warranty period and any contractual guarantee period.
We retain the data required under commercial and tax law for the periods specified by law, generally ten years (cf. Section 257 of the German Commercial Code (HGB), Section 147 of the Fiscal Code of Germany (AO)).
If data has been collected in order to carry out pre-contractual measures, it will be deleted as soon as the measures have been implemented and no contract has been concluded.
3. Information about cookies
(1) Purpose of processing
To ensure a smooth purchase process, the use of technically necessary cookies is absolutely essential. These are used to carry out various actions, such as adding multiple products to a shopping basket. Cookies are stored locally in or by your internet browser on your computer.
(2) Legal basis
The legal basis for this processing is Article 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.
(4) Storage period
The technically necessary cookies are usually deleted when the browser is closed.
4. Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:
(1) Right to erasure, access, rectification.
You have the right of access in accordance with Article 15 GDPR, the right to rectification of your personal data in accordance with Article 16 GDPR and the right to erasure of your personal data in accordance with Article 17 GDPR, provided the legal requirements for this are met. To assert these rights, please contact the controller or the data protection officer (see above).
(2) Right to restriction of processing
You have the right to request the restriction of the processing of data relating to you within the framework of the provisions of Article 18 GDPR.
(3) Right to data portability
In accordance with Article 20 GDPR, you have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
(4) Right to withdraw declaration of consent under data protection law
In accordance with Article 7(3) GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.
(5) Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Article 77 GDPR.
Please also note your right to object in accordance with Article 21 GDPR:
1 a) General: reasoned objection required
If the processing of personal data relating to you is carried out
- to protect our overriding legitimate interest (legal basis in accordance with Article 6(1)(f) GDPR) or
- in the public interest (legal basis in accordance with Article 6(1)(e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
If you object, we will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
1 b) Special case of direct marketing: simple objection is sufficient
If the personal data relating to you is processed for direct marketing purposes, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.
