Responsible party
ZSL Betreibergesellschaft mbH
Am Sportforum 2
04105 Leipzig
Domicile and Register Court: Amtsgericht Leipzig / HRB 18466
Chief Executive Officer: Prof. Dr. Michael Kölmel, Matthias Kölmel, Philipp Franke
Phone number: +49 341 2341-0
Eamil address: office{at}arena-leipzig.de
Data Protection Officer
E-Mail address: datenschutz{at}arena-leipzig.de
Phone number: +49 341 2341-166
The protection of your personal data is very important to us. We treat this issue with great care and therefore provide you with the following information on how we handle your personal data. With the new GDPR coming into effect on May 25, 2018, we've updated our privacy policy accordingly. If we collect, manage, process, or use your personal data as part of the ordering process for a purchase, we only do so in accordance with German and European data protection law and the new General Data Protection Regulation. You can visit our website at any time and obtain information without having to provide any personal details. You remain anonymous during your visit to our site. The connection data transmitted by your Internet browser each time you visit a page, such as the date, the length of your visit, or the name of your Internet service provider, is used by us without reference to your person, unless you have logged in with your user name and password. You provide personal information voluntarily, for example when you register on our site, place an order, subscribe to a newsletter, or use similar functions.
1. Basic information on data processing and legal basis
1.1. The websites www.quarterback-immobilien-arena.de, www.sportforum-leipzig.de, www.arena-ticket.com and https://tickets.arena-ticket.com (hereinafter referred to as “websites”) are Internet presences of ZSL Betreibergesellschaft mbH, hereinafter referred to as ‘we’ or “operator.” We appreciate your interest in our online offering and would like to take this opportunity to inform you about how we handle personal data and to guarantee your right to informational self-determination. The legal basis for this is provided in particular by the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG new) and the Telemedia Act (TMG). This privacy policy provides you with an overview of the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content (hereinafter collectively referred to as “online offering” or “website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) used to run the online offering.
1.2. With regard to the terms used, such as “personal data” or its “processing,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
1.3. The personal data of users processed within the scope of this online offering includes inventory data (e.g., names and addresses of customers), usage data (e.g., the websites visited on our online offering, interest in our services), and content data (e.g., entries in the contact form).
1.4. The term “user” covers all categories of persons affected by data processing. These include our business partners, customers, interested parties, and other visitors to our online offering. The terms used, such as “user,” are to be understood as gender-neutral.
1.5. We process users' personal data only in compliance with the relevant data protection regulations. This means that user data is only processed - if there is legal permission to do so. This applies in particular if data processing is necessary or legally required for the provision of our contractual services (e.g., order processing) and online services, - if the user has given their consent, - or on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation and security of our online offering within the meaning of Art. 6 (1) lit. f. GDPR, in particular for reach measurement, creation of profiles for advertising and marketing purposes, collection of access data, and use of third-party services). - And, of course, in some cases we are legally obliged to process data (e.g. to disclose data to investigative authorities).
1.6. We would like to point out that the legal basis for consent is Art. 6 (1) (a) and Art. 7 GDPR, the legal basis for processing for the performance of our services and the implementation of contractual measures is Art. 6 (1) (b) GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1) (f) GDPR.
2. Security measures
2.1. We take organizational, contractual, and technical security measures in keeping with the latest technology to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
2.2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.
3. Disclosure of data to third parties and third-party providers
3.1. Data will only be disclosed to third parties within the scope of legal requirements. We only pass on user data to third parties if this is necessary, for example, on the basis of Art. 6 (1) (b) GDPR for contractual purposes or for legitimate interests pursuant to Art. 6 (1) (f) GDPR for the economic and effective operation of our business.
3.2. If we use subcontractors to provide our services, we take appropriate legal precautions and technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal provisions.
3.3. If, within the scope of this privacy policy, content, tools, or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used and their registered office is located in a third country, it can be assumed that data will be transferred to the countries where the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable, i.e., countries outside the EU or the European Economic Area. Data is transferred to third countries either if an adequate level of data protection exists or if there is legal permission to do so.
4. Purchase of tickets and vouchers
The operator uses your data to properly fulfil your order or provide the desired service, to process complaints, and to answer questions and provide advice as part of our customer service. When you register on our site, your data is stored to create a customer account, enabling you to shop more quickly and conveniently in the future. At the same time, you also have the option of placing your order as a guest. In this case, no customer account will be created. We need your telephone number for any queries and to ensure that the products are delivered correctly. We need your email address to confirm receipt of your order and to communicate with you during the further course of the order. When you subscribe to our newsletter, your email address will be used with your consent exclusively for our own advertising purposes and only until you unsubscribe from the newsletter. You can unsubscribe at any time directly at the bottom of each newsletter using the “Unsubscribe from newsletter here” option. Here, your name, address, age, email address, and payment details are collected for the purpose of fulfilling the contract. We also collect a phone number exclusively for queries regarding problems with purchase or payment processing. Depending on the selected payment method, the data is transmitted to the respective payment provider exclusively for the purpose of payment processing. These are:
- SIX Payment Services (Europe) S.A.
Zweigniederlassung Deutschland
Theodor-Heuss-Allee 108
60486 Frankfurt/Main - PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg - Computop GmbH
Schwarzenbergstrasse 4
96050 Bamberg
The respective privacy policies of the payment providers apply. If you have provided personal data in your customer account www.arena-ticket.com , you can correct it yourself at any time in your user profile after logging in, provided it is incorrect. If you complete the booking process as a guest and would like to correct the personal data you have provided after completing your purchase, please contact us at the following email address: ticket{at}arena-ticket.com.
5. Contact
When you contact us (via the contact form or email), we process your details for the purpose of handling your contact request and processing it in accordance with Art. 6 (1) (b) GDPR.
6. Newsletter
6.1. 6.1. If the user subscribes to the newsletter, we use the data required for this purpose or separately provided by the user to send them the email newsletter we send out regularly in accordance with the user's consent. You can unsubscribe from the newsletter at any time by sending a message to the contact option mentioned at the beginning of this privacy policy or by using the link provided for this purpose, which can be found at the end of every newsletter email.
6.2. Consent to subscribe to the newsletter is given using the double opt-in procedure. This means that the user gives their consent twice. After initially granting consent by opting in, the user confirms their consent in a second step after receiving a short email containing a confirmation link, and only when their consent and identity have been confirmed will they be added to the corresponding mailing list. Users can unsubscribe at any time.
6.3. 6.3. We use Newsletter2Go to send and manage user data. All data protection information regarding the application can be found at the following link: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
6.4. We use the aforementioned statistical services to track clicks from our newsletter to our offers and, together with our service providers Newsletter2Go, analyse the opening and click rates as well as other usage data of the newsletter to tailor the newsletter to your interests and improve our service.
6.5. You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time. There is a link for this in every newsletter. You can also unsubscribe directly on this website at any time or notify us of your request using the contact details provided at the end of this privacy policy.
7. Collection of access data and log files
7.1. Based on our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
7.2. Log file information is stored in full for security reasons (e.g., to investigate misuse or fraud).
8. Cookies
8.1. Cookies are pieces of information that are transferred from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.
8.2. We use “session cookies” for legitimate interests pursuant to Art. 6 (1) (f) GDPR, which are only stored for the duration of the current visit to our website. A randomly generated, unique identification number, known as a session ID, is stored in a session cookie. A cookie also contains information about its origin and storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online presence and, for example, close your browser.
8.3. If you do not want cookies to be stored on your computer, please deactivate the corresponding option in your browser's system settings. Stored cookies can be deleted in the browser's system settings. Excluding cookies may lead to functional restrictions of this online offer.
8.4. You can object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) widersprechen.
9. Children
Data relating to children may not be processed without the consent of their parents or guardians. We recommend that all parents and guardians instruct their children in the safe and responsible use of personal data on the Internet. Should we nevertheless receive data without consent, we will cease processing it as soon as we become aware of this. If you are under 18 years of age, please ask your parents or legal guardians for permission to register on our website. For children under 14 years of age, legal guardians must consent to this privacy policy.
10. Google Analytics
10.1. Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about your use of the online service is usually transferred to a Google server in the USA and stored there.
10.2. We use Google Analytics, including the functions of Universal Analytics. Universal Analytics allows us to analyze activity on our pages across devices (e.g., when accessing via laptop and later via tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment occurs, for example, when you register for a customer account or log in to your customer account. However, no personal data is forwarded to Google. Even though Universal Analytics adds additional functions to Google Analytics, this does not mean that it restricts data protection measures such as IP masking or the browser add-on.
10.3. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
10.4. Google wird diese Informationen in unserem Auftrag benutzen, um die Nutzung unseres Onlineangebotes durch die Nutzer auszuwerten, um Reports über die Aktivitäten innerhalb dieses Onlineangebotes zusammenzustellen und um weitere (mit der Nutzung dieses Onlineangebotes und der Internetnutzung verbundene) Dienstleistungen uns gegenüber zu erbringen. Dabei können aus den verarbeiteten Daten pseudonyme Nutzungsprofile der Nutzer erstellt werden.
10.5. We use Google Analytics to display the ads placed within Google's and its partners' advertising services only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Google (so-called “Remarketing Audiences” or “Google Analytics Audiences”). With the help of Remarketing Audiences, we also want to ensure that our ads correspond to the potential interests of users and do not appear intrusive. “ or ”Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interests of users and do not appear intrusive.
10.6. We only use Google Analytics with IP anonymization enabled. This means that the IP address of users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area is truncated by Google. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
10.7. The IP address transmitted by your browser is not merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings accordingly; you can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
10.8. For more information about Google's use of data, settings, and options for objection, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners (“Data use for advertising purposes”), http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses to show you ads”).
11. Facebook
11.1 Our website contains links to the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The Facebook links are recognizable by the Facebook logo on our site.
11.2. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
11.3. When you visit our pages, a direct connection is established between your browser and the Facebook server via the link. Facebook thereby receives the information that you have visited our site with your IP address. If you click on the Facebook button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook. Further information on this can be found in Facebook's privacy policy. Weitere Informationen hierzu finden Sie in der Datenschutzerklärung von Facebook.
11.4. If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook account.
12. Competitions
All personal data of participants will be collected, processed, stored, and used for the conditions of participation and for the purposes expressly stated in the respective conditions of participation. Once the competition has ended and the winners have been determined, the participants' data will be deleted immediately, unless the personal data is still required for the purpose of awarding the prize (e.g., handing over concert tickets). In this case, the data may also be passed on to partners who are providing the prize. The details are always explained in the relevant conditions of participation. Each participant is free to revoke their participation in the competition and their consent to the storage and use of their data. Once the data has been deleted, participation in the competition is excluded.
13. Links to other websites
Links to other websites are provided for informational purposes only. Other websites are beyond our control and are not covered by this policy. When you access other websites via the links provided, the operators of those websites may collect data about you, which they may then use in accordance with their respective privacy policies, which may differ from our policy. We assume no liability or responsibility for these unrelated policies and practices.
14. Your rights
14.1. You have the right to request information about the personal data we have stored about you free of charge.
14.2. In addition, you have the right to have inaccurate data corrected, to restrict the processing and deletion of your personal data, if applicable, to assert your rights to data portability, and, in the event of unlawful data processing, to lodge a complaint with the competent supervisory authority.
14.3. You may also revoke your consent, in principle with effect for the future.
15. Deletion of data
15.1. The data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the user data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.
15.2. In accordance with legal requirements, data is retained for six years in accordance with Section 257 (1) of the German Commercial Code (HGB) (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for ten years in accordance with Section 147 (1) of the German Fiscal Code (AO) (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
16. Withdrawing your consent
You may object to the further processing of your personal data at any time in accordance with the statutory provisions. You may object to the processing of your data for direct marketing purposes.
17. Changes to the privacy policy
17.1. We reserve the right to change the privacy policy to adapt it to new legal requirements or in the event of changes to the service or data processing. However, this only applies to statements regarding data processing. If your consent is required or if parts of the privacy policy contain regulations relating to the contractual relationship with you, changes will only be made with your consent.
17.2. We ask you to regularly review the content of the privacy policy.
18. Supervisory authority
Der Sächsische Datenschutzbeauftragte
Kontor am Landtag Devrientstraße 1
01067 Dresden Telefon: 0351/493-540
Fax: 0351/493-5490
E-Mail: saechsdsb{at}slt.sachsen.de;
19. Data Protection Officer
If you have any comments or questions about this Privacy Notice or our data processing practices, or if you wish to request information, correction, blocking, or deletion of data, or revoke your consent, please send an email to:
Email address: datenschutz{at}arena-leipzig.de
Phone number: +49 341 2341-166
This Privacy Notice was last updated on 25.05.2018