Privacy Policy
The Controller in the meaning of the European General Data Protection Regulation (GDPR) and other national data protection legislation as well as other data protection regulations is:
"Nena" Musikverlag GmbH
Managing Director: Gabriele Kerner
Jakobikirchhof 8
20095 Hamburg
Germany
Tel: +49 40 / 69909249
Email: shop@nena.de
www.shop.nena.de
I. Provision of our website and log files
1. Scope of processing of personal dataIf you access our website, your browser will establish a connection with the web server of our host ALL-INKL.COM – Neue Medien Münnich, Owner Rene Münnich, Hauptstr. 68, 02742 Friedersdorf. In the process, connection data will be created and this will be stored by ALL-INKL.COM in ‘log files’.
Log files contain
- Time / date of the request
- Your operating system and browser type
- The URL being requested
- Your IP address
2. Purpose of the data processing
ALL-INKL.COM uses the data on our behalf for the presentation and delivery of our content as well as for statistical purposes.
3. Legal basis for processing
Legal basis for the temporary storage of data and log files is Article 6 (1) point (f) of the GDPR.
4. Duration of the storage
Your IP address and other data will be stored by ALL-INKL.COM for 10 days.
5. Option to object and have data deleted
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. As a result, the user does not have any option to object.
II. Registration
1. Scope of processing of personal dataOn our website, we offer users the opportunity to register by submitting their personal data. This involves the entering of data into an input screen and sending it to us, where it will be stored. Sharing of data with third parties will not take place during the registration process. The following data is collected and stored in this respect:
- Salutation and/or gender
- Title
- Email address
- Password (encrypted)
- Telephone number
- Billing address
- Delivery address
- Type of device with which you are accessing our web shop
- Time of your registration
- Time of your last visit
- Payment method
Data collection and storage in the context of pure registration is done for purposes of pre-contractual measures.
The legal basis for processing of data in the case of pure registration – without placing an order - is the provision of your consent in accordance with Article 6 (1) point (a) of the GDPR.
We shall store the data for as long as you maintain the registration.
You can send an email to us any time at shop@nena.de, in order to delete the data stored in your account completely and/or partly, and hence revoke your consent; in addition, you can also personally undertake some changes and partial deletion of your data using the “My account” menu function. If the data is required for the fulfilment of a contract or for carrying out pre-contractual measures, then premature full deletion of the data will only be possible, if there are no contractual and legal obligations which preclude such a deletion. This can be the case, for instance, if you have placed an order.
III. Orders
If you place an order with us, we shall use the data mentioned in section II above to process the transaction with you.
The personal data you submitted to us in connection with a goods order will be shared with third parties within the context of contract processing by the service partners engaged by us, namely DHL Paket GmbH, Kruppstr. 74, 45145 Essen.
We process personal data in connection with the processing of payment. The exact nature of personal data processed will vary depending on the payment method.
The collection and storage of data is done in order to identify you as a customer, to enable the processing, fulfilment and completion of your order together with your payment, to conduct correspondence or telephone calls with you, to deliver invoices and to process claims against you.
The processing of the data takes place based on your order and in accordance with Article 6 (1) point (b) of the GDPR.
We shall store your data for as long as your account exists with us in the scope indicated and/or up to the expiry of the stipulated legal retention period.
Deletion of the order details through the deletion of your account undertaken by you is only possible in the event that no contractual and legal obligations precluding such deletion exist.
IV. Contact form / email contact
There is a contact form on our website which can be used for contacting us electronically. If you decide to use this option, data entered into the input screen will be transmitted to us and stored. The data processed is: Salutation, first name, surname, email address as well as any other personal data found in your message. When you press the “Send” button, an email message will be generated and sent to us. In this process other data is generated and stored by us, for instance the time you made contact with us.
The legal basis for processing of the data is Article 6 (1) point (a) of the GDPR - provided you have given your consent. The legal basis for the processing of data transmitted in the process of sending an email message to us is Article 6 (1) point (f) of the GDPR. If the time of email contact is based on the conclusion of the contract, the supplementary legal basis for the processing shall be Article 6 (1) point (b) of the GDPR.
The processing of personal data from the input screen is used by us for the sole purpose of processing the inquiry. If we are contacted via email, we necessarily also have a legitimate interest in processing the data.
The data will be erased as soon as it is no longer required for fulfilment of the intended purpose of their collection. For personal data from the input screen of the contact form and that sent to us by email, this erasure will then take place when the conversation exchange with you has ended. The conversation shall be deemed to have ended, if it can be deduced from the circumstances that the issue raised has been clarified.
You have the option of revoking your consent for the processing of personal data any time by sending an email message to shop@nena.de. If you contact us by email, you can revoke consent to the storage of your personal data at any time. In such cases, the conversation cannot be continued. All personal data which was collected and stored during the process of making contact will be erased in this case.
VI. Your rights
You can demand confirmation from the Controller, as to whether we process personal data relating to you. If such processing is taking place, you can then demand information about the following aspects from the Controller:
(2) categories of personal data being processed;
(3) recipients and/or categories of recipients to whom your personal data was disclosed or is still being disclosed;
(4) the planned duration of storage of your personal data or, in case it is not possible to get concrete information on this, criteria for determining the storage duration;
(5) the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the Controller or a right to object to this processing;
(6) the existence of the right to complain to a supervisory authority;
(7) all available information about the origin of the data, if the personal data was not collected from the data subject;
(8) the existence of an automated decision making process, including profiling, pursuant to Article 22 (1 and 4) of the GDPR, and - at least in these cases - meaningful information about the logic involved as well as the scope and desired effect of such processing on the data subject.
You have the right to demand correction and/or completion of your data from the Controller, provided the processed personal data relating to you is false or incomplete. The Controller must undertake the correction without delay.
You can demand the restriction of processing of your personal data on the following conditions:
(2) if the processing is unlawful and yet you reject the deletion of the personal data, but instead demand restriction on the use of the personal data;
(3) if the Controller no longer needs the personal data for the intended purposes of the processing, but you need them for purposes of asserting, exercising or defending legal claims, or
(4) if you have raised objection against the processing in accordance with Article 21 (1) of the GDPR, and it has not yet been established whether the Controller’s legitimate reasons override yours.
You can demand from the Controller, that your personal data be deleted immediately, and the Controller is obliged to delete this data without undue delay, as long as one of the following reasons applies:
(2) point (a) of the GDPR, and there is no other legal basis for the processing.
(3) You are raising a complaint against the processing in accordance with Article 21 (1) of the GDPR, and there are no overriding legitimate reasons for the processing, or you are raising a complaint against the processing in accordance with Article 21 (2) of the GDPR.
(4) Your personal data was unlawfully processed.
(5) The deletion of your personal data is necessary for the fulfilment of a legal obligation according to EU legislation or legislation of the Member States, to which the Controller is subject.
(6) Your personal data was collected in relation to the services offered by the information society, in accordance with Article 8 (1) of the GDPR.
If the Controller has disclosed your personal data, and if he is obliged to delete it in accordance with Article 17 (1) of the GDPR, he shall take appropriate measures, even of a technical nature, taking into consideration the available technology and the costs of implementation, to inform the person responsible for data processing and who processes the personal data, that you as the data subject have demanded from them the deletion of all links to this personal data or of all copies or replications of this personal data.
The right to deletion of data does not arise, provided the processing is necessary
(2) for the fulfilment of a legal obligation which demands that the processing be done according to the legislation of the Union or of Member States, to which the Controller is subject, or for carrying out a task which is in the public interest or if the processing is done in exercise of public authority vested on the Controller;
(3) for reasons of public interest in the area of public health in accordance with Article 9 (2) points (h and i), as well as Article 9 (3) of the GDPR;
(4) for purposes of archives, scientific or historical research purposes or for statistical purposes - all of which are in public interest - in accordance with Article 89 (1) of the GDPR, provided that the right mentioned in section a) probably makes the realisation of the aims of this processing impossible or restricts it considerably, or
(5) for purposes of asserting, exercising or defending legal claims.
If you have asserted the right to correction, deletion or restriction of processing against the Controller, the latter is obliged to inform all recipients, to whom your personal data was disclosed, about this deletion, correction or restriction of processing, unless this turns out to be impossible or is associated with disproportionate expenses. You have the right to demand from the Controller that you be informed about these recipients.
You have the right to receive your personal data, which you submitted to the Controller, in a structured, standard and machine-readable format. You also have the right to transfer the data to another Controller without hindrance from the Controller, to whom the personal data was submitted, provided
(2) the processing is done using automated methods.
You have the right, for reasons arising from your particular situation, to raise objection, any time, against the processing of your personal data, which is being done in accordance with Article 6 (1) point (e or f) of the GDPR; this also applies to profiling based on these provisions. The Controller will not process your personal data anymore, unless he can cite compelling legitimate reasons for the processing, which override your interests, rights and freedoms, or unless the processing serves the purpose of asserting, exercising or defending legal claims.
You have the right to revoke your consent to provisions of the privacy policy at any time. The legality of the processing done up to the time of revocation, and based on your consent, will not be affected by this revocation of consent.
You have the right to reject being subjected to a decision exclusively based on automated processing - including profiling - which has legal implications on you or affects you considerably in any similar way. This does not apply if the decision
(2) is permissible on the basis of legal provisions in the Union or Member States, to which the Controller is subject, and these legal provisions contain appropriate measures for safeguarding your rights and freedoms, as well as your legitimate interests, or
(3) happens with your express consent.
Other administrative or judicial measures of redress notwithstanding, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, your place of work or place of alleged infringement, if you believe that the processing of your personal data constitutes a breach of the GDPR. The supervisory authority, to which the complaint is submitted, shall inform the complainant about the status and outcome of the complaint, including the possibility of legal redress in accordance with Article 78 of the GDPR.
V. Cookies
Our website uses cookies. Cookies are text files that are stored on the Internet browser or stored by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be clearly identified the next time the website is accessed.
b) Log-in information relating to your user account
The purpose of using these technically necessary cookies is to make it easier for users to navigate websites. Some functions of our website are not available without the use of cookies. These functions require the browser to be recognised even after you have moved to a different page.
Art. 6 (1) (f) GDPR provides the legal basis for processing the personal data with the use of cookies.
Cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by adjusting the settings in your Internet browser accordingly. Cookies that have already been stored can be erased at any time. This can also occur automatically. If cookies are disabled for our website, not all of the functions of this website may be fully available to you.