Privacy policy for visitors to our website.

Selecta® is a brand of Schmidt Spiele GmbH

 

Hello and thank you for your interest in our website. Among other things, we take your rights to privacy, data protection and decision making regarding your personal information very seriously. We would therefore like to outline the following information:

Who are we?

Schmidt Spiele GmbH, Managing Directors: Axel Kaldenhoven and Martina Priemer, Lahnstraße 21, 12055 Berlin, Germany, fax: +49 (0)30 68 39 02 30, email: info@schmidtspiele.de, tel.: +49 (0)30 68 39 02 0

Our data protection officer is

Dr Patrick Schweisthal
DataCo GmbH | Siegfriedstraße 8 | 80803 Munich

+49 89 7400 45840 | pschweisthal@consulting.dataguard.de

 

What happens when you use the website for information purposes only?

When you use our website for information purposes only, meaning when you neither register nor otherwise transmit information as a user, we collect the following data from you: IP address, date and time of visit, time difference from Greenwich Mean Time (GMT), content of request (specific page), access status/HTTP access code, volume of data transmitted, website from which the request was emitted, browser, operating system and its interface, and language and version of browser software. We collect this information via cookies and directly from your browser. The purpose of this processing is the provision of our website as well as statistical analysis. The legal basis for this is Article 6 para. 1 clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. The aforementioned purposes are in our interests. Regarding our use of cookies, we refer you to the explanation under “How do we use cookies on our website?”.

 

What happens when you use our contact form?

If you get in touch with us using our contact form, we will collect the following data: gender/first name/surname/email address, enquiry text, status of graphical security check (mandatory fields), and title/address/telephone number/fax (optional). Only you know the reasons for establishing contact; the response to this directly corresponds to the purpose of processing. Where a specific obligation is involved, whether in relation to initiation, implementation or termination, the legal basis for processing is Article 6, para. 1 b) of GDPR. In this case, we store your data until the end of the legal retention period. In all other cases, the legal basis is Article 6, para. 1, clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. Communication outside of a contractual relationship is in our mutual interests. We store your data until the purpose resulting from the legitimate interests is fulfilled.

 

What happens when you register on our visitor platform?

When you register on our visitor platform we collect the following data from you: username, password, chosen security question, answer to security question, gender/first name/surname/email address of user, community status, status of graphical security check (mandatory fields), title/address/telephone number/fax of user, “opt in to newsletter” status (optional). We register your activity within the internal area as far as this is necessary to deliver the contractual obligation hereby pursued. The legal basis for this is Article 6 para. 1 b) of GDPR. We store this data until the end of the legal retention period.

 

What happens if you take part in our competitions?

When you take part in one of our competitions, data is collected from the statement of participation, usually including: date/time of participation, gender/first name/surname/email address of participant, status of graphical security check (mandatory fields), allocation to chosen competition, winner or non-winner status, and data for delivery of prize if applicable. The legal basis for this is Article 6 para. 1 b) of GDPR.

 

What happens if you register on our closed internal area?

A closed user group may contact us in an internal area. In this case, we process the following data: first name/surname/email address of user, date/time of login, action of user (e.g. password change). Within the internal area we register your actions when is necessary to deliver the obligation hereby pursued. The legal basis for this is Article 6 para 1 b) of GDPR. We store your data until the end of the legal retention period.

 

How do we use Google Analytics?

1) This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files which are stored on your computer and enable analysis of your use of the website. The information generated by these cookies about your use of this website is usually transmitted to a server operated by Google in the USA and stored there. In the event that IP anonymisation has been activated on this website, however, Google first truncates your IP address within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a server operated by Google in the USA and truncated there. Google uses this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activity, and to provide the website operator with further services associated with website and internet use. The legal basis for this is Article 6 para. 1 clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. Our legitimate business interest is to analyse user behaviour on this website. Your interests are protected by your option to opt out of this, which we describe later, and by anonymisation. In addition, we have concluded a processing agreement with the provider and thus ensured our right to issue instructions to the provider. We erase all data after no longer than 14 months.

(2) The IP address transmitted by your browser by Google Analytics shall not be connected to other data by Google.

(3) You may prevent the storage of cookies by selecting the corresponding settings in your browser software; however, we advise you that, in this case, you may not be able to make full use of all the functions of this website. You may also prevent the collection of data generated by cookies and data obtained about your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are processed in their truncated form, meaning that no connection to an individual is possible. If data collected from you contains any reference to you, this shall immediately be excluded and the personal data shall be erased immediately.

(5) We use Google Analytics to analyse the use of our website and allow us to make regular improvements. Using the statistics obtained, we can improve our services and make them more attractive to you as a user. For the exceptional cases when personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(6) Information on third-party providers: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.de/analytics/terms/gb.html. Summary of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html. Privacy policy: https://policies.google.com/privacy.

[(7) This website also uses Google Analytics for a cross-device analysis of user streams which is conducted through a user ID. You can deactivate the cross-device analysis of your activity in your customer account under “My Data”, “Personal Data”.]

 

How do we use social media plug-ins?

(1) We currently only use the following social media plug-ins: Facebook. We use the new Shariff social media buttons, which protect your privacy just as well as the two click system. Further information can be found here: https://www.heise.de/ct/ausgabe/2014-26-Social-Media-Buttons-datenschutzkonform-nutzen-2463330.html.

(2) We have no influence over the data collected or the data processing process, nor do we know the full scope of data collection, the purpose of processing or the storage periods. We also do not have any information on the erasure of data collected by the plug-in provider.

(3) The plug-in provider stores the data collected about you as a usage profile and uses this for the purposes of advertising, market research and/or the needs-based design of their website. Such analysis takes place (including for users who are not logged in) to display needs-based advertising and to inform other social network users about your activities on our website. You have the right to opt out of the creation of this user profile; to exercise this right, you must contact the respective plug-in provider. We offer you the facility to interact with these social networks and other users over plug-ins so that we can improve our services and make them more attractive to you as a user.

(4) The transfer of data takes place irrespective of whether you have an account with the plug-in provider or are logged into it. If you are logged into your account with the plug-in provider, the data collected by us is linked directly with this account. If you click on the activated button and, for example, connect to the page, the plug-in provider stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, in particularly after activating these buttons, to avoid association of your profile with the plug-in provider.

(5) You can find further information on the purpose and scope of data collection and the processing of this data by the plug-in provider in the provider’s privacy policy, a link to which is provided below. Under this link you can also find further information on your rights and options regarding privacy and privacy settings.

(6) We also maintain a company site with this provider. If you interact with this site, there is a possibility that the provider may process your data as described in paragraphs 2 to 5.

(7) The legal basis for this is Article 6 para. 1 clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. Our legitimate business interest is to give you the opportunity to interact with us voluntarily through social networks – as described here.

(8) Address of the plug-in provider and URL with information on their privacy policy:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php. Facebook is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

How do we use YouTube videos?

(1) We have integrated YouTube videos into our online services, which are stored on http://www.YouTube.com and can also be played directly from our website. [They are all integrated in “extended data protection mode”; that is, no data relating to you as a user can be transmitted to YouTube if you do not play the videos. Only when you play the videos shall the data referred to in paragraph 2 be transmitted. We have no influence over this transfer of data.]

(2) When you visit the website, YouTube receives the information that you have called up the corresponding sub-page of our website. The data referred to under paragraph 3 is also transmitted. This happens irrespective of whether you have a YouTube account or are logged into it. If you are logged into Google, your data is associated directly to your account. If you do not want an association to be made to your YouTube profile, you must log out before activating the button. YouTube stores your data as a usage profile and uses this for the purpose of advertising, market research and/or the needs-based design of their website. Such analysis takes place (including for users who are not logged in) to deliver needs-based advertising and to inform other users about your activities on our website. You have the right to opt out of the creation of this user profile; to exercise this right you must contact YouTube.

(3) You can find further information on the purpose and scope of data collection and the processing of this data by YouTube in their privacy policy. You can also find further information there on your rights as well as settings to protect your privacy: https://policies.google.com/privacy. Google also processes your personal data in the USA and is subject to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

(4) The legal basis for this is Article 6 para. 1 clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. We also refer here to our interests in direct advertising in accordance with Recital 47 of GDPR.

(5) We maintain our own channel with this provider. If you interact with this site, there is a possibility that the provider may process your data as described in paragraphs 2 and 3.

 

How do we use Google Maps?

(1) We use Google Maps services on this website. This enables us to display interactive maps directly on the website and allows you to make convenient use of the map function.

(2) When you visit the website, Google receives the information that you have called up the corresponding sub-page of our website. The data referred to under paragraph 3 is also transmitted. This happens irrespective of whether you have a Google account or are logged into it. If you are logged into Google, your data is associated directly to your account. If you do not want an association to be made to your Google profile, you must log out before activating the button. Google stores your data as a usage profile and uses this for the purpose of advertising, market research and/or the needs-based design of their website. Such analysis takes place (including for users who are not logged in) to deliver needs-based advertising and to inform other social network users about your activities on our website. You have the right to opt out of the creation of this user profile; to exercise this right you must contact Google.

(3) You can find further information on the purpose and scope of data collection and the processing of this data by the plug-in provider in their privacy policy. You can also find further information there on your rights as well as settings to protect your privacy: https://policies.google.com/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(4) The legal basis for this is Article 6 para. 1 clause 1 f) of GDPR. On this basis, the processing of personal data is possible without the consent of the user if processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that these interests do not override the interests or fundamental rights and freedoms of the user who requires protection of personal data, in particular when the user is a child. We also refer here to our interests in direct advertising in accordance with Recital 47 of GDPR. We erase data as soon as it no longer has a purpose, at the latest when you opt out of its processing.

Are we obliged to collect this data? What happens if we do not collect this data?

There is no legal obligation to collect this data. However, there is the possibility that our website will be adversely affected if we do not collect the data.

To whom to we transmit the data? Does the data leave the European Union or the European Economic Area?

The following companies receive the aforementioned data, and it is indicated below if the data leaves the European Union or the European Economic Area:

Collection in a third country:

  • Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other applications and http://www.facebook.com/about/privacy/your-info everyoneinfo.
  • Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://policies.google.com/technologies/partner-sites?

Other:

  • Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (Google Analytics)

 

Do we guarantee adequate data security?

We maintain up-to-date technical measures to guarantee the protection of your data, in particular to protect your personal data during data transmission and from being disclosed to third parties. These are adjusted in line with technological updates.

 

How do we use cookies on our website?

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on the hard drive of your browser and send certain information to where the cookie was set (in this case, us). Cookies cannot run a program or transfer viruses to your computer. Their purpose is to make internet services more user-friendly and efficient. Cookies are kept for no longer than the following retention period:

 

What rights do you have?

You have a number of rights. You have the right to access your own personal data which has been processed, as well as the right to erasure, the right to restriction of processing, and the right to object to processing and data transmission. You also have the option to make a complaint about us to the relevant supervisory authority. We politely point out that these rights may be subject to conditions that we will insist upon.

 

Opt-out cookie

Web tracking on this page is: activated. Deactivate now