Data protection regulations
AERTiCKET Suisse AG (hereinafter referred to as AER), as the provider of the website www.aerticket.ch and the controller, takes its commitment to data protection very seriously and designs its website in such a way that only as little personal data as necessary is collected, processed and used. Under no circumstances will personal data be rented or sold to third parties for advertising purposes. No personal data is used for advertising or marketing purposes without the express consent of the visitor.
At AER, access to personal data is only granted to those persons who need this data to perform their tasks within the responsible body, who are informed about the legal provisions on data protection and who have undertaken to comply with them in accordance with the applicable legal provisions (Art. 5 of the EU General Data Protection Regulation (EU GDPR)). The collection, processing, use and transmission of the personal data collected is only carried out to the extent necessary for the performance of a contractual relationship between AER, as the controller, and the visitor, as the data subject, in accordance with Art. 6 (1) EU GDPR.
Changes to the purpose of processing and data use
As the processing methods used may change/evolve due to technical progress and organizational changes, we reserve the right to further develop this privacy policy in accordance with the new technical framework conditions. We therefore ask you to review AER's privacy policy from time to time. If you do not agree with the further developments that occur in the course of time, you can request in writing, in accordance with Art. 17 EU GDPR, the deletion of data that is not stored on the basis of other legal requirements, such as commercial or tax retention obligations.
Anonymous data collection
You can visit the controller's website without telling us who you are. We only learn the name of your Internet service provider, the website from which you visit us and the web pages you visit on our site. The legal basis for this data collection is Art. 6 para. 1 lit. b GDPR. This information is analyzed for statistical purposes. You remain anonymous as an individual user.
Collection and processing of personal data
Personal data is only collected if you provide it to us voluntarily, for example when registering for the newsletter, and give your consent to the use of the data (Art. 6 para. 1 lit. a GDPR). The controller complies with the provisions of Art. 5 and 6 GDPR. As part of the personalized services of the responsible body, your registration data will be processed on the condition of your consent for the purpose of sending our newsletter or for the needs-based design of the electronic services offered. You have the option to object to the storage of your personal data at any time. To do so, please send an e-mail to rolf(at)lauser-nhk.de with the subject "Unsubscribe from databases", stating the website.
Your personal data will be processed and used in accordance with the provisions of the EU GDPR.
Storage period
We only store your personal data for as long as we need it to provide the website you use or to fulfill contractual relationships with you or as long as we have your consent or we have another legitimate interest in data processing. Any further storage will only take place on the basis of legal regulations.
Rights of the data subjects
If we process your personal data, you have the following rights:
Right to revoke a given consent
If the processing of your personal data is based on your consent, you have the right to withdraw this consent. The revocation is valid for the future.
Right to information
You can request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you can request the following information
- the purposes of the processing;
- which personal data is being processed;
- the recipients of the data in the event of data transfer to third parties, as well as the name and country of residence of the third party
- the storage period of the data;
- the existence of a right to lodge a complaint with the competent supervisory authority;
- if the data was not collected directly from you, all available information about the origin of the data.
The requested information will be provided to you within one month of receipt of the written request for information at the latest. Please note that information can only be provided if the identity of the petitioner can be clearly established.
Right to rectification
You have the right to demand that we correct your personal data immediately if it is incorrect.
Right to data erasure ("right to be forgotten")
You have the right to obtain from us the erasure of your personal data where one of the following grounds applies:
- The personal data are no longer necessary for the purposes for which they were collected or processed.
- There is no legal obligation for us to store the data.
- You withdraw your consent on which the processing was based and there is no other legal basis for the storage.
- You object to the processing and there is no legal basis for further storage.
- The personal data was collected and processed unlawfully from the outset.
Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if one of the following conditions is met:
- You contest the accuracy of the processing of your personal data for a period enabling us to verify the accuracy of the personal data;
- the processing of your personal data is actually unlawful and you request the restriction of the use of the personal data instead of erasure
- we no longer need the personal data for the purposes of processing, but you need it to assert your legal claims, or
- You have objected to the processing, but it is not yet clear whether our legitimate interests override your legitimate interests.
Right to data portability
You have the right to receive the personal data concerning you that we have stored in a commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.
Right to object
You have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. E) or f) GDPR. We will then no longer process this data unless we can demonstrate legitimate grounds for the processing which override your interests.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the data protection supervisory authority responsible for the controller.
Export and processing of data in countries outside the European Economic Area
Your personal data will not be exported to countries outside the European Economic Area (hereinafter EEA).
However, personal data is not transmitted to Google as part of the use of analysis programs by the controller, as your IP address is only transmitted in anonymized form. Please read the section "Use of analysis programs" in this privacy policy.
The service providers used by the controller are based and operate their IT infrastructure exclusively within the EEA. This also applies to any use of cloud-based services. Contracts are in place with the service providers that comply with the data protection and data security requirements of the EU GDPR. Even if external service providers are used, AER remains the data controller.
Use and disclosure of personal data
The personal data collected on the websites of the controller will only be used without your consent for contract processing and processing your inquiries. In addition, your data will only be used for advertising and market research purposes by the controller if you have given your prior consent. Otherwise, your data will not be passed on to other third parties. You can of course revoke your consent at any time with effect for the future.
External links
For your information, you will find links on our website that refer to third-party websites. If this is not obviously recognizable, we point out that it is an external link. The responsible body has no influence whatsoever on the content and design of these pages of other providers. The guarantees of this data protection declaration therefore do not apply to external providers.
Use of cookies
The controller uses so-called "cookies" to customize and optimize the customer's online experience and online time. A cookie is a text file that is either temporarily stored in the computer's working memory ("session cookie") or saved on the hard disk ("permanent" cookie). Cookies contain, for example, information about the user's previous accesses to the corresponding server or information about which offers have been accessed so far. Cookies are not used to execute programs or load viruses onto your computer. Rather, the main purpose of cookies is to provide an offer tailored specifically to the customer and to make the use of the service as convenient as possible.
The responsible party uses session cookies and permanent cookies.
Session cookies
The controller mainly uses "session cookies", which are not stored on the customer's hard disk and are deleted when the browser is closed. Session cookies are used for login authentication and load balancing (balancing the system load). These cookies are absolutely necessary for the provision of our website (Art. 6 para. 1 lit. b GDPR).
Permanent cookies
In addition, the controller uses "permanent cookies" to store the personal user settings that a customer enters when using the services of the controller and thus to be able to personalize and improve the service, provided that you give your consent (Art. 6 para. 1 lit. a GDPR). The permanent cookies ensure that the customer will find their personal settings again when they visit the controller's website again In addition, the service providers that the controller has commissioned to analyze user behavior use permanent cookies in order to be able to recognize returning users. These services store the data transmitted by the cookie exclusively anonymously. No allocation to the customer's IP address is retained.
Avoidance of cookies
The visitor has the option of rejecting the setting of cookies at any time. This is usually done by selecting the appropriate option in the browser settings or by using additional programs. Further details can be found in the help function of the browser used by the customer. If the customer decides to disable cookies, this may reduce the scope of the service and have a negative impact on the use of the services of the responsible party.
Use of analysis programs
The controller conducts or has conducted analyses of the behavior of its customers in the context of the use of its service. For this purpose, anonymized or pseudonymized usage profiles are created. Usage profiles are created for the sole purpose of constantly improving the service provided by the controller.
The controller uses the web analytics tool Matomo as part of the web analysis on the website https://aerticket.ch. However, as this tool is not hosted by an external service provider, but is implemented directly on the server environment of the controller, no data is transferred to third parties. This privacy policy therefore applies directly to Matomo.
Use of social media buttons
We offer so-called social media buttons for sharing the content of our online services via social networks. For this purpose, we use the "c't Shariff" solution developed by Heise Medien GmbH & Co. KG, which provides data protection-compliant social media buttons.
The buttons offered directly by the operators of social networks inadmissibly transmit personal data such as the IP address or entire cookies as soon as a website on which they are integrated is loaded, thus providing the social services with precise information about your surfing behavior without being asked. You do not have to be logged in or a member of the respective network to do this. In contrast, a Shariff button only establishes direct contact between the social network and the visitor when the latter actively clicks on the share button. In this way, Shariff prevents you from leaving a digital trail on every page you visit and improves data protection. By using Shariff, we can protect your personal data and still integrate buttons for social sharing. You can find more information about c't Shariff at: https: //www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
Online offers on social media platforms
We offer online services on various social media platforms in order to provide information there and to be able to contact you.
We have no influence on the processing of personal data by the respective platform operator. As a rule, when you visit our social media offerings, the platform operator stores cookies in your browser in which your usage behavior and interests are stored for market research and advertising purposes. The platform operators use the usage profiles obtained in this way - usually across all devices - to display personalized advertising to you. Data processing may also affect people who are not registered as users with the respective social media platform. Your data may be processed outside the European Union, which may make it more difficult to enforce your rights. However, when selecting such social media platforms, we ensure that the operators undertake to comply with EU data protection standards.
The processing of your personal data when you visit one of our social media offerings is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information option as well as communication with you. The legal basis for this is Art. 6 para. 1 lit. f GDPR. You may also have given a platform operator your consent to data processing, in which case the legal basis is Art. 6 para. 1 lit. a GDPR.
Detailed information on data processing in connection with the use of our social media offerings, opt-out options and the assertion of information rights can be found in the privacy policy of the respective platform operator. The links to the privacy policies of the platform operators can be found below.
Use of the YouTube plugin
We use the provider YouTube, among others, to integrate videos. YouTube is operated by YouTube LLC with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The privacy policy for both Google+ and YouTube can be found at:
https://policies.google.com/privacy or in German at: www.google.de/intl/de/policies/privacy/
You can object with effect for the future at: https: //adssettings.google.com/authenticated
Use of the Vimeo plug-in
We use the provider Vimeo for the integration of explanatory videos. Vimeo is operated by Vimeo Inc. with its registered office at 555 West 18th Street in Ney-York, New-York 10011. You can find the privacy policy of Vimeo Inc. at: https: //vimeo.com/privacy
Further information and contacts
If you have any further questions on the subject of "Data protection at the controller", please contact our company's data protection officer. You can ask which of your data is stored by us. In addition, you can send information, deletion and correction requests regarding your data and suggestions at any time by letter or e-mail to the following address:
Dr. Charlotte Lauser
Data Protection Officer
Dr. Gerhard-Hanke-Weg 31
D-85221 Dachau
E-mail: Datenschutz@Lauser-NHK.de