We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. Your data is processed in accordance with applicable personal data protection legislation, in particular the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation acts applicable to us. With the help of this Data Protection Declaration we provide you with comprehensive information about the processing of your personal data by geobra Brandstätter & Co. KG and the rights to which you are entitled.
Personal data are the information that make it possible to identify a natural person. In particular this includes name, date of birth, address, telephone number, email address and also your IP address.
Anonymous data exists if no personal reference to the user can be made.
Responsible body and data protection officer.
Address
PLAYMOBIL®-FunPark
Brandstätterstraße 2-10
D - 90513 Zirndorf
Contact of the data protection officer
dsb@playmobil.de
Your rights as a data subject.
Initially, we wish to inform you of your rights as a data subject. These rights are standardised in Articles 15 - 22 EU-GDPR. This includes:
- The right to information (Article 15 EU-GDPR),
- The right to erasure (Article 17 EU-GDPR),
- The right to rectification (Article 16 EU-GDPR),
- The right to data portability (Article 20 EU-GDPR),
- The right to restrict data processing (Article 18 EU-GDPR),
- The right to object to data processing (Article 21 EU-GDPR),
In order to exercise these rights please contact: funpark-pr@playmobil.de The same applies if you have questions regarding data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority.
Right of objection.
Please note the following with regard to the right of objection:
If we process your data for the purposes of direct marketing, you have the right to object to this at any time without stating the reasons. This also applies to profiling insofar as it is associated with direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for this purpose. The objection can be made free of charge and in free form at: funpark-pr@playmobil.de.
In the event that we process your data to protect legitimate interests; you may still object to this at any time due to reasons arising from your particular situation. This also applies to profiling based on these provisions.
We will no longer process your personal data unless we can demonstrate compelling and legitimate grounds for doing so which outweigh your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
Purposes and legal bases of data processing.
The processing of your personal data complies with the provisions of the EU-GDPR and all other applicable data protection regulations. The legal bases for data processing are derived in particular from Art. 6 EU-GDPR.
We use your data to initiate business, to fulfil contractual and legal obligations, to conduct our contractual relationship, to offer products and services and to strengthen customer relationships, which may include analyses for marketing purposes and direct marketing.
Your consent also represents a permission regulation under data protection. In doing so, we will inform you about the purposes of data processing and your right of revocation. If consent also relates to the processing of special categories of personal data, we will expressly inform you of this as part of the consent procedure, Art. 88 para. 1 EU-GDPR.
Processing of special categories of personal data within the meaning of Art. 9 (1) EU-GDPR applies only where the law so requires and there is no reason to believe that your legitimate interest in the exclusion of processing is overriding, Art. 88 (1) EU-GDPR.
Transfer to third parties.
We shall transfer your data to third parties only within the scope of statutory provisions or with corresponding consent. Otherwise personal data shall not be transferred to third parties unless we are obliged to do so due to compelling legal regulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).
Recipient of the data / categories of recipients
Within our organisation we ensure that only those individuals receive your data who require it to fulfil contractual and legal obligations. This is ensured by filing restricted recipient email addresses in the system, to which only certain groups of people, such as in the recruitment portal only the Human Resources Department or in the contact form only the FunPark team have access.
In many cases service providers support our specialist departments in fulfilling their tasks. The necessary data protection agreements were concluded with all service providers.
Third country transfer / third country transfer intent
Data transfers to third countries (outside the European Union or the European Economic Area) do not take place.
Data storage period
We store your data for as long as they are needed for their respective processing purposes. Please note that numerous retention periods require that data (has) to be stored further on. This relates in particular to commercial or fiscal retention obligations (e.g. Commercial Code, Tax Code, etc.). Unless there are further retention obligations, data will be routinely erased after their purpose is served.
Additionally, if you have given us your consent to do so, or in the event of legal disputes requiring us to use the data as evidence within the statutory limitation period, which may be up to thirty years, we may retain the data; the regular limitation period is three years.
Secure transfer of your data
In order to best protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we employ appropriate technical and organisational security measures. Security levels are continuously reviewed in cooperation with security experts and are adapted to the latest security standards.
Data transfer to and from our websites is always encrypted. For our online presence we offer HTTPS as the transmission protocol, at all times using current encryption protocols such as SSL. Additionally we offer our users content encryption as part of contact forms and job applications. This data can be decrypted only by us. In addition, use of alternative communication channels is possible (e.g. the postal service).
Obligation to provide data
Various personal data are required for the establishment, implementation and termination of obligations as well as for the fulfilment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.
We have summarised the details in the above referenced points. In certain cases statutory regulations require that data be collected or made available. Please note that it is not possible to process your request or to carry out the underlying contractual obligation without provision of this data.
Categories, sources and origin of data
In each case the context determines which data we process: This depends on, for example, whether you place an order online or enter a request in our contact form, or whether you send us a job application or submit a complaint.
Please note that we may also provide information for specific processing situations separately where appropriate at a suitable location, e.g. when uploading application documents or in the event of a contact enquiry.
When visiting our website we collect and process the following data:
- Name of the internet service provider
- Details of the website which linked you to ours
- Web browser and operating system used
- The IP address provided by your internet service provider
- Requested data, data transfer volumes, downloads/file export
- Details of the websites you accessed from ours, including date and time
For reasons of technical security (in particular to ward off attempts to attack our web server) this data is saved in accordance with Art. 6 (1) lit. F EU-GDPR. Anonymisation takes place at the latest after 7 days by shortening the IP address, so that no reference is made to the user.
As part of a contact request, we collect and process the following data:
- Title
- Surname, first name
- Contact details
- Email address
- Details of wishes and interests
As part of the ordering process, we process the following data:
- Title
- Surname, first name
- Delivery address
- Billing address
- Email address
- Data from other sources which may be processed legitimately
We collect and process the following data from online job applications:
- Title
- Surname, first name
- Address
- Contact details
- Email address
- Application documents
For newsletters we collect and process the following data:
- Title
- Surname, first name
- Email address
- Postal code
- Analysis data from the newsletter registration
We collect and process the following data for prize drawings:
- Title
- Surname, first name
- Address
- Email address
- Contact details
Contact form / contact via email
(Article 6 (1) (a), (b) EU-GDPR)
Our website provides a contact form allowing us to be contacted electronically. If you write to us via the contact form, we use the data provided therein to contact you and to answer your questions and requests.
In doing so we observe the principles of data economy and data avoidance by requiring you to provide only the data which we require to contact you. These are your email address as well as the message fields themselves. Due to technical necessity and reasons of legal security your IP address will also be processed. All remaining data are voluntary fields and may be optionally provided (e.g. for a more individual response to your questions).
Should you contact us by email, we will process the information contained in the email solely for the purpose of processing your enquiry.
Newsletter
(Article 6 (1) (a) EU-GDPR)
You can subscribe to a free newsletter via our website. The email address and your name provided in the newsletter subscription will be used to send the personalised newsletter.
In doing so we observe the principles of data economy and data avoidance as only the email address field is indicated as mandatory (or in the event of a personalised newsletter also title, name and postal code). Due to technical necessity and for reasons of legal security, your IP address will also be processed.
Naturally the subscription can be terminated at any time via the opt-out option contained in the newsletter, thereby revoking your consent.
Prize drawings / advertising consent
(Article 6 (1) (a), (b) EU-GDPR)
Our website offers you the opportunity to participate in prize drawings. When you complete the prize form, we process the data therein exclusively for the purpose of the prize drawing.
In doing so we observe the principles of data economy and data avoidance by requiring you to provide only the data which we require to process the prize drawing and to inform you in the event of a win. This is, for example, your name and your email address.
Mandatory fields are indicated with an (*). Due to technical necessity and reasons of legal security your IP address will also be processed. The other fields are optional and may be completed if desired. Without the mandatory fields the prize drawing cannot be processed. In this case participation in the drawing is not possible.
The prize drawing screen also allows you to provide us with your consent to receive advertising. Naturally it is possible to participate in the prize drawing without submitting the advertising consent agreement.
If you issue your consent by clicking the respective checkbox, we will also process your data in order to send you information and offers about our new products, events and actions via email.
If you do not use the provided forms for contact initiation, no further data will be collected.
You can revoke your consent at anytime without stating the reasons by telephoning 0911-9666 1966, via email to funpark-pr@playmobil.de or by regular mail to PLAYMOBIL®-FunPark, Brandstätterstraße 2-10 D – 90513 Zirndorf.
Webshop
(Article 6 (1) (b) EU-GDPR)
We process the data provided by you through the order form only for execution and settlement of the contractual relationship if you do not consent to further usage.
The principle of data economy and data avoidance is observed in that you need provide us only with the information we need to fulfil the contract or to fulfil our contractual obligations (i.e. your name, address, email address, and any data required by the payment method) or for the collection of data for which we are legally obliged.
Due to technical necessity and for reasons of legal security, your IP address will also be processed. Unfortunately, without this data we will have to decline the conclusion of a contract because we cannot implement it, or possibly we will have to terminate an existing contract. Of course, you can provide voluntarily more data if you so wish.
Registration / Customer account
(Article 6 (1) (a), (b) EU-GDPR)
Our website offers users the opportunity to register by providing personal data. In particular, this gives you the advantage of allowing you to see your order history and in storing your provided data for the order form. In the event of repeat orders, this data does not have to be reentered.
Registration is necessary for either fulfilment of an agreement (via our online shop) with you or to carry out pre-contractual measures, or possible if guest access is provided.
The principle of data economy and data avoidance is observed because only the fields necessary for the registration are indicated as mandatory by an (*). These include, for example, email address as well as password including password repeat.
For orders placed in our online shop, we require information for billing (first name, surname, address, email address) as well as for delivery purposes. Should the delivery address differ from the billing address, the above referenced details for the delivery address must also be provided.
Upon registering to our website, the user’s IP address, the date as well as the time of the registration are stored (technical background data). By activation of the button "Register now" you consent to the processing of your data.
Please note that: We store the password you entered in encrypted form. Employees of our company cannot read this password. Accordingly, they are not able to provide you with any information should you forget your password.
In this event use the “Forgot password?” function in order to have an automatically generated new password sent via email. No employee is permitted to ask you for your password either on the telephone or in writing. Never reveal your password in the event you should be asked.
Upon completion of the registration process, your data will be deposited with us for use in the protected customer area. As soon as you have logged onto our website using your email address as a username and your password, this data will be available for actions taken by you on our website (e.g. for orders in our online shop). Placed orders can be tracked in the order history. Changes to the billing or delivery address can be made here.
Registered persons are free to carry out changes / corrections to the delivery address independently in the order history. Our customer service will also gladly make changes / corrections for you if you contact them. Naturally you can also cancel or delete your registration and customer account. In this event please contact via email funpark@playmobil.de or via regular mail PLAYMOBIL®-FunPark, Brandstätterstraße 2-10, D - 90513 Zirndorf
Payment systems / Credit checks
(Article 6 (1) (a), (b), EU-GDPR), (Article 6 (1) (f) EU-GDPR)
You may use PayPal in our online shop. The respective data relevant to payment is collected in order to be able to process your order and payment. Due to technical necessity and for reasons of legal security, your IP address will also be processed.
The principle of data economy and data avoidance is observed in that you provide us only with the information we need to carry out the payment processing and thus the fulfilment of the contract, or for the collection of data for which we are legally obliged (if necessary, substantiate).
Unfortunately, without this data we will have to decline the conclusion of a contract because we cannot perform on the contract without this data.
Our payment system uses SSL encryption to protect your data.
Notice on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal , L-2449 Luxembourg. If the data subject selects “PayPal” as the payment option during the order process in our online shop, the data subject’s data will be automatically transmitted to PayPal.
By selecting this payment option the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is typically first name, surname, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.
For the processing of the purchase agreement, personal data related to the respective order are required. Details regarding PayPal’s data protection policy can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-p... (the legal situation as at 25.5.2018).
Advertising purposes existing customers
(Article 6 (1) (f) EU-GDPR)
geobra Brandstätter Foundation & Co. KG is interested in maintaining its customer relationship with you and providing you with information and offers regarding events, promotions and offers. Therefore your data is processed in order to send you information and offers via email.
If you do not want this, you may at any time object to the use of your personal data for the purpose of direct marketing; this also applies to profiling insofar as it is connected with direct marketing. In the event an objection is lodged, we will no longer process your data for this purpose.
Naturally you can revoke your consent free of charge and in free form without stating the reasons by telephoning 0911-9666 1966, email to funpark-pr@playmobil.de or via regular mail.
to PLAYMOBIL®-FunPark, Brandstätterstraße 2-10 D – 90513 Zirndorf
Applicant’s portal
(Article 6 (1) (a), (b) EU-GDPR)
We are pleased in your interest in working for geobra Brandstätter Stiftung & Co. KG. We are aware of the importance of your personal data and will process the information provided in the job application form solely for the purpose of correct and effective handling of your application as well as for the purpose of contact initiation during the application process. Your data will not be disclosed to third parties without your consent.
As part of the application form you will be asked to provide personal data. In doing so we observe the principles of data economy and data avoidance by requiring you to provide only the data which we require to review your application, e.g. your CV or documents we are legally obliged to acquire. Mandatory details are indicated with an * (asterisk). Due to technical necessity and for reasons of legal security, your IP address will also be processed.
Unfortunately we cannot review your application documents without this data, accordingly our application system will not allow application documents to be uploaded in this case. Naturally you have the opportunity to provide voluntary information in the application form.
We have implemented appropriate security measures in order to best protect the security and confidentiality of your data. Your application documents will be encrypted by the application system and transmitted to us.
We store your data for the above referenced purposes until the application process has been completed and relevant deadlines have expired – no later than six months after notification of a decision. However, you have the option of having us store your application documents for a longer period and using them to apply for other positions which reflect your profile.
To this end we require your consent, which you can give to us by clicking the checkbox before uploading your application documents. In this event your data will be stored for 12 months (please check whether the deadline is as desired). Naturally you can revoke your consent with a future effect at anytime without stating the reasons by telephoning 0911-9666 1966, email to funpark-pr@playmobil.de or via regular mail.
to PLAYMOBIL®-FunPark, Brandstätterstraße 2-10 D – 90513, Zirndorf.
Automated individual decisions
We do not use a purely automated decision making process.
Cookies
(Art. 6 (1) (f) EU-GDPR / Art. 6 (1) (a) EU-GDPR upon consent)
Our websites use so-called cookies in various places. They serve to make our offer user friendlier, more effective and secure. Cookies are small text files which are stored on your computer (locally on your hard drive) and in your browser.
These cookies enable us to analyse how users use our websites. Thus we can design the website content according to the needs of our users. Cookies also allow us to measure the effectiveness of a given advertisement, and for example, to place it in accordance with the user’s thematic interests.
Most of the cookies we use are so-called "session cookies". These are automatically erased after each session. Permanent cookies are automatically erased from your computer after reaching their expiration date, usually six months, or have been deleted by you beforehand.
Most web browsers automatically accept cookies. As a rule, you can change your browser’s settings if you prefer not to send this information. You can still use the offers on our websites without restrictions (exception: configuration tools).
We use cookies to make our offer user friendlier, more effective and secure. Additionally, we use cookies that allow us to analyse how user’s use our websites. This allows us to design the content according to our user’s needs. Cookies also allow us to measure the effectiveness of a given advertisement, and for example, to place it in accordance with the user’s thematic interests.
Cookies are stored on the user’s computer and transmitted to our site. Therefore, you as the user have full control over the use of the cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. In addition, cookies already set can be erased at any time via an internet browser or other software programmes. This is possible in all common internet browsers.
Please note that: Deactivating cookies may result in not being able to fully utilise certain functions of our websites.
User profiles / Web tracking procedure
Econda:
In order to meet the requirements and to optimise this website, anonymised data is collected and stored using solutions and technologies from econda GmbH (http://www.econda.de), and usage profiles are generated from these data using pseudonyms. For this purpose, cookies can be used which enable the recognition of an Internet browser. However, user profiles are not combined with data of the user behind the pseudonym without the explicit consent of the visitor. In particular, IP addresses are made unrecognisable immediately after receipt, which means that an assignment of usage profiles to IP addresses is not possible. Visitors to this website may object to the collection and storage of data at anytime for future effect at any time (with regard to the right of objection we refer to this link: https://www.econda.de/en/data-storage-opt-out/).
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymisation, Google will truncate/anonymise the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB.
You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: Disable Google Analytics
Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).
Two clicks for additional data protection
The social network button is activated by clicking, your browser then establishes a direct connection to the relevant servers. The initial click on the button indicates that you give your consent to transmission of your data to the appropriate provider.
By activating the button it retrieves information which you have accessed on the corresponding page of our website. If you are logged into a any social network, this connection can be assigned to your account even if you do not press the confirm button a second time. When you interact with plugins, for example make a comment by pressing the button again, the corresponding information is transmitted from your browser directly to the provider and stored there.
Social plugins from social networks
Our websites do not use social plugins from social networks
Online offers for children
Persons under the age of 16 may not submit any personal data to us without the consent of their legal guardian, for example a declaration of consent. We encourage parents and guardians to actively participate in the online activities and interests of their children.
Links to other providers
Our websites contain clearly recognisable links to other companies websites. We have no influence on the content of third-party websites linked from our sites. Therefore no guarantee and liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the contents of these pages.
At the time of linking, the linked pages were examined for possible legal violations and recognizable legal violations. Illegal contents were not recognisable at the time of linking. However, a permanent control of the content of the linked pages is not reasonable without concrete indications of an infringement. Upon notification of rights violations, such links will be removed promptly.