Purposes of data processing
Website of the Foundation
The purpose of processing personal data is to operate this website, including to ensure its functionality.
Annual ticket
In order to send annual ticket holders exclusive offers and to avoid that the card is transferred to third parties, personal data is processed.
Donations
The purpose of data processing is to receive donations and, if requested, to create and send donation receipts.
Press accreditation
The purpose of data processing is to send press information and invitations to specific events.
Contact form
The purpose of data processing is to handle and respond to your questions, comments and complaints.
Blog comments
The purpose of data processing is to moderate content on the blog.
Ticket shop
The purpose of data processing is to register for the ticket shop (login), create a customer account (registration or login without registration), to process and complete orders (purchase processing).
a) Logging in to the ticket shop
For technical reasons, the following information is automatically stored on the web server when accessing our ticket shop:
IP address of the requesting computer
Date and time of access
Browser type and version
Operating system
Unique session ID
This data is stored for 14 days and then deleted.
b) Creating a customer account (registration or login without registration)
When you register or log in, we use the data you provide solely for ordering online tickets. This data is stored in a customer database. You can query and change your data stored by the Prussian Palaces and Gardens Foundation Berlin-Brandenburg (SPSG) at any time via your user account or have your user account deleted. The legal basis for processing is Article 6(1)(e) GDPR in conjunction with Section 5(1) Brandenburg Data Protection Act (BbgDSG).
c) Ordering and processing the order (purchase processing)
To complete and process the order, we need the following from you:
First name and surname
Address
Email address
for payment by credit card (credit card number, validity, security code)
for payment by PayPal (PayPal password)
Legal bases for processing personal data
The legal bases for processing personal data are Section 5(1) Brandenburg Data Protection Act (BbgDSG) in conjunction with Article 6(1)(b), (e), (f) GDPR.
Disclosure of personal data
SIRUP GmbH technically operates this website and the ticket shop.
SIRUP GmbH
Brunnenstraße 181
10119 Berlin
Payment processing
To process your donations via our donation form, your personal data will be sent to NEXI GmbH (Helfmann-Park, 765760 Eschborn), if you pay by credit card or SEPA direct debit. If you pay via PayPal, the information will be forwarded to PayPal (Europe) S.à.r.l. et Cie, S. C.A. (22-24 Boulevard Royal, L-2449 Luxembourg).
For ordering and payment processing of online tickets, we transmit your personal data within a work-sharing process to employees of the Prussian Palaces and Gardens Foundation responsible for processing. The transmission is based on our legitimate interest in efficiently and cooperatively conducting internal administrative activities and improving our service, based on Article 6(1)(f) GDPR. For payment processing and, if necessary, a refund of the purchase price, your personal data will be forwarded depending on the chosen payment method: for credit card payment via Nexi Germany GmbH to Commerzbank AG, or for PayPal payment to PayPal (Europe) S.à.r.l. et Cie, S. C.A. (22-24 Boulevard Royal, L-2449 Luxembourg).
We point out that the personal data required for the selected payment method is further processed by PayPal and Commerzbank AG; the data is transmitted in encrypted form via SSL (Secure Socket Layer technology).
Review email
If you agreed to a subsequent review of your visit when purchasing the ticket, we will use your email address provided during the ticket purchase process and send you a survey link via the QuestionPro market research platform. For how QuestionPro handles your data, please refer to QuestionPro's Privacy Policy.
Newsletter
When you consent to receive newsletters, we use the Brevo service from Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin) (within the scope of our legitimate interest in technically flawless handling of our customer information and analysis according to Article 6(1)(f) GDPR). For how Brevo handles your data, please refer to Brevo's Privacy Policy.
Brevo's emails contain a web beacon that notifies Brevo of the newsletter's opening and/or the activation of a link contained therein. This information, including your browser, location and IP address, is used to optimise our communication with you.
Brevo also uses this data in pseudonymised form (without enabling your identification) for its own service analysis and optimisation. Brevo will not use the data to contact you or share it with third parties.
Once you object to receiving newsletters, your personal data in Brevo will be deleted.
Data storage duration
Personal data is stored only as long as necessary to fulfil tasks, in compliance with statutory retention periods, or until you object to the storage.
Deletion of your personal data
We process and store your personal data only for the period required to achieve the storage purpose and in compliance with statutory retention periods. Once the storage purpose ceases and the statutory retention period expires, your data will be deleted.
Use of cookies
Cookies are data sets sent by the web server to the user's web browser and stored there for later retrieval. We use session cookies to improve the shopping cart functionality of the ticket shop. They only contain the unique session ID generated during the website visit and become invalid at the end of the ticket shop visit.
These technically necessary cookies are processed according to Article 6(1)(e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG).
Statistics
Web analysis
The Prussian Palaces and Gardens Foundation Berlin-Brandenburg uses the usage analysis software Matomo, which is recommended by data protection officers for web analysis. No cookies are used that could permanently store tracking information in your browser.
