This document lays out our procedures in managing and protecting your personal data, how we limit the risk of a data beach and how we comply with the new GDPR data protection laws.
Old Music Group hold and updates a record of its data processing activities in accordance with GDPR.
- Who is your personal data controller?
Controller of data provided by the User is Old Music Group Polska Sp. z o.o., with registered office in Kraków, Rynek Główny 28, 31-010 Kraków, registered in the commercial register kept by the District Court in the city of Kraków, 11th Commercial Division under number KRS 0000801659, NIP: 677-244-63-54 (hereinafter referred to as the “Data Controller”).
- Who may provide you with additional information on the processing of your personal data?
You may contact our Data Controller at: email@example.com
You may also write about any and all issues concerning the processing of personal data and use of rights connected with data processing to an indicated data protection officer at: firstname.lastname@example.org or by mail to:
Inspektor Ochrony Danych Osobowych
Old Music Group Polska Sp. z o.o.
Rynek Główny 28
31-010 Kraków, Poland
- What is the purpose and legal basis for the processing of your personal data?
The Data Controller may process personal data:
- on the basis of your consent – in such a case your personal data will be processed for the purposes for which the consent was provided. A detailed description of the purpose is provided at the moment the consent is collected. On the oldmusicgroup.com website you may grant your consent for the processing of data in connection with:
- Ticket Alarm subscription – data is processed for the purpose of transferring the selected Ticket Alarm notifications;
- Newsletter subscription – data is processed for the purpose of transferring a newsletter;
- Transferring a contact form for Tickets/Merch order– data is transferred for the purpose of establishing contact or providing information in connection with the sending of the contact form.
Legal basis for the processing is Article 6 (1) a) of the GDRP (i.e. data subject has given consent to the processing of his or her personal data).
- necessary for the purposes resulting from the legitimate interest of the Data Controller, i.e. to consider claims, if any. The legal basis for the processing is Article 6 (1) f) of the GDRP (i.e. processing is necessary for the purposes of the legitimate interests pursued by the data controller).
If you have any questions or concerns, please contact us at the address indicated in point 2.
- What kind of Personal Data may be required by us?
Our Site’s registration forms, order forms and any other forms require you to give us personal information. You must register on our site to join Newsletter or Ticket Alert Subscription, Order Tickets and/or Merch and you will be asked to provide financial information, so your order can be processed.
Old Music Group collects the following data to process your order:
Name and Surname
Date of birth
Old Music Group collects the following data upon signing up to marketing communications (TicketAlarm, Newsletter):
Consent for us to contact you via e-mail for marketing purposes, is collected by:
Signing up for our newsletter and TicketAlert via our Site.
Old Music Group may collect the following data when you contact us via social media, in order to manage your query:
Social Media username – this information is stored only as a note on the order you’re enquiring about.
Your personal information is used by us to contact when necessary, in connection with transactions entered by you on the Site. We will not use your personal information for communications not associated with your transactions without your explicit consent.
The service offered by Old Music Group may not be used by persons under the age of 16.
Financial information that is collected is used to authorise payment and bill you for products and services. When you make a purchase on the Site, you provide your financial or personal information to Old Music Group and accept that this data will be shared with those third parties necessary to process your transactions with us, such as credit card companies, banks and the companies that handle shipping on our behalf. This included exchanging information with other companies and organisations for fraud protection and credit risk reduction.
Except as stated above, we will not share financial information with third parties without your prior consent.
We only collect data strictly necessary to meet the purpose of processing. In the event of any change is processing, Old Music Group will ensure that the data collected are still relevant to the updated process.
- Is it necessary to provide us with your personal data?
You are free to provide us your personal data, however, such data is necessary in order to perform the above mentioned purposes.
- How long do we store your personal data?
The Data Controller will not store your personal data longer than necessary, in order to achieve the purposes for which it was collected or longer than stipulated under the law.
Depending on the legal basis of processing, your personal data will be stored:
- on the basis of your consent – personal data will be stored until the moment you withdraw your consent or the purpose of processing for which the data was obtained ends, depending on whichever is earlier.
- on the basis of a contract made – personal data will be processed by the time the claims resulting from the contract are belated.
- on the basis of legitimate interest of the data controller – by the time the interest is met or until any objection is submitted in relation to such processing, unless there appear legitimate grounds for further processing.
All Personal Data is retained for a necessary period to ensure we can comply with any legal obligations that may arise where we are required to share historic data.
Personal data is stored securely in a central data centre.
- What are your rights in respect of data processing?
Based on the principles of the GDRP you have the right to demand access to your data and to seek data rectification, deletion or blocking their processing. Upon your request data controller will provide you with the copies of personal data subject to processing, while any further copies may be obtained subject to a reasonable fee as a result of administrative costs.
In the event of data processing on the basis of your consent, you have the right to withdraw the consent at any time. Such withdrawal does not influence compliance with the law of the processing, which was performed based on the consent prior to its withdrawal. To withdraw your consent contact: email@example.com.
To the extent to which your data is processed by automated means in order to conclude and perform the agreement or based on the consent granted – you may transfer your personal data, i.e. receive your personal data from the controller of your data, using a structured commonly used format in a machine-readable form. You may sent such data to another data controller.
In the event of data processing on the basis of legitimate interest of the Data Controller you have the right to raise an objection for the reasons connected with your specific situation.
You may also pursue a claim with the supervisory body responsible for the protection of personal data (President of the Office of Personal Data Protection).
In order to use the above mentioned rights you should contact your data controller or data protection officer. Contact details are as above.
- Who may be your data importer?
When explicit consent is given by opting in, your personal information is shared between Old Music Group and the Ticketing Agents, Bookkeeping, Marketing, IT, Legal services and entities supporting the Data Controller in the provision of service.
If consent is given as stated above, third parties will receive your name and e-mail address and may contact you via e-mail for marketing purposes.
We will not pass your data to third parties unless you provide your explicit consent. No data is transferred outside of the European Economic Area.
We are providing your personal data only to such entities which must have access to the same in order for us to guarantee the high quality of services. Data is transferred on the basis of an agreement concluded with the Data Controller and exclusively upon the instructions of the Data Controller. We do not make available your data to any third parties for their own use – we do so solely to perform our services. All partners engaged in the processing of personal data of our users ensure data security and abide by all personal data protection obligations.
- Online Services and Cookies
Using cookies files (so-called cookies), which are files recorded by your internet browser on a hard drive of your computer, Old Music Group collects data related to the manner, in which you use Old Music Group’s websites, in order to optimize our services offered to the visitors and users of our company’s websites. Cookies do not allow identification of your identity. Data recorded in cookies contain information as to which websites were visited by you, the date and time of the visit and other information concerning your activity on the websites.
Old Music Group uses various software solutions in order to optimize its online services. These solutions allow analysing the use of websites and collecting valuable information on the needs of the users in order to constantly enhance the intuitiveness and the quality of online services. In order to conduct such analysis, aggregate and anonymous statistical data are intercepted. These data are the data of anonymised connection and data on the sequence of launched links (clickstream data), related to the used browser, a number of visits/entries on the website and the behaviour of the given users visiting the oldmusicgroup.com website. Within the course of collecting and processing data, an abbreviated IP address of the visitor may also be viewed.
Data are analysed, in particular for the following purposes:
- calculating the number of website’s visitors,
- tracing these areas of the website which are particularly attractive for a particular visitor of the website,
- analysing where the visitors of the website come from in order to optimize the provided services.
Old Music Group uses the following programme solutions in a meaning mentioned above (by means of clicking on a proper link below, the user will be redirected to the opt-out option):
- Google Maps
- Google Analytics
Our websites use plugins from the YouTube site operated by Google Inc. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
- Google Maps
This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website. The Google Maps service uses persistent cookies. When visiting the page on our website that uses Google Maps, Google will receive a notification that you have accessed the page. In addition, the information listed under Section III. 1 will be transmitted to Google. This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you will need to log out before accessing the map feature. Google stores your data as a user profile and utilises it for advertising, market research and/or to provide personalised services on their website. More specifically, such analysis is carried out (even for users who are not logged in) to provide targeted advertising and to provide other social network users with information about your activities on this website. You have the right to object to the creation of these user profiles. This right can be exercised directly with Google.
Google also processes your information in the USA and does so within the framework of the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
- Google Analytics
Furthermore, you can use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
By clicking on the link above, you download an “opt-out cookie” which prevents Google Analytics from collecting information about you within our websites. Your browser must therefore allow the storage of cookies. If you delete your cookies regularly, it will be necessary to click on the link again each time you visit our website. Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
Here you will find information on how to opt-out of Hotjar’s tracking: https://www.hotjar.com/privacy/do-not-track/
- Retention Period
Old Music Group will not retain your personal data longer than it is necessary to attain purposes for which these data were collected or longer than as provided by the relevant law.
- Right to Access, Modify or Object
You may address Old Music Group to access your personal data held by Old Music Group, and you may modify or delete invalid personal data. You are entitled to prohibit Old Music Group from collecting or disclosing your personal data.
In order to exercise this right, please inform us about this fact at firstname.lastname@example.org.
- Data Security
Old Music Group undertook all measures in order to ensure confidentiality, security and integrity of your personal data. Communication between your computer and our server when we collect your personal data is encrypted using the SSL (Secure Socket Layer) protocol. Access to personal data is allowed only to persons, who need to know such data and who are expected to abide by these rules. Old Music Group pays great attention to ensuring that your personal data are not modified, infringed or inappropriately used by third parties, who are not authorised to have access to the data.
You can freely modify your own cookie settings through the Privacy Preferences Center, which you can access via the “Cookie settings” button in the lower left field of the page.