Essential notice pursuant to Art. 26 para. 2 s. 2 GDPR
E.M.P. Merchandising Handelsgesellschaft GmbH, Darmer Esch 70 a, 49811 Lingen, Germany ("EMP") and Warner Music Group Germany Holding GmbH, Alter Wandrahm 14, 20457 Hamburg, Germany ("WMG") (collectively "We") cooperate closely in publishing the Artist Shop Newsletter. This also concerns the processing of your personal data. We are therefore jointly responsible for the protection of your personal data within the processing described below (Article 26 (1) GDPR). EMP and WMG have concluded a Joint Controller Agreement for this purpose. Therein, the parties have regulated which of them fulfills which obligations under the GDPR.
Please find detailed information about the purposes of data processing, the type of personal data processed and your rights in the subsequent paragraphs.
1. What personal data is processed
For the purpose of jointly publishing our newsletters, we will process your email ad-dress and, optionally, your name, gender and birthday.
2. Purpose of the processing of personal data and responsibility
EMP and WMG process the data for the following purposes:
(1) Publishing Artist Shop Newsletters;
(2) Analysis and evaluation of data in connection with the Artist Shop Newslet-ters.
EMP is responsible for collecting the personal data. WMG and EMP are jointly re-sponsible for the publication and the evaluation and analysis of the success of the newsletters.
3. Your rights as a data subject
3.1 Contact point for data subject rights
Data protection rights can be invokes by contacting EMP, as the joint point of contact for WMG and EMP. However, you can always contact both parties - WMG and EMP. If you contact WMG, you will not suffer any disadvantages when exercising of your legal rights.
In order to process the requests promptly and to your satisfaction, EMP and WMG will inform each other immediately of the invoked rights and provide each other with all in-formation necessary to respond.
3.2 Your data subject rights
4. Information rights
We make the information required by Art. 13 and 14 GDPR available to you here [https://www.emp.de/datenschutz] free of charge in a precise, transparent, understandable and easily accessible form in clear and simple language.
5. CROSS-BORDER DATA TRAFFIC
The newsletter publication is controlled and operated from Germany; accordingly, to the extent permitted by law, German law applies to this notice and our collection, use and transfer of your personal data. Your personal data may be stored and processed in any country in which we maintain operating facilities or have contracted service providers. By subscribing to the newsletter, you accept that your data may be trans-ferred to countries outside the European Economic Area (EEA), which may have dif-ferent data protection laws than your country.
In the event that you are a resident of a state party to the Agreement on the European Economic Area (EEA): Some countries outside the EEA are considered by the EU Commission to have an adequate level of data protection in accordance with EEA standards. A list of these countries can be found here: https://ec.europa.eu/info/law/law-topic/data-protection. For transfers of personal data from the EEA to countries considered by the EU Commission to lack an ade-quate level of data protection, we have taken appropriate measures, such as the EU Commission's EU standard contractual clauses regarding personal data. You can re-quest a copy of the measures by contacting us at firstname.lastname@example.org or email@example.com.
6. Data security
We will take reasonable physical, technical and administrative measures to protect the personal information under our control. If you have reason to believe that your com-munications with us are no longer secure, please notify us immediately.
7. Storage and deletion
We store and/or process the personal data only as long as this is necessary for the ful-fillment of the purposes mentioned under 2. If the processing is no longer necessary, the data will be deleted by us independently. However, this applies subject to any re-tention obligations or other reasons that further entitle us to process the data.