Privacy statement
Privacy notice
This privacy statement concerns the processing of personal data on this website, including the services offered there.
Name and address of the controller
The controller responsible for data processing is (see imprint):
Stiftung Staatstheater Nürnberg
Richard-Wagner-Platz 2–10
D-90443 Nürnberg
Email: info(a)staatstheater-nuernberg.de
Contact details of the data protection officer
For more detailed information on the processing of your personal data, please contact our data protection officer:
Stiftung Staatstheater Nürnberg
-Datenschutz-
Richard-Wagner Platz 2–10
D-90443 Nürnberg
Email: datenschutz(a)staatstheater-nuernberg.de
Purposes and legal basis for the processing of personal data
We will process your data for the purpose of performing our legally assigned tasks in the public interest.
Unless otherwise stated, the legal basis for the processing of your data is Art. 4 (1) of the Bavarian Data Protection Act (BayDSG) in conjunction with point (e) of Art. 6 (1) of the General Data Protection Regulation (GDPR). Accordingly, we are allowed to process any data required to perform our tasks.
If you consent to data processing, the legal basis will be point (a) of Art. 6 (1) GDPR.
Recipients of your personal data
Our data processing systems are technically operated by:
a) Qubidu Purpose: web design and technical implementation
b) Domainfactory Purpose: server administration and web hosting
c) Google Analytics Purpose: audience measurement
Your data will not be sent abroad at any time, apart from when using Google Analytics (for more information, please refer to the section on the “Google Analytics web analysis tool”). We will only process your data in Germany.
Retention of personal data
Unless a specific retention period is specified in this privacy statement, we will store your personal data for as long as necessary to perform the task in question (e.g. to fulfil our documentation obligations or to comply with statutory retention periods).
Your rights
If we process your personal data, you will have the following rights as a data subject:
- You may ask us to confirm whether we are processing your personal data. If this is the case, you will have the right to access the data and other information concerning the processing (Art. 15 GDPR). Please note that your right of access may be restricted or excluded in certain cases (see Art. 10 BayDSG).
- If your personal data is not – or no longer – correct or complete, you may ask for it to be rectified and supplemented (Art. 16 GDPR).
- If the legal requirements are met, you may request the erasure of your personal data (Art. 17 GDPR) or the restriction of processing (Art. 18 GDPR). However, you will not have a right to erasure under Art. 17 (1) and (2) GDPR, for example, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (point (b) of Art. 17 (3) GDPR).
- If you have consented to data processing or entered into a contract for data processing and automated methods are used to process your data, you may have a right to data portability (Art. 20 GDPR).
- If you consent to processing and the processing is based on your consent, you will be able to withdraw your consent with future effect at any time. However, this will not affect the lawfulness of any data processing carried out on the basis of your consent up to that point in time.
- You may always object to the processing of your personal data on grounds relating to your particular situation (Art. 21 GDPR). If the legal requirements are met, we will then stop processing your personal data.
Further restrictions, modifications and exclusions of your rights may be introduced in line with the GDPR or other national legislation. Our data protection officer can provide you with more detailed information on your rights.
Right to lodge a complaint with the supervisory authority
You also have the right to lodge a complaint with the State Commissioner for Data Protection in Bavaria. You can contact him as follows:
Postal address: Postfach 22 12 19, D-80502 München Address: Wagmüllerstraße 18, D-80538 München Tel.: +49 89 212672-0 Fax: +49 89 212672-50
Further information
For more information on the processing of your data and your rights, please contact us by referring to the details above.
Technical implementation
This website is hosted by domainfactory GmbH. Any personal data you provide while visiting our website will therefore be processed on our behalf by
domainfactory GmbH
Oskar-Messter-Str. 33
D-85737 Ismaning
Email: support(a)df.eu
Log files
Every time you access our website, our system (i.e. the web server) will automatically collect information from the system used by your computer or device.
We will collect the following information:
- The date and time of access
- Information on your browser type and version
- The operating system on your
device
- Your Internet service provider
- Your IP address
- The website from which you have been redirected to our website (referrer URL)
This data will be stored to ensure the technical security of our services, particularly to prevent attempted attacks on our web servers. After seven days at the latest, your data will be anonymised by truncating / alienating the IP address at domain level, thus preventing any links from being drawn to you as a user.
Secure data transmission
When you access the information on our website, we will provide an HTTPS-encrypted connection with the SSL / TLS encryption protocol to prevent your data from being intercepted by third parties during transmission. We recommend keeping your browser updated to use this option.
Use of a consent banner and cookies
When you access our website for the first time, you will be shown a cookie consent banner; until then, the only cookies stored on your device will be those which are necessary to ensure the correct technical and functional provision of information.
Further cookies, as listed below, will only be stored after you have given us your consent by clicking on the “Accept” button.
We will never set or store any other cookies.
The following cookies are necessary to ensure the correct technical and functional provision of information:
Name: “JSESSIONID” Purpose: This cookie saves your current session with reference to Java applications to ensure that all features of the website based on the Java programming language can be identified and completely displayed during your current session. Expiry: end of session Publisher: us (via our web host)
Name: “qbdConsent” Purpose: This cookie saves the value set by the cookie consent banner. Expiry: 1 month Publisher: us (via our web host)
Name: “CONSENT” Purpose: This cookie saves the value for the “youtube-nocoookie” function to ensure that cookies are only used when you actually click on a video. Expiry: 24 hours Publisher: Google / YouTube
The following cookies will be used on this website after you have given your consent:
Name: “_ga” Purpose: This cookie contains a randomly generated user ID, which can be used by Google Analytics to recognise returning users on this website and merge data from their previous visits. Expiry: 2 years Publisher: Google Analytics (see the section on the “Google Analytics web analysis tool”)
Name: “_gid” Purpose: This cookie contains a randomly generated user ID, which can be used by Google Analytics to recognise returning users on this website and merge data from their previous visits. Expiry: 24 hours Publisher: Google Analytics (see the section on the “Google Analytics web analysis tool”)
Name: “_gat” Purpose: This cookie ensures that certain data is only sent to Google Analytics once a minute at most. It expires after one minute. As long as it is set, certain data transmissions are prevented. Expiry: 1 minute Publisher: Google Analytics (see the section on the “Google Analytics web analysis tool”)
Active components
This website uses active components such as JavaScript, Java applets and ActiveX controls. You can switch off these features by changing your browser settings.
Integration of YouTube videos and social media plug-ins
We do not use any social media plug-ins. Our website merely contains links (hyperlinks) to the social media providers listed below without any additional features.
Integration of YouTube videos
We have embedded YouTube videos on our website; they are stored on https://www.youtube.com and can be played directly on our website. All videos are embedded in Privacy Enhanced Mode, which means that no data about you as a user will be sent to YouTube if you do not play the videos.
The data indicated in the section on “log files” (see above) will only be transmitted if you play any of the videos. We have no control over such data transfers.
This will happen regardless of whether you are logged in to your YouTube account or whether you even have such a user account. If you are logged in to a Google account, your data will be directly matched to your account. If you do not want your data to be matched to your YouTube account, you will have to log out before pressing play. YouTube will save your data as a user profile and use it to create advertising, conduct market research and/or tailor the design of its website to users’ needs. Your data will be used in this way (even if you are not logged in) particularly to show targeted advertising and inform other social network users about your activities on our website. You have the right to object to the creation of user profiles, which you may exercise by contacting YouTube.
Please refer to YouTube’s privacy policy for more information on the purpose and scope of its data collection and processing. The privacy policy also contains more information on your rights and possible privacy settings: https://www.google.de/intl/de/policies/privacy. Google will also process your personal data in the USA, but it is subject to the EU-US Privacy Shield: https://support.google.com/analytics/answer/7105316?hl=de.
Facebook, Instagram and Twitter
You can find more information on the purpose and scope of the data collection and processing carried out by each provider in their respective privacy policies, which you can find below. Their privacy policies also contain more information on your relevant rights and possible privacy settings.
Address of each provider and URLs with their privacy notices:
a) Facebook and Instagram
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. https://www.facebook.com/policy.php More information on data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications and https://www.facebook.com/about/privacy/your-info#everyoneinfo
Instagram: https://help.instagram.com/519522125107875?helpref=page_content
Facebook is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/list.
b) Twitter
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA. https://twitter.com/privacy
Twitter is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/list.
Collection of further data
If you enter personal or business data on our website (e.g. email address, first and last name, home address), this information will be used exclusively for the purpose of sending you the requested information or for the purposes indicated in the form. A piece of software will be used to encrypt your data during transport (SSL) to prevent third parties from intercepting your information. Your data will not be disclosed to third parties. You are free to use our services on a voluntary basis.
Any information that you send us in an unencrypted email may be read by third parties during transmission. As we will generally not be able to verify your identity, we will not know who is using your email address. The use of unencrypted emails therefore does not guarantee legally secure communication. Like many email providers, we use filters to block unwanted advertising; in rare cases, our spam filters may mistakenly classify normal emails as unwanted advertising and automatically delete them. We will automatically delete any emails containing harmful programmes (“viruses”).
If you contact us via email, we will save the data you provide (e.g. your email address, name and telephone number) to process your enquiry. Any data you provide in this context will be deleted 6 months after your enquiry has been fully processed, unless your data cannot be deleted for other reasons.
Registration for an application process and log-in area
The Stiftung Staatstheater Nürnbergn organises or co-organises events, specifically the “Meistersinger” singing competition. For this purpose, we will process the personal data of participants (e.g. name and contact details) on the basis of Art. 4 (1) BayDSG in conjunction with point (a) of Art. 6 (1) GDPR (consent).
Where does this data come from?
We give you the opportunity to sign up to our “Meistersinger” singing competition by providing personal data on our website. Once your data has been entered in an input mask, it will be electronically transmitted to us in an encrypted form.
In addition, we will collect data from generally accessible sources (e.g. newspapers or online publications).
What will happen to your data?
We require this data to conduct a proper application process; it will be stored in accordance with the legal regulations.
In order to make a decision, we may have to transfer your applicant data to certain groups of people (e.g. members of the jury or the group of organisers).
Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The data collected during the registration process for the purpose of conducting a proper application process or performing pre-contractual measures will be deleted as soon as it is no longer needed to conduct the application process, provided the deletion of such data does not conflict with any other legitimate interests of the Nuremberg State Theatre Foundation. One such legitimate interest includes the obligation to provide evidence in legal proceedings held under the German General Equal Treatment Act (AGG).
If you give your consent by ticking the appropriate checkbox in the entry form, any personal data you provide throughout the application process (e.g. in cover letters, CVs, certificates, applicant questionnaires, interviews) will continue to be stored after the specific application process has ended, but no longer than 6 months.
If your application documents or any other documents submitted via the entry form during the application process contain “special categories of personal data”, as defined in Art. 9 GDPR (e.g. a photograph revealing your ethnicity, details about a disability), your consent will also apply to such data. However, the Nuremberg State Theatre Foundation would like to assess all applicants purely on the basis of their qualifications and therefore kindly asks you to refrain from providing such information in your application where possible.
Your consent will also apply to any data relating to your qualifications and activities which the Nuremberg State Theatre Foundation may obtain from generally accessible data sources (e.g. professional social networks) during the application process.
Photographs and videos, participation of media representatives
Whenever the Nuremberg State Theatre Foundation hosts events, it produces photographs – and sometimes even videos – for its public relations work. Some of our events are even attended by media representatives.
Your rights
You have the rights described above (see the section on “your rights”).
If you object to the processing of your data, however, you will not be able to participate in the event.
Regardless of this, you have the right to object to the publication of photographs or videos in which you can be recognised. If you would like to exercise your right to object, please contact the controller (see “name and address of the controller” above).
Right to object
You have the right to cancel your registration at any time. You may also change the data saved on you there at any time. If you would like to exercise this right, please send your request to the following address: datenschutz(a)staatstheater-nuernberg.de
Google Analytics web analysis tool
We use the Google Analytics tool on our website. Google Analytics will record and systematically analyse your interaction with our website, primarily using cookies. Your data will only be processed if you give us your consent by clicking on “Accept” in the cookie banner.
Whenever you access individual pages on our website, the following data will be stored:
- Three bytes of your system’s IP address (anonymised)
- The page you access on our website
- The website from which you have been redirected to the page accessed on our website (referrer URL)
- The sub-pages that you access from the webpage
- The time you spend on our website
- The frequency with which you access our website
The software is configured in such a way that your full IP address will not be stored, as the last octet of your IP address will be masked (e.g. 192.168.79.). This will prevent the truncated IP address from being matched to your computer or device.
Your personal data will be processed on the basis of point (a) of Art. 6 (1) GDPR (consent).
The processing of personal data using Google Analytics enables us to analyse our users’ surfing patterns. By evaluating the data obtained, we are able to compile information about the use of individual components on our website. This helps us to continually improve our website and its user-friendliness.
The analytical data will be deleted as soon as it is no longer required for our recording purposes. This will be the case after twelve months.
Right to object
You can install a browser add-on to disable Google Analytics JavaScripts (ga.js, analytics.js, dc.js) and prevent Google Analytics from using its data on our website.
If you would like to disable Google Analytics, you can download and install the add-on for your current browser. The add-on used to disable Google Analytics is compatible with the standard versions of Chrome, Internet Explorer, Safari, Firefox and Opera. In order for the add-on to work, it must be correctly loaded and executed in your browser. If you are running the add-on in Internet Explorer, you must also enable third-party cookies.
You can find more information here: https://tools.google.com/dlpage/gaoptout?hl=de.
Data protection on third-party websites
This website may contain links to and from third-party websites. If you click on a link to one of those websites, please note that we cannot assume any responsibility or liability for third-party content or privacy policies. Please make sure you are satisfied with the relevant privacy policies before transmitting personal data via this website.
Changes to our privacy notice
We reserve the right to make changes to our privacy statement at any time to make sure it always complies with the current legal requirements. The same applies if we have to adjust our privacy statement to reflect changes in our range of services (e.g. new services). The new version of our privacy statement will then apply when you next visit our website.
Last updated: October 2021
4. Use of a consent “cookie” banner and cookies
4.1 Description and scope of the data processing
The first time they call up our website, the user shall be shown a “cookie” notice. Until then, no cookies shall be stored on the user’s device. The cookies listed below shall only be stored after the user has given us their consent by clicking on the “Accept” button. Cookies shall not be set or stored by us at any other time.
The following cookies shall be used on this website after you have given your consent:
Name: "_ga"
Purpose: contains a randomly generated user ID Google Analytics can use this ID to recognise returning users on this website and to bring together the data from earlier visits.
Expiry date: 24 hours
Published by: Google Analytics (see Section 7)
Name: "_gid"
Purpose: certain data shall only be transmitted to Google Analytics a maximum of once per minute. The cookie has a life of one minute. As long as it is set, certain data transmissions shall be prevented.
Expiry date: 1 minute
Published by: Google Analytics (see Section 7)
Name: "_gat"
Purpose: certain data shall only be transmitted to Google Analytics a maximum of once per minute. The cookie has a life of one minute. As long as it is set, certain data transmissions shall be prevented.
Expiry date: 1 minute
Published by: Google Analytics (see Section 7)
Name: “PHPSESSIONID”
Purpose: this session cookie shall be used to recognise the user. To make logging in again easier.
Expiry date: end of the session
Published by: us (through the web host)
Name: "qbdConsent"
Purpose: stores the value in the event of a request by the consent banner.
Expiry date: 1 month
Published by: us (through the web host)
4.2 Legal basis for the data processing
The legal basis for the processing of the user’s personal data shall be Art. 6 (1) a) GDPR (consent)
4.3 Purpose of the data processing
This data shall be processed to ensure that it will be as easy as possible for the user to use the website.
4.4 Storage period
The data stored in cookies shall be deleted as soon as they reaches their expiry data (see above) or the user deletes this data in their browser settings.
5. E-mail contact
5.1 Description and scope of the data processing
When you contact us by e-mail, the data disclosed by you (your e-mail address, if applicable your name and your telephone number) shall be saved by us to answer your questions. We shall delete the data that is generated in this context after it no longer needs to be stored, or we shall restrict the processing if statutory storage obligations exist.
5.2 Legal basis for the data processing
The legal basis for the temporary storage of this data, which is transmitted in the course of the submission of an enquiry, shall be Art. 6 (1) f) GDPR (our legitimate interest as the controller).
If the aim of the enquiry is the conclusion of a contract, the legal basis for the processing shall also be Art. 6 (1) b) GDPR (performance of a contract).
5.3 Purpose of the data processing
This personal data shall be processed solely to handle the enquiry.
5.4 Storage period
The aforementioned data shall be deleted as soon as it is no longer needed to achieve the purpose of its collection. For personal data that is transmitted by e-mail, this shall be the case when the relevant conversation with the user has finished. The conversation has finished when it appears that the situation has finally been resolved.
Any statutory storage periods shall remain unaffected by this.
5.5 Opt-out option
The user shall have the option of objecting to the data processing at any time. The objection must be directed to the following e-mail address: datenschutz@staatstheater-nuernberg.de
All the personal data that was stored in the course of establishing contact shall be deleted in this case.
6. Registration for the application procedure and login area
6.1 Description and scope of the data processing
On our website, we offer the user/applicant the option of registering, providing personal data. The data shall be entered in an input screen and transmitted to and stored by us. The data collected by us shall only be passed on if this is necessary for the performance of the contract or for the provision of the technical functionality of the website or if there is another legal basis for passing on data. You can find a list of the recipients under Section 8.
6.2 Legal basis for the data processing
The legal basis for the processing of the data shall be Art. 6 (1) b) GDPR (performance of a contract) as the registration and the login area are necessary for the performance of the contract or for the execution of precontractual measures.
6.3 Purpose of the data processing
The purpose of the registration and the login shall be the execution of a proper application procedure.
6.4 Storage period
The aforementioned data shall be deleted as soon as it is no longer needed to achieve the purpose of its collection. For data collected during the registration process for the performance of a proper application procedure or for the execution of precontractual measures, this shall be the case when the data is no longer required for the execution of the application procedure.
If the users/applicants have given their consent by selecting the check box “Consent according to data protection law”, the personal data that they have disclosed throughout the application procedure (for example in letters, a CV, certificates, applicant questionnaires, applicant interviews, etc.) shall be stored beyond the end of the concrete application procedure, but for no longer than 6 months.
If the users/applicants have disclosed “special categories of personal data” pursuant to Art. 9 of the General Data Protection Regulation (e.g. a photo that reveals their ethnic origin, information about a severe disability etc.) in their application documents or other documents submitted by them in the application procedure via the entry form, their consent shall also relate to this data. The Staatstheater Nürnberg Foundation would, however, like to assess all applicants only on the basis of their qualifications and therefore requests that such information is omitted in the application where possible.
This consent shall also apply to data relating to the applicant’s qualifications and activities from data sources that are in the public domain (especially professional social networks), which the Staatstheater Nürnberg Foundation was permitted to collect during the application procedure.
Furthermore, it may be necessary to store the user’s/applicant’s personal data in order to comply with contractual or statutory obligations (e.g. a storage obligation for tax purposes).
6.5 Opt-out option
A registered user may cancel the registration at any time. The users may change the data stored about them at any time. To this end, please contact the following address with your request: datenschutz@staatstheater-neurnberg.de
7. Tracking by Google Analytics
7.1 Description and scope of the data processing
We use the tracking tool Google Analytics on our website. Google Analytics records and systematically analyses the interactions of the user of our website, primarily with the help of cookies. If individual pages of our website our called up, the following data shall be stored:
- three bytes of the IP address of the calling system of the user (anonymised IP address)
- the web page that is called up
- the website from which the user accessed the called up page on our website (referrer)
- the subpages that are called up from the called up page
- the time spent on the website
- the frequency with which the webpage is called up
The software is set in such a way that the user’s IP addresses are not stored in full. Instead, the last octet of the IP address is masked (e.g.: 192.168.79) This means that it is no longer possible to assign the shortened IP address to the calling computer or device of the user.
7.2 Legal basis for the data processing
The legal basis for the processing of the user’s personal data shall be Art. 6 (1) a) GDPR (consent)
7.3 Purpose of the data processing
Processing the user’s personal data with the help of Google Analytics allows us to analyse the surfing behaviour of our users. An analysis of the obtained data enables us to put together information about the use of the individual components of our website. This helps us to constant improve our own website and its user friendliness.
7.4 Storage period
The data stored by the tracking tool shall be deleted as soon as it is no longer required for our recording purposes. In our case, this shall be after twelve months.
7.5 Opt-out option
With the help of a browser add-on to opt out of Google Analytics JavaScripts (ga.js, analytics.js, dc.js), the user can prevent Google Analytics from using its data on our website.
If the user would like to opt out of Google Analytics, they can download and install the add-on for their own web browser. The add-on for opting out of Google Analytics is compatible with the standard versions of Chrome, Internet Explorer, Safari, Firefox and Opera. The add-on must be correctly loaded and executed in the browser in order to work. Third-party cookies also have to be activated for Internet Explorer.
Interested users can find more detailed information under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
8. Social Media
8.1 Description and scope of the data processing
We do not use any social media plug-ins. On our website, the user shall only find links (hyperlinks) to the social media service providers listed below, without additional functions, on these webpages.
The data specified under Section 3 of the present data privacy statement shall also be transmitted when these webpages are visited. We shall have no further influence on this data transmission and it shall not be processed or analysed by us.
8.1.1 Facebook, Twitter, Instagram
You can find further information on the purpose and scope of the data collection and the processing of this data by the provider in the data privacy statements of these providers. There, you will also find further information on your rights in this regard and the setting options for the protection of your privacy.
Addresses of the respective providers and URLs with their privacy notices:
a) Facebook and Instagram
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.
https://www.facebook.com/policy.php
Further information on data collection:
https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications and https://www.facebook.com/about/privacy/your-info#everyoneinfo
Instagram:
https://help.instagram.com/519522125107875?helpref=page_content
Facebook is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/list.
b) Twitter
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA.
Twitter is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/list.
8.1.2 YouTube Videos
We have integrated YouTube videos into our website. They are stored on https://www.youtube.com and can be played directly from our website. They are all integrated in the “enhanced data protection mode”, i.e. no data about you as the user shall be transferred to YouTube if you do not play the videos. Only when you play the videos shall the data in Section 3 be transferred. We have no influence on this data transfer.
When you visit the website, YouTube shall be informed that you have called up the corresponding subpage on our website. The data specified under Section 3 of the present data privacy statement shall also be transmitted. This shall take place irrespective of whether YouTube provides a user account, via which you are logged in, or whether no user account exists. If you are logged into Google, your data shall be assigned directly to your account. If you do not want the data to be assigned to your YouTube profile, you must log out before activating the button. YouTube shall store your data as user profiles and shall use them for advertising and market research purposes and/or the demand-oriented design of its website. Such an analysis shall be carried out (even for users who are not logged in) in particular to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles. To exercise this right, you must contact YouTube.
You can find further information on the purpose and scope of the data collection and the processing by YouTube in the data privacy statements. There, you will also find further information on your rights and the setting options for the protection of your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google shall also process your personal data in the USA and is subject to the EU-US Privacy Shield, https://support.google.com/analytics/answer/7105316?hl=en.
8.2 Legal basis for the data processing
The legal basis for the temporary storage of this data and the log files shall be Art. 6 (1) f) GDPR (our legitimate interest as the responsible website operator).
8.3 Purpose of the data processing
The purpose of the data processing is to present our website to the user in as effective and interesting a manner as possible.
8.4 Storage period
The aforementioned data (see 8.1) shall be deleted
a) as soon as it is no longer needed to achieve the purpose of its collection. If the data is recorded for the provision of the website, this is the case when the session has ended.
b) If the data is stored in log files, this shall be the case after 6 months at the latest. Storage beyond this is possible. In this case, the user’s IP address shall be deleted or distorted by us so that an allocation of the calling client is no longer possible and the included data no longer contains references to persons.
9. Recipients of your personal data
The data collected by us shall only be passed on if this is necessary for the performance of the contract or for the provision of the technical functionality of the website or if there is another legal basis for passing on data.
If we pass data on to service providers, these may use the data exclusively for the performance of their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have suitable technical and organisational measures to protect the rights of the data subjects and are regularly monitored by us.
Data processors:
a) Qubidu
Purpose: web design and technical realisation
b) Domainfactory
Purpose: server administration, web hosting
c) Google Analytics
Purpose: measuring reach
Data shall not be transmitted abroad at any time, apart from by Google Analytics – see Section 7. We shall process your data in Germany.
10. Third-party privacy policies and websites
This website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for external contents or privacy policies. Please satisfy yourself of the relevant privacy policies before you transmit personal data to this website.
11. Rights of the data subject
If a user’s personal data is processed, the user shall be a “data subject” in terms of the GDPR. They shall be entitled to the following rights from us as the controller:
- Right of access
- Right to rectification
- Right to restriction of processing
- Right to erasure
- Right to information
- Right to data portability
- Right to object
- Right to withdraw the declaration of consent according to data protection law
- Right to lodge a complaint with a data protection supervisory authority
11.1 Notice on the withdrawal of consent
A data subject shall have the right to withdraw his declaration of consent according to data protection law at any time. However, this shall not affect the legitimacy of the processing which has taken place on the basis of the consent granted until the withdrawal.
11.2 Notice on lodging a complaint with the data protection supervisory authority:
Irrespective of any other administrative or judicial legal remedy to the contrary, a data subject shall have the right to lodge a complaint with a supervisory authority – especially in the member state of the user’s place of residence, the user’s place of work or the place of the suspected infringement – if the users consider that the processing of the their personal data violates the GDPR.
12. Amendment of our data privacy notice
In order to guarantee that our data privacy notice always complies with the current statutory requirements, we reserve the right to make changes at any time. This shall also apply in the event that the data privacy statement has to be adapted due to new or revised services. The new data privacy statement shall affect our website on your next visit.
As at: December 2019