I. General information and legal basis
1. Data controller
Schleswig-Holstein Musik Festival Foundation
Telephone +49 451-38957-0
Fax +49 451-38957-57
Board of Directors: Dr. Christian Kuhnt (Chairman), Hans-Caspar Graf zu Rantzau, Prof. Inge-Susann Römhild
The Data Protection Officer of the Schleswig-Holstein Musik Festival Foundation can be contacted at the above address, to the attention of Nicole Spiering, or can be reached at spiering[at]shmf.de.
2. Legal basis of data processing
The processing of personal data requires a legal basis, which we would like to present to you below.
For processing of personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR shall serve as the legal basis. This also includes processing operations necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our foundation is subject, Article 6 (1) (c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our foundation or a third party and this interest is not overridden by the interests, fundamental rights and freedoms of the data subject, Article 6 (1) (f) GDPR serves as the legal basis. The legitimate interest of our foundation lies in the performance of our operations as well as in the analysis, optimization and maintenance of the security of our online offer.
II. Log files
The server statistics automatically store the data that the browser transmits to us within the framework of our legitimate interest in analysis and for security reasons (so-called "log files").
These are in detail the following data:
- language and version of the browser software;
- operating system used and its interface;
- referrer URL (the previously visited page);
- host name of the accessing computer (IP address);
- date and time of the server request;
- time zone difference from Greenwich Mean Time (GMT);
- content of the request (concrete page);
- data volume transferred;
- access status/ HTTP status code.
As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. Furthermore, the data is deleted after a statistical evaluation within seven (7) days. Data whose further retention is required for evidential purposes are exempted from this deletion until final clarification of the incident.
III. Contractual processing
The personal data provided by you for contractual purposes, e.g. in the case of quotation requests, such as name, address or e-mail address, will only be used internally to answer your queries, process your orders or provide you with access to certain contractual information.
IV. Contact, application data
When you contact us by e-mail or via the contact form, your details will be stored by us in order to answer your questions. As a matter of principle, data will not be passed on to third parties unless applicable data protection regulations justify such a transfer or we are legally obliged to do so. You may withdraw your consent at any time with effect for the future. In the event of withdrawal, your data will be deleted immediately. Your data will otherwise be deleted when we have processed your request or the purpose for storing it no longer applies. You can inform yourself at any time about the data stored about your person.
Please send applications directly to the Head of Finance & Human Resources. You can find current job advertisements - in German - with the respective contact under Stellenangebote. The data entered will be processed and used exclusively for the purpose of selecting applicants. By submitting your application, you agree to be contacted and informed in writing and/or by telephone as part of the application process. Please note that your data will not be stored anonymously, but will be accessible to our HR department and to the departments relevant to the position to be filled. We aim to assess all applicants solely on their qualifications regardless of race, ethnic origin, gender, religion or belief, disability, age or sexual identity. We therefore ask you to refrain from including such information in your application, if possible. You can change your application or have it deleted and you may withdraw your consent at any time. Please contact our team in order to do so.
VI. Program information
If you wish to receive the program information offered on our website, we require a valid e-mail address from you. We will store your e-mail address until you unsubscribe. We send program information only with your consent or legal permission. Your personal data will not be passed on to third parties. You may withdraw your consent to the storage of the data, the e-mail address as well as their use for sending information at any time. You will find a link to unsubscribe at the end of each e-mail sent. If users have only registered for program information and have canceled this registration, their personal data will be deleted.
Our website offers a registration option. For the registration we need a valid e-mail address from you, which allows us to verify that you are the owner of the specified e-mail address or its owner agrees to the registration. After you have entered your e-mail address, we will send you a confirmation e-mail to the address you have entered, in which we ask you to confirm that you wish to register. If you do not confirm this within 24 hours, your data relating to the registration will be automatically deleted. The personal data entered during registration will be transmitted to the data controller. The data will be stored with us exclusively for internal use. During registration, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties provided that no legal obligation to pass on the data exists. The storage of data is necessary for the provision of content or services. Registered persons have the possibility to delete or change the stored data at any time. The data subject may receive information about the personal data stored about it at any time.
VIII. Transfer of data to third parties
We transfer data to third parties if this is necessary for the performance of the contract and/or if we are legally obliged and/or entitled to do so in individual cases.
Use of PayPal as payment method
If you select payment with the online payment service provider PayPal as part of your order process, your contact details will be transferred to PayPal once the order is placed. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes over the function of an online payment service provider as well as a trustee and offers buyer protection services. The personal data transmitted to PayPal is data that is required for order processing, as well as data that is related to the order, such as the number of items, item number, invoice amount.
This transfer is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to manage your payment and the customer relationship. Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transferred by PayPal to credit agencies. This transfer serves to check your identity and creditworthiness in relation to the order you have placed. You may find information about the credit agencies involved and the data that is generally collected, processed, stored and passed on by PayPal in the PayPal Privacy Statement.
In some cases, we make use of external service providers within the framework of our legitimate interests with regard to the analysis, optimization and economic operation of the online offer. In order to do so, the third-party providers always have to be aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the presentation of this content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymized information may also be stored in cookies on the user's device and may contain, among other things, technical information comparable to log files. You will find a list our service providers below. If your data is to be used for other purposes, we will inform you in advance and only use the data if you have given your express consent beforehand.
1. Service provider Google
We use services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") within the scope of our legitimate interests in the optimization and economic operation of our online offer. Google is certified under the EU-US Privacy Shield Framework and thereby offers a guarantee of compliance with European data protection law.
a. Google Maps
c. Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of reCAPTCHA is to verify whether data is entered on our websites (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyses the behavior of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor opens the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is processed based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from spam.
We use services of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), within the scope of our legitimate interests in the analysis, optimization and economic operation of our online offer. Facebook is certified under the EU-US Privacy Shield Framework and thereby offers a guarantee of compliance with European data protection law.
Facebook social plugins
We offer the possibility to share content via WhatsApp on our website. The provider is WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041, USA. By simply calling up the web page, no data is transferred to WhatsApp. When the button is clicked, the website is redirected to WhatsApp as a referrer, but this is the case when any link is clicked.
IX. Rights of the data subject
You have the right to obtain information about the personal data we have stored about you. According to the legal provisions, you also have the right to request rectification of incorrect data, the right to block data, the right to data portability as well as the right to request erasure of personal data. To do so, please send us an e-mail with the subject "Data privacy". You also have the right to lodge a complaint with a data protection supervisory authority if you believe that processing of personal data concerning you is in breach of the law. If you have given your consent, you have the right to withdraw this consent at any time. This shall not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. You may object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for purposes of direct advertising.
X. Storage period of the personal data
We store personal data for the duration of the respective legal retention period. After expiry of this period, the data is routinely erased, unless it is necessary for the initiation or performance of a contract. If the user's data is not erased because they are required for other and legally permissible purposes, their processing will be restricted. The data will be blocked accordingly and will not be processed for other purposes. This applies, for example, to user data that must be retained for reasons under trade or tax law.
XI. Safety information
We make every effort to process your personal data in such a way that the provisions of the data protection laws are complied with by taking all technical and organizational measures to protect this data. Our website or the communication via our website with us is encrypted using HTTPS.