Privacy Policy

I. General information and legal basis

This Privacy Policy informs you about what kind of personal data is collected for what purpose on this website by us as the data controller and to what extent this data is made available to third parties.

1. Data controller

Schleswig-Holstein Musik Festival Foundation
Einsiedelstrasse 6
23554 Lübeck
Germany
Telephone +49 451-38957-0
Fax +49 451-38957-57
info[at]shmf.de
Board of Directors: Dr. Christian Kuhnt (Chairman), Hans-Caspar Graf zu Rantzau, Prof. Inge-Susann Römhild

The Data Protection Officer of the Schleswig-Holstein Musik Festival Foundation can be contacted at the above address, to the attention of Nicole Spiering, or can be reached at spiering[at]shmf.de.

2. Legal basis of data processing

The processing of personal data requires a legal basis, which we would like to present to you below.
For processing of personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR shall serve as the legal basis. This also includes processing operations necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our foundation is subject, Article 6 (1) (c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our foundation or a third party and this interest is not overridden by the interests, fundamental rights and freedoms of the data subject, Article 6 (1) (f) GDPR serves as the legal basis. The legitimate interest of our foundation lies in the performance of our operations as well as in the analysis, optimization and maintenance of the security of our online offer.

II. Log files

The server statistics automatically store the data that the browser transmits to us within the framework of our legitimate interest in analysis and for security reasons (so-called "log files").

These are in detail the following data:

  • language and version of the browser software;
  • operating system used and its interface;
  • referrer URL (the previously visited page);
  • host name of the accessing computer (IP address);
  • date and time of the server request;
  • time zone difference from Greenwich Mean Time (GMT);
  • content of the request (concrete page);
  • data volume transferred;
  • access status/ HTTP status code.

As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. Furthermore, the data is deleted after a statistical evaluation within seven (7) days. Data whose further retention is required for evidential purposes are exempted from this deletion until final clarification of the incident.

III. Contractual processing

The personal data provided by you for contractual purposes, e.g. in the case of quotation requests, such as name, address or e-mail address, will only be used internally to answer your queries, process your orders or provide you with access to certain contractual information.

IV. Contact, application data

When you contact us by e-mail or via the contact form, your details will be stored by us in order to answer your questions. As a matter of principle, data will not be passed on to third parties unless applicable data protection regulations justify such a transfer or we are legally obliged to do so. You may withdraw your consent at any time with effect for the future. In the event of withdrawal, your data will be deleted immediately. Your data will otherwise be deleted when we have processed your request or the purpose for storing it no longer applies. You can inform yourself at any time about the data stored about your person.
Please send applications directly to the Head of Finance & Human Resources. You can find current job advertisements - in German - with the respective contact under Stellenangebote. The data entered will be processed and used exclusively for the purpose of selecting applicants. By submitting your application, you agree to be contacted and informed in writing and/or by telephone as part of the application process. Please note that your data will not be stored anonymously, but will be accessible to our HR department and to the departments relevant to the position to be filled. We aim to assess all applicants solely on their qualifications regardless of race, ethnic origin, gender, religion or belief, disability, age or sexual identity. We therefore ask you to refrain from including such information in your application, if possible. You can change your application or have it deleted and you may withdraw your consent at any time. Please contact our team in order to do so.

V. Cookies

This website uses cookies. Cookies are small text files that are stored on your computer and through which the body that sets the cookie receives certain information. They help us to make the Internet offer more user-friendly and effective or/and they serve to facilitate your navigation on our website. Of course, you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and altogether, for example, refuse to accept third party cookies or all cookies or delete cookies already stored. If you do not accept cookies, please note that in this case our offer may not work properly. You can find out which function on our website uses cookies below under the individual functions.

VI. Program information

If you wish to receive the program information offered on our website, we require a valid e-mail address from you. We will store your e-mail address until you unsubscribe. We send program information only with your consent or legal permission. Your personal data will not be passed on to third parties. You may withdraw your consent to the storage of the data, the e-mail address as well as their use for sending information at any time. You will find a link to unsubscribe at the end of each e-mail sent. If users have only registered for program information and have canceled this registration, their personal data will be deleted.

VII. Registration

Our website offers a registration option. For the registration we need a valid e-mail address from you, which allows us to verify that you are the owner of the specified e-mail address or its owner agrees to the registration. After you have entered your e-mail address, we will send you a confirmation e-mail to the address you have entered, in which we ask you to confirm that you wish to register. If you do not confirm this within 24 hours, your data relating to the registration will be automatically deleted. The personal data entered during registration will be transmitted to the data controller. The data will be stored with us exclusively for internal use. During registration, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties provided that no legal obligation to pass on the data exists. The storage of data is necessary for the provision of content or services. Registered persons have the possibility to delete or change the stored data at any time. The data subject may receive information about the personal data stored about it at any time.

VIII. Transfer of data to third parties

We transfer data to third parties if this is necessary for the performance of the contract and/or if we are legally obliged and/or entitled to do so in individual cases.

Use of PayPal as payment method
If you select payment with the online payment service provider PayPal as part of your order process, your contact details will be transferred to PayPal once the order is placed. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes over the function of an online payment service provider as well as a trustee and offers buyer protection services. The personal data transmitted to PayPal is data that is required for order processing, as well as data that is related to the order, such as the number of items, item number, invoice amount.
This transfer is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to manage your payment and the customer relationship. Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transferred by PayPal to credit agencies. This transfer serves to check your identity and creditworthiness in relation to the order you have placed. You may find information about the credit agencies involved and the data that is generally collected, processed, stored and passed on by PayPal in the PayPal Privacy Statement.

In some cases, we make use of external service providers within the framework of our legitimate interests with regard to the analysis, optimization and economic operation of the online offer. In order to do so, the third-party providers always have to be aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the presentation of this content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymized information may also be stored in cookies on the user's device and may contain, among other things, technical information comparable to log files. You will find a list our service providers below. If your data is to be used for other purposes, we will inform you in advance and only use the data if you have given your express consent beforehand.

1. Service provider Google
We use services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") within the scope of our legitimate interests in the optimization and economic operation of our online offer. Google is certified under the EU-US Privacy Shield Framework and thereby offers a guarantee of compliance with European data protection law.

a. Google Maps
The website includes content from Google Maps. By visiting the website, the third-party provider receives the information that you have accessed the corresponding web page of our website. In addition, the data automatically sent via your browser, such as your IP address, is transferred to Google Maps in the USA and stored there. The provider may store this data as usage profiles and uses it for advertising and market research purposes. If you have signed in to your Google account at the same time, this data is assigned directly to your account. If you do not wish the data to be assigned to your profile, you have to sign out before activating the button. By using this website, you grant your consent to the collection, processing and use of automatically collected data and data entered by you by Google, one of its agents, or third parties. We would like to point out that we, as the provider of the web pages, have no knowledge of the content of the transferred data or its use by Google. Detailed information on the purpose and scope of data collection and processing by Google Maps can be found in the Privacy Policy of the provider.

b. YouTube
We use the provider YouTube, a service of Google, to embed videos. These videos are stored on www.youtube.com and can be played directly from our site. YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies to collect reliable video statistics, prevent fraud, and improve the user experience, among other things. The information generated by the cookie about your use of this website (including your IP address) will be transferred to YouTube on servers that may also be located in the USA and stored there. It is not possible to assign your IP address to your user account unless you have signed in to YouTube or another Google service before accessing the page or are permanently signed in. If you want to prevent this, you will need to sign out of your YouTube account and your other Google accounts first. Through the YouTube cookies, we receive statistical values on the individual videos embedded in the website being called up without a reference to the respective user. The embedded YouTube videos are used by YouTube within the framework of permitted use, which all users must accept. If you see copyrights violated, please report it directly to YouTube. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who displays a website with an embedded YouTube video player, but does not click on the video to play it. When the YouTube video player is clicked, YouTube may store cookies on the user's computer. We would like to point out that we, as the provider of the web pages, have no knowledge of the content of the transferred data or its use by YouTube. For more information on YouTube's official privacy policy, please see the Google Privacy Policy and follow this link.

c. Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of reCAPTCHA is to verify whether data is entered on our websites (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyses the behavior of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor opens the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is processed based on Article 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from spam.
For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://policies.google.com/privacy?hl=en&gl=de and https://www.google.com/recaptcha/intro/android.html.

2. Facebook
We use services of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), within the scope of our legitimate interests in the analysis, optimization and economic operation of our online offer. Facebook is certified under the EU-US Privacy Shield Framework and thereby offers a guarantee of compliance with European data protection law.

Facebook social plugins
Our website uses Facebook social plugins ("plugins"). The plug-ins are marked with a Facebook logo (white "f" on a blue tile, the terms "Like", "Gefällt mir" or a "thumbs up" sign) or the addition “Facebook social plugin". If you call up a web page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transferred by Facebook directly to your browser, which then integrates it into the website. Through this, personal information, such as your IP address, URL, date and time, as well as other browser-related information, is transmitted to Facebook and stored in the USA. According to Facebook, only an anonymized IP is collected in Germany. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook, stored there and, depending on your Facebook settings, communicated to your Facebook contacts. If you do not wish to do so, please log out of your Facebook account (before pressing the opt-in button). Facebook stores your data as usage profiles and uses it for the purposes of advertising, market research and/or needs-based design of its website and other websites. Facebook uses cookies and similar technologies to display ads to you on Facebook-related and third-party services, regardless of whether you have an account with Facebook and are logged in. Facebook already sets cookies for this purpose once you visit www.facebook.com and forwards your data to third parties. We would like to point out that we, as the provider of the web pages, have no knowledge of the content of the transferred data or its use by Facebook. You may prevent the installation of these cookies by selecting the appropriate settings on your browser so that all third-party cookies are rejected. Please note that if you do this you may not be able to use the full functionality of this website. For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please see refer to the Data Policy of Facebook. You can find special information about Facebook social plugins here. You can additionally change your privacy settings on Facebook in your account settings.

3. Twitter
Functions of the Twitter service are embedded in our web pages. These functions are offered by Twitter Inc, 795 Folsom St, Suite 600, San Francisco, CA 94107, USA ("Twitter"). According to its own statements, Twitter adheres to the principles of the EU-US Privacy Shield and the Swiss-US Privacy Shield frameworks regarding the collection, use, transfer and storage of personal data from the European Union and Switzerland. If you visit a web page of our website that contains such a plugin, your browser establishes a direct connection with the Twitter servers. The content of the plugin is transferred by Twitter directly to your browser, which then integrates it into the website. Through this, according to their own statements, Twitter receives information such as your IP address, URL, date and time and other browser-related log data. Twitter uses cookies and similar technologies to show you advertisements and suggestions on the Twitter services, regardless of whether you have an account with Twitter or are logged in your Twitter account. The information generated by the cookie (including your IP address) is stored on a server in the USA. Twitter only stores tailored content along with browser cookies or device IDs and separates this from other data, such as information about pages visited. After a maximum of 10 days, Twitter starts deleting and un-favoriting tweets or collecting this data. By using Twitter and the "retweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. If you do not wish to do so, please log out of your Twitter account (before pressing the opt-in button). We would like to point out that we, as the provider of the web pages, have no knowledge of the content of the transferred data or its use by Twitter. You may prevent the installation of these cookies by selecting the appropriate settings on your browser so that all third-party cookies are rejected. Please note that if you do this you may not be able to use the full functionality of this website. You can find more information about this in the Twitter Help Center under Do Not Track. For more information regarding the use of your data by Twitter, please refer to the Twitter Privacy Policy  and click here. You can change your Twitter privacy settings in the account settings.

4. Vimeo
Plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York 10011, USA, are embedded in our website. Each time you visit a web page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address will be stored there. Through interactions with the Vimeo plugins (e.g. clicking the start button), this information is also transferred to Vimeo and stored there. If you have a Vimeo user account and do not want Vimeo to collect information about you through this website and link it to your membership information stored with Vimeo, you must log out of Vimeo before visiting this website. The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found here. In addition, Vimeo calls up the tracker Google Analytics via an iframe in which the video is called up. This is Vimeo's own tracking, which we do not have access to. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Users can also prevent the transfer of data generated by Google Analytics and related to their use of the website (including their IP address) to Google and the processing of this data by Google by downloading and installing an appropriate browser plug-in. The collection and storage of data by Google can be revoked for the respective terminal device at any time with effect for the future in connection with the use under this link.

5. WhatsApp
We offer the possibility to share content via WhatsApp on our website. The provider is WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041, USA. By simply calling up the web page, no data is transferred to WhatsApp. When the button is clicked, the website is redirected to WhatsApp as a referrer, but this is the case when any link is clicked.

IX. Rights of the data subject

You have the right to obtain information about the personal data we have stored about you. According to the legal provisions, you also have the right to request rectification of incorrect data, the right to block data, the right to data portability as well as the right to request erasure of personal data. To do so, please send us an e-mail with the subject "Data privacy". You also have the right to lodge a complaint with a data protection supervisory authority if you believe that processing of personal data concerning you is in breach of the law. If you have given your consent, you have the right to withdraw this consent at any time. This shall not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. You may object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for purposes of direct advertising.

X. Storage period of the personal data

We store personal data for the duration of the respective legal retention period. After expiry of this period, the data is routinely erased, unless it is necessary for the initiation or performance of a contract. If the user's data is not erased because they are required for other and legally permissible purposes, their processing will be restricted. The data will be blocked accordingly and will not be processed for other purposes. This applies, for example, to user data that must be retained for reasons under trade or tax law.

XI. Safety information

We make every effort to process your personal data in such a way that the provisions of the data protection laws are complied with by taking all technical and organizational measures to protect this data. Our website or the communication via our website with us is encrypted using HTTPS.