Privacy Policy
In the following, we inform you about the processing of personal data by us as the responsible party, in particular when using our website. The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is carried out in accordance with the statutory provisions, in particular in accordance with the requirements of the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG).This privacy statement uses terminology based on the formulations of the DSGVO. The definitions for some of these terms can be found at the end of this statement.
1. Name and address of the responsible party
The responsible party pursuant to Art. 4 (7) DSGVO is:
Herbordt/MohrenWeißenburgstraße 770180 Stuttgart info(at)die-institution.org.
2. Processing of personal data when you visit our website
When you use the website merely for information purposes, we only process the personal data that your browser transmits to the server we use. If you wish to view our website, we process the following data, which are technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO):-IP address-Date and time of the request-Time zone difference to Greenwich Mean Time (GMT)-Content of the request (concrete page)-Access status/HTTP status code-Relevant transmitted data volume-Website from which the request comes-Browser operating system and its interface-Language and version of the browser software.
3. processing of personal data when you contact us personally
When you contact us by e-mail, by post, via a contact form or in any other way, the data you provide (e.g. your e-mail address, your name and your telephone number, if applicable) will be processed by us in order to process or respond to your request (legal basis: Art. 6 para. 1 p. 1 lit. a, f DSGVO). We delete the data accruing in this context as soon as storage is no longer necessary, or we restrict processing if there are legal obligations to retain data.
4. Newsletter
4.1 With your consent, you can subscribe to our newsletter, with which we inform you about current developments (such as the announcement of our own performances, artistic events, and events and performances in which we are involved). 4.2 For the subscription to our newsletter, we use the so-called double-opt-in procedure. This means that after your registration we will send you an e-mail to the e-mail address you provided. In this, we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data.4.3 The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a,f DSGVO.4.4 You can revoke your consent to the sending of the newsletter at any time without giving reasons with effect for the future and thereby unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by e-mail to info(at)die-institution.org.4.5 Data processing is based on your consent or on legitimate interest (Art. 6 para. 1 lit. a,f DSGVO). You can - if you have consented - revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.4.6 The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area, contractual relationships, etc.) shall remain unaffected by this.4.7 We process the data provided by the contractual partners within the framework of the contractual relationship in particular for the purpose of concluding the contract and its execution. The Client processes the data in particular for invoicing, accounting, for announcing the event on its own Internet and Facebook page, in program booklets, on posters, etc., for the Client's public relations work after the end of the production, and for concluding contracts with other contractual partners, such as the event organizers, workshop leaders, etc. (legal basis: Art. 6 para. 1 p. 1 lit. b,f DSGVO)].
5. Processing of personal data in the application process
5.1 If you provide us with personal data as part of the application process, the data you provide will be processed exclusively for the purpose of carrying out the application process in order to be able to assess the success of your application (legal basis: Art. 6 para. 1 p. 1 lit. a, f DSGVO).5.2 If a contractual relationship is established between you and us, the data provided will be processed for the purpose of entering into and carrying out the employment relationship in compliance with the statutory provisions. Otherwise, the application documents will be automatically deleted six months after completion of the application process, provided that no other legitimate interests on our part oppose deletion (e.g. AGG proceedings).
6. Collection of personal data in the case of funding
In the context of the implementation of (publicly) funded projects, we process the personal data of the participants in these projects in order to implement the projects and to prove the actual implementation of the project to our (public) funding bodies. Under certain circumstances, it may also be necessary to transmit the personal data to the grantor for this purpose (legal basis: Art. 6 para. 1 p. 1 lit. c, f DSGVO).
. recipients of personal data Personal data is only transferred to third parties in the cases mentioned in this declaration or if we expressly inform you of this elsewhere. In addition, in order to provide our services, we sometimes use external processors within the meaning of Article 28 DS-GVO (e.g. host providers, e-mail providers) as well as persons subordinate to us within the meaning of Article 29 DS-GVO who process the personal data exclusively on our instructions (e.g. freelancers who are not processors). The data may also be passed on to third parties (organizers) within the meaning of Art. 4 No. 10 DSGVO. However, these process personal data exclusively within the European Union.
8. Your rights
8.1 You have the following rights with respect to us regarding the personal data concerning you: -Right of access,-Right of rectification and erasure,-Right to restrict processing,-Right to object to processing,-Right of withdrawal if you have consented to processing,-Right to data portability.8.2 If you feel we are not respecting your rights to the extent owed, you have the right to complain to a data protection supervisory authority about our processing of your personal data. Before you do so, however, we would appreciate it if you would inform us of your criticism beforehand, so that we ourselves can carry out a removal of the reason for the complaint.
9. Deletion of data by the responsible party
9.1 We process and store your personal data only for the period of time required to achieve the purpose of storage or - if we are legally obliged to do so - beyond that until the expiry of the statutory retention period.9.2 If the purpose of storage no longer applies or if a storage period prescribed for us by law expires, we will block or delete the personal data in accordance with the statutory provisions. No action on your part is required for this.
10. Profiling, data transfer to third countries
We do not use automatic decision-making including profiling in the sense of the GDPR. Data will only be transferred to third countries in the cases expressly mentioned in this declaration or elsewhere or if you have given your consent.
11. Definitions of the GDPR
For the purposes of the Regulation and this Privacy Policy and our website, the term: - "personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; "-"processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;; "-"restriction of processing" the marking of stored personal data with the aim of limiting their future processing;-"consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her. - "pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person; - "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law; - "third party" means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorised to process the personal data;-"processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; - "profiling" means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.