Data protection

This data protection declaration is to inform you about how, to what extent and for what purpose we process your data when you visit our website and what rights you have in connection with the data processing. We process the data in compliance with the statutory provisions, in particular the GDPR.

We are the data controller. Our contact details are:

Konzert Theater Kontor Heinersdorff GmbH
Alsterterrasse 10
D-20354 Hamburg
Service hotline: +49 211 13 53 70

Contact details of the company data protection officer:

Dr. Uwe Nolte
Dr. Nolte Datenschutz & QM
Am Ziegelteich 44 b
D-22525 Hamburg
Telephone: +49 160 63 222 32
E-mail: [email protected]
Homepage: datenschutz-qm.de

Contact details for the supervisory authority:

North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information

Ms Helga Block
Kavalleriestraße 2-4
D-40213 Düsseldorf
Telephone: +49 211 384 24 0
Fax: +49 211 384 24 10
E-mail: [email protected]
Homepage: http://www.ldi.nrw.de

You can visit and use our website without providing personal data (e.g. name, address and telephone number). However, to use certain functions of our website, it is necessary to provide personal data, e.g. when placing an order via our online shop. Please note the following information in this regard.

We always collect and process personal data in compliance with the statutory provisions, in particular the GDPR.

As soon as you access our website, server log files are transmitted to our provider. These are anonymised data (e.g. IP address, operating system, browser type and version, time of access, referrer URL (previously visited website)), which enable us to carry out statistical evaluations and optimise our website for users. These data are anonymised and do not allow any conclusions to be drawn about a specific person.

The legal basis for this data processing is Art. 6 (1) sentence 1 f) GDPR. Our legitimate interest lies in the fact that we can use the data processing to carry out statistical evaluations regarding the use of our website and optimise our website for the user.

We use cookies on our website. Cookies are text files that are stored on your device (PC, laptop, tablet, smartphone, etc.) and that collect data such as your IP address, operating system, browser type and version, time of access and referrer URL (previously visited page) in order to recognise multiple uses of our site by the same user and to statistically record and evaluate the use of our site. This serves the purpose of optimising our website for the user.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in the fact that we can use the data processing to carry out statistical evaluations regarding the use of our website and optimise our website for the user.

You can prevent the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of our website.

Our website uses the cookie consent tool from MIR MEDIA to obtain your consent to the storage of cookies in your browser and to document this consent in a data protection compliant manner. The party offering this technology is MIR MEDIA, Händelstraße 41, 50674 Cologne, Germany. The cookie consent technology is used to obtain consent to the use of cookies with a compliance tool. The legal basis for this is Art. 6 (1) f GDPR. The legitimate interest of the provider lies in the user-friendliness of the website and in the fulfilment of the legal requirements of the GDPR. Further information can be found at www.mir.de/de/ and www.mir.de/de/datenschutzerklaerung.

When you use our website, a cookie from MIR MEDIA is stored in your browser, in which the consent you have given or the revocation of this consent is stored.

The following data is stored on the servers of the service provider in the EU: identification number, (for the user, his or her browser, operating system and the end device used), IP address, date and time, country, language, type, scope and purpose of consent, browser cookie settings, website on which consent was given, technical information on the browser and operating system.

The recorded data is stored until you request us to delete it, delete the MIR MEDIA cookie itself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke consent that you have given or to object to the processing of your data using cookie technologies (collectively referred to as ‘opt-out’). You can initially declare your objection by means of your browser settings, e.g. by disabling the use of cookies (although this may also limit the functionality of our online services). You can also opt out of the use of cookies for online marketing purposes through a variety of services, especially in the case of tracking, via the websites optout.aboutads.info and www.youronlinechoices.com/. You can also find further opt-out information in the information on the service providers and cookies used.

You can also prevent the collection and processing of your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find one at www.noscript.net or www.ghostery.com, for example).

You have the option of registering to receive our newsletter using the newsletter form on our website. To do this, you must provide your email address and consent to the data processing. After registering, you will receive a confirmation email at the email address provided in the form with a request for confirmation. The registration will only become effective once you have clicked on the activation link contained in the email.

When you register for our newsletter, we store your email address for the sole purpose of sending you the newsletter.

We use rapidmail to send our newsletter. Your data is therefore transmitted to rapidmail GmbH. rapidmail GmbH is prohibited from processing your data for purposes other than sending our newsletter. In particular, it is prohibited from passing on or selling your data to third parties.

The legal basis for the processing of your data is Art. 6 (1) 1 lit. a GDPR. The data will only be stored for as long as they are needed for sending the newsletter.

You can revoke your consent to the processing of your data (e.g. storage, use) at any time, for example by using the unsubscribe link provided in each newsletter.

You have the option to contact us using the contact form or by email. The information you provide, as well as the time of contact and your email address, will be stored. We do not pass this data on to third parties. We collect and use the data for the purpose of processing or answering your message.

The legal basis for the data processing is Art. 6 (1) sentence 1 f) GDPR. Our legitimate interest lies in the fact that we need your data in order to process and/or respond to your message.

You have the option of registering on our website. When registering, you must provide your name, address, email address and, if applicable, other data shown on the registration form. Furthermore, we store your IP address as well as the date and time of your registration in order to be able to check whether you are actually the person who registered under your data in the event of suspected misuse of your data. The data collection and processing is carried out for the purpose of providing you with offers and functions of our website that require registration, for example to enable you to view your order data.

The legal basis for the data processing is Art. 6 (1) sentence 1 f) GDPR. Our legitimate interest lies in the fact that we need your data in order to provide you with the desired offers and functions of our website that require registration (in particular, to enable you to view your order data).

You have the option of ordering from our online shop. We have commissioned the external service providers CTS Eventim AG & Co. KGaA and CTS Eventim Solutions GmbH, both Contrescarpe 75 A, 28195 Bremen, to carry out the ordering process and process the contract. When you place an order in the online shop, you must provide your name, address, email address and, where applicable, other data as shown on the form. In addition, your IP address and the date and time of your order will be stored so that, in the event of any suspicion of misuse of your data, we can check whether you are actually the person who placed the order using your data. These data are processed and stored by CTS Eventim AG & Co. KGaA and CTS Eventim Solutions GmbH in order to process the order. We, as the data controller, also have access to the data.

The collection and processing of data is carried out for the purpose of processing your order and fulfilling the contract concluded with you. The legal basis for the data processing is Art. 6 para. 1 sentence 1 b) GDPR.

We use the functions of Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies (see above under ‘Cookies’), which are used to collect information about your operating system, browser type and version, IP address, referrer URL (previously visited page) and time of access. This information is transmitted to a Google Inc. server in the USA and stored there. It is used by Google Analytics to evaluate the use of the website, to create reports on the activities on the website and to provide services in connection with the use of the website and the internet for the purpose of market research and the design optimisation of the website.

The IP address collected and transmitted in the context of the use of Google Analytics is not merged with other data from Google. The IP address is anonymised so that it cannot be assigned.

You can prevent the use of cookies by making special settings in your browser; in this case, however, some of the displays or functions of our website may only be available to a limited extent.

You can also prevent the information generated by cookies from being collected and processed by Google by downloading and installing the following browser add-on, for example: https://tools.google.com/dlpage/gaoptout?hl=de

Further information on data protection in connection with Google Analytics can be found at the following link: https://support.google.com/analytics/answer/6004245?hl=de

The legal basis for this data processing is Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in the fact that we can carry out statistical evaluations regarding the use of our website and optimise our website for the user through the data processing.

The Facebook page Heinersdorff Konzerte - Klassik für Düsseldorf https://www.facebook.com/heinersdorffkonzerte is the responsibility of Konzert Theater Kontor Heinersdorff GmbH, Germany. The legal basis for the processing of Facebook Insights data by our company is Article 6 (1) f GDPR. We use this data to make the posts on the page more attractive or to find the right time to publish them.

When you visit our Facebook fan page, Facebook, as the data controller, collects personal data from users, for example, by using cookies. Facebook may also collect such data from visitors to this page who are not logged in or registered on Facebook.

Information about data collection and further processing by Facebook can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/

According to the ECJ ruling, there is a joint responsibility between Facebook and our company in accordance with Article 26 of the GDPR; you can view the Page Controller Addendum here: https://www.facebook.com/legal/terms/page_controller_addendum

If you would like to learn more about Insights data on Facebook, please visit the following page: https://www.facebook.com/legal/terms/information_about_page_insights_data

We cannot see what user data Facebook collects about you. We also do not have full access to the collected data or your profile data. We can only see the public information of your profile. You can decide which of these you make public in your Facebook settings. In addition, you can actively hide your ‘Likes’ or stop following the page in your Facebook settings (https://www.facebook.com/settings?tab=privacy). Your profile will then no longer appear in the list of fans of this page.

Our company receives anonymised statistics from Facebook about the use and utilisation of the page. The following information is provided here, for example:

• Follower: number of people who follow us on Facebook – including growth and development over a defined period of time.
• Reach: number of people who see a specific post. Number of interactions on a post. This shows, for example, which content is better received by the community than others.
• Ad performance: how much does a click cost? How many people have seen an ad?
• Demographics: average age of visitors, gender, place of residence, language.

We use these statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offering on Facebook and to better respond to the interests of our users. We cannot link the statistical data with the profile data of our fans. You can decide in your Facebook settings how targeted advertising is displayed to you.

We receive personal data from Facebook if you actively communicate this to us via a personal message on Facebook. We use your data (e.g. first name, surname) to answer your request. We do not store your data. We also receive personal data via Facebook if you use a form with pre-filled fields with data from your profile to send the data to us and actively send the data to us by clicking on a button.

We use your data when you use the chat function to answer your request. The information collected in this way is used to contact you in order to provide you with the desired information and offers.

We use social media plugins from Facebook. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit a page of our website that contains a Facebook plug-in, your browser establishes a direct connection to the Facebook servers and transmits the content of the plug-in to Facebook. This provides Facebook with the information that and when you accessed our website, as well as your IP address. This information is stored on Facebook's servers in the United States. This also applies if you are not a Facebook user and do not have a Facebook account.

If you are a Facebook user and are logged into Facebook, Facebook can associate your visit to our website with your Facebook account. If you interact with the plugins (e.g. by clicking the ‘Like’ or ‘Share’ button), this information is transmitted directly from your browser to Facebook and stored on Facebook's servers in the United States and also published on Facebook. If you do not want this to happen, you must log out of Facebook before visiting our website.

The information processed is used to enable Facebook to create user profiles and to use them for the purposes of market research, advertising and optimising Facebook pages. They also serve to personalise our site for the user and to make our site better known.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in making our website and our services better known (advertising) and making our website more personal to the user through data processing. The legitimate interest of third parties, namely Facebook Inc., is to enable the creation of user profiles for the purposes of market research, advertising and optimising their websites.

For more information about Facebook's data processing and the protection of your data, please visit the following link: https://www.facebook.com/about/privacy/

We use social media plugins from Instagram. Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. When you visit a page of our website that contains an Instagram plugin, your browser establishes a direct connection to Instagram's servers and transmits the content of the plugin to Instagram. This gives Instagram the information that and when you visited our website, as well as your IP address. This information is stored on Instagram's servers in the United States. This also applies if you are not an Instagram user and do not have an Instagram account.

If you are an Instagram user and are logged into Instagram, Instagram can associate your visit to our website with your Instagram account. If you interact with the plugins, this information is transmitted directly from your browser to Instagram and stored on Instagram's servers in the United States and also published on Instagram. If you do not want this to happen, you must log out of Instagram before visiting our website.

The information processed is used to enable Instagram to create user profiles and to use them for the purposes of market research, advertising and optimising the Instagram pages. They also serve to personalise our site for the user and to make our site better known.

The legal basis for this data processing is Art. 6 (1) sentence 1 f) GDPR. Our legitimate interest lies in making our website and our services better known (advertising) and personalising our website for the user. The legitimate interest of third parties, namely Instagram LLC, is to enable the creation of user profiles for the purposes of market research, advertising and optimising their websites.

For more information about Instagram's data processing and the protection of your data, please visit the following link: https://www.instagram.com/about/legal/privacy/

We use the Google Maps product of Google LLC to calculate and display geographical information on our websites, in particular directions. When using this function, data about the use of the website is transmitted to Google LLC and processed by it.

You can prevent the transmission of data by disabling ‘Javascript’ in your browser. However, in this case you will not be able to use the Google Maps functions.

The legal basis for this data processing is Art. 6 (1) sentence 1 f) GDPR. The legitimate interests within the meaning of this provision are our interest and the interest of the users that we can make our website more user-friendly by offering geographical information, in particular the display of directions.

Disclosure of data

We only disclose your data to third parties

• if you have given your express consent to do so in accordance with Art. 6 (1) 1 a) GDPR;
• if the disclosure is necessary for the performance of a contract in accordance with Art. 6 (1) 1 b) GDPR;
• if we are legally obliged to disclose the data in accordance with Art. 6 (1) 1 c) GDPR or
• if the disclosure of the data is necessary in accordance with Art. 6 (1) sentence 1 f) GDPR to protect our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data outweigh our interests. 

We only disclose your data to third parties

• if you have given your express consent to do so in accordance with Art. 6 (1) 1 a) GDPR;
• if the disclosure is necessary for the performance of a contract in accordance with Art. 6 (1) 1 b) GDPR;
• if we are legally obliged to disclose the data in accordance with Art. 6 (1) 1 c) GDPR or
• if the disclosure of the data is necessary in accordance with Art. 6 (1) sentence 1 f) GDPR to protect our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data outweigh our interests.

We store your data for as long as it is needed for the purposes for which it is processed. Beyond that, we only store data if we are legally obliged to do so, e.g. due to legal storage obligations.

In connection with our processing of your data, you have the following rights:

• Right of access by the data subject to information about the processing of your personal data by us, the purpose of the processing, categories of processed data, recipients or categories of recipients, storage period or criteria for determining the period, right to rectification, erasure, restriction of processing or to object to processing, right to lodge a complaint with a supervisory authority, where applicable, information on the origin of the data and the existence of automated decision-making, including profiling, and, if applicable, information on guarantees in accordance with Art. 46 GDPR in the event of transmission to a third country or international organisation;
• Right to rectification of inaccurate personal data or completion of incomplete personal data in accordance with Art. 16 GDPR;
• Right to erasure of personal data stored in accordance with Art. 17 GDPR if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if consent has been withdrawn and there is no other legal ground, if an objection to the processing has been lodged and the data 21 (1) or (2) GDPR no longer apply, if the data has been processed unlawfully, if the deletion is necessary to fulfil a legal obligation or if the data has been collected in relation to services offered by an information society in accordance with Art. 8 (1) GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR, if you dispute the accuracy of the data (for the period of time necessary to verify its accuracy), if the processing is unlawful but you refuse to delete it and instead demand that its use be restricted, if we no longer need the data for the purposes of processing but you need the data to assert, 
  exercise or defence of legal claims, or if you have objected to processing pursuant to Article 21(1) of the GDPR, pending the verification of whether our legitimate grounds override your legitimate grounds;
• Right to object to the processing of your personal data pursuant to Article 21(2) of the GDPR (where the data are processed for direct marketing purposes) or pursuant to Article 21 (1) GDPR (if the processing is carried out in accordance with Art. 6 (1) sentence 1 e) or f) GDPR, for reasons arising from your particular situation, unless we have compelling legitimate grounds for the processing which override your interests, or the processing serves the purpose of asserting, exercising or defending legal claims); 
  
   
• Right to data portability in accordance with Art. 20 GDPR, i.e. to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller;
• Right to withdraw consent granted in accordance with Art. 7 (3) GDPR. 
  The consequence of the withdrawal is that we are no longer allowed to process the data from that point on;
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. To do so, you can contact the supervisory authority listed under ‘Contact details’. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.