Name And Contact Information for the Controller Pursuant to Art. 4, Par. 7 GDPR

Berliner Konzert-Chor e.V.
Starnberger Str. 3
10781 Berlin
Tel.: +49 30 218 50 01
Fax: +49 30 213 87 03
E-Mail: chor@berlinerkonzert.org

Safety and Protection of Your Personal Data

We consider it our primary responsibility to protect the confidentiality of the personal information you provide and to protect it from unauthorized access. For this we apply the utmost care and the most modern safety standards.

As a private company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the regulations of the Federal Data Protection Act in Germany. We have taken technical and organizational measures to ensure that the rules on data protection are observed by both us and our external service providers.

Definitions

Legislation requires that personal data be processed lawfully, in good faith, and in a manner that is reasonable for the affected person (“lawfulness, fairness, transparency”). In order to ensure this, we provide information about the individual legal definitions that are used in this privacy statement:

1. Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable when he or she can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or with one or more special features, such as the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
2. Processing refers to any process or processes, with or without the help of automated procedures, related to personal data, such as the collection, organization, storage, adaption or modification, sorting, querying, use, or disclosure through submission, dissemination or other forms of provision, reconciliation or association, restriction, erasure, or destruction.
3. Restriction of processing is the marking of stored personal data for the purpose of limiting its future processing.
4. Profiling is any kind of automated processing of personal data that consists of using that data to evaluate certain personal aspects pertaining to a natural person, in particular aspects of work performance, economic status, health, personal preferences, or to analyze or predict the interests, reliability, behavior, address or whereabouts of this natural person.
5. Pseudonymisation is the processing of personal data in such a way that it can no longer be associated with a specific person without the need for additional information, provided that such additional information is kept separate and subject to technical and organisational measures to ensure that the personal data are not identified or identifiable natural person.
6. A file system is any structured collection of personal data that is accessible by means of specific criteria, regardless of whether the collection is centralized, decentralized or organized according to functional or geographical considerations.
7. The controller is a natural or legal person, public authority, body or other body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by EU law or the law of EU member states, the controller or the specific criteria for this designation may be provided for under EU or national law.
8. Processor refers to a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
9. Recipient refers to a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under EU or national law in connection with a particular mission are not considered as beneficiaries. The processing of these data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing.
10. Third party refers to a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or processor.
11. Consent of the data subject refers to any expression of volition for the particular case, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act by which the data subject agrees to the processing of personal data.

Legal Basis for Processing

The processing of personal data is only allowed when a legal basis for such exists. The legal basis for the processing may, in accordance with art. 6(1)(a–f) of the GDPR in particular, exist when:

a. The data subject has consented to the processing of the personal data concerning him for one or more specific purposes.

b. The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual actions which are carried out at the request of the data subject.

c. Processing is required to fulfill a legal obligation to which the controller is subject.

d. Processing is necessary to protect the vital interests of the data subject or any other natural person.

e. Processing is necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the controller.

f. Processing is necessary to safeguard the legitimate interests of the controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, in particular where the data subject is a minor.

Information on the Collection of Personal Data

(1) In the following we explain about the collection of your personal data when using our website. Personal data can include, for example, name, address, e-mail address and user behavior.

(2) When contacting us by e-mail or using a contact form, the information you provide (your e-mail address, your name, and telephone number if applicable) will be stored by us in order to respond to your query. We delete the data in this connection after the storage is no longer required, or the processing may be restricted if legal storage obligations exist.

Collection of personal data when visiting our website

In the case of merely informative use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for the reliable and secure provision of information (legal basis is art. 6(1)(1) of the GDPR):

• IP addresses,
• Date and time of query,
• Time zone offset from Greenwich Mean Time (GMT),
• Content of the request (specific page),
• Access status / HTTP status code,
• Amount of data transferred,
• Website from which request originated,
• Browser,
• Operating system und user interface,
• Language and browser version.

Use of Cookies

(1) In addition, “cookies” are stored on your computer when using our website. These are small text files that are stored on your hard drive, associated with the browser you are using, and that provide certain information to the originator of the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(2) This website uses the following types of cookies, the scope and operation of which are explained below:

• transient cookies (see a.),
• persistent cookies (see b.).

a. Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. These store a so-called session ID, by which various requests from your browser can be assigned to their own common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

b. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

c. You can configure your browser setting according to your wishes, for example, to decline the acceptance of third-party cookies or all cookies. So-called “third-party cookies” are cookies that have been set by a third party, not by the website on which you are currently located. Please note that disabling cookies may prevent you from using some of the features of this website.

Other functions and services of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service and for which the aforementioned data processing principles apply.

(2) In part, we rely on external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may disclose your personal data to third parties in the case of special campaigns, competitions, contracts or similar services that are offered by us together with partners. For more information, please refer to your personal data or the description of offerings below.

(4) In cases where our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences in the description of our offerings.

Newsletter

(1) With your consent, we can regularly send you our newsletter, which will inform you about our current events and offerings. The specific goods and services are named in the declaration of consent.

(2) For subscription to our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the address specified in which we ask you to confirm that you wish to receive our newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to verify your registration and, if necessary, to inform you about any possible misuse of your personal data.

(3) The only information required for sending the newsletter is your e-mail address. The provision of additional, separately indicated data is voluntary and will be used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. Legal basis is art. 6, par. 1 (1)a of the GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can cancel your subscription by sending an e-mail to newsletter@berlinerkonzert.org or by a message to the contact details given in the Site Notice.

Children

Our offerings are essentially intended for adults. Persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians.

Rights of the affected person

(1) Withdrawal of consent
If the processing of the personal data is based on a given consent, you have the right to revoke the consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

To exercise the right of withdrawal, you can contact us at any time.

(2) Right of acknowledgment
You have the right to request confirmation from the controller that we are processing personal data concerning you. You may request confirmation at any time using the contact details above.

(3) Right to obtain information
If personal data is processed, you can request information about the same and the following information at any time:

a. purposes of processing;

b. categories of personal data being processed;

c. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular recipients in third countries or international organizations;

d. if possible, the planned duration for which the personal data are being stored or, if this is not possible, the criteria for determining that duration;

e. the existence of a right to rectification or erasure of the personal data concerning you or to a restriction of processing by the controller or a right to object to such processing;

f. the existence of a right of appeal to a supervisory authority;

g. if the personal data are not collected from the data subject, all available information on the source of the data;

h. the existence of automated decision-making, including profiling, in accordance with art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

If personal data are being transmitted to a third country or to an international organization, you have the right to be informed of the appropriate safeguards under art. 46 of the GDPR in connection with the transfer. We will provide a copy of the personal data that is the subject of the processing. For any additional copies you request, we may charge a reasonable fee based on administrative costs. If your application is submitted electronically, we must provide the information in a standard electronic format, unless otherwise stated. The right to receive a copy under par. 3 shall not affect the rights and freedoms of others.

(4) Right of acknowledgment
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data. With respect to the purposes of the processing, you have the right to amend incomplete personal data – including by means of a supplementary statement.

(5) Right to deletion
You have the right to request from the controller that your personal data be deleted immediately; we are obliged to delete personal data immediately if one of the following applies:

a. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

b. The data subject withdraws the consent on which the processing was based, in accordance with art. 6(1)(a) or art. 9(2)(a) GDPR, and there exists no other legal basis for the processing.

c. In accordance with art. 21(1) of the GDPR, the data subject objects to the processing and there are no legitimate grounds for processing, or the data subject objects to the processing in accordance with art. 21(2) of the GDPR.

d. The personal data were wrongfully processed.

e. Compliance with a legal obligation in EU or member state law to which the controller is subject compels deletion of the personal data.

f. The personal data were collected in the context of an offer of information society services pursuant to art. 8(1) of the GDPR.

If the controller has made the personal data publicly available and is required to delete it in accordance with par. 1, in consideration of the technology available and the implementation costs, he shall take appropriate measures, including technical ones, to inform data controllers who process the personal data that an affected person has requested that they delete all links to such personal data or copies or replications thereof.

The right to deletion does not exist if the processing is necessary:

• for the exercise of the right to freedom of expression and information;
• to fulfill a legal obligation required by the law of the EU or of the member States to which the controller is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the controller;
• for reasons of public interest in the field of public health pursuant to art. 9(2)(h) and (i) and art. 9(3) of the GDPR;
• for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes pursuant to art. 89(1) GDPR, to the extent that the law referred to in par. 1 is likely to render impossible or seriously prejudice the achievement of the objectives of that processing, or
• to assert, exercise or defend legal claims.

(6) Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if:

a. the accuracy of the personal data is disputed by the data subject, for such time until the controller can verify the accuracy of the personal data;

b. the processing is unlawful and the data subject refuses to delete the personal data and instead requests restriction of the use of the personal data;

c. the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them to assert, exercise or defend legal claims; or

d. the person concerned has lodged an objection to the processing pursuant to art. 21(1) of the GDPR, as long as it is not certain that the responsible reasons of the person responsible prevail over those of the person concerned.

If the processing has been restricted in accordance with the above-mentioned conditions, these personal data will only be stored with the consent of the data subject or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons important public interest of the EU or of a member state.

In order to exercise the right to limit processing, the data subject may contact us at any time using the contact details provided above.

(7) Right to data portability
You have the right to receive the personally identifiable information that you provide us in a structured, common and machine-readable format. You also have the right to arrange transfer of this information to another person without hindrance by the controller to whom the personal data has been provided, provided that:

a. the processing is based on a consent in accordance with art. 6(1)(a) or art. 9(2)(a) or a contract pursuant to art. 6(1)(b) of the GDPR; and

b. the processing is done using automated procedures.

When exercising the right to data portability in accordance with par. 1, you have the right to obtain direct transfer of the personal data from one controller to another to the extent this is technically feasible. The exercise of the right of data portability is without prejudice to the right of deletion. This right does not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

(8) Right to object
You have the right, for reasons of your own particular situation, to object at any time to the processing of personal data relating to you pursuant to art. 6(1)(e) or (f) of the GDPR; this also applies to any profiling based on these provisions. The controller will no longer process the personal data unless he can demonstrate compelling legitimate grounds that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

If personal data is processed to operate direct mail, you have the right to appeal at any time; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Regarding the use of information services, regardless of Directive 2002/58 / EC, you can exercise your right to object by means of automated procedures relying on technical specifications.

You have the right, for reasons of your own particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes under art. 89(1), except when the processing is necessary to fulfill a public interest task.

The right of objection can be exercised at any time by contacting the respective controller.

(9) Automated decisions made on a case-by-case basis, including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling – having a legal impact or affecting you in a similar manner. This does not apply if the decision:

a. is necessary for the conclusion or performance of a contract between the data subject and the controller,

b. is permitted by EU or member state legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, or

c. is made with the express consent of the data subject.

The controller shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the data subject, including at a minimum the right to obtain address by a representative by the controller, in order that the data subject can express a viewpoint or challenge the decision.

This right can be exercised by the data subject at any time by address to the controller .

(10) Right to complain to a supervisory authority
Furthermore, without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or place of alleged infringement, if the data subject is of the opinion that the processing of personal data breaches this regulation.

(11) Right to effective judicial remedy
Without prejudice to an available administrative or extrajudicial remedy, including the right to complain to a supervisory authority under art. 77 of the GDPR, you have the right to an effective judicial remedy if you consider that the rights conferred on you by that regulation are not in conformity with the regulation concerning the processing of your personal data.

Use of Matomo (formerly Piwik)

(1) We use the web analysis service Matomo to analyze and regularly improve the use of our website. With the statistics thus obtained, we can improve our offerings and make them more interesting for you as a user. The legal basis for this is art. 6(1)(1)(f) of the GDPR.

(2) Cookies are stored on your computer for this evaluation. The information so obtained is stored by the controller exclusively on its server in Germany. You can discontinue this evaluation by deleting existing cookies and preventing the storage of further cookies. Please note, that if you prevent the storage of cookies, you may not be able to use this website to the full extent. The prevention of the storage of cookies is possible through the settings in your browser. Deactivation of the use of Matomo is possible by removing the following checkmark to enable the opt-out plug-in: [Matomo iFrame].

(3) This website uses Matomo with the “AnonymizeIP” extension. As a result, IP addresses are processed in abbreviated form, which means that a direct personal reference is not possible. The IP address transmitted by Matomo from your browser will not be merged with other data we collect.

(4) The Matomo program is an open source project. Third-party privacy information is available at matomo.org/privacy-policy/.

Contract Processors

We may rely on external service providers (contract processors), e.g. for the shipment of goods, newsletters or payment transactions. Separate order data processing was arranged with the service provider to ensure the protection of your personal data.

We work with the following service providers:

• ALL-INKL.COM - Neue Medien Münnich
  Hauptstraße 68, 02742 Friedersdorf
• Papagena Kartenvertriebs GmbH
  Mehringdamm 33, 10961 Berlin