Dresden State Operetta privacy statement
1. Name and contact details of the party responsible for processing and of the company's data protection officer
This privacy information applies to data processing performed by:
Staatsoperette Dresden
Kraftwerk Mitte 1
01067 Dresden
Theatre director: Kathrin Kondaurow
Administrative director: Stefanie Süss
Telephone: +49 351 32042-610
Email: intendanz@staatsoperette.de
www.staatsoperette.de
Data protection officer contact: datenschutz@staatsoperette.de
2. Collection and storage of personal data, as well as the type and purpose of its usage
a) When visiting the website
When you access our website www.staatsoperette.de, the browser being used on your end device automatically sends information to our website's server. This information is temporarily stored in what is known as a log file. The following information is collected without any involvement from you, and is stored until its automatic erasure:
We process the aforementioned data for the following purposes:
The legal basis for data processing is Art. 6 Para. 1 Clause 1 f GDPR. Our legitimate interest is derived from the above-listed data-collection purposes. Under no circumstances do we use the collected data to draw conclusions about your identity. We also use website cookies and analysis services for visits to our website. For more information on this, please see sections 4 and 5 of this privacy statement.
b) When subscribing to our newsletters
If you have expressly consented to this under Art. 6 Para. 1 Clause 1 a GDPR, we will use your email address to regularly send you our newsletter. Entering an email address will suffice for receiving the newsletter.
You may unsubscribe at any time, for example via the link at the bottom of each newsletter. Alternatively, you are also welcome to email us your unsubscribe request any time at presse@staatsoperette.de.
c) When using our contact form
If you have any questions, we give you the opportunity to contact us via a form provided on our website. This will require entering a valid email address so that we know who the enquiry is from and are able to answer it. Further information can be provided on a voluntary basis.
Data-processing for the purpose of contacting us is performed in accordance with Section 6 Para. 1 Clause 1 a GDPR based on your voluntary consent. The personal data collected by us for the purpose of using the contact form is automatically erased once your enquiry has been handled.
d) When using our booking form
If you have any booking requests regarding ticket purchases, we give you the opportunity to contact us via a form provided on our website. This will require entering your personal details and a valid email address so that we can perform the ticket-purchase transaction, and so that we know who the enquiry is from and are able to answer it. Further information can be provided on a voluntary basis. Data-processing for the purpose of contacting us is performed in accordance with Section 6 Para. 1 Clause 1 a GDPR based on your voluntary consent. The personal data collected by us for the purpose of using the booking form is automatically erased once your enquiry has been handled.
3. Data-sharing
Your personal data is not sent to third parties for purposes other than those listed below. We only share your personal details with third parties if:
4. Cookies
We use cookies on our site. These are small files automatically created by your browser and stored on your end device (laptop, tablet, smartphone etc.) when you visit our site. Cookies do not harm your end device, and do not contain any viruses, trojans or other malware.
The cookie stores information produced in relation to each specific end device used. But this does not mean we are directly able to identify you. On the one hand, cookies are used to enhance your user experience on our website. As such, we use 'session cookies' to see that you have already visited certain pages of our website, e.g. to log in internally to order a press kit or to display the info banner. These cookies are automatically erased once you leave our site.
We also use temporary cookies, which are stored on your end device for a set period of time, to optimise user-friendliness. If you visit our site again to use our services, it will automatically detect that you have previously visited us and will know which data you have entered and which settings you have configured, so that you do not have to re-enter them.
On the other hand, we use cookies to compile statistics on our website usage and to analyse these in order to optimise our site for you (see section 5). These cookies enable to automatically detect that you have previously visited us if you access our site again. They are automatically erased after a set period of time. The data processed by cookies is required for the aforementioned purposes in order to protect our and third parties' legitimate interests in accordance with Art. 6 Para. 1 Clause 1 f GDPR.
While most browsers accept cookies automatically, you can configure your browser in such a way that no cookies are stored on your computer or that a notification always appears before a new cookie is created. Completely disabling cookies can, however, mean you are unable to use all the functions of our website.
5. Analysis tools
Tracking tools
The tracking measures used by us and listed below are taken based on Art. 6 Para. 1 Clause 1 f GDPR. We use these tracking measures as a means of ensuring an appropriate design and ongoing optimisation of our website. On the other hand, we use them to compile statistics on our website usage and to analyse these in order to optimise our site for you. These interests are considered legitimate under the aforementioned regulation.
The respective data-processing purposes and data categories can be found in the relevant tracking tools.
Google Analytics
To ensure an appropriate design and ongoing optimisation of our website, we use Google Analytics, a web-analysis service run by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter known as 'Google'). Pseudonymised usage profiles are created and cookies (see section 4 below) used in this context. The information generated by the cookie in relation to your use of this website, such as
• Browser type/version
• Operating system used
• Referrer URL (the site visited immediately prior)
• Host name of accessing computer (IP address)
• Time of server request
is sent to a Google server in the USA, where it is saved. The information is used to analyse website usage, compile reports on website activities and render other services associated with website usage and internet usage for the purposes of market research and ensuring an appropriate design of this website. This information may also be sent to third parties if this is required by law or insofar as third parties are processing this data on our behalf. Under no circumstances is your IP address combined with other Google data. IP addresses are anonymised to ensure it cannot be attributed to you (IP masking). You can prevent cookies from being installed by adjusting your browser software settings accordingly; please note, however, that this may mean you are unable to use all the functions of our website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie relating to your use of this website (incl. your IP address) by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, particularly for browsers on mobile end devices, you can also prevent Google Analytics from recording data by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be created, preventing your data from being collected in future when visiting this website. The opt-out cookie only applies to this browser and only to our website. It is stored on your device. If you clear the cookies in this browser, you will have to re-install the opt-out cookie. Further information on privacy in relation to Google Analytics can be found on the Google Analytics Help page (https://support.google.com/analytics/answer/
6004245?hl=de).
Newsletter tracking
In order to optimally gear our newsletter around the wishes and interests of our subscribers, we measure the number and time of newsletters opened when sending out our newsletter. This is done by recording the number of images downloaded or links clicked. We also measure the number and time of usage of the linked content in our newsletter. This information is tracked anonymously and does not identify the respective newsletter recipients in any way. It is not possible to attribute the measured opening rate or click rate to specific recipients.
6. Social-media links/plugins
We use social-media links from the social networks Facebook and Twitter on our website based on Art. 6 Para. 1 Clause 1 f GDPR in order to publicise our theatre. The underlying commercial purpose is considered a legitimate interest under the GDPR. The respective provider must be responsible for operating these social-media accounts in accordance with data-protection regulations.
a) Facebook
Our website uses social-media plugins from Facebook to personalise the user experience. We use the 'LIKE' or 'SHARE' button for this. These are services run by Facebook.
If you visit a page of our website containing one of these plugins, your browser establishes a direct connection with Facebook's servers. Facebook sends the plugin content directly to your browser, which integrates them into the website. Integration of the plugin informs Facebook that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is sent directly by your browser to a Facebook server in the USA, where it is saved. If you are logged in to Facebook, Facebook can directly attribute your visit on our website to your Facebook account. If you interact with the plugins, e.g. by clicking the 'LIKE' or 'SHARE' button, the relevant information is also sent directly to a Facebook server, where it is saved. The information is also published on Facebook and shown to your Facebook friends.
Facebook can use this information for the purposes of advertising, market research and customising the design of Facebook pages. To do this, it compiles usage, interest and relationship profiles, e.g. to analyse your use of our website in terms of the advertising shown to you on Facebook, to inform other Facebook users about your activities on our website, and to render other services associated with Facebook usage. If you do not want Facebook to attribute the data collected on our website to your Facebook account, you will need to log out of Facebook before visiting our website. For more information on the purpose and scope of the data-processing, the further processing and usage of the data by Facebook, your rights regarding this, and settings options to protect your privacy, please see Facebook's privacy policy (https://www.facebook.com/about/privacy/).
b)
Plugins from the microblogging network Twitter Inc. (Twitter) are integrated into our website. The Twitter plugins (Tweet button) can be recognised by the Twitter logo on our site. An overview of Tweet buttons is available here (https://about.twitter.com/resources/buttons). If you access a page of our website containing one of these plugins, a direct connection is established between your browser and the Twitter server. This informs Twitter that you have visited our site using your IP address. If you click the Twitter 'Tweet button' while logged in to your Twitter account, you can link our site content to your Twitter profile. This enables Twitter to attribute your visit on our site to your user account. Please note that, as the site provider, we are not privy to the content of the data sent or how it is used by Twitter. If you do not want Twitter to attribute your visit on our site to your Twitter account, please log out of your Twitter account. Further information on this can be found in Twitter's privacy statement (https://twitter.com/privacy).
7. Data-subject rights
You have the right:
• Under Art. 15 GDPR, to request information on the personal data we process relating to you. You can particularly request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or is being disclosed, the planned storage duration, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if we have not collected this, and the existence of automated decision-making, including profiling and any important information on the details thereof;
• Under Art. 16 GDPR, to immediately request the rectification of incorrect personal data stored by us, or the completion of any incomplete personal data stored by us;
• Under Art. 17 GDPR, to request the erasure of your personal data stored by us, insofar as processing is not required in order to exercise your right to free expression and information, in order to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• Under Art. 18 GDPR, to request the restriction of processing of your personal data, insofar as you dispute the accuracy thereof, the processing is illegal but you refuse to have it erased and we no longer need the data, but you require it in order to assert, exercise or defend legal claims, or you have lodged an objection to the processing under Art. 21 GDPR;
• Under Art. 20 GDPR, to receive the personal data you have provided to us in a structured, conventional and machine-readable format, or to request it to be sent to a different processor;
• Under Art. 7 Para. 3 GDPR, to revoke the consent you once provided to us at any time. This means we are no longer able to continue the data-processing based on this consent, and
• Under Art. 77 GDPR, to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority responsible for your local area or workplace or our lawyer's chambers for this.
8. Right to object
If your personal data is processed based on legitimate interests as per Art. 6 Para. 1 Clause 1 f GDPR, you have the right, under Art. 21 GDPR, to lodge an objection to the processing of your personal data, insofar as there are grounds for this relating to your particular situation or the objection is to direct marketing. In the latter case, you have a general right to object without having to cite a particular situation. If you wish to exercise your right of revocation or objection, simply email info@staatsoperette.de
9. Data security
During website visits, we use the widespread SSL (Secure Socket Layer) process, combined with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. You will know whether a page of our website is encrypted if you see a locked key or a lock symbol in the status bar at the bottom of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or deliberate tampering, partial or full loss, destruction or unauthorised access by third parties. Our security measures are constantly being improved in keeping with technological developments.
10. Currency of and changes to this privacy statement
This privacy statement is currently valid and is dated May 2018. Further developments to our website and services provided there, or amended legal/official requirements, may necessitate changes to this privacy statement. You can access and print out the latest version of the privacy statement at any time at https://www.staatsoperette.de/datenschutz.
This privacy information applies to data processing performed by:
Staatsoperette Dresden
Kraftwerk Mitte 1
01067 Dresden
Theatre director: Kathrin Kondaurow
Administrative director: Stefanie Süss
Telephone: +49 351 32042-610
Email: intendanz@staatsoperette.de
www.staatsoperette.de
Data protection officer contact: datenschutz@staatsoperette.de
2. Collection and storage of personal data, as well as the type and purpose of its usage
a) When visiting the website
When you access our website www.staatsoperette.de, the browser being used on your end device automatically sends information to our website's server. This information is temporarily stored in what is known as a log file. The following information is collected without any involvement from you, and is stored until its automatic erasure:
- The IP address of the requesting computer (IP addresses are anonymised in the log file after 10 days)
- The date and time of access
- The URL of the retrieved file
- The website from which this website was accessed (referrer URL)
- The user agent with information on the browser and operating system used
- The browser used, your computer's operating system (if applicable) and the name of your access provider.
We process the aforementioned data for the following purposes:
The legal basis for data processing is Art. 6 Para. 1 Clause 1 f GDPR. Our legitimate interest is derived from the above-listed data-collection purposes. Under no circumstances do we use the collected data to draw conclusions about your identity. We also use website cookies and analysis services for visits to our website. For more information on this, please see sections 4 and 5 of this privacy statement.
b) When subscribing to our newsletters
If you have expressly consented to this under Art. 6 Para. 1 Clause 1 a GDPR, we will use your email address to regularly send you our newsletter. Entering an email address will suffice for receiving the newsletter.
You may unsubscribe at any time, for example via the link at the bottom of each newsletter. Alternatively, you are also welcome to email us your unsubscribe request any time at presse@staatsoperette.de.
c) When using our contact form
If you have any questions, we give you the opportunity to contact us via a form provided on our website. This will require entering a valid email address so that we know who the enquiry is from and are able to answer it. Further information can be provided on a voluntary basis.
Data-processing for the purpose of contacting us is performed in accordance with Section 6 Para. 1 Clause 1 a GDPR based on your voluntary consent. The personal data collected by us for the purpose of using the contact form is automatically erased once your enquiry has been handled.
d) When using our booking form
If you have any booking requests regarding ticket purchases, we give you the opportunity to contact us via a form provided on our website. This will require entering your personal details and a valid email address so that we can perform the ticket-purchase transaction, and so that we know who the enquiry is from and are able to answer it. Further information can be provided on a voluntary basis. Data-processing for the purpose of contacting us is performed in accordance with Section 6 Para. 1 Clause 1 a GDPR based on your voluntary consent. The personal data collected by us for the purpose of using the booking form is automatically erased once your enquiry has been handled.
3. Data-sharing
Your personal data is not sent to third parties for purposes other than those listed below. We only share your personal details with third parties if:
- You have expressly consent to this in accordance with Art. 6 Para. 1 Clause 1 a GDPR, sharing is required under Art. 6 Para. 1 Clause 1 f GDPR to assert, exercise or defend legal claims, and there is no reason to assume you have an overriding protectable interest in not sharing your data,
- In the event sharing is legally required under Art. 6 Para. 1 Clause 1 c GDPR, and
- This is legally permitted and is required under Art. 6 Para. 1 Clause 1 b GDPR in order to execute contracts with you, e.g. to fulfil and perform ticket-purchase transactions.
4. Cookies
We use cookies on our site. These are small files automatically created by your browser and stored on your end device (laptop, tablet, smartphone etc.) when you visit our site. Cookies do not harm your end device, and do not contain any viruses, trojans or other malware.
The cookie stores information produced in relation to each specific end device used. But this does not mean we are directly able to identify you. On the one hand, cookies are used to enhance your user experience on our website. As such, we use 'session cookies' to see that you have already visited certain pages of our website, e.g. to log in internally to order a press kit or to display the info banner. These cookies are automatically erased once you leave our site.
We also use temporary cookies, which are stored on your end device for a set period of time, to optimise user-friendliness. If you visit our site again to use our services, it will automatically detect that you have previously visited us and will know which data you have entered and which settings you have configured, so that you do not have to re-enter them.
On the other hand, we use cookies to compile statistics on our website usage and to analyse these in order to optimise our site for you (see section 5). These cookies enable to automatically detect that you have previously visited us if you access our site again. They are automatically erased after a set period of time. The data processed by cookies is required for the aforementioned purposes in order to protect our and third parties' legitimate interests in accordance with Art. 6 Para. 1 Clause 1 f GDPR.
While most browsers accept cookies automatically, you can configure your browser in such a way that no cookies are stored on your computer or that a notification always appears before a new cookie is created. Completely disabling cookies can, however, mean you are unable to use all the functions of our website.
5. Analysis tools
Tracking tools
The tracking measures used by us and listed below are taken based on Art. 6 Para. 1 Clause 1 f GDPR. We use these tracking measures as a means of ensuring an appropriate design and ongoing optimisation of our website. On the other hand, we use them to compile statistics on our website usage and to analyse these in order to optimise our site for you. These interests are considered legitimate under the aforementioned regulation.
The respective data-processing purposes and data categories can be found in the relevant tracking tools.
Google Analytics
To ensure an appropriate design and ongoing optimisation of our website, we use Google Analytics, a web-analysis service run by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter known as 'Google'). Pseudonymised usage profiles are created and cookies (see section 4 below) used in this context. The information generated by the cookie in relation to your use of this website, such as
• Browser type/version
• Operating system used
• Referrer URL (the site visited immediately prior)
• Host name of accessing computer (IP address)
• Time of server request
is sent to a Google server in the USA, where it is saved. The information is used to analyse website usage, compile reports on website activities and render other services associated with website usage and internet usage for the purposes of market research and ensuring an appropriate design of this website. This information may also be sent to third parties if this is required by law or insofar as third parties are processing this data on our behalf. Under no circumstances is your IP address combined with other Google data. IP addresses are anonymised to ensure it cannot be attributed to you (IP masking). You can prevent cookies from being installed by adjusting your browser software settings accordingly; please note, however, that this may mean you are unable to use all the functions of our website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie relating to your use of this website (incl. your IP address) by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, particularly for browsers on mobile end devices, you can also prevent Google Analytics from recording data by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be created, preventing your data from being collected in future when visiting this website. The opt-out cookie only applies to this browser and only to our website. It is stored on your device. If you clear the cookies in this browser, you will have to re-install the opt-out cookie. Further information on privacy in relation to Google Analytics can be found on the Google Analytics Help page (https://support.google.com/analytics/answer/
6004245?hl=de).
Newsletter tracking
In order to optimally gear our newsletter around the wishes and interests of our subscribers, we measure the number and time of newsletters opened when sending out our newsletter. This is done by recording the number of images downloaded or links clicked. We also measure the number and time of usage of the linked content in our newsletter. This information is tracked anonymously and does not identify the respective newsletter recipients in any way. It is not possible to attribute the measured opening rate or click rate to specific recipients.
6. Social-media links/plugins
We use social-media links from the social networks Facebook and Twitter on our website based on Art. 6 Para. 1 Clause 1 f GDPR in order to publicise our theatre. The underlying commercial purpose is considered a legitimate interest under the GDPR. The respective provider must be responsible for operating these social-media accounts in accordance with data-protection regulations.
a) Facebook
Our website uses social-media plugins from Facebook to personalise the user experience. We use the 'LIKE' or 'SHARE' button for this. These are services run by Facebook.
If you visit a page of our website containing one of these plugins, your browser establishes a direct connection with Facebook's servers. Facebook sends the plugin content directly to your browser, which integrates them into the website. Integration of the plugin informs Facebook that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is sent directly by your browser to a Facebook server in the USA, where it is saved. If you are logged in to Facebook, Facebook can directly attribute your visit on our website to your Facebook account. If you interact with the plugins, e.g. by clicking the 'LIKE' or 'SHARE' button, the relevant information is also sent directly to a Facebook server, where it is saved. The information is also published on Facebook and shown to your Facebook friends.
Facebook can use this information for the purposes of advertising, market research and customising the design of Facebook pages. To do this, it compiles usage, interest and relationship profiles, e.g. to analyse your use of our website in terms of the advertising shown to you on Facebook, to inform other Facebook users about your activities on our website, and to render other services associated with Facebook usage. If you do not want Facebook to attribute the data collected on our website to your Facebook account, you will need to log out of Facebook before visiting our website. For more information on the purpose and scope of the data-processing, the further processing and usage of the data by Facebook, your rights regarding this, and settings options to protect your privacy, please see Facebook's privacy policy (https://www.facebook.com/about/privacy/).
b)
Plugins from the microblogging network Twitter Inc. (Twitter) are integrated into our website. The Twitter plugins (Tweet button) can be recognised by the Twitter logo on our site. An overview of Tweet buttons is available here (https://about.twitter.com/resources/buttons). If you access a page of our website containing one of these plugins, a direct connection is established between your browser and the Twitter server. This informs Twitter that you have visited our site using your IP address. If you click the Twitter 'Tweet button' while logged in to your Twitter account, you can link our site content to your Twitter profile. This enables Twitter to attribute your visit on our site to your user account. Please note that, as the site provider, we are not privy to the content of the data sent or how it is used by Twitter. If you do not want Twitter to attribute your visit on our site to your Twitter account, please log out of your Twitter account. Further information on this can be found in Twitter's privacy statement (https://twitter.com/privacy).
7. Data-subject rights
You have the right:
• Under Art. 15 GDPR, to request information on the personal data we process relating to you. You can particularly request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or is being disclosed, the planned storage duration, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if we have not collected this, and the existence of automated decision-making, including profiling and any important information on the details thereof;
• Under Art. 16 GDPR, to immediately request the rectification of incorrect personal data stored by us, or the completion of any incomplete personal data stored by us;
• Under Art. 17 GDPR, to request the erasure of your personal data stored by us, insofar as processing is not required in order to exercise your right to free expression and information, in order to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• Under Art. 18 GDPR, to request the restriction of processing of your personal data, insofar as you dispute the accuracy thereof, the processing is illegal but you refuse to have it erased and we no longer need the data, but you require it in order to assert, exercise or defend legal claims, or you have lodged an objection to the processing under Art. 21 GDPR;
• Under Art. 20 GDPR, to receive the personal data you have provided to us in a structured, conventional and machine-readable format, or to request it to be sent to a different processor;
• Under Art. 7 Para. 3 GDPR, to revoke the consent you once provided to us at any time. This means we are no longer able to continue the data-processing based on this consent, and
• Under Art. 77 GDPR, to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority responsible for your local area or workplace or our lawyer's chambers for this.
8. Right to object
If your personal data is processed based on legitimate interests as per Art. 6 Para. 1 Clause 1 f GDPR, you have the right, under Art. 21 GDPR, to lodge an objection to the processing of your personal data, insofar as there are grounds for this relating to your particular situation or the objection is to direct marketing. In the latter case, you have a general right to object without having to cite a particular situation. If you wish to exercise your right of revocation or objection, simply email info@staatsoperette.de
9. Data security
During website visits, we use the widespread SSL (Secure Socket Layer) process, combined with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. You will know whether a page of our website is encrypted if you see a locked key or a lock symbol in the status bar at the bottom of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or deliberate tampering, partial or full loss, destruction or unauthorised access by third parties. Our security measures are constantly being improved in keeping with technological developments.
10. Currency of and changes to this privacy statement
This privacy statement is currently valid and is dated May 2018. Further developments to our website and services provided there, or amended legal/official requirements, may necessitate changes to this privacy statement. You can access and print out the latest version of the privacy statement at any time at https://www.staatsoperette.de/datenschutz.