The following provides information on how we gather personal data when our website is used. Personal data includes all data which is personally identifiable to you, e.g. name, address, email addresses, user behaviour. We have undertaken extensive technical and operational precautions to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are checked regularly and adapted in line with technological advances.
1. "Controller" of data processing
2. Ways of contacting the data protection officer
3. Your rights
4. Gathering of personal data when visiting our website
5. Getting in contact by email or via a contact form
9. Website analysis
10. Google Analytics
12. Transfer of data
13. Data security
The "Controller" in accordance with Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is Alte Oper Frankfurt Konzert- und Kongresszentrum GmbH, Opernplatz, 60313 Frankfurt, Germany, email@example.com (see our legal imprint).
You can reach our data protection officer by emailing firstname.lastname@example.org or posting us a letter with "Data protection officer" added to the address.
3. YOUR RIGHTS
You are entitled to the following rights with respect to your personal data:
3.1. GENEREAL RIGHTS
You have the right to access your data, have it rectified or deleted, restrict processing, object to processing, and are entitled to data portability. If processing is being performed on the basis of your consent, you have the right to revoke this consent with future effect.
3.2. RIGHTS WITH RESPECT TO DATA PROCESSED IN ACCORDANCE WITH A LEGITIMATE INTEREST
According to Art. 21 Para. 1 GDPR, you have the right to object at any time to the processing of your personal data being performed on the basis of Art. 6 Para. 1 e GDPR (data processing in the public interest) or Art. 6 Para. 1 f (processing to maintain a legitimate interest) – or profiling based on these provisions – on grounds relating to your particular situation. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
3.3. DIRECT MARKETING RIGHTS
If we process your personal data to perform direct marketing, Art. 21 Para. 2 GDPR stipulates that you have the right to object at any time to the processing of your personal data for the purposes of such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process the data for such purposes.
3.4. RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY
You are also entitled to complain to the relevant data protection supervisory authority about the processing of your personal data by us.
4. GATHERING OF PERSONAL DATA WHEN VISITING OUR WEBSITE
If you are simply using our website for informational purposes and you do not register or otherwise transmit information to us, we will only gather the personal data that your browser sends to our servers. If you would like to view our website, we gather the following data, which is required for technical reasons to display our website and ensure stability and security. The legal basis for this is Art. 6 Para. 1 f GDPR:
–IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, the website from which the request originates, browser, operating system and its interface, language and version of the browser software.
When you contact us by email or via a contact form, we store the data you provide (your email address, where applicable: your name and telephone number) in order to respond to your questions. If we ask for information via our contact form which is not required for getting in touch, we always mark this as optional. This information helps us to narrow down and better process your query. Providing this information is explicitly voluntary and based upon your consent, Art. 6 Para. 1 a GDPR. If the information provided relates to communication channels (e.g. email address, telephone number), you also consent to being contacted via these channels to enable us to respond to your query. Naturally, you can revoke this consent at any time with future effect.
We will delete this data once its storage is no longer necessary or restrict the processing if statutory retention periods apply.
With your consent in accordance with Art. 6 Para. 1 a GDPR, you can subscribe to our newsletter to be kept up-to-date with our latest offers.
We use a "double opt-in" for our newsletter subscription process. This means that we send an email to the email address provided after you sign up asking you to confirm that you would like to be sent the newsletter. If we do not receive your confirmation within 48 hours, your information will be blocked and automatically deleted after a month.
We also store the IP addresses you use and the times at which you sign up and confirm. The reason for this procedure is to evidence your registration and for clarification purposes in the event of any misuse of your person data.
Once you confirm, we store your email address for the purposes of sending the newsletter. The legal basis is Art. 6 Para. 1 a GDPR.
You can revoke your consent to being sent newsletters at any time and unsubscribe from the newsletter. Simply click on the link provided in each newsletter to do so or declare your wish to revoke consent by contacting the data protection officer indicated above.
You can submit a job application to our company electronically. We will naturally only use your information to process your application and will not pass it on to third parties. Please be aware that emails sent unencrypted cannot be transmitted with access protection.
If you have applied for a specific position and it has already been filled, or we think you would be better suited to another position, we will gladly pass your application throughout the company. Please advise us if you do not consent to your details being passed on in this way.
Your personal data will be deleted immediately once the application process is complete, or a maximum of 6 months thereafter, unless you explicitly consent to a longer retention period for your data, or in the event that we conclude an employment contract with you. The legal basis is Art. 6 Para. 1 a, b and f GDPR and Section 26 of the German Federal Data Protection Act (BDSG).
Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and which then provide certain information to the entity that places the cookie. Cookies cannot execute any programmes or transmit viruses to your computer. They serve to make the overall website more user-friendly and effective.
The following provides information on the types of cookies this website uses, their scope and the way in which they work:
8.1. TRANSIENT COOKIES
These cookies are automatically deleted when you close your browser. These particularly include session cookies, which save a "session ID" that allows various browser requests to be assigned to a common session. They enable your computer to be recognised when you return to the website. Sessions cookies are deleted when you log out or close the browser.
8.2. PREVENTING COOKIES
You can configure your browser settings to match your preferences, e.g. reject third-party cookies or all cookies, but please be aware that you may not be able to use all the functions on this website.
8.3. LEGAL BASES AND RETENTION PERIOD
The legal bases for potential personal data processing operations vary, as do the applicable retention periods; please see the following sections for more information in this regard.
We use various services to analyse and optimise our websites which are presented in the following. These services allow us, for example, to find out how many users visit our site, which information is most in demand, or how users found out about our online offering. We gather data such as the Internet page a user was visiting prior to arriving on our site (known as a "referrer"), which sub-pages on the website were accessed, or how often and for how long a sub-page was viewed. This helps us to improve our offerings and make them more user-friendly. The data gathered cannot be used to personally identify individual users; it is anonymous or at most, pseudonymous. The legal basis for this is Art. 6 Para. 1 f GDPR.
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Its use also encompasses the operating mode Universal Analytics. This enables data, sessions and interactions on several devices to be assigned to a pseudonymous user ID, thereby facilitating analysis of a user's activities across devices.
You can prevent the installation of cookies by activating the relevant setting of your browser software; however, please be aware that you may not be able to use all the functions on this website in their entirety. You can also download and install the following browser add-on https://tools.google.com/dlpage/gaoptout?hl=en to prevent Google from gathering and processing the data generated by the cookies, and data related to your use of the website (including your IP address). Opt-out cookies prevent your data being gathered on future visits to this website. To prevent Universal Analytics from gathering data across various devices, the opt-out must be performed on all systems used. Clicking here will place the opt-out cookie: Deactivate Google Analytics
We use providers such as YouTube to embed videos. YouTube is operated by YouTube LLC with its main office on 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use plug-ins from the provider YouTube for some of our Internet pages. If you access a web page from our Internet presence featuring such a plug-in – e.g. our media library – a connection will be established to YouTube servers and the plug-in will then display the content. This transmits information to YouTube servers concerning which of our Internet pages you have visited. If you are a member of YouTube and logged in, YouTube will assign this information to your personal user account. If you use the plug-in, e.g. by clicking the start button on a video, this information will also be assigned to your user account.
You can prevent the data being assigned by logging out of your YouTube user account, and user accounts from the companies YouTube LLC and Google Inc., and deleting the corresponding cookies from these companies before using our Internet page.
More information on data processing and notices on data protection from YouTube (Google) can be at https://policies.google.com/privacy?hl=en&gl=de.
Your data will not be transferred to any third parties unless we are obliged by law to do so, or the data needs to be passed on to execute the contractual relationship, or you have explicitly granted your consent for your data to be passed on.
External service providers and partner firms only receive your data insofar as this is required to fulfil the contract. In such cases, the extent of data transferred will be kept to the minimum required. If our service providers come into contact with your personal data, we will ensure that they also comply with the regulations of data protection laws within the context of commissioned data processing as per Art. 28 GDPR. Please also observe the data protection policies of the respective providers. We take all reasonable measures to verify that these services comply with statutory requirements but responsibility for the content of third-party services lies with the respective service provider.
We attach great importance to processing your data within the EU/EEA. However, it may be the case that we commission service providers who perform processing operations outside the EU/EEA. In such cases, we will ensure that the recipient has a suitable and well-established level of data protection prior to transmitting your personal data. This means that a level of data protection can be achieved that is comparable to standards within the EU by the means of EU standard contracts or an adequacy decision, such as the EU Privacy Shield.
We have undertaken extensive technical and operational precautions to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are checked regularly and adapted in line with technological advances.