The following information concerns the processing of your personal data in accordance with the provisions of data protection law, in particular the EU General Data Protection Regulation (DSGVO), in order to process your request. When the City of Hannover processes personal data, this means that we collect, store, use, transmit or delete this data, for example.

In the following, we inform you why we collect your personal data, from whom we collect it and what we do with this data. In addition, we will inform you about your rights in data protection matters and which contact persons you can turn to in this regard.

1. Contact details

Responsible body in the sense of Art. 13, 14 DSGVO
City of Hanover
The Lord Mayor
Trammplatz 2
30159 Hanover
E-mail: OB@hannover-stadt.de

Responsible office for data processing
Department 46 Herrenhausen Gardens and ArtFestSpiele
OU 46.3 - Institute ArtFestSpiele Herrenhausen
Old Herrenhausen Street 6b
30419 Hanover
0511/168-33811
E-mail: info@kunstfestspiele.de

The Data Protection Officer
OU 18.DPO
Wide street 10
30159 Hanover
0511/168-45355
E-mail: 18.DSB@hannover-stadt.de

 

2. Processing of your personal data by us

Purpose of processing and categories of data collected:

Based on your explicit consent, we will regularly send you our newsletter or comparable information by e-mail. The following mandatory data is required for registration:

• E-mail address

The information you provide will be used and stored by us exclusively for sending the newsletter. Subscribers may also be informed by e-mail about concerns relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances).

Legal basis of processing:

The permissibility of processing registration data is based on Art. 6 (1) lit. a DSGVO.

Our newsletter is sent on our behalf via the marketing service provider Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin). For this purpose, your email address is passed on to  Brevo exclusively for the purpose of sending the newsletter and is used by Brevo exclusively for the required purpose and are not passed on to third parties. This is done on the basis of registration according to Art. 6 para. 1 lit. a DSGVO. For more information, please visit: https://www.brevo.com/legal/privacypolicy/

3. Collection of your personal data by us from third parties

We will only process the personal data relating to you that you have provided to us. We do not collect any personal data concerning you from third parties.

4. Storage period of your personal data with us

The data requested when registering for our newsletter will be deleted as soon as you unsubscribe. In each newsletter there is a corresponding link to unsubscribe. You can also contact us at info@kunstfestspiele.de. We will then immediately delete your data in connection with the newsletter dispatch.

5. Collection of personal data when you visit our website

When you view our website, even if you do not register or otherwise submit information to us, we collect the following data that your browser sends to our server:

• the page from which the website was requested (referrer)
• the content of the request (specific page)
• the name of the requested file (for files, e.g. images or PDF documents)
• the date and time of the request
• the amount of data transferred
• the access status (file transferred, file not found, etc.)
• the IP address of the called web server
• time zone difference to Greenwich Mean Time (GMT)
• the browser used, language and version
• operating system and its interface

This data is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for the processing is Art. 6(1)(f) DSGVO. This data is stored temporarily in a so-called log until automated deletion.

Technical conditions:

• Logs are archived weekly and deleted after 30 days.
• Logs are additionally sent to a retention server. Here, too, the data is deleted after 30 days.
• Logs are processed anonymously using a statistics application. The anonymized statistical data is not deleted on a regular basis.
• Web pages that process personal data are transmitted TLS-encrypted.

Cookies:

Our websites use cookies. The use of cookies makes our website more user-friendly, effective and secure. A cookie is a text file that is stored on your terminal device when you visit our website. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases or generally exclude them. If you generally exclude cookies, the functionality of this website may be limited.

Some of the cookies we use are so-called session cookies. Session cookies are automatically deleted when you close your browser after visiting our site.

In addition, we use persistent cookies. Since websites have no memory, they use cookies to remember users beyond the normal session runtime. These cookies are stored on your device between browser sessions. These cookies do not expire when you close the browser.

The following voluntary cookies are used on our websites:

Statistics / Optimization

Statistics cookies help website owners understand how visitors interact with websites by collecting information anonymously with the goal of improving the website.

• Matomo: Matomo is a privacy-friendly web analytics software that generates visitor statistics. As part of the use of Matomo, cookies are generated and stored on the user's terminal device. For the recognition of returning users, a so-called "digital fingerprint" is used, which is stored anonymously and is valid for a maximum of 24 hours. IP addresses are recorded in pseudonymized form. Conclusions about the identity of individual users are not possible. The user data collected in the course of using Matomo is only processed by us and is not shared with third parties. The cookies are stored for a maximum period of 13 months. For more information on data protection, please see Matomo's privacy policy https://matomo.org/guide/manage-matomo/privacy/.
  
  
• Cookiefirst: Cookie consent management procedure in which the consent of users to the use of cookies, or to the processing and providers named in the cookie consent management procedure, can be obtained and managed and revoked by users. Here, the declaration of consent is stored in order not to have to repeat its query and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. Here, a pseudonymous user identifier is formed and stored with the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers) as well as the browser, system and end device used. For more information on data protection, see the privacy policy of Cookiefirst https://cookiefirst.com/legal/privacy-policy/.

External media / marketing

We use external media to display PDFs, video or social media content. These services set cookies and in individual cases also transmit personal data outside the EU.

• YouTube: On some pages, we embed videos from YouTube. The cookie ensures the display of videos on our websites. For more information on data protection at YouTube, see the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/
• Vimeo: On some pages we embed videos from Vimeo. The cookie ensures the display of videos on our websites. For more information on Vimeo's privacy policy, please see the provider's privacy policy at: https://vimeo.com/privacy
• Spotify: On some of our pages, functions of the music service Spotify are integrated. Without the installation of the cookie, the corresponding plug-in cannot be used on our websites. For more information, please refer to Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/
• Soundcloud: The plug-in of the social network SoundCloud may be integrated on our pages. The corresponding cookie ensures the function of the plug-in. Privacy policy of SoundCloud: https://soundcloud.com/pages/privacy
• Issuu: On our websites, we use the services of the electronic publishing platform Issuu to provide a digital version of our program booklet. The corresponding cookie ensures the function of the plug-in. Information on the data protection provisions of Issuu Inc can be viewed at the following link: https://issuu.com/legal/privacy.

6. Data subject rights according to Art. 15 ff. DSGVO

Right to information:
You can request information about your personal data processed by us (Art. 15 DSGVO). In your request for information, you should specify your request in order to make it easier for us to compile the necessary data. Therefore, if possible, information on the specific administrative procedure should be provided in the request.

Right to rectification:
If the information concerning you is not (or no longer) accurate, you may request a correction. If your data is incomplete, you can request that it be completed (Art. 16 GDPR).

Right to deletion:
You may request the deletion of your personal data stored by us under the conditions of Art. 17 DSGVO. Your right to erasure depends, among other things, on whether the data relating to you is still needed by us to fulfill our legal duties (see point 4.).

Right to restriction of processing:
In the cases mentioned in Art. 18 DSGVO (e.g. if you dispute the accuracy of your stored data), you have the right to request a restriction of the processing of the data concerning you. Processing may still take place despite the restriction, insofar as there is an important public interest in the processing.

Right to object:
You have the right to object to the processing of your personal data, insofar as there are grounds for doing so that arise from your particular situation and insofar as there is no overriding public interest in the processing or a legal provision obliges us to process it (Art. 21 DSGVO).

Right of withdrawal in case of consent:
If the processing of personal data is based on your consent, you may revoke it at any time with effect for the future. Please note that in this case, the use of our offers may no longer be possible for you.

Right of complaint:
If you believe that we have not complied with your request or have not complied with it in full, you may lodge a complaint with the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.

General information about these rights:
In some cases, we may or may not comply with your request. If permitted by law, we will always inform you of the reason for the refusal in this case.

However, we will generally respond to you within one month of receiving your request. If we need more than one month for a final clarification, you will receive an interim message.