The following information concerns the processing of your personal data in accordance with the provisions of data protection law, in particular the EU General Data Protection Regulation (DSGVO), in order to process your request. When the City of Hannover processes personal data, this means that we collect, store, use, transmit or delete this data, for example.
In the following, we inform you why we collect your personal data, from whom we collect it and what we do with this data. In addition, we will inform you about your rights in data protection matters and which contact persons you can turn to in this regard.
1. Contact details
Responsible body in the sense of Art. 13, 14 DSGVO
City of Hanover
The Lord Mayor
Responsible office for data processing
Department 46 Herrenhausen Gardens and ArtFestSpiele
OU 46.3 - Institute ArtFestSpiele Herrenhausen
Old Herrenhausen Street 6b
The Data Protection Officer
Wide street 10
2. Processing of your personal data by us
Purpose of processing and categories of data collected:
Based on your explicit consent, we will regularly send you our newsletter or comparable information by e-mail. The following mandatory data is required for registration:
- E-mail address
The following information is optional:
- First name and last name
The information you provide will be used and stored by us exclusively for sending the newsletter. Subscribers may also be informed by e-mail about concerns relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances).
Legal basis of processing:
The permissibility of processing registration data is based on Art. 6 (1) lit. a DSGVO.
Our newsletter is sent on our behalf via the marketing service provider Mailchimp (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). For this purpose, your email address and optionally your first name and last name are passed on to Mailchimp exclusively for the purpose of sending the newsletter and are used by Mailchimp exclusively for the required purpose and are not passed on to third parties. This is done on the basis of registration according to Art. 6 para. 1 lit. a DSGVO. For more information, please visit: https://www.intuit.com/privacy/statement/
3. Collection of your personal data by us from third parties
We will only process the personal data relating to you that you have provided to us. We do not collect any personal data concerning you from third parties.
4. Storage period of your personal data with us
The data requested when registering for our newsletter will be deleted as soon as you unsubscribe. In each newsletter there is a corresponding link to unsubscribe. You can also contact us at firstname.lastname@example.org. We will then immediately delete your data in connection with the newsletter dispatch.
5. Collection of personal data when you visit our website
When you view our website, even if you do not register or otherwise submit information to us, we collect the following data that your browser sends to our server:
- the page from which the website was requested (referrer)
- the content of the request (specific page)
- the name of the requested file (for files, e.g. images or PDF documents)
- the date and time of the request
- the amount of data transferred
- the access status (file transferred, file not found, etc.)
- the IP address of the called web server
- time zone difference to Greenwich Mean Time (GMT)
- the browser used, language and version
- operating system and its interface
This data is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for the processing is Art. 6(1)(f) DSGVO. This data is stored temporarily in a so-called log until automated deletion.
- Logs are archived weekly and deleted after 30 days.
- Logs are additionally sent to a retention server. Here, too, the data is deleted after 30 days.
- Logs are processed anonymously using a statistics application. The anonymized statistical data is not deleted on a regular basis.
- Web pages that process personal data are transmitted TLS-encrypted.
Some of the cookies we use are so-called session cookies. Session cookies are automatically deleted when you close your browser after visiting our site.
The following voluntary cookies are used on our websites:
Statistics / Optimization
Statistics cookies help website owners understand how visitors interact with websites by collecting information anonymously with the goal of improving the website.
External media / marketing
We use external media to display PDFs, video or social media content. These services set cookies and in individual cases also transmit personal data outside the EU.
- Issuu: On our websites, we use the services of the electronic publishing platform Issuu to provide a digital version of our program booklet. The corresponding cookie ensures the function of the plug-in. Information on the data protection provisions of Issuu Inc can be viewed at the following link: https://issuu.com/legal/privacy.
6. Data subject rights according to Art. 15 ff. DSGVO
Right to information:
You can request information about your personal data processed by us (Art. 15 DSGVO). In your request for information, you should specify your request in order to make it easier for us to compile the necessary data. Therefore, if possible, information on the specific administrative procedure should be provided in the request.
Right to rectification:
If the information concerning you is not (or no longer) accurate, you may request a correction. If your data is incomplete, you can request that it be completed (Art. 16 GDPR).
Right to deletion:
You may request the deletion of your personal data stored by us under the conditions of Art. 17 DSGVO. Your right to erasure depends, among other things, on whether the data relating to you is still needed by us to fulfill our legal duties (see point 4.).
Right to restriction of processing:
In the cases mentioned in Art. 18 DSGVO (e.g. if you dispute the accuracy of your stored data), you have the right to request a restriction of the processing of the data concerning you. Processing may still take place despite the restriction, insofar as there is an important public interest in the processing.
Right to object:
You have the right to object to the processing of your personal data, insofar as there are grounds for doing so that arise from your particular situation and insofar as there is no overriding public interest in the processing or a legal provision obliges us to process it (Art. 21 DSGVO).
Right of withdrawal in case of consent:
If the processing of personal data is based on your consent, you may revoke it at any time with effect for the future. Please note that in this case, the use of our offers may no longer be possible for you.
Right of complaint:
If you believe that we have not complied with your request or have not complied with it in full, you may lodge a complaint with the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.
General information about these rights:
In some cases, we may or may not comply with your request. If permitted by law, we will always inform you of the reason for the refusal in this case.
However, we will generally respond to you within one month of receiving your request. If we need more than one month for a final clarification, you will receive an interim message.