Data privacy and data protection
We are pleased that you have visited our website. Below, we would like to inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
Controller
The controller named in the imprint is responsible for the data processing described below.
Usage Data
When you visit our website, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our website. This data set consists of:
- the name and address of the requested content,
- the date and time of the request,
- the amount of data transferred,
- the access status (content transferred, content not found),
- the description of the web browser and operating system used,
- the referral link indicating the page from which you accessed our website.
The legal basis for processing usage data is Art. 6 (1) (f) GDPR. The processing is carried out in the legitimate interest of providing the website content and ensuring a device- and browser-optimized display.
In addition, we store the full IP address transmitted by your web browser strictly for a period of seven days, in the legitimate interest of being able to detect, limit, and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis for the processing is Art. 6 (1) (f) GDPR.
To protect your data as comprehensively as possible from unwanted access, we take technical and organizational measures. We use an encryption process on our websites. Your information is transmitted from your computer to our server and vice versa over the Internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in your browser’s status bar is closed and the address bar begins with https://.
Required Cookies
We use cookies on our websites that are required to use our websites.
Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
We do not use these required cookies for analysis, tracking, or advertising purposes.
Some of these cookies only contain information about certain settings and are not personally identifiable. They may also be necessary to enable user navigation, security, and the implementation of the website.
We use these cookies based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR.
You can set your browser to inform you about the placement of cookies. You can also delete them at any time using the corresponding browser settings and prevent new cookies from being placed. Please note that our websites may then not be fully displayed and some functions may no longer be technically available.
Consent banner
We use a consent management platform (consent banner or cookie banner) on our websites. The processing associated with the use of the consent management platform and the logging of the settings you have made is based on Art. 6 (1) (f) GDPR, in our legitimate interest to display our content according to your preferences and to be able to verify your consent(s). The settings you have made, the consents you have given, and parts of your usage data are stored in a cookie. This means that the cookie is retained for subsequent page requests, and your consents can still be tracked. Further information can be found under the heading “Required cookies.”
The provider of the consent management platform acts for us as a service provider (contract processor) who is strictly bound by instructions. A contract processing agreement in accordance with Art. 28 GDPR has been agreed upon.
Ticket Sales
You can purchase tickets for our concerts and events at the on-site sales outlets or through our ticket provider www.reservix.de.
We process your personal data required to process your ticket purchase and ship the ticket. The service provider Reservix GmbH, Humboldtstraße 2, 79098 Freiburg im Breisgau, and the Museumsverbund Nordfriesland, Herzog-Adolf-Str. 25, 25813 Husum, support us in selling our tickets as part of a contract processing agreement pursuant to Art. 28 GDPR.
Storage Period
Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes and there are no legitimate interests or other (legal) retention reasons that prevent deletion.
Other Processors
We pass on your data as part of contract processing in accordance with Art. 28 GDPR to service providers who support us in operating our websites and related processes. These include, for example, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.
Below, we list the processors we work with, unless we have already done so in the above text of the privacy policy. If data may be processed outside the EU or EEA in this context, we will inform you of this in the table below.
| Processor | Purpose | Adequate level of data protection |
|
All-inkl.com, Hauptstraße 68, 02742 Friedersdorf |
Webhosting and Support |
Processing only within the EU/EEA |
| Eeveno Andreas Bothe, Ellenbogen 8, 91056 Erlange |
Online registration | Processing only within the EU/EEA |
Your rights as a data subject
When processing your personal data, the GDPR grants you, as the data subject, certain rights:
Right to information (Article 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if so, you have the right to access this personal data and to the information detailed in Article 15 GDPR.
Right to rectification (Article 16 GDPR)
You have the right to request the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete data.
Right to erasure (Article 17 GDPR)
You have the right to request that personal data concerning you be erased immediately if one of the reasons detailed in Article 17 GDPR applies.
Right to restriction of processing (Article 18 GDPR)
You have the right to request restriction of processing if one of the conditions listed in Article 18 GDPR is met, e.g., if you have objected to processing, for the duration of the controller’s review.
Right to data portability (Article 20 GDPR)
In certain cases, which are detailed in Article 20 GDPR, you have the right to receive the personal data concerning you in a structured, common, and machine-readable format or to request that this data be transmitted to a third party.
Right of withdrawal (Article 7 GDPR)
If the processing of data is based on your consent, you are entitled, in accordance with Article 7 (3) GDPR, to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal only takes effect for the future. Processing that occurred before the withdrawal is not affected.
Right of objection (Article 21 GDPR)
If data is collected on the basis of Article 6 (1) (f) GDPR (data processing to safeguard legitimate interests) or on the basis of Article 6 (1) (e) GDPR (data processing to safeguard public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
According to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised, in particular, with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Asserting Your Rights
Unless otherwise stated above, please contact the office listed in the imprint to assert your data subject rights.
Contact Details of the Data Protection Officer
Our external data protection officer will be happy to provide you with information on data protection at the following contact details:
datenschutz nord GmbH
Hamburg Office, Sechslingspforte 2
22087 Hamburg
Web: https://www.dsn-group.de/
Email: office@datenschutz-nord.de
If you contact our data protection officer, please also state the responsible body listed in the imprint.
Data privacy and data protection for our social media pages
When you visit our social media pages, data concerning you will be processed. We would therefore like to inform you below, in accordance with Article 13 of the General Data Protection Regulation (GDPR), about how we handle your data and your resulting rights.
Responsibility
We, the Nordfriesland Foundation, Schloss vor Husum, König-Friedrich V.-Allee 1, 25813 Husum, stiftung@nordfriesland.de, operate the following social media pages:
You can find our contact details in the imprint.
Data processing by us
Public relations
The data you provide on our social media pages, such as usernames, comments, videos, images, likes, public messages, etc., will be published by the social media platform and will never be processed by us for other purposes. We only reserve the right to delete content if necessary. If necessary, we may share your content on our page if this is a function of the social media platform and communicate with you via the social media platform.
If you submit an inquiry to us on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the content. For example, you can always send us your inquiries to the address or email address provided in the imprint. The choice of the appropriate communication channel is your own responsibility.
The legal basis for the aforementioned processing of your data is Art. 6 (1) (f) GDPR. The data processing is carried out in the legitimate interest of conducting public relations work for our company and being able to communicate with you.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. Web tracking can occur regardless of whether you are logged in or registered with the social media platform.
We would therefore like to point out that it cannot be ruled out that the operator of the social media platform may use and evaluate your profile and behavioral data for its own purposes. We have no influence on the processing of your data by the operator of the social media platform. Please be aware of this when using the social media platform.
Further information on data processing by the operator of the social media platform, configuration options to protect your privacy, and other options for objection can be found in the operator’s privacy policy.
Storage period
We delete your personal data when it is no longer required for the aforementioned processing purposes and there are no statutory retention periods that prevent deletion.
Your rights as a user
As a user, you have the right to assert the following rights vis-à-vis us and the operator of the social media platform, provided the conditions are met:
Right to information (Article 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information listed in detail in Article 15 GDPR.
Right to rectification and erasure (Articles 16 and 17 GDPR)
You have the right to immediately request the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data. You also have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g., if the data is no longer required for the purposes pursued.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request restriction of processing if one of the conditions listed in Art. 18 GDPR is met, for example, if you have objected to processing, for the duration of any review.
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common, and machine-readable format or to request that this data be transmitted to a third party.
Right of objection (Article 21 GDPR)
If data is processed on the basis of our legitimate interest pursuant to Article 6 (1) (f) GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If the data is processed on the basis of legitimate interest for the purposes of direct marketing, you have your own right of objection, which you can assert at any time without giving reasons. The exercise of this right will result in the termination of processing for the purposes of direct marketing.
Right of withdrawal (Article 7 GDPR)
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Article 7 (3) GDPR. Please note that the revocation only applies to the future. Processing that occurred before the revocation is not affected.
Right to lodge a complaint with a supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. This right of complaint can be asserted, in particular, with a supervisory authority in the Member State of your residence, place of work, or place of the alleged violation.
Contact details of our data protection officer
Our external data protection officer is happy to provide you with information on data protection issues using the following contact details:
datenschutz nord GmbH
Email: office@datenschutz-nord.de
Tel.: +49 40 593 61 60-400
If you contact our data protection officer, please also state the responsible body listed in the imprint.