Data protection declaration
With this data protection declaration, we inform you about how, to what extent and for what purpose we process your data when you visit our website and what rights you have in connection with the data processing. The processing of data by us is carried out in compliance with the legal regulations, in particular the DSGVO.
1. Responsible party, data protection officer and supervisory authority
1.1 Person responsible
Responsible for data processing:
Company: DK Deutsche Klassik GmbH ("we").
Legal representative: Pascal Funke (Managing Director), Burkhard Glashoff (Managing Director).
Address: Alsterterrasse 10, 20354 Hamburg, Germany
Telephone hotline: (040) 35 35 55
E-Mail: info@deutsche-klassik.de
1.2 Data Protection Officer
Contact details of the company data protection officer:
Herr Dr. Uwe Nolte
Dr. Nolte Datenschutz & QM
Am Ziegelteich 44 b
D-22525 Hamburg
Telefon: +49 160 63 222 32
E-Mail: datenschutz@deutsche-klassik.de
Homepage: www.datenschutz-qm.de
1.3 Supervisory Authority
Contact details of the supervisory authority:
The Hamburg Commissioner for Data Protection and Freedom of Information
Prof. Dr. Johannes Caspar
Address: Klosterwall 6, 20095 Hamburg
Telephone: 040/428 54-40 40
Fax: 040/428 54-40 00
E-Mail: mailbox@datenschutz.hamburg.de
Homepage: https://www.datenschutz-hamburg.de
2. Processing framework
2.1 Processing framework: Website
As part of the website, we process the personal data from you detailed below in section 4. We only process data from you that you actively provide on the website (e.g. by filling in forms) or that you provide automatically when using our services.
Your data will only be processed by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called commissioned processing, in which we as the client are authorised to issue instructions to our contractors. If external service providers are used for individual processing operations listed in section IV, they will be named there.
As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information on exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.
3. Personal data
In principle, you can visit and use our website without providing personal data (e.g. name, address and telephone number). For the use of certain functions of our website, however, it is necessary to provide personal data. Please note the following information. The personal data is always collected and processed by us in compliance with the statutory provisions, in particular the DSGVO.
4. The processing in detail
4.1 Provision of the website and server log files
4.1.1 Description of the processing
Each time the website is called up, we automatically collect information that your browser transmits to our server. This is the following data:
– IP address
– browser software used, as well as its version and language
– the sub-pages called up on the website
– the date and time the website was called up
These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user's terminal device. For this purpose, the user's IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.
4.1.2 Purpose
The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.
4.1.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 4.1.2.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files are deleted after 7 days.
4.2 Cookies
You can find out which cookies are used on our website for which purpose, how long they are stored on your end device and which consents you may have already declared in the settings of the Consent Tool.
We use cookies to make our website more user-friendly and to offer the functions described in section 4.2.
With regard to technically required cookies, as well as the use of the Consent Tool, the processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) lit. f DSGVO).
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies for our website are deactivated, deleted or restricted, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you may have given for the use of cookies at any time in the settings of the Consent Tool with effect for the future.
When third-party cookies are used, data may be transmitted to the corresponding providers of these third-party services. In this case, data may also be transmitted to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transfer of data to third countries in the settings of the Consent Tool or in the corresponding section on the third-party service in these data protection provisions.
4.3 Contacting us by e-mail
To contact us, you can write to us via the e-mail address provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.
The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 4.3.2. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b DSGVO).
We delete the data as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is deemed to have ended when it is clear from the circumstances that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.
4.4 Social networks
4.4.1 Description of the processing
Our website does not use any so-called social media plugins. The Facebook, Twitter, Instagram and YouTube logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.
However, our profiles within the social networks do constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment, "share" or "like" a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.
On the social network Facebook, we have the possibility to obtain statistical data about the use of our Facebook page via the so-called "Insights" function. These statistics are provided by Facebook. The "Insights" function cannot be disabled. We cannot decide to switch this function on or off. It is available to all Facebook Fan Page operators, regardless of whether you use Facebook's Insights feature or not. We are provided with the following data via Facebook Insights for a selectable period of time with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our page and to view their profiles.
On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called "Insights" function. These statistics are provided by Facebook and Instagram. The "Insights" function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook fan page operators and all Instagram business account operators, regardless of whether you use the Insights feature or not.
We are provided with the following data via Facebook Insights for a selectable period of time in anonymised form with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. With the Insights statistics, it is not possible for us to identify subscribers and fans of our page and to view their profiles.
Furthermore, Instagram Insights provides us with anonymised data on the development and reach of our Instagram profile and the posts, stories and videos we post there. We also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile in the Instagram insights.
The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. Cookies are usually used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles, and to exercise this right you must contact the social networks directly.
We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the "Insights" function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.
The legal basis for data processing in the context of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 4.4.2. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 para. 1 lit. a DSGVO. The data processing with regard to our Facebook page and our Instagram page otherwise takes place on the basis of joint responsibility pursuant to Art. 26 DSGVO.
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.
– Facebook: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Privacy policy: http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.
– Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; privacy policy: https://help.instagram.com/155833707900388/
– YouTube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy of YouTube/Google: https://www.google.com/policies/privacy/Nominierte*rs/?hl=en
The social networks also process your personal data in the USA.
4.5 Google Analytics
Our website uses "Google Analytics", a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses cookies (see section 8.), which enable an analysis of your use of our website. The information generated by the cookies is usually transferred to a Google server in the USA and stored there. However, we use Google Analytics exclusively with IP anonymisation. This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics generated by Google Analytics record in particular how many users visit our website, from which country or location the access takes place, which sub-pages are called up and via which links or search terms visitors reach our website. You can find the Google Analytics user conditions at http://www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google's privacy policy can be viewed at http://www.google.de/intl/de/policies/privacy.
The processing takes place in order to be able to evaluate the use of our website. The information thus obtained is used to improve our online presence and to design it in line with requirements.
The processing is carried out on the basis of consent in accordance with Art. 6 Para. 1 lit. a DSGVO. This is obtained by us via the Consent Tool. Such consent is voluntary.
We have explained the storage period and your control and setting options for cookies in section 4.2.3. You can revoke your consent with regard to Google Analytics at any time in the settings of the consent tool with effect for the future. Alternatively, you can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. The analysis data processed and stored with Google Analytics will be automatically deleted by us after 14 months.
According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics is jointly responsible for data processing on our behalf. Against this background, we have also concluded the "Google Measurement Controller Data Protection Terms" with Google. Google also processes your personal data in the USA.
Further information on data protection in connection with Google Analytics can be found at: https://support.google.com/analytics/answer/6004245?hl=de.
4.6 Google Maps
4.6.1 Description of processing
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, our location is shown to you and a possible journey is made easier.
When you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/.
4.7 YouTube
4.7.1 Description of the processing
We use the YouTube.com platform to post our own videos and make them publicly available. YouTube is the service of a third party not affiliated with us, namely YouTube LLC.
Our website uses services from "YouTube", a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as "YouTube"). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrame so that they can be played directly on our website. The videos are embedded in the "extended data protection mode" offered on YouTube, i.e. no personal data will be transmitted from you to Google as long as you do not play the videos. Only when you play a video will data be transmitted to Google, over which we have no control. If you play a video embedded on a sub-page of our website, Google will be informed which sub-page you have visited and which video you have viewed. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will associate this information with your user account. Google stores your data as user profiles and uses them for advertising purposes, market research and/or to tailor Google's websites to your needs. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly. Further information on data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/.
The processing takes place in order to be able to show you videos on our website.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 4.7.2.
Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.
4.8 Spotify
Our website uses plugins from "Spotify" an audio streaming platform operated by Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. An overview of Spotify plugins can be found at: https://developer.spotify.com. We use Spotify by embedding individual audio files, albums or playlists from the platform on our website as a so-called iFrame, so that they can be played directly on our website as a stream. When you visit a sub-page of our website on which a Spotify plug-in is embedded, a connection is established to the Spotify servers and the plug-in is displayed within our website. This transmits to Spotify which website you have visited. Your IP address may also be transmitted to Spotify. If you play an embedded audio file, album or playlist, this information is also transmitted to Spotify. If you are logged in as a Spotify user, Spotify will associate this data with your user account. If you do not want Spotify to associate your visit to our website with your Spotify user account, please log out of your Spotify user account. Further information on Spotify's data protection can be found at https://www.spotify.com/de/legal/privacy-policy.
The processing takes place in order to be able to embed playable audio files, albums or playlists from Spotify on our website.
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 4.8.2.
By using the Spotify service, personal data may be transmitted to the company Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. Spotify also processes this data on servers outside the EU.
4.9 Passing on data
We will only pass on your data to third parties
- if you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 a) DSGOV;
- if the disclosure is necessary for the processing of a contractual relationship in accordance with Art. 6 Para. 1 S. 1 b) DSGOV;
- if we are legally obliged to pass on the data in accordance with Art. 6 Para. 1 S. 1 c) DSGVO or;
- if the disclosure of the data is necessary in accordance with Art. 6 para. 1 p. 1 f) DSGVO to protect our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data override these interests.
4.10 Duration of data storage
Your data will be stored by us for as long as it is needed for the respective purposes on which the processing is based. Beyond that, we only store data insofar as we are legally obliged to do so, e.g. due to statutory retention obligations.