1. Name and contact details of the data controller and the company data protection officer.
This data protection notice applies to data processing by:
Ludwigsburger Schlossfestspiele gGmbHInternationale
5, 71634 LudwigsburgTelephone
(071 41) 939 63
The company data protection officer of the Ludwigsburger Schlossfestspiele gGmbH Internationale Festspiele Baden-Württemberg can be reached at Marstallstraße 5, 71634 Ludwigsburg, or at the following e-mail address firstname.lastname@example.org.
2. Collection and storage of personal data as well as the type and purpose of its use
a) When you visit our website
When you visit our website www.schlossfestspiele.de, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the accessed file,
- website from which the access is made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website,
- Ensuring a comfortable use of our website,
- Evaluating the system security and stability as well as
- for further administrative purposes.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
b) When registering for our newsletter
On our website, users are given the opportunity to subscribe to one or more newsletters. The kulturkurier.de system of data kulturlink ag (Berlin) is used as the newsletter system. The so-called double-optin procedure is used for a legally secure and data protection-compliant design. Here, the potential recipient first receives an e-mail with a confirmation link. Only after confirmation will the address be included in the distribution list. You can revoke your consent to the storage of your data and the use of your address for mailing purposes by clicking on the "unsubscribe link" at the end of each newsletter. Further information can be found here: https://kulturkurier.info/kulturnewsletter/. Which personal data is transmitted to the controller when ordering the newsletter, results from the input mask used for this purpose. When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration, as assigned by the Internet service provider (ISP), as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves as a legal safeguard for the controller. The personal data collected in the context of a registration for the newsletter are exclusively used for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances. No personal data collected as part of the newsletter service will be passed on to third parties. For the tracking of opening and click-through rates, we use so-called tracking codes in the newsletter (but not in the system mails for subscription and unsubscription) in order to record the opening of the newsletter and the calling up of web links. The recording is done in a pseudoynmized storage by replacing all personal data (e.g. the e-mail address) by a code (pseudonym). In this way, we do not store personal data together with usage data such as the opening of newsletters or the calling up of web links. Furthermore, it is ensured that a combination of these data cannot take place at a later date. If you as a recipient wish to object to this pseudoynmised tracking, you can unsubscribe from the list via the opt-out link at the end of each newsletter.
c) When using our contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know from whom the inquiry originates and so that we can answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
3. Passing on of data
Your personal data will not be passed on to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
- you have given your express consent to do so in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO,
- the disclosure is necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
- in the event that the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. c DSGVO a legal obligation exists, as well as
- this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.
Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
5. Analysis tools
a) Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f DSGVO. With the tracking measures used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate in the sense of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
b) Google Adwords Conversion Tracking
In order to statistically record the use of our website and to evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking. In this process, Google Adwords sets a cookie (see section 4) on your computer if you have accessed our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.
Each Adwords customer receives a different cookie. Cookies can therefore not be tracked across Adwords customers' websites. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted in to conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.
c) Google Analytics
6. Social media plug-ins
We use the social plug-in of the social network Facebook on our website on the basis of Art. 6 (1) p. 1 lit. f DSGVO in order to make our website better known via this. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection-compliant operation is to be ensured by their respective providers. The integration of these plug-ins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible.
Our website uses social media plug-ins from Facebook to make their use more personal. For this purpose, we use the "LIKE" or "SHARE" button. This is an offer from Facebook.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purposes of advertising, market research and demand-oriented design of the Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
7. Data protection provisions on the use and application of YouTube
The controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at www.youtube.com. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is simultaneously logged into YouTube at the time of calling up our website; this takes
place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.
This website uses the product Google Maps by Google Inc. By using this website, you consent to the collection, processing and use of automatically collected data by Google Inc, its representatives and third parties.
9. Links to other websites
To extend our online offer, you will find links to other websites on our website. The respective provider is responsible for the content and data processing of these external websites. To what extent personal data is collected on these other websites, please refer to their data protection declarations. You can recognise a link to another website by the fact that a new browser window opens and a new address is displayed in the browser line. Insofar as our website contains links to other websites, we have no influence on whether their operators comply with data protection regulations. LSF is not responsible for their data protection strategies or the content of these other websites.
10. Data subject rights
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected from us, as well as about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
- pursuant to Art. 16 DSGVO to demand the correction of incorrect or completion of your personal data stored by us without undue delay;
- pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- pursuant to Art. 18 DSGVO to restrict the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you object to the processing of your personal data pursuant to Art. 21 DSGVO to object to the processing;
- pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
- pursuant to Art. 7(3) DSGVO to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future and
- to complain to a supervisory authority in accordance with Art. 77 DSGVO.
As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
11. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Article 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to email@example.com.
12. Data security
Within the website visit we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
13. Topicality and change of this data protection explanation
This data protection declaration is currently valid and has the status of May 2018. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website here.
Further data protection information
The German data protection information for our ticket shop can be found here
The Germa data protection information for public relations can be found here
The German data protection information for business partners can be found here
Data protection addendum to COVID-19
Customer data collected at the time of purchase will be collected and stored solely for the purpose of providing information to the public health department or local police authority in accordance with §§ 16, 25 IfSG. Visitors may only attend the event if they provide the organizer with their complete and accurate data. This data is to be deleted by the organizer four weeks after collection. The general provisions on the processing of personal data remain unaffected.
The organizer shall collect and store the following data from the event participant, exclusively for the purpose of providing information to the public health department or local police authority in accordance with §§ 16, 25 IfSG:
2. date of event participation and, as far as possible, beginning and end of participation,
3. telephone number or address of the participant.
Participants may only attend the event if they provide the organizer with complete and accurate data as per sentence 1. These data are to be deleted by the organizer four weeks after collection. The general provisions on the processing of personal data shall remain unaffected.