The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
Chopin-Gesellschaft in der Bundesrepublik Deutschland e.V.
Kasinostraße 3
Literaturhaus
D-64293 Darmstadt
Telephone: +49-6155 7952606
Email: buero@chopin-gesellschaft.de
In principle, you can visit our website without providing any personal information. We process the personal data of our users only insofar as this is necessary to provide our content and services. The processing of our users' personal data generally only takes place with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and where the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data required for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to comply with a legal obligation to which our association is subject, Art. 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or of another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our association or of a third party, and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Data may also be stored where this has been provided for by the European or national legislature in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a continued need to store the data for the conclusion or performance of a contract.
Each time our website is accessed, the system automatically collects data and information from the computer system of the accessing computer. This data is also stored in the log files of our system. The user's IP address or other data that would allow the data to be attributed to a specific user is not affected. This data is not stored together with other personal data of the user.
What data does the system store from website visitors?
The system does not automatically store any personal data of website visitors, so that no conclusions can be drawn about individual visitors. In order to improve the quality of our offering, we process the following data for statistical purposes:
This data is stored in anonymised form in accordance with the German Telemedia Act (TMG). The creation of personal user profiles is thereby excluded.
With which technologies does the system determine the data?
The data is determined either by a pixel or by a log file. No cookies are used to protect personal data.
For what purpose is the data collected?
Data is collected exclusively for statistical analysis and for the technical optimisation of our website.
Is data passed on to third parties?
We transfer your data, within the framework of order processing pursuant to Art. 28 GDPR, to service providers who support us in operating our websites and the related processes. Our service providers are strictly bound by our instructions and are contractually obliged accordingly. We use the following service providers: hosting provider, web analytics provider, website maintenance provider, newsletter provider, ztix. In some cases, we transfer personal data to a third country outside the EU. In each such case we have taken care to ensure an adequate level of data protection: for Google LLC (USA), an adequate level of data protection follows from its corresponding participation in the Privacy Shield agreement (Art. 45(1) GDPR).
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Our legitimate interest in the data processing pursuant to Art. 6(1)(f) GDPR also lies in these purposes.
The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website is essential for the operation of the site. Consequently, the user has no option to object.
Our website offers the option to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us:
We use your data exclusively for sending the newsletter.
In addition, the following data is collected during registration:
Your consent is obtained for the processing of the data as part of the registration process, and reference is made to this privacy policy.
If you purchase goods or services (e.g. tickets) on our website and provide your email address in doing so, we may subsequently use it to send a newsletter. In such a case, the newsletter is used exclusively to send direct advertising for our own similar goods or services.
No data is passed on to third parties in connection with the processing of data for sending newsletters. The data is used exclusively for sending the newsletter.
The legal basis for processing data after a user registers for the newsletter, where the user has given consent, is Art. 6(1)(a) GDPR.
The legal basis for sending the newsletter following the sale of goods or services is Section 7(3) of the German Act Against Unfair Competition (UWG).
Collecting the user's email address serves the purpose of delivering the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address used.
The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription remains active.
Other personal data collected during the registration process is generally erased after a period of seven days.
The newsletter subscription can be cancelled by the user at any time. A corresponding link can be found in every newsletter for this purpose.
This also enables the withdrawal of consent to the storage of the personal data collected during the registration process.
On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The personal data transmitted to the controller in this process can be seen from the respective input mask used for registration.
At the time of registration, the following data is also stored:
As part of the registration process, the user's consent to the processing of this data is obtained.
The legal basis for the processing of the data, where the user has given consent, is Art. 6(1)(a) GDPR.
If the registration serves to fulfil a contract to which the user is party, or to carry out pre-contractual measures, an additional legal basis for the processing of the data is Art. 6(1)(b) GDPR.
Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.
Visitors to our website can order tickets for our events. The collection of data is necessary to process the order and to provide our service.
Speakers at our events may, within the scope of our contractual relationship, provide us with details about their talk that they wish to have published in the event programme.
The data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected during registration for the fulfilment of a contract or the implementation of pre-contractual measures, this is the case when the data is no longer required for the performance of the contract. Even after conclusion of the contract, there may be a need to retain the contractual partner's personal data in order to comply with contractual or statutory obligations.
As a user, you have the option to cancel your registration at any time. You may also have the data stored about you amended at any time. To do so, please send an email, fax or letter to the controller (see point I. above), including your first and last name and your address (required for verification).
If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early erasure of the data is only possible insofar as contractual or statutory obligations do not preclude erasure.
If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you may request the following information from the controller:
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this connection, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in relation to the transfer.
You have a right to rectification and/or completion vis-à-vis the controller if the personal data concerning you that is being processed is inaccurate or incomplete. The controller must carry out the rectification without undue delay.
Under the following conditions, you may request the restriction of the processing of the personal data concerning you:
Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a member state.
If the restriction of processing was carried out in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
a) Obligation to Erase
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, where one of the following grounds applies:
b) Information to Third Parties
If the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase it, it shall take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the personal data that you, as the data subject, have requested the erasure of any links to, or copies or replications of, that personal data.
c) Exceptions
The right to erasure does not apply insofar as processing is necessary:
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of that rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort.
You have the right, vis-à-vis the controller, to be informed of these recipients.
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided, provided that:
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. In the event of a data block, the blocked data must be retained in a block file for control purposes.
In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you have the option to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your data protection consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you, or similarly significantly affects you. This does not apply if the decision:
However, such decisions must not be based on special categories of personal data under Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights, freedoms and legitimate interests have been taken.
With regard to the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.