1. Who is responsible for data processing?
The website of the Utopia Orchestra and Choir (https://utopia-orchestra.org/) is a service of the Euphonia Arts gGmbH. As it is important to us that you feel safe and comfortable using our website, and because protecting your privacy is a high priority for us, we would now like to inform you of how we treat the capture, use and circulation of personal data. Euphonia Arts gGmbH is responsible for data collection and processing, represented by its Managing Director Ilja Chakhov.
2. What sources and data do we use?
When you access the Utopia Orchestra and Choir website, a data set will be saved on the web server. The data set comprises of:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the accessed file,
- website from which the access was made (“referrer URL”),
- the search engine you used, if applicable,
- the browser you used,
- the operating system of your computer as well as the name of your access provider, if applicable.
We use this information on the legal grounds set out in Art. 6 Para. 1 S. 1 lit. f GDPR and for the purpose of allowing access to our website, for the control and administration of our systems as well as improving the design of the website. The usage data is anonymised and the link to the individual person is therefore erased. The creation of personalised user profiles is therefore also precluded.
The above-mentioned data consisting of existing, anonymized data sets is saved with statistical tools via our provider and evaluated only for statistical purposes. Statistics on the frequency of access to individual web pages helps us better design the website to fit your needs. Your data will not be given to third parties or be subject to any other analysis.
3. Cookies
We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, or similar) when you visit our website. Cookies do not cause any damage to your end device, nor do they contain viruses, trojans or other malware. Cookies store information arising from the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make the use of our website more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing it for you. These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time. The processing of data by means of cookies only takes place in the case of non-essential cookies if you have expressly given your consent to this in accordance with Art. 6 (1)(a) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created.
Please note that you will not be able to use some functions of our website if you do not accept cookies.
4. Use of web tracking tools
For the web analysis, we use the web analysis service Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and — if you are a resident of the European Economic Area (EEA) or Switzerland — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics uses cookies which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of the website (including pages viewed, user interactions, browser type/version, operating system used, referrer URL, host name of the accessing computer (IP address), approximate location (region), date and time of server request) will be transmitted to and stored by Google on servers in the United States, Singapore, Taiwan and Chile. The data processing is in line with the basis of Art. 6 Para. 1 S. 1 lit. f GDPR and done in the interest of improving our website.
5. Server log files
The site provider automatically collects and stores information in so-called server log files that your browser automatically submits to us. These are:
- browser type and browser version,
- operating system used,
- referrer URL,
- host name of the accessing computer,
- time of server inquiry.
This information cannot be connected to a certain person. We will not combine this data with other data sources. We reserve the right to examine data at a later date if we are made aware of concrete evidence for illegal use.
6. Redirecting to other websites and social networks
Our website contains links to other sites. When you are directed away from the Utopia Orchestra and Choir website, we cannot offer any guarantees about those sites and their compliance with data protection regulations. If you have any questions about data protection, please contact the individual provider. On the basis of Art. 6 Para. 1 S. 1 lit. f GDPR and in the interests of publicity and staying connected with our audiences, we are officially represented on the following social networks:
At no time will we collect, save or process the personal data of our users on these pages. Furthermore, we will not undertake or initiate any other data processing. Any data you post on our Facebook page e. g. comments, videos or photographs will not be used or processed by us at any time for any other purposes. Social networks can use so-called web tracking methods on their pages. Please be aware: we cannot rule out the possibility that social networks will use your profile information to evaluate your habits, personal relationships, preferences etc. We have no influence over the way in which social networks process your data. Should you access our pages on social networks please be away of both our privacy statement and the declarations of the individual sites.
7. Newsletter
We will only send you our newsletter if you subscribe via our form. If you would like to receive this newsletter, we require a valid email address for you to receive our so-called opt-in email. By clicking the link in the email, the recipient confirms the email address with which they have subscribed to the newsletter and the newsletter subscription is activated. Processing takes place on the basis of your consent, according to Art. 6 Para. 1 S. 1 lit. a GDPR. The details you submit will only be used to send you emails and where applicable your address will be used to send out our newsletter. We will also save the time at which you submit your opt-in confirmation. If, in the future, you no longer wish to receive the newsletter, you can click on the link in every newsletter to unsubscribe at any time. Unsubscribing does not affect the legitimacy of the prior data processing. If consent is revoked, we will stop the processing of relevant data. You will only receive further information about our website if you have actively clicked on this option, and you can revoke this at any time.
8. Contacting us
Details given to us in the context of making contact will only be used in line with Art. 6 Para. 1 S. 1 lit. b GDPR, in order to process your request and to send you any information you asked for. Data will be deleted after 3 months.
9. Embedding YouTube videos
Our website uses plugins from the website www.youtube.com, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (in the European Economic Area and Switzerland) or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in other countries) (“YouTube”). When you visit one of our pages equipped with a YouTube plugin, a connection is established to the YouTube servers. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Further information on how user data is handled can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy.
10. Donation services
On our website we offer the option to donate via Stripe. The provider of this payment service is Stripe, Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107 (hereinafter “Stripe”). Stripe is a software platform that allows easy one of payment processing online. As a financial organisation, Stripe must adhere to strict financial and legal regulations as well as to the General Data Protection Regulations.
If you select the option to donate via Stripe, the payment details you enter will be sent to Stripe on the basis of Art. 6 Para. 1 lit. a GDPR. Stripe collects details such as name, postal address, telephone number and email address; financial and transaction data such as credit or debit card number and bank account information; other personal data such as date of birth, SSN or EIN. Stripe does not sell or rent your personal data to marketers or unaffiliated third parties.
You have the option of revoking your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations that have taken place in the past. You can find more information on how user data is handled in Stripe’s privacy policy: https://stripe.com/gb/privacy.
11. Who receives my data?
In keeping with the order processing rules in Art. 28 GDPR we pass your data on to service providers who support us in running our website and the associated processes. These are companies in the categories of IT services, ticketing, payment services and credit transactions, telecommunications, newsletter dispatch, sales and marketing. Our service providers are strictly bound by our instructions and contractually bound accordingly. In particular, we use a contractor with headquarters and servers in Germany for the hosting and design of the website.
12. Is data transferred to a third country or to an international organization?
Data is transferred to third countries (countries outside the European Economic Area — EEA) if this is necessary for the execution of contracts or is required by law or if you have given us your consent. We will inform you separately about the details, if required by law. In addition, the processors in third countries named in these data protection provisions (e. g. YouTube) receive access to your data.
13. What data protection rights do I have?
When processing personal data, the GDPR protects your following rights as a website user.
RIGHT TO ACCESS (ART. 15 GDPR)
You have the right to request confirmation of whether your relevant personal data will be processed; and if this is the case you also have the right to access this personal data and information as individually stipulated in Art. 15 GDPR.
RIGHT TO COLLECTION AND DELETION (ART. 16 AND 17 GDPR)
You have the right to demand the immediate correction of relevant incorrect personal data and where appropriate the completion of incomplete personal data. Furthermore you have the right to demand that relevant personal data be immediately deleted, should it meet one of the criteria laid out in Art. 17 GDPR, e. g. when the data is no longer required for the original purpose.
RIGHT TO LIMITED PROCESSING (ART. 18 GDPR)
You have the right to limit the amount of time for which your data is processed, if any of the conditions listed in Art. 18 GDPR are valid, e. g. if there is a discrepancy in the way in which data is processed, for the duration of a possible period of examination.
RIGHT TO DATA TRANSFER (ART. 20 GDPR)
In certain cases, itemised in Art. 20 GDPR, you have the right to receive your relevant personal data in a structured, accessible and machine-readable format and to ask for this data to be sent to a third party.
RIGHT OF APPEAL (ART. 21 GDPR)
If data is collected on the basis of Art. 6 Para. 1 S. 1 lit. f (data processing for safeguarding legitimate interests), you have have the right to object to data processing for reasons that arise from your particular situation. We will then stop processing your personal data unless there are provable, compelling, legitimate reasons for processing that outweigh the interests, rights and freedoms of the person affected, or unless the processing is in the interest of establishing, exercising or defending legal claims.
RIGHT TO APPEAL TO A REGULATORY AUTHORITY
According to Art. 77 GDPR you have the right to complain to a regulatory authority, if you believe that your data has been processed in a way that infringes data protection law. The right of appeal can be exercised via a regulatory authority in the member state of your residence, your workplace or the location of the suspected infringement.
14. Data protection
We hope that the provided details have thoroughly and adequately informed you about the data processing practices associated with this website’s presentation and functionality. If you have any further questions, we will be happy to answer them at any time via e-mail: info@utopia-orchestra.org.
If you believe that the information does not fully meet the legal requirements, we would be grateful if you would give us the opportunity to review and, if necessary, supplement our information before contacting the supervisory authority. Thank you in advance for this.
