Privacy Policy

This is a courtesy translation. The German version of this Privacy Policy is the legally binding one; in case of any discrepancy, the German text prevails.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Prof. Anna-Victoria Baltrusch-Schulze
c/o Evangelische Hochschule für Kirchenmusik Halle
Kleine Ulrichstraße 35
06108 Halle, Germany

Phone: +49 (0) 151 432 760 96
Email: info@anna-victoria-baltrusch.de

2. General Information and Legal Bases

Protecting your personal data is an important concern for us. We process your data exclusively on the basis of the statutory provisions (GDPR, TDDDG – the German Telecommunications Digital Services Data Protection Act). In this Privacy Policy we inform you about the most important aspects of data processing within our website.

Personal data is any data that can be related to you personally, e.g. name, address, email addresses or user behaviour.

Insofar as we obtain consent for processing operations involving personal data, Art. 6(1)(1)(a) GDPR (Art. 6 Abs. 1 S. 1 lit. a DSGVO) serves as the legal basis. Where processing is necessary for the performance of a contract or in order to carry out pre-contractual measures, Art. 6 Abs. 1 S. 1 lit. b DSGVO serves as the legal basis. Where processing is necessary for compliance with a legal obligation, Art. 6 Abs. 1 S. 1 lit. c DSGVO serves as the legal basis. In the event that legitimate interests on our part or on the part of a third party make processing necessary, Art. 6 Abs. 1 S. 1 lit. f DSGVO serves as the legal basis.

3. Hosting and Provision of the Website

We process users’ data in order to be able to provide them with our online services. For this purpose we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

Types of data processed: usage data (e.g. websites visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, timestamps, identification numbers, consent status); content data (e.g. entries in online forms).

Data subjects: users (e.g. website visitors, users of online services).

Purposes of processing: provision of our online offering and user-friendliness; information-technology infrastructure (operation and provision of information systems and technical devices); security measures.

Legal bases: legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).

Further information on processing operations, procedures and services:

  • Provision of the online offering on rented storage space: To provide our online offering, we use storage space, computing capacity and software that we rent or otherwise obtain from a corresponding server provider (also referred to as a “web host”). Legal basis: legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).
  • Collection of access data and log files: Access to our online offering is logged in the form of so-called “server log files”. The server log files may include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files may be used, on the one hand, for security purposes, e.g. to avoid overloading the servers (in particular in the case of abusive attacks, so-called DDoS attacks), and, on the other hand, to ensure the utilisation and stability of the servers. Legal basis: legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO). Deletion of data: log file information is stored for a maximum of 30 days and then deleted or anonymised. Data whose further retention is necessary for evidentiary purposes is exempt from deletion until the respective incident has been finally resolved.
  • Email sending and hosting: The web hosting services we use also include the sending, receipt and storage of emails. For these purposes, the addresses of the recipients and senders, as well as further information relating to the sending of emails (e.g. the providers involved) and the contents of the respective emails, are processed. The aforementioned data may also be processed for the purposes of detecting SPAM. Please note that emails on the internet are generally not sent in encrypted form. As a rule, emails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore accept no responsibility for the transmission path of emails between the sender and receipt on our server. Legal basis: legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO).
  • Mittwald: Services in the field of the provision of information-technology infrastructure and related services (e.g. storage space and/or computing capacities). Service provider: Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. Legal basis: legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO). Website: https://www.mittwald.de. Privacy policy: https://www.mittwald.de/datenschutz. A data processing agreement (DPA) has been concluded with the provider, which safeguards the processing of your data on our behalf.

4. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Cookies and Consent Management (Cookiebot)

Our website uses cookies. Cookies are small text files that are stored on your device. We distinguish between technically necessary cookies, which are required for the operation of the website, and non-necessary cookies.

Technically necessary cookies are used on the basis of § 25(2) TDDDG as well as our legitimate interest in a technically error-free and secure operation of the website (Art. 6 Abs. 1 S. 1 lit. f DSGVO). All non-necessary cookies, as well as the embedding of external services (e.g. YouTube), take place exclusively on the basis of your consent pursuant to § 25(1) TDDDG in conjunction with Art. 6 Abs. 1 S. 1 lit. a DSGVO. This consent is voluntary and can be revoked at any time with effect for the future.

To manage the consent you have given, we use the consent management platform Cookiebot.

  • Provider: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (a company of the Usercentrics group). Website: https://www.cookiebot.com. Privacy policy: https://www.cookiebot.com/en/privacy-policy/
  • Function: When the website is opened, Cookiebot displays a consent banner and blocks consent-requiring services until you actively agree. Your consent decision is stored in a cookie (CookieConsent) on your device so that the banner does not reappear on subsequent visits.
  • Data processed: To document consent, Cookiebot stores, among other things, a consent key, your (anonymised) IP address as well as the time, type and scope of your consent. This data is processed for the purpose of the documentation obligation.
  • Legal basis: The storage of the consent cookie and the documentation of consent take place on the basis of a legal obligation (Art. 6 Abs. 1 S. 1 lit. c DSGVO) or our legitimate interest in providing evidence of the consent given (Art. 6 Abs. 1 S. 1 lit. f DSGVO). The use of Cookiebot itself is necessary in order to comply with the statutory consent obligations.

You can change or revoke your consent at any time via the cookie notice on the website.

6. Multilingualism (Polylang)

Our website is provided in multiple languages. To store your language selection, the Polylang plugin is used, which sets a technically necessary cookie (pll_language). This cookie stores only the language you have chosen, so that the website is displayed in the desired language. No transfer to third parties takes place.

Legal basis: § 25(2) TDDDG as well as legitimate interest in a user-friendly provision of the website (Art. 6 Abs. 1 S. 1 lit. f DSGVO).

7. Contact Form and Getting in Touch

On our website we offer you the possibility of contacting us via a contact form. For this we use the WPForms plugin. When you contact us via the form, the data you enter – salutation, first name, email address, telephone number (optional), subject and your message – is processed in order to handle and answer your enquiry.

The details submitted in the form are delivered to us by email via our hosting provider (Mittwald). The form entries are not permanently stored in a database; the data is transmitted exclusively as an email message.

To ward off spam messages, the form uses technical methods (including a hidden input field and a token check). No external service (e.g. a third-party captcha service) is integrated for this purpose.

Legal basis: your consent (Art. 6 Abs. 1 S. 1 lit. a DSGVO), which you give by submitting the form and ticking the corresponding consent checkbox, as well as our legitimate interest in answering your enquiry (Art. 6 Abs. 1 S. 1 lit. f DSGVO). If your contact is aimed at concluding a contract, Art. 6 Abs. 1 S. 1 lit. b DSGVO is an additional legal basis.

If you contact us directly by email or telephone instead, we likewise process the data you provide exclusively for the purpose of handling your request.

Storage period: We store the data processed in the course of contacting us until your enquiry has been conclusively dealt with and no statutory retention obligations stand in the way. The data is then deleted. You can object to the storage at any time or revoke a consent you have given.

8. Embedded YouTube Videos

On our website we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The videos are disabled by default and are only loaded after you have actively consented via our consent banner (Cookiebot). Until you consent, a placeholder is displayed instead of the video; no connection to the servers of YouTube or Google takes place.

We embed the videos in the so-called extended data protection mode (domain youtube-nocookie.com). Only when you actively start a video or consent to the embedding is a connection to the servers of YouTube established. In doing so, your IP address, among other things, is transmitted to YouTube, and information may be stored on or read from your device. This may involve a transfer of data to the USA. Google is certified under the EU-US Data Privacy Framework.

Legal basis: your consent pursuant to § 25(1) TDDDG in conjunction with Art. 6 Abs. 1 S. 1 lit. a DSGVO. The consent is voluntary and can be revoked at any time with effect for the future.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy

9. Fonts (Local Embedding)

For a consistent display of fonts, this website uses exclusively fonts stored locally on our server. No connection to third-party servers (such as Google Fonts) takes place when the fonts are loaded; no personal data is transmitted to third parties in this process.

10. Your Rights as a Data Subject

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR) to the data stored about you.
  • Right to rectification (Art. 16 GDPR) of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR), provided no statutory retention obligations stand in the way.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing (Art. 21 GDPR, see separate notice below).
  • Right to withdraw a consent given (Art. 7(3) GDPR) with effect for the future.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights, an informal notification to the contact details given under section 1 is sufficient.

11. Right to Object (Art. 21 GDPR)

Insofar as we process your personal data on the basis of legitimate interests (Art. 6 Abs. 1 S. 1 lit. f DSGVO), you have the right to object at any time, on grounds relating to your particular situation, to this processing. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

12. Right to Lodge a Complaint with the Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt (State Commissioner for Data Protection of Saxony-Anhalt)
Otto-von-Guericke-Straße 34a
39104 Magdeburg, Germany
(Postal address: Postfach 1947, 39009 Magdeburg)
Phone: +49 391 81803-0
Email: poststelle@lfd.sachsen-anhalt.de
Website: https://datenschutz.sachsen-anhalt.de

13. Storage Period

Insofar as no more specific storage period is stated within this Privacy Policy, your personal data will be deleted as soon as the purpose of storage ceases to apply and no statutory retention obligations (e.g. of a commercial or tax-law nature) stand in the way of deletion.

14. Validity and Amendment of this Privacy Policy

This Privacy Policy is currently valid and is dated [month year]. As our website develops further, or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy.

An always up-to-date, automatically generated overview of all cookies and similar technologies used on this website can be found below: