Privacy Policy

This Privacy Policy applies to the websites operated by the Landesverband der Freien Theater in Sachsen e.V.:

 

www.freie-theater-sachsen.de
www.verbund-mitte-ost.de
www.futur-ost.de
www.skv.freie-theater-sachsen.de
www.technikverleih.freie-theater-sachsen.de

 

The general information contained in this Privacy Policy applies to all of our websites. Specific provisions relating to individual websites, tools or integrated third-party content and services are explained separately.

When you use our websites, various types of personal data are collected. Personal data means any information that can be used to identify you personally. This Privacy Policy explains which data we collect, how we use it and for what purpose.

Our websites are hosted by external service providers ("hosting providers"). Personal data collected through our websites is stored on the hosting providers' servers. This may include, in particular IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website access data and any other data generated through the use of a website. Our hosting providers are used to ensure the secure, reliable and efficient provision of our online services by professional providers in accordance with Article 6(1)(f) GDPR (legitimate interests). Our hosting providers will process your data only to the extent necessary to fulfil their contractual obligations and will act solely in accordance with our instructions regarding such data. To ensure GDPR-compliant processing, we have concluded Data Processing Agreements with our hosting providers.

Data protection

The operators of these websites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

Please note that data transmission over the Internet (for example when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

 

Controller

The controller responsible for data processing on the above-mentioned websites is:

Landesverband der Freien Theater in Sachsen e.V.
Bautzner Straße 107
01099 Dresden
Germany

Phone: +49 155 66 47007
E-Mail: info@freie-theater-sachsen.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
 

 

Data Retention

Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies. If you exercise your right to erasure or withdraw your consent to data processing, your data will be deleted unless we are legally entitled or required to retain it for other reasons (for example under tax or commercial law). In such cases, deletion will take place once the relevant legal retention period has expired.

 

Legal Basis for Processing

Where you have given your consent, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of personal data are concerned, Article 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing is also carried out on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or to access information on your device (for example through device fingerprinting), processing is additionally based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time. Where your data is required for the performance of a contract or for pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR. Processing may also take place on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.

The specific legal basis applicable in each individual case is explained in the relevant sections of this Privacy Policy.

 

Recipients of Personal Data

In the course of our activities, we cooperate with various external organisations. In some cases, this requires the transfer of personal data.

We only disclose personal data where:

• this is necessary for the performance of a contract;
• we are legally obliged to do so (for example, disclosure to tax authorities);
• we have a legitimate interest in doing so pursuant to Article 6(1)(f) GDPR; or
• another legal basis permits such disclosure.

 

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of processing carried out prior to the withdrawal remains unaffected.

 

Right to Object to Data Processing in Particular Cases and to Direct Marketing (Article 21 GDPR)

Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to any profiling based on those provisions.

The legal basis on which any processing is carried out is explained in the relevant sections of this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims (Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling where it is related to direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes.

 

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

This right exists without prejudice to any other administrative or judicial remedies.

 

Right to Data Portability

You have the right to receive personal data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

 

Right of Access, Rectification and Erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your personal data stored by us, including its origin, recipients and the purpose of the processing. You also have the right, where applicable, to request the rectification or erasure of your personal data.

If you have any questions regarding personal data, you may contact us at any time.
 

Right to Restrict Processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally require time to verify its accuracy. During this verification period, you have the right to request restriction of the processing of your personal data.
• If the processing of your personal data is or has been unlawful, you may request restriction of processing instead of erasure.
• If we no longer require your personal data, but you need it for the establishment, exercise or defence of legal claims, you may request restriction of processing instead of erasure.
• If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests must be carried out. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

Where processing of your personal data has been restricted, such data may, apart from being stored, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

SSL/TLS Encryption

The websites operated by LFTS use SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator. You can recognise an encrypted connection by the change in your browser's address bar from "http://" to "https://".

When SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

 

Contact by Email or Telephone

If you contact us by email or telephone, your enquiry, including any personal data arising from it (such as your name and the content of your enquiry), will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR where your enquiry is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract.

In all other cases, processing is based on our legitimate interest in the efficient handling of enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you send to us via contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (for example once your enquiry has been fully dealt with). Mandatory statutory provisions, in particular legal retention obligations, remain unaffected.

Matomo

The website www.freie-theater-sachsen.de uses the open-source web analytics service Matomo.

Matomo enables us to collect and analyse information about how visitors use our website. This allows us, for example, to determine when particular pages are accessed and from which geographical region visits originate. We also collect various log data (such as IP addresses, referrer URLs, browser type and operating system) and can measure whether visitors perform certain actions (for example clicks or downloads). The use of this analytics tool is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in analysing user behaviour in order to optimise both our website and our communications. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (for example through device fingerprinting). Consent may be withdrawn at any time. For analytics purposes, Matomo uses IP anonymisation. Your IP address is shortened before analysis so that it can no longer be attributed to you personally. We have configured Matomo so that no cookies are stored on your device.

Matomo is hosted on the infrastructure of our hosting provider. The analytics data collected is processed exclusively on our behalf and is not disclosed to any other third parties. We have concluded a Data Processing Agreement with our hosting provider to ensure GDPR-compliant processing.

 

Server Log Files (Access Logs)

For the websites www.skv.freie-theater-sachsen.de and www.technikverleih.freie-theater-sachsen.de, we maintain purely anonymous access statistics.

Each visit to these websites results only in technical transmission processes that are handled exclusively within our own secure server infrastructure. No data is transferred to third countries or external service providers. Furthermore, no IP addresses or other personal data are collected or stored on a permanent basis. It is therefore not possible to identify individual users at any time.

Processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the secure and reliable technical operation of our websites.

If you wish to subscribe to the newsletter offered on www.freie-theater-sachsen.de, we require your email address together with information enabling us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected unless voluntarily provided.

We use Brevo to distribute our newsletter. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The data you enter for the purpose of subscribing to the newsletter is stored on Brevo’s servers and processed on our behalf. We have concluded a data processing agreement (DPA) with Brevo. The data entered into the newsletter subscription form is processed solely on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent to the storage of your data, your email address and its use for sending the newsletter at any time, for example by clicking the "unsubscribe" link contained in every newsletter. Withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal.

The newsletters we send contain tracking pixels and personalised links, enabling us to determine whether and when a newsletter has been opened and which links recipients have clicked. This information is analysed for statistical purposes and to improve our newsletter content. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.

The data you provide for newsletter subscriptions will be stored by us or by Brevo until you unsubscribe from the newsletter and will be deleted from the mailing list after you unsubscribe or once the purpose of processing no longer applies. We reserve the right to remove or block email addresses from our mailing list at our own discretion where this is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

Data stored by us for other purposes remains unaffected.

After you unsubscribe, your email address may be retained by us or by Brevo in a suppression list (blacklist) where this is necessary to prevent future mailings. Data contained in the suppression list is used exclusively for this purpose and is not combined with other data.

This serves both your interests and our legitimate interest in complying with the legal requirements governing the distribution of newsletters (Article 6(1)(f) GDPR). Storage in the suppression list is not subject to any fixed retention period. You may object to such storage where your interests override our legitimate interests.

Further information about Brevo's processing of personal data can be found in its Privacy Policy: https://www.brevo.com/de/legal/privacypolicy/

 

Our websites may incorporate content and services provided by third parties, such as videos, registration forms, or functions offered by communication and social media platforms.

When such content or services are accessed or used, personal data—particularly your IP address and technical usage information—may be transmitted to the respective third-party provider.

Depending on the type of integration, processing is based on your consent pursuant to Article 6 (1) (a) GDPR, for the performance of a contract or pre-contractual measures pursuant to Article 6 (1) (b) GDPR, or on our legitimate interests pursuant to Article 6 (1) (f) GDPR. Any consent given may be withdrawn at any time with effect for the future.

Further information on data processing by the respective third-party providers can be found in their privacy policies.

 

Embedded Videos (YouTube and Vimeo)

Our websites include embedded videos from the YouTube and Vimeo platforms.

On the websites www.freie-theater-sachsen.de and www.skv.freie-theater-sachsen.de, videos are only loaded after you have given your explicit consent. A connection to the servers of the respective provider is established only after your consent has been obtained.

On our other websites and subdomains, videos may be embedded directly. In these cases, a connection to the servers of the respective provider is established as soon as you access a page containing an embedded video. In particular, your IP address and technical information about your browser and device may be transmitted to the respective provider.

If you are logged into YouTube (Google) or Vimeo while visiting our websites, the respective provider may associate your visit with your user account.

YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Vimeo is provided by Vimeo Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

Further information on the processing of personal data can be found in the providers' respective Privacy Policies:

• Google (YouTube): https://policies.google.com/privacy
• Vimeo: https://vimeo.com/privacy
   

 

Video Conferencing Systems

We use Zoom and Microsoft Teams to conduct online meetings, video conferences and digital events.

Zoom is provided by Zoom Video Communications, Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA. Microsoft Teams is provided by Microsoft Corporation / Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

When using these services, personal data is processed. This includes, in particular, personal information (e.g. your name), communication data (audio, video and chat data), as well as technical information relating to your connection and use of the service (e.g. IP address, device information and the time of participation). Processing is carried out, depending on the context, for the purpose of conducting online meetings, video conferences and digital events pursuant to Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or, where consent is required, for example in relation to recordings, on the basis of Article 6(1)(a) GDPR. Where required, we have concluded Data Processing Agreements with the providers in accordance with Article 28 GDPR.

Please note that when using Zoom and Microsoft Teams, personal data may be transferred to third countries, in particular the United States. In such cases, the transfer is carried out on the basis of appropriate safeguards pursuant to Article 46 GDPR, in particular the European Commission's Standard Contractual Clauses.

Further information on the providers' processing of personal data can be found in their respective Privacy Policies:

• https://zoom.us/privacy
• https://privacy.microsoft.com/de-de/privacystatement

 

Social Media Presence

We maintain publicly accessible profiles on social media platforms in order to provide information about our work and to communicate with interested individuals. When you visit our social media profiles, personal data is processed by the respective platform operators. This may include, in particular, usage data, device information, IP addresses and interactions with our profiles. We have only limited influence over the processing of personal data carried out by the platform operators. Where we communicate with users via our social media profiles (for example through direct messages, comments or reactions), we process the data transmitted to us for the purpose of responding to the respective enquiry or communication. Processing is carried out on the basis of our legitimate interest in public relations and communication pursuant to Article 6(1)(f) GDPR or, where the communication is related to the initiation or performance of a contract, on the basis of Article 6(1)(b) GDPR.

Further information on data processing can be found in the Privacy Policies of the respective platform operators.

 

Eventbrite

We use Eventbrite for event registration and, where applicable, ticket sales. The provider is Eventbrite, Inc., 95 Third Street, 2nd Floor, San Francisco, CA 94103, USA, or the Eventbrite entity responsible for the European market. If you register for one of our events via Eventbrite or purchase a ticket, the personal data you provide will be processed, in particular your name, email address, billing information (where applicable), payment details and any additional information you provide during registration. Processing is carried out for the purpose of organising the event, managing your registration or ticket booking and communicating with you in connection with the event. The legal basis for processing is Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in the efficient organisation of events. Depending on the circumstances, Eventbrite processes personal data either as an independent controller or as a service provider acting on our behalf. Personal data may be transferred to third countries, in particular the United States. In such cases, we and/or Eventbrite ensure that appropriate safeguards are in place to guarantee an adequate level of data protection.

Further information on Eventbrite's processing of personal data can be found at:

https://www.eventbrite.de/help/de/articles/415689/datenschutzrahmen/
 

 

Google reCAPTCHA

To protect our registration forms against automated misuse, bots and spam, we use Google reCAPTCHA during the initial registration process on the websites www.skv.freie-theater-sachsen.de and www.technikverleih.freie-theater-sachsen.de. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

reCAPTCHA verifies whether information entered into a form has been provided by a human user or by an automated program. For this purpose, technical data (such as your IP address, browser information and the time spent on the website) is transmitted to Google and analysed.

It cannot be ruled out that data may also be transferred to servers operated by Google LLC in the United States. Google is certified under the EU–US Data Privacy Framework, ensuring an adequate level of data protection.

The use of this service is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in protecting our web infrastructure, preventing fraudulent registrations and defending against spam attacks.

 

We process applicants' personal data for the purpose of carrying out recruitment and selection procedures. This applies both to applications for advertised positions and to applications submitted in response to open calls, project calls, residencies, scholarships or comparable opportunities.

Depending on the type of application process, personal data is processed on the basis of Article 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) (where applications relate to employment) or on the basis of Article 6(1)(b) or Article 6(1)(f) GDPR, where processing is necessary for the conduct of a selection procedure or for deciding on participation in a project or call.

As part of the application or selection process, we process, in particular, contact details (such as your name, email address and telephone number), application documents (such as your CV, cover letter, references, work samples or project documentation), and any other information you provide as part of your application.

The data submitted will be processed solely for the purpose of carrying out the relevant application or selection procedure and will only be accessible to those persons responsible for managing the process.

If your application is unsuccessful or you are not selected to participate, your application documents will be deleted no later than six months after the completion of the respective procedure, unless statutory retention obligations, legitimate interests (for example evidential obligations under the German General Equal Treatment Act (AGG)) or your consent to longer storage require otherwise.

Where you expressly consent to being included in an applicant or prospective participant pool, we will store your data on the basis of Article 6(1)(a) GDPR until you withdraw your consent.

Your personal data will not be disclosed to third parties unless this is necessary for the conduct of the relevant selection procedure or required by law.

If you apply for membership via the membership application form on www.freie-theater-sachsen.de, we process the personal data you provide for the purpose of processing your application and deciding on your admission to the association.

The data processed includes, in particular, contact details (such as your name, postal address and email address), organisation-related information and any other information submitted via the application form. Where you upload a photograph, this will also be processed.

Processing is carried out for the purpose of taking pre-contractual steps and establishing and administering your membership pursuant to Article 6(1)(b) GDPR.

The data is used exclusively for membership administration and is accessible only to those persons within the association who are responsible for this purpose. Your personal data will not be disclosed to third parties unless we are legally required to do so.

 

Publication of Member Information

If your application for membership is successful, we will publish certain information you have provided on our website and through the association's communication channels, based on your consent pursuant to Article 6(1)(a) GDPR.

This may include, in particular: name and, where applicable, a short description (short biography), email address; links to your website and social media profiles;, profile or portrait photographs.

Such information will only be published where you have expressly consented to this as part of your membership application. You may withdraw your consent at any time with future effect. In the event of withdrawal, the relevant content will be removed from our publicly accessible channels without undue delay, insofar as this is technically feasible.

Membership applications that are not accepted will be deleted once the admission procedure has been completed, unless statutory retention obligations or legitimate interests require otherwise.

Following the termination of membership, personal data will be deleted unless statutory retention obligations apply.

On the subdomain www.skv.freie-theater-sachsen.de, we operate the Directory of Venues, Artists and Practitioners of the Independent Performing Arts in Saxony (SKV). The directory is intended for practitioners, artists, artist groups and venues within the independent performing arts sector in Saxony.

Registration for a user account is required in order to create and manage a public profile. For this purpose, we process the registration data you provide, in particular your email address, first name, surname and password.

The user account is used solely for the creation, maintenance and publication of a profile within the directory. Processing is based on Article 6(1)(b) GDPR.

When maintaining your profile, the following information may be published: name, short biography, website and social media links, location, cultural region, genre, profile description, logos; and photographs.

This information is publicly accessible and may be viewed by visitors to the directory.

The publication of profile information is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. In this case, your profile will be deactivated or the relevant content removed, unless statutory retention obligations require otherwise.

Your data will be stored for as long as your user account exists or until you request its deletion.

On the subdomain www.technikverleih.freie-theater-sachsen.de, we operate an online portal for organising and managing the hire of event equipment for cultural practitioners in Saxony.

In connection with your use of the portal, we process, in particular, organisational information, contact details, booking and rental data, contractual information, invoicing data and records relating to previous equipment hires.

Processing is carried out for the purpose of handling hire requests, performing contractual obligations, issuing invoices and documenting equipment loans pursuant to Article 6(1)(b) GDPR.

Contractual documents and booking records are created and stored for the purpose of managing equipment loans. Hire records are maintained to facilitate the administration of our equipment inventory and the efficient handling of future rentals.

The data is accessible only to those persons responsible for administering the equipment rental service. Personal data will only be disclosed to third parties where this is necessary for the performance of the contract or required by law.

The data will be deleted as soon as it is no longer required for the above purposes and no statutory retention obligations, in particular under commercial or tax law, apply.

Photographs and video recordings may be taken during our events. These recordings are used for documentation purposes and for the association's public relations activities, including publication on our websites, social media channels, in printed materials and in the association's own publications.

The processing of personal data in connection with photographs and video recordings is based on our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in documenting our activities as part of contemporary history and in communicating the work of the association to the public.

Where express consent is obtained in individual cases, for example for prominently featured photographs or portraits, processing is based on Article 6(1)(a) GDPR. Any consent given may be withdrawn at any time with future effect.

For public events, we inform participants in advance and on site that photographs and video recordings will be taken. Individuals have the right to object to the creation or publication of recordings in which they are recognisable. In such cases, we will, where reasonably possible, ensure that the individual concerned is not included in the recording or refrain from publishing the relevant material.

Photographs and video recordings will only be disclosed to third parties where this is necessary for public relations purposes or where we are legally required to do so.