Privacy policy
Thank you for visiting our website. The information outlined below explains how we process your personal data in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Data controller
The organisation named in the legal notice is the data controller for any personal information we process as described below.
Usage data
When you visit our websites, so-called usage data is temporarily stored on our web server as a log file and analysed for statistical purposes, in order to improve the quality of our web pages. This data set consists of:
- the name and address of the pages that were requested
- the date and time of the request
- the volume of data that was transferred
- the access status (content transferred, content not found)
- the description of the web browser and operating system used
- the referring link, which identifies the page from which you accessed our website,
- the IP address of the device used, shortened in such a way that it can no longer be allocated to any specific person
We only use anonymised data for this analysis.
The legal basis for the processing of usage data is Art. 6 Para. 1 Sentence 1 lit. f GDPR. The processing is carried out in the legitimate interest of making the content of the website available and ensuring a device- and browser-optimised appearance.
How we protect your data
We use technical and organisational measures to protect your data from unauthorised access as comprehensively as possible. We use encryption technology on our website. Your data is transmitted from your device to our server and vice versa via the Internet using TLS encryption. You can usually recognise this by the fact that the lock icon in the status bar of your browser is closed and the address line begins with https://.
Cookies
Our website uses cookies in order to make it function.
Cookies are small text files that are downloaded to your device and can be retrieved. There are different types of cookies: Session cookies are deleted again as soon as you close your browser, while persistent cookies are stored for longer than the individual session.
We do not use these necessary cookies for analysis, tracking or advertising purposes.
Some of these cookies only contain information about certain settings and do not contain personally identifiable information. They may be necessary to enable user guidance, security and implementation of the website.
We use these cookies for our legitimate interest in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR.
You can adjust your browser settings to inform you about the placement of cookies. In addition, you can delete them at any time through your browser settings and block further cookies from being saved. Please bear in mind that our website may no longer be displayed in full and some functionality may be lost.
| Provider | Purpose | Duration | Adequate level of data protection |
|---|---|---|---|
| Usercentrics | Consent Management | persistent | Legitimate interest in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. |
Consent banner
We use a consent management platform on our website (consent / cookie banner). The data processed in connection with the consent management platform and the logging of the settings you choose is done in line with Art. 6 Para. 1 Sentence 1 lit. f GDPR, in our legitimate interest to display our content according to your preferences and to be able to prove the consent you have given. Your preferences, the consent you have given and parts of your usage data are stored in a cookie. This means that it is retained for subsequent page requests and your consent can still be tracked. You can find further information on this under „Required Cookies“.
Matomo
We use the web analytics suite „Matomo“ to customise the way our website is displayed. Mamoto creates user profiles using pseudonyms. This is how we are able to recognise returning visitors and count them.
The data are processed based on your consent, provided you have given your consent via our banner.
You can withdraw your consent at any time by following this link and adjust the relevant settings on our banner.
Contact form
You can get in touch with us via our contact form. To be able to use our contact form, you first need to enter the data marked as mandatory fields.
We use this data in line with Art. 6 Para. 1 Sentence 1 lit. f GDPR to answer your enquiry.
You can decide for yourself whether you would like to provide us with additional information. This information is provided voluntarily and is not mandatory for contacting us. We process your voluntary information based on the consent you have given.
Your data will only be processed to answer your enquiry. We will delete your data if it is no longer required and there is no legal duty to retain it. This is usually 90 days after the enquiry has been processed.
If your data transmitted via the contact form is processed in line with Art. 6 Para. 1 Sentence 1 lit. f GDPR, you can object to the processing at any time. You may also withdraw your consent to the processing of data given voluntarily at any time. To do so, please contact the e-mail address in the legal notice.
Embedded Videos
Videos that are not stored on our servers are embedded on our websites. To ensure a third-party provider’s content is not automatically loaded when you access our pages with embedded videos, we only display locally stored preview images of the videos at first. This way, the third-party provider does not receive any information.
The content from the third-party provider is only loaded after you click on the preview image. As a result, the third-party provider receives the information that you have accessed our site as well as the usage data that are required for technical purposes. The third-party provider can also use tracking technology. We have no influence over additional data processing by third-party providers. By clicking on the preview image, you give us your consent to load content from the third-party provider.
The embedding is carried out on the basis of your consent, provided that you have given your consent by clicking on the preview image. The table below provides information on the level of data protection in case the data is processed outside the EU or the EEA (in particular in the USA).
| Provider | Maximum duration |
Adequate level of data protection |
How to withdraw consent |
|---|---|---|---|
| Google (Youtube) | 5 months and 27 days | For data transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision of the EU-US Data Privacy Framework. | If you have clicked on the preview image, the content of the third-party provider loads immediately. If you do not want this to happen on other pages, please do not click on the preview images. |
Map services
Maps that are not stored on our servers are embedded on our websites. To ensure a third-party provider’s content is not automatically loaded when you access our pages with embedded maps, we only display locally stored preview images of the maps at first. This way, the third-party provider does not receive any information.
The content from the third-party provider is only loaded after you click on the preview image. As a result, the third-party provider receives the information that you have accessed our site as well as the usage data that are required for technical purposes. The third-party provider can also use tracking technology. We have no influence over additional data processing by third-party providers. By clicking on the preview image, you give us your consent to load content from the third-party provider.
The embedding is carried out on the basis of your consent, provided that you have given your consent by clicking on the preview image.
Please note some embedded map services lead to your data being processed outside the EU / EEA (in particular in the USA). The table below provides information on the level of data protection in case the data is processed outside the EU or the EEA (in particular in the USA).
| Provider | Adequate level of data protection |
How to withdraw consent |
|---|---|---|
| Google Maps | For data transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision of the EU-US Data Privacy Framework. | If you have clicked on the preview image, the content of the third-party provider loads immediately. If you do not want this to happen on other pages, please do not click on the preview images. |
Job applications via e-mail
You can apply for vacancies, whether advertised or not, by sending an email to bewerbung@musikfest-bremen.de. You can choose for yourself how much and which data you send us as part of your email application. We can only consider your application if you provide us with at least the following information: name, address, e-mail address, cover letter or reference of the desired position, CV, references and qualifications.
We process this information exclusively for the purpose of the selection process in line with Section 26 (1) sentence 1 of the BDSG, as this is necessary for the decision on whether to employ someone. We do not process this data for any other purposes.
You can decide for yourself whether to provide us with additional information, e.g. your hobbies, date of birth, telephone number and a photo of yourself. The provision of this data is voluntary and is not mandatory for the application. If you include voluntary data in your email application, we will process it on the basis of your consent in line with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Section 26 para. 2 of the BDSG. You may withdraw your consent to future use of your data at any time by contacting the organisation named in the legal notice.
Your data will be treated confidentially in our company. Where necessary, we use service providers who are strictly bound by our regulations, e.g. to give us IT support and with whom separate contracts for processing orders have been established. Your data will not be shared with any other parties. If an employment contract is entered into after the application process, we store the data from your application required for establishing your employment. The legal basis for this processing is § 26 para. 1 sentence 1 of the BDSG. If your application is unsuccessful, your records will be deleted after 4 months. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The data is processed until it is deleted in our legitimate interest to be able to defend ourselves against any legal action concerning the application. We only process the personal data that you provide us with as part of the application process.
Please indicate on your application if you would like us to consider your application for other future vacancies. In this case, we will process your data on the basis of your consent in line with Art. 6 para. 1 lit. a GDPR in conjunction with § 26 para. 2 of the BDSG for 1 year. You can withdraw your consent to future use of your data at any time by contacting the organisation named in the legal notice.
Integration of other third-party technical content and features
In order to display our website, we use the technical features and content of third-party providers listed below.
When you visit our website, content by the third-party provider that provides these features and content is loaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data that is needed for this.
We have no influence over additional data processing by third-party providers. The data is processed on the basis of your consent, provided that you have given your consent via our banner.
Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA). For data transfers to the USA, an adequate level of data protection is ensured by the adequacy decision of the EU-US Data Privacy Framework.
| Provider | Technical feature or content |
Maximum duration (if applicable) |
Adequate level of data protection |
How to withdraw consent |
|---|---|---|---|---|
| Google Fonts | For data transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision of the EU-US Data Privacy Framework. | If you want to withdraw your consent, please click on the Fingerprint Button on the bottom left and choose the relevant settings via our banner. | ||
| Elfsight | Social Wall | Data are deleted as soon as they are no longer required for processing. | No adequate level of data protection. The transfer takes place in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. | If you want to withdraw your consent, please click on the Fingerprint Button on the bottom left and choose the relevant settings via our banner. |
| Podigee | Podcast hosting provider | Data are deleted as soon as they are no longer required for processing. | Primary location where the collected data is processed: European Union. Maximum storage limit for cookies: session |
If you want to withdraw your consent, please click on the Fingerprint Button on the bottom left and choose the relevant settings via our banner. |
Duration of storage
Where we have not already informed you separately about the storage time, we delete personal data when it is no longer required for the aforementioned processing purposes and there are no legitimate interests or other (legal) reasons for storage that prevent deletion.
Your rights as the data subject
When processing your personal data, the GDPR grants you as the data subject certain rights:
Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed.
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the examination by the controller.
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.
Right of withdrawal (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the withdrawal only applies for the future. Processing that took place before the withdrawal is not affected.
Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing to protect the public interest or in the exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process your personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data about you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
Asserting your rights
Unless specified differently above, please contact the organisation named in the legal notice to assert your rights as a data subject.
Contact details of the data protection officer
If you need further information about data protection, please contact our external data protection officer:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: https://www.dsn-group.de/
E-mail: office@datenschutz-nord.de
When contacting our data protection officer, please specify the organisation named in the legal notice.