SEMMEL CONCERTS

PRIVACY POLICY

Welcome to this website of Semmel Concerts Entertainment GmbH. Of course the protection of your personal data as well as fair and transparent data processing is important to us. In the following, we would like to provide you with the information you need to check and exercise your data protection rights.

1. who is responsible for data processing?
The person responsible is:
Semmel Concerts Entertainment GmbH Am Mühlgraben 70 D-95445 Bayreuth E-Mail: info@semmel.de

2. How can I contact the data protection officer?
You can reach our data protection officer at: Semmel Concerts Entertainment GmbH Am Mühlgraben 70 D-95445 Bayreuth
Data protection officer e-mail: datenschutz@semmel.de

3. for what purposes and on what legal basis do we process personal data?
If you surf on our website or otherwise contact us, we will receive personal data from you.

In general, we process data on the basis of the following legal bases:

  • If you give us your express consent (Art. 6 para. 1 a DSGVO), e.g. if you would like us to contact you directly, subscribe to our newsletter or take part in competitions.
  • To fulfil our contractual obligations (Art.6 para.1 b DSGVO), e.g. in the context of tour planning.
  • As a company we are subject to various legal obligations (Art.6 para.1 c DSGVO). For example, we are obliged under tax law and commercial law to keep certain documents.
  • We also process data on the basis of a legitimate interest on the part of ourselves or third parties (Art. 6 para. 1 f DSGVO). This includes data processing for purposes of direct advertising, sales promotion, IT security and fraud prevention, as well as the creation of pseudonymous user profiles for analysis and demand-oriented design of the website (tracking via Google Analytics). You have the right to object to data processing on the basis of a legitimate interest pursuant to Art. 21 (1) DSGVO. This takes place via the so-called "Opt-Out" at Google Analytics, which you can click on with the mouse.  To Opt-Out, cick here.


3.1 Data processing on our website 3.1.1 Contact Semmel Concerts
To ask questions , you can use the contact form, our e-mail address or the telephone. We only process your data in order to contact you in the desired way and to process your enquiry. (Legal basis is Art. 6 para. 1 lit a or b DSGVO).

3.1.2 Participation in lotteries
When you enter a competition, we collect the information necessary to run the competition. These are usually an individual entry (e.g. a comment or a photo), as well as name and contact information. We may pass on your data to our lottery partners, e.g. to send you the prize. Data processing and data transfer may vary depending on the competition and is therefore described in detail in the respective conditions of participation. Participation in the competition and the associated data collection is of course voluntary (legal basis is Art. 6 para. 1 lit. a DSGVO).

3.1.3 Dispatch of our newsletter
You can subscribe to our newsletter to receive information on current offers, artist news, concerts and events. When you register or click on "Customize newsletter", you can choose between different areas of interest (comedy/cabaret/readings/theater/film music, classic/jazz/world music, musicals/shows/dance/artistry, rock/pop, traditional music, folk music, other). Advertising information will only be sent to your e-mail address as part of our newsletter if you have consented to the use of your e-mail address. You can, of course, revoke your consent to the sending of newsletters at any time by clicking on the unsubscribe link in the newsletter, selecting the "Customize newsletter" function on our website or by informing us of your wish to unsubscribe (Mail: info@semmel.de). To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. In addition, we save the time of your confirmation. This enables us to prove your registration and, if necessary, to clarify possible misuse of your personal data by third parties.

3.1.4 Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data is collected or is only collected on a voluntary basis. We use newsletter service providers to process the newsletter, which are described below.

Brevo
This website uses Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany.

Data analysis by Brevo
With the help of Brevo, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. In this way, we can determine, among other things, which links have been clicked particularly often.
We can also see whether certain previously defined actions have been carried out after opening/clicking (conversion rate). This allows us, for example, to see whether you have made a purchase after clicking on the newsletter.

Brevo also enables us to divide the newsletter recipients into different categories ("cluster"). The newsletter recipients can be divided by age, gender or place of residence, for example. In this way, the newsletters can be better tailored to the respective target groups.
If you do not want analysis by Brevo, you must unsubscribe from the newsletter. We provide a corresponding link for this in every newsletter message.
For detailed information on the functions of Brevo, please see the following link: https://www.brevo.com/de/newsletter-software/.

Legal basis
The data processing is carried out on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Storage period
The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). Storage in the blacklist is not time-limited. You can object to storage if your interests outweigh our legitimate interest.

For more information, see Brevo's privacy policy at: https://www.brevo.com/de/datenschutz-uebersicht/ and https://www.brevo.com/de/legal/privacypolicy/.


3.1.5 Careers
You can apply to our company electronically, in particular by e-mail at bewerbung@semmel.de We will of course only use your details to process your application and will not pass them on to third parties. Please note that e-mails sent unencrypted are not transmitted with access protection. If you have applied for a specific position and this position has already been filled or if we consider you to be suitable for another position as well , we would like to forward your application within the company. Please let us know if you do not agree to your application being forwarded. Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent for a longer storage of your data or a contract has been concluded. The legal basis is Art. 6 Para. 1 a, b and f DSGVO as well as § 26 BDSG.

3.1.6 YouTube
YouTube videos are integrated into the website in extended data protection mode. When the video is viewed, the following data is transferred to Google as the YouTube operator:

  • the IP address,
  • the specific address of the page called up by us,
  • the transmitted identification of the browser as well as
  • System date and time of the call and
  • Cookies that are already available and can be used to uniquely identify your browser

YouTube only sets cookies and pixel tags to personalize advertising and search results once the video has been played. YouTube does not store any information about website visitors unless they are watching the video. We would like to point out that Google may receive further data about cookies that have already been stored. We have no control over the extent to which these cookies are used by Google. Google Inc. is responsible for this data collection and processing.

3.1.7 Google Maps
The website uses Google Maps API to visually display geographic information. When Google Maps is used, Google also collects, processes and uses data on the use of Maps functions by visitors to the website. For more information about data processing by Google, please refer to the following.
Data protection notices from Google

3.1.8 How are cookies used on this website?

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard disk and associated with the browser you use; they allow certain information to be sent to the location that placed the cookies. Cookies cannot run programs or transmit viruses to your computer. They are designed to make the Internet more user-friendly and effective overall. We also use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit. This website uses persistent cookies, the scope and functionality of which are explained below: These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

Preventing cookies
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.

Consent with Cookiebot
Cookiebot is a consent management platform that enables websites to protect user privacy and comply with the GDPR when it comes to cookies and tracking. "Cookiebot" is an offer from the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Through the "Cookiebot" function, we inform our website visitors about the use of cookies and other technologies on our website and enable them to make a decision about their use.
If the visitor gives his consent to the use of cookies, the following data is automatically logged by the Cookiebot CMP:

The user's IP number in anonymized form (by removing the last 16 bits of IPv4 addresses and the last 96 bits of IPv6 addresses)

  • The date and time of consent
  • The user's browser's user agent
  • The URL through which consent was given
  • An anonymous, random and encrypted key value
  • The user's consent status, which serves as proof of consent
  • The key serves as proof of consent and provides the ability to check the consent status stored in the user's browser.

The key and consent status are stored in the user's browser in the 1st party cookie "CookieConsent" so that the website can automatically read and respect the user's consent on all subsequent page views and future user sessions for up to 12 months.

Further information about Cookiebot can be found at:
https://www.cookiebot.com/de/privacy-policy/


3.1.9 Website Analysis
For the purpose of analysing and optimising our websites, we use various services which are described below. For example, we can analyse how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about from which website a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to make our offers user-friendly and to improve them. The data collected in the process is not used to identify individual users personally. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 para. 1 f DSGVO. We understand the optimization of our website as a legitimate interest, your basic rights and fundamental freedoms do not outweigh our interest, since we inform you in the context of our data protection declaration comprehensively about the data collection and you have the possibility of an opt-out (via link here or browser settings) at any time. In addition, we only use pseudonymous tracking.

Google Analytics This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The website is operated in universal analytics mode. This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyze the activities of a user across all devices. Google Analytics uses cookies, which enable an analysis of the use of the website by you. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 Abs. 3 TMG resp. Art. 6 Abs. 1 f DSGVO. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can find more detailed information on terms of use and data protection under https://marketingplatform.google.com/about/analytics/terms/us or https://policies.google.com/?hl=en you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing this.https://tools.google.com/dlpage/gaoptout?hl=en Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your data across multiple devices, you must opt-out of all systems you use. If you click here, the opt-out cookie will be set: Deactivate Google Analytics

We use reCaptcha v2 on our websites. reCaptcha is a service offered by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and serves to prevent abusive automated entries into web forms and thus to protect the technical systems of the host. It is used by us for this purpose and this is also in our legitimate interest, Art. 6 para. 1 f GDPR.
When you call up one of our websites in which reCaptcha is integrated, a connection to the servers of Google is established. A reCaptcha cookie is set. Your IP address is transmitted to Google.
Furthermore, reCaptcha collects the following data by means of "fingerprinting":

  • used browser plugins
  • the cookies set by Google in the last 6 months
  • Number of mouse clicks and touches you have made on this screen
  • CSS information for the called page
  • Javascript objects
  • the date
  • the browser language

To the extent that personal data is transferred to Google in the USA, this is done under the standard contractual clauses approved by the European Commission.
You may refuse the use of cookies and fingerprinting by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The privacy policy and terms of use of Google can be found here: https://www.google.com/policies/privacy/ and here: https://policies.google.com/terms.

3.2 Data processing at trade fairs
If you provide us with your contact data at the fair, e.g. by giving us your business card, participating in a competition (see 3.1.2.), or registering for our newsletter (see 3.1.3.), we record this data in our CRM system. We use your data to contact you as desired, to establish a business relationship and to send you information material.

4. will my data be transmitted to third parties?
So that Semmel Concerts can process your data in accordance with the purposes described above, it may be necessary for other recipients to be able to view and process your data.

4.1 External service providers (contract processors)
Your data will be passed on to service partners if they are active on our behalf and support Semmel in providing their services. If, for example, you subscribe to our newsletter, we have commissioned a service provider to send you the mailing. A processing of your personal data by commissioned service providers takes place within the scope of order processing according to Art. 28 DSGVO.

4.2 Other service providers, partners and third parties
Semmel may cooperate with other partners if it is necessary to fulfil our service offers or if we are legally obliged to disclose data. This may involve the following partners or third parties:

  • Credit institutions and payment service providers
  • Transport, travel and hotel companies
  • Passing on to public authority or by court order
  • Business partner
  • Suppliers and service providers


4.3 Joint Controllership for Clarifi Media Ltd./ Festyvent
We enable carefully selected cooperation partners to create apps for us. This gives you, for example at festivals, the opportunity to better find your way around events while we learn what interests our event visitors most. We cannot identify individual users of the app. In addition, users of the app can optionally register for our competitions. The provider of the app then transmits the relevant participant data such as the e-mail address.  The cooperation partners operate the app and evaluate its use. They send us summary reports on the use of the App as well as, where required, raw data on the use of the App. This may include which events have been added to the calendar, location details, which functions have been accessed in the app. If necessary, they will transmit the participant data of competition participants to us.  Our respective cooperation partner and we are jointly responsible for the protection of your personal data within the described process (Art. 26 GDPR). Responsible for the user data is initially Clarifi Media Ltd./ Festyvent. The cooperation partner is responsible for the processing of data when using the app. The transmission of participant data in competitions , transmission of summary reports on the use of the App as well as the possibility to view raw data on the use of the App are subject to joint responsibility (Art. 26 GDPR). Beyond this, your personal data will not be passed on to third parties.
The legal basis for the processing is your participation or interest in the events (Art. 6 para. 1 f GDPR) and optionally, if applicable, your participation in the competition (Art. 6 para. 1 a GDPR). Please also see 3.1.2
Within the scope of our joint responsibility under data protection law, we have agreed with our cooperation partners that Clarifi Media Ltd will fulfil the obligations to protect your rights in accordance with the GDPR. Due to the processing of your data within the framework of events, you can assert your rights to information, correction, deletion, restriction of processing, objection, revocation and data transmission against Clarifi Media Ltd.

5. are my data processed outside the EU/EEA and how is data protection ensured?
We attach great importance to processing your data within the EU/EEA. However, it may happen that we use service providers who operate outside the EU/EEA. In these cases, we ensure that an appropriate level of data protection is established prior to the transfer of your personal data. This means that EU standard treaties or an adequacy decision achieve a level of data protection that is comparable to the standards within the EU.

6. How long will my data be kept?
We delete personal data of the data subject as soon as the purpose of the storage no longer applies and statutory retention periods do not prevent deletion. For example, we have established the following deletion routines:

  • Newsletter: We delete your data after you have withdrawn your consent.
  • Applications: We delete your data 6 months after completion of the application procedure.


7. Which rights do I have and how can I assert them?
You have the following rights against us with regard to your personal data:

7.1 General rights
You have the right of access, rectification, cancellation, limitation of processing, opposition to processing and transfer of data. If a processing is based on your consent, you have the right to revoke it to us with effect for the future.

7.2 Rights in data processing according to legitimate interest
Pursuant to Art. 21 (1) DSGVO, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 (1) e DSGVO (data processing in the public interest) or Article 6 (1) f DSGVO (data processing to safeguard a legitimate interest); this also applies to profiling based on this provision.  In the event of your objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

7.3 Rights in direct advertising
If we process your personal data for the purpose of direct advertising, you have the right, pursuant to Art. 21 para. 2 DSGVO, to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.  If you object to the processing for the purpose of direct marketing, we will no longer process your personal data for these purposes.

7.4 Right to complain to a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us.

8. Other
8.1 Changes to the Privacy Policy

This data protection declaration is continuously adapted in the course of the further development of the Internet or our offer.  Changes will be announced on this page in good time.  This page should be called up regularly in order to obtain information on the current status of our data usage regulations.

8.2 Links to other websites
Our websites may contain links to websites of other providers.  We would like to point out that this data protection declaration applies exclusively to Semmel's websites.  We have no influence on it and do not check that other providers comply with the applicable data protection regulations.