Data Protection

Disclaimer

1. Content of the online offer
The author assumes no liability for the currentness, correctness, completeness or quality of the information provided. Liability claims against the author relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are excluded in principle, unless the author can be proven to have acted with intent or gross negligence fault exists.
All offers are non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to temporarily or permanently discontinue publication.

2. References and Links
In the case of direct or indirect references to external websites ("hyperlinks"), which are outside the author's area of ​​responsibility, liability would only come into effect if the author was aware of the content and it was technically possible and reasonable for him to do so to prevent the use of illegal content.
The author hereby expressly declares that no illegal content was discernible on the linked pages at the time the link was created. The author has no influence whatsoever on the current and future design, the content or the authorship of the linked/connected pages. He therefore hereby expressly distances himself from all content on all linked / connected pages that were changed after the link was created. This statement applies to all links and references set within our own website. The provider of the page to which reference is made is solely liable for illegal, incorrect or incomplete content and in particular for damage resulting from the use or non-use of such information, not the person who merely refers to the respective publication via links.

3. Copyright and trademark law
The author endeavors to observe the copyrights of the images, graphics, sound documents, video sequences and texts used in all publications, to use images, graphics, sound documents, video sequences and texts he has created himself or to use license-free graphics, sound documents, video sequences and texts .
All brands and trademarks mentioned within the website and possibly protected by third parties are subject without restriction to the provisions of the applicable trademark law and the property rights of the respective registered owner. The conclusion that trademarks are not protected by the rights of third parties should not be drawn solely on the basis of the mere mention!
The copyright for published objects created by the author himself remains solely with the author of the pages. Reproduction or use of such graphics, sound documents, video sequences and texts in other electronic or printed publications is not permitted without the express consent of the author.

4. Privacy
If the opportunity for the input of personal or business data (email addresses, name, addresses) is given, the input of this data takes place on the part of the user on an expressly voluntary basis. The use and payment of all services offered is - as far as technically possible and reasonable - permitted without providing  such data or by providing anonymous data or a pseudonym. The use of the contact data published in the imprint or comparable information such as postal addresses, telephone and fax numbers and email addresses by third parties to send information that has not been expressly requested is not permitted. We expressly reserve the right to take legal action against the senders of so-called spam mails who violate this prohibition.

5. Validity of this disclaimer
If parts or individual formulations of this text do not, no longer or not completely correspond to the applicable legal situation, the remaining parts of the document remain unaffected in their content and validity.


Data protection declaration according to the General Data Protection Regulation (GDPR) for participation in the "Musikferien am Starnberger See" event

In the following, the event "Musikferien am Starnberger See" is referred to as "Musikferien".

I. Privacy
The processing of personal data is necessary for the planning and implementation of the Musikferien. This is based on the provisions of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-new) and, if necessary, other relevant legal provisions. The terms used here result in particular from the definitions in Art. 4 GDPR. The organizers of the Musikferien observe the principles of Art. 5 et seq. GDPR.

II. Definitions
The definitions used in our data protection declaration correspond to those of Art. 4 GDPR. "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified; "Processing" is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, use, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction; "Restriction of processing" means the marking of stored personal data with the aim of restricting their future processing; "Pseudonymization" is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data is not attributed to an identified or identifiable natural person; "Responsible" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data; if the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States; "Processor" is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible; "Recipient" is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients; the processing of this data by said authorities is carried out in accordance with the applicable data protection regulations, according to the purposes of the processing; “Third Party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data; "Consent" of the data subject is any voluntarily given, informed and unequivocal expression of will in the form of a declaration or other clear confirmatory action with which the data subject indicates that it agrees on the processing of its personal data.
 
III. Categories of data
The following data is processed:
1. Personal master data: first and last name, gender, date of birth
2. Address and contact information: telephone, mobile phone, fax number, e-mail address, street address, house number, zip code, city, state, nationality
3. Instrument/ensemble data: instrument/ensemble type
4. Data on pieces of music that the participant intends to study during the Musikferien and/or perform in concert
5. Programs of opening concert, evening concert and closing concert, listing the names of the participants and the pieces performed
6. Image and sound recordings and documents transmitted in the course of the registration or links to their storage location.
7. Image, film and sound data: e.g. photographs, spoken and played original sounds
8. Data on instructors, répétiteurs, orchestra conductors, event staff, sponsors: the data listed in 1. and 2

IV. Responsible
According to Art. 4 No. 7 GDPR, those responsible for the Musikferien are the patron, the artistic management, the organizational management and the instructors.

V. The "Path of Data"
The data mentioned under III are required for the implementation of the Musikferien. The purpose of the data collection and processing is the realization of the event and its goals described on the website of the annual Musikferien http://www.musikferien-am-starnberger-see.de. This includes the planning and implementation of the Musikferien as well as public relations work as well as the documentation and evaluation of the Musikferien for the design of the subsequent Musikferien. The legal basis for the collection and processing of personal data is Art. 6 Para. 1 lit b) GDPR (necessity of data processing for the fulfillment of a contract) and Art. 6 Para. 1 lit f) GDPR (preservation of the legitimate interests of the person responsible in weighing against the interests, fundamental rights and fundamental freedoms of the persons concerned). The legitimate interest in the collection and processing of personal data lies in the implementation of a transparent event open to the public and in the realization of the courses and accompanying offers offered during the Musikferien. If data is also collected that is not required for the implementation of the Musikferien, separate consent will be given. The legal basis for this is Art. 6 Para. 1 a) GDPR. Due to the multi-level structure of the event, it is necessary for the data to be exchanged between those responsible as required. In addition, the data collected as part of the Musikferien can be transmitted to official partners. This includes sponsors in particular.

1. Registration for the Musikferien
The data is collected by filling out an online form to register for the Musikferien. The complete specification of the participant data also includes the specification of a valid e-mail address, via which the communication between the applicant/participant and the Musikferien management takes place. The data of categories 1 to 7 mentioned in III are recorded. After receipt of the written application made via this input mask and the manual comparison of the data, this data is transferred to the software for organizing the Musikferien. The data of all persons who register for the Musikferien remain with the management of the Musikferien. The Musikferien Management maintains an email list of past participants and those who have expressed interest in the Musikferien.

2. Implementation of the Musikferien
In addition to the data already collected when registering for the Musikferien, the data specified under Item III 8. will also be collected in order to carry out the Musikferien.

3. Purpose of data processing
Those data mentioned in categories III. 1st-8th is required to:
• manage the registrations,
• plan and carry out the event,
• issue invoices
• create concert programs
• send the participants information relevant to the event by circular letter,
• create certificates.
The legal basis for this is Art. 6 Para. I lit b) GDPR. Data mentioned in category III. 1;3-8 is required to report on the event in print media, radio and TV as well as online media. This serves to maintain the public and transparent character of the Musikferien. The legal basis for this is Art. 6 Para. 1 f) GDPR and, if applicable, consent under image law.

VI. deletion
The personal data collected as part of the participation in the "Musikferien am Starnberger See" will be deleted as soon as their storage for the purposes under Section VI. 3. is no longer required for the purposes mentioned and there are no longer any statutory retention periods. For the purpose of registration administration and the planning and implementation of the Musikferien, the data set out in Section III. The data mentioned is kept in full up to and including the age of 28. For archive, press and statistical purposes, the following data will also be kept after the age of 28: • first and last name, gender, year of birth • postal code, place of residence, federal state, nationality • data on the instrument/ensemble: type of instrument/ensemble • data referring to the instructor • Image, film and sound data: Photographs, spoken and played original sounds The aforementioned data will not be deleted. The legal basis for this is Art. 6 Para. 1 b) and f) GDPR. The other personal data collected as part of the Musikferien will be deleted after 9 years at the latest, depending on the possibility of participation.

VII. Rights of data subjects
If you are the data subject within the meaning of Article 4 No. 1 GDPR, you are entitled to the following rights with regard to the processing of your personal data in accordance with the GDPR.

1. Right to confirmation and information
Under the conditions of Art. 15 GDPR, you have the right to request confirmation as to whether personal data relating to you is being processed and to request free information from the person responsible for processing about the personal data stored about you and to receive a copy of this information at any time. 
2. Right to Rectification
Under the conditions of Art. 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary statement.

3. Right to Erasure
Under the conditions of Art. 17 GDPR, you have the right to demand that the personal data concerning you be deleted immediately if one of the reasons stated in Art. 17 GDPR applies and if the processing is not necessary.

4. Right to restriction of processing
Under the conditions of Art. 18 GDPR, you have the right to demand that we restrict the processing.

5. Right to data portability
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another person responsible without hindrance to transmit to us, provided that the other requirements of Art. 20 GDPR are met.

6. Right to Withdraw Consent
You have the right to revoke your consent to the processing of personal data at any time with effect for the future. Please send the revocation to the contact details given above.

7. Automated individual decision-making including profiling
You have the right not to be subject solely to automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

8. Right to Object
Under the conditions of Art. 21 GDPR, you have the right to object at any time to the processing of your personal data. If the prerequisites for an effective objection are met, processing by us may no longer take place. The above general right of objection applies to all processing purposes described in this data protection information, which are processed on the basis of Article 6 paragraph 1 letter f) DSGVO. After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of serves legal claims. This does not apply if the processing is for direct marketing purposes. Then we will no longer process your personal data for this purpose. If you have any questions or wish to exercise the rights mentioned, please contact the Musikferien management: management@musikferien-am-starnberger-see.de.

9. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the provisions of the GDPR. In particular, this can be the supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. An overview of the German supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_linksnode.html. You have this right without prejudice to any other administrative or judicial remedy. The data protection authority of the federal state of Bavaria is responsible for the Musikferien.

VIII. Changes to this Privacy Policy
We will inform you in good time about any changes to this data protection declaration. We will do this, for example, by sending an email to the email address you have given us. If, in addition, further consent should be required from you for the processing of your data, we will of course obtain this from you before the corresponding changes take effect. Status of the data protection declaration: August 2022