1. Who is responsible for processing personal data?
Responsibility lies with:
Semmel Concerts Entertainment GmbH
Am Mühlgraben 70
2. How can I contact the Data Protection Officer?
You can get in touch with our Data Protection Officer at:
Semmel Concerts Entertainment GmbH
Am Mühlgraben 70
Data Protection Officer
3. For what purpose and on what legal grounds do we process personal data?
If you are visiting our website or otherwise contact us, we receive personal data from you.
We generally process data on the following legal basis:
- If you give us your explicit consent to the processing of your data (Article 6(1) point (a) GDPR), e.g. in case you want us to contact you directly, would like to subscribe to our newsletter or take part in a prize promotion.
- In order to fulfil our contractual obligations (Article 6(1) point (b) GDPR), e.g. in the context of planning a tour.
- As a company we have to comply with various legal obligations (Article 6(1) point (c) GDPR). For example, tax law and trade law require us to retain certain records.
- In addition, we process data for the purposes of the legitimate interests pursued by ourselves or by a third party (Article 6(1) point (f) GDPR). Among these are data processing for the purposes of direct marketing, sales promotion, IT security and combatting fraud, as well as creating pseudonymous user profiles for the analysis and needs-based design of our website (tracking via Google Analytics). You have the right to object to data processing on the legal basis of legitimate interests pursuant to Article 21(1) GDPR. You can do so by means of Google Analytics’ so-called “opt-out”, which you can access by clicking here.
3.1 Data processing on our website
3.1.1 Contacting Semmel Concerts
You can ask us questions or send us messages by means of our contact form, our email address or by phone. We only process your data in order to contact you by the communication channel of your choice and to deal with your request. (Legal basis is Article 6(1) points (a) or (b) GDPR).
3.1.2 Participation in prize promotions
If you participate in a prize promotion, we collect only the data required to carry out the prize promotion. As a rule, these are an individual contribution to the prize promotion (e.g. a statement or a photo), your name and contact data. It may be the case that we transfer your data to our partners in the prize promotion, e.g. to send you your prize. Data processing and transfer may vary depending on the type of prize promotion and will therefore be specifically described in the respective terms and conditions of participation. Participation in a prize promotion and the respective data collection is voluntary (legal basis is Article 6(1) point (a) GDPR).
3.1.3 Sending out our newsletter
You can register for our newsletter in order to receive information on current offers, artists, concerts, exhibitions and events. We will only send you advertising information to your email address in the context of a newsletter subscription if you have given your consent that we may use your email address for that purpose. You can revoke your consent to receiving newsletters at any time by clicking on the unsubscribe link in the newsletter or by informing us of your wish to unsubscribe via email@example.com .
For registrations to our newsletter we are using the so-called “double-opt-in-procedure”. I.e. once you have registered, we are sending an email message to the email address indicated, asking you to confirm that you want to receive our newsletter. We also store the exact time of your confirmation. This serves as proof of your registration and helps us to clarify any potential misuse of your personal data by third parties.
To better understand how our newsletter is being used, we analyse your user behaviour after the newsletter has been sent out. For the purposes of this analysis, the emails sent out contain web beacons, also called tracking pixels or pixel tags. These are one-pixel image files linking to our website and thus enabling us to analyse your user behaviour. Links in our newsletter also contain these web beacons.
The data is collected exclusively in a pseudonymised manner, i.e. the IDs are not connected to your other personal data and cannot be directly related to you as a person.
Such tracking is not possible if you have deactivated the image display in your email software by default. In this case the newsletter is not displayed to you completely and you may not be able to use all its functionalities. If you allow the images to be shown manually, the above-mentioned tracking will occur.
You can send us your job application electronically, preferably by email, to firstname.lastname@example.org. Your information will be used exclusively for the purpose of processing your application and will not be passed on to third parties. Please note that unencrypted email messages are not access protected during transfer.
If you have applied for a particular position, and this position has already been filled, or we think that you might be equally suited or even better qualified for another position, we would like to forward your application within the company. Please let us know if you do not agree with such procedure.
Your personal data will immediately be deleted immediately upon conclusion of the application procedure, or after six months at the latest, unless you have given your explicit consent to a prolonged storage of your data or have entered into a contract. Legal basis is Article 6(1) points (a), (b), and (f) GDPR, as well as article § 26 BDSG [German Federal Law on Data Protection]
On our website, YouTube videos are embedded in the expanded data protection mode. When watching a video, the following data are transferred to Google as the operator of You Tube:
- the IP-address,
- the specific address of the webpage you visited on our website,
- the user agent transmitted by the browser, as well as
- system date and time of your access, and
- cookies that pre-existed on your computer and by which your browser can be clearly identified
YouTube cookies and pixel tags to personalize advertisements and search results are only set once a video is actually played. YouTube does not store any information on the visitors of the website, unless you are watching the video.
We would like to point out that Google may receive further data by means of cookies that have been stored previously. We cannot control to what extent Google may use these data. Google Inc. is responsible for such data collection and processing.
3.1.7 Google Maps
This website uses persistent cookies whose extent and functionality are explained below.
These cookies are automatically deleted after a predetermined period of time which can differ from cookie to cookie. You can delete the cookies at any time in the security settings of your browser.
You can configure your browser settings according to your preferences. E.g. you can refuse to accept cookies by third parties, or cookies in general. We want to point out to you that you may not be able to use all the functionalities of this website in this case.
3.1.9 Website analysis
This website uses Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The use includes the Universal Analytics operating mode, which facilitates the assignment of data, sessions and interactions to a pseudonymised user ID across multiple devices, and thus to get a cross-device analysis of a user’s activities.
You can prevent the storage of the cookies by setting your browser software correspondingly; however, we want to point out to you that you may not be able to use all the functionalities of this website in this case. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing these data by downloading and installing https://tools.google.com/dlpage/gaoptout?hl=en. Opt-out cookies prevent the future collection of your data when visiting this website. In order to prevent data collection by Universal Analytics across multiple devices, you will have to carry out the opt-out on all systems used.
3.2 Data processing on trade fairs
If you give us your contact details during the trade fair, e.g. by giving us your card, or by participating in a prize promotion, or by registering for our newsletter, we will collect these data in our CRM-system. We will use your data in order to contact you as desired, to build up a business relationship or to send you information material.
4. Will my data be transmitted to third parties?
To enable Semmel Concerts to process your data according to the purposes outlined above, it may be necessary that other recipients can access and process your data, too.
4.1 External service providers (processors)
Your data will be passed on to service partners, if these are acting on our behalf and support Semmel in providing their services. E.g. if you subscribe to our newsletter, we have commissioned a service provider to send out the mailings.
Any processing of your personal data by commissioned service providers is done in the context of processing pursuant to Article 28 GDPR.
4.2 Other service providers, partners, and third parties
Semmel may co-operate with further partners, if this is required to comply with our service offer, or if we are obliged by law to disclose data. In this case, partners or third parties may be the following:
- Banks or payment service providers
- Transport, travel or hotel companies
- Disclosure to public institutions or by order of the court
- Business partners
- Suppliers and service providers
5. Will my data be processed outside of the EU / EEA, and how is data protection guaranteed?
We are careful to process your data within the EU / EEA. However, it may happen that we are using service providers acting outside of the EU / EEA. In these cases, we guarantee that an adequate data protection level is achieved before your personal data are transferred. This means that by means of EU standard contracts or an adequacy decision like the EU Privacy Shield a data protection level is achieved which is comparable to the standards applying within the EU.
6. For how long will my data be stored?
We delete personal data of the person concerned as soon as the purpose of data storage ceases to exist and the legal retention periods do not prevent the deletion of the data. We have established the following deletion routines:
- Newsletter: We delete your data as soon as you have revoked your consent.
- Job applications: We delete your data 6 months after your application procedure has been concluded.
7. What rights do I have and how can I assert these rights?
You have the following rights against us with regard to your personal data:
7.1 General rights
You have a right to information, rectification, deletion, restriction of processing, objection against processing and data portability. Insofar as data processing depends on your consent, you have the right to revoke such consent with effect for the future.
7.2 Rights pertaining to data processing for legitimate interest
Pursuant to Article 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) (data processing in the public interest) or (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, including profiling based on those provisions. In case you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is required for the establishment, exercise or defence of legal claims.
7.3 Rights with regard to direct marketing
Where we are processing your personal data for the purposes of direct marketing, you have the right pursuant to Article 21(2) GDPR to object at any time to processing of personal data concerning you for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
7.4 Right to lodge a complaint with a supervisory authority
In addition, you have the right to lodge a complaint with a competent supervisory authority against our processing of your personal data.
8.2 Links to other websites