Privacy Policy

§ 1 Information about the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, IP addresses and user behaviour.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the

Rundfunk-Orchester und -Chöre (gemeinnützige) GmbH Berlin
Charlottenstraße 56
10117 Berlin
Germany
T +49 30 202987 410
F +49 30 202987 419
info@roc-berlin.de

You can contact our data protection officer at Datenschutz@roc-berlin.de or at our postal address with the addition ‘The Data Protection Officer’.

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail (below) about the respective processes. We will also state the specified criteria for the storage period./ We also mention the defined storage period criteria

§ 2 Your rights

(1) You have the following rights towards us with regard to your personal data (concerning you):

  • Right to information
  • Right to rectification or erasure/deletion
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data (by us).

§ 3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Universal Time Coordinated (UTC)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface

(2) In addition to the mentioned data above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(3) Use of cookies

This website uses the following types of cookies, the scope and function of which are explained below:

  • Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
  • Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

§ 4 Other functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contract conclusions or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising in writing using the following contact details: datenschutz@roc-berlin.de

SPECIAL FORMS OF WEBSITE USE

Webshop

(1) For the processing of ticket sales, we use the external service provider

CTS EVENTIM AG & Co. KGaA
Contrescarpe 75 A
28195 Bremen
Germany
E-mail: kundenservice@eventim.de
www.eventim.de

as a processor within the meaning of Art. 28 GDPR. A corresponding order processing contract is in place.

(2) If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. We process the data you provide to fulfil your order. For this purpose, we may pass on your payment details to our bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you emails with technical or organisational information.

(3) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after five years, i.e. your data will only be used to comply with legal obligations.

(4) To prevent unauthorised access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

Webshop

(1) For the processing of ticket sales, we use the external service provider

CTS EVENTIM AG & Co. KGaA
Contrescarpe 75 A
28195 Bremen
Germany
E-mail: kundenservice@eventim.de
www.eventim.de

as a processor within the meaning of Art. 28 GDPR. A corresponding order processing contract is in place.

(2) If you wish to place an order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. We process the data you provide to fulfil your order. For this purpose, we may pass on your payment details to our bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you emails with technical or organisational information.

(3) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after five years, i.e. your data will only be used to comply with legal obligations.

(4) To prevent unauthorised access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to subscribe to our newsletters. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. We store the email addresses, IP addresses and times of registration and, if applicable, confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the respective newsletter. You can declare your cancellation by clicking on the link provided in every newsletter e-mail, by e-mail to datenschutz@roc-berlin.de or by sending a message to the contact details given in the imprint.

(5) We would like to point out that images are downloaded from our web server when the newsletter is opened. The data collected in this process is only used to measure reach (number of newsletters opened). The data is only collected in pseudonymised form and is not linked to your personal data.

Such an evaluation is not possible if you have deactivated the display of images in your e-mail programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned analysis will take place.

Web analysis - use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google Inc (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension ‘_anonymiseIp()’. This means that IP addresses are further processed in abbreviated form so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.

(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Privacy policy and terms of use: https://policies.google.com/privacy?hl=de&gl=ZZ.

(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under ‘Personal data & privacy’, ‘My personal data’.

Web analysis - use of the Meta Conversion API

(1) We have integrated the Facebook Conversion API into our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries based on standard contractual clauses of the European Commission. Facebook Conversion API enables us to record the website visitor's interactions with our website and pass them on to Facebook in order to improve advertising performance on Facebook. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.

(2) The Meta Conversion API can be used to collect hashed IP addresses, cookie data, pseudonymised campaign IDs, hashed email addresses and hashed telephone numbers of users. The collection is limited to users of the web shop.

(3) Our website uses the Meta Conversion API in conjunction with the Meta Conversion API Gateway from Stape OÜ. The gateway removes all personally identifiable information (PII) before the data is sent to Meta.

(4) Information from the third-party providers involved:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy policy: https://www.facebook.com/legal/terms/dataprocessing

Details on standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum

Stape.inc Estonia, Sepapaja tn 6, Tallinn 15551
Privacy policy: https://stape.io/eu-privacy-notice

Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

(2) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

ROC'S internal whistleblowing system

Rundfunk Orchester und Chöre gGmbH Berlin (ROC)'s internal whistleblowing system is provided and managed by Forvis Mazars Rechtsanwaltsgesellschaft mbH as part of its activities as a whistleblowing centre and can be reached at the following address: https://roc.whistleblower.mazars.de/.

The following data is logged:

  • Requested element
  • URL called up
  • Date and time of the request
  • Protocol used
  • Time zone difference to Greenwich Mean Time (GMT)
  • HTTP status code

This information is stored for 7 days. The log does not show which user sent which request. No Personally Identifiable Information (PII) is processed.