Data Protection

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy, which is listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the legal notice section of this website.

How do we collect your data?

Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is automatically collected by our IT systems when you visit the website. This consists primarily of technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure that the website functions properly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. For this and any other questions regarding data protection, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to file a complaint with the competent supervisory authority.

In addition, you have the right to request that the processing of your personal data be restricted under certain circumstances. For more details, please refer to the Privacy Policy under “Right to Restriction of Processing.”

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be analyzed for statistical purposes. This is primarily done using cookies and so-called analytics tools. The analysis of your browsing behavior is generally anonymous; your browsing behavior cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objecting can be found in the following privacy policy.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated through a website.

We use the hosting provider to fulfill our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and to ensure the secure, fast, and efficient delivery of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

Execution of a Data Processing Agreement

To ensure that data is processed in compliance with data protection regulations, we have entered into a data processing agreement with our hosting provider.

3. General Information and Mandatory Disclosures

Privacy Policy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is information that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Note on the Data Controller

The entity responsible for data processing on this website is:

Kunz Theatre GmbH
Kirchstraße 22
66606 St. Wendel-Bliesen

Phone: +49(0)1805 – 225544
Email: service@kunz-theatre.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. To do so, simply send us an informal email. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Article 21(1) of the GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) of the GDPR).

Right to File a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the location of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will be done only to the extent that it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential information—such as orders or inquiries you send to us as the website operator—this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.

If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Encrypted Payments on This Website

If, after entering into a paid contract, you are required to provide us with your payment information (e.g., account number for direct debit authorization), this information is needed to process the payment.

Payments made using standard payment methods (Visa/MasterCard, direct debit) are processed exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.

With encrypted communication, the payment information you send to us cannot be read by third parties.

Access, Deletion, and Correction

In accordance with applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to have this data corrected or deleted, if applicable. For this and any other questions regarding personal data, you may contact us at any time at the address provided in the legal notice.

Right to Restriction of Processing

You have the right to request that the processing of your personal data be restricted. To do so, you may contact us at any time at the address provided in the legal notice. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification process, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was or is unlawful, you may request that the processing be restricted instead of having the data erased.
If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being erased.
If you have filed an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be conducted. Until it is determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, such data—apart from its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.

4. Data Collection on This Website

Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

Browser Type and Browser Version
Operating system used
Referrer URL
Hostname of the connecting computer
Time of the server request
IP address

This data is not combined with data from other sources.

This data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring that its website functions properly and is optimized—to this end, server log files must be collected.

Contact Form

If you submit inquiries to us via the contact form, we will store the information you provide in the inquiry form—including the contact information you provide there—for the purpose of processing your inquiry and in case we have follow-up questions. We will not share this information without your consent.

This data is processed on the basis of Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent has been requested.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Inquiries by email, phone, or fax

If you contact us by email, phone, or fax, we will store and process your inquiry, including all personal data contained therein (name, inquiry), for the purpose of handling your request. We will not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) of the GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of precontractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in effectively processing the inquiries directed to us.

The data you send us via contact requests will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only to the extent necessary to establish, define the terms of, or modify the legal relationship (master data). This is done in accordance with Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user for it.

The customer data collected will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transmission Upon Contract Conclusion for Online Stores, Retailers, and Merchandise Shipping

We transfer personal data to third parties only when necessary for the fulfillment of the contract, such as to companies responsible for delivering the goods or to the financial institution handling the payment. No further transfer of data takes place, or only if you have expressly consented to such transfer. We do not disclose your data to third parties without your express consent, such as for advertising purposes.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or precontractual measures.

5. Analytics Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there.

The storage of Google Analytics cookies and the use of this analytics tool are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be revoked at any time.

Browser Plugin

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent your data from being collected during future visits to this website:Disable Google Analytics.

For more information on how Google Analytics handles user data, please see Google's Privacy Policy:https://support.google.com/analytics/answer/6004245?hl=de.

Retention period

Data stored by Google at the user and event levels that is linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android Advertising ID) is anonymized or deleted after 14 months. For more details, please visit the following link:https://support.google.com/analytics/answer/7667196?hl=de

Facebook Pixel

This website uses the Facebook Visitor Action Pixel, provided by Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), to measure conversions.

This allows the provider to track the behavior of website visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables the provider to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

The data collected is anonymous to us as the operators of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, which allows it to be linked to the respective user profile and enables Facebook to use the data for its own advertising purposes, in accordance withFacebook’s Data Use Policy. This allows Facebook to display ads on Facebook pages as well as outside of Facebook. As the site operator, we have no control over this use of the data.

The use of Facebook Pixel is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including those on social media. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be revoked at any time.

You can find more information about protecting your privacy in Facebook's Privacy Policy:https://de-de.facebook.com/about/privacy/.

You can also disable the "Custom Audiences" remarketing feature in the Ad Settings section athttps://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can opt out of Facebook's interest-based advertising on the European Interactive Digital Advertising Alliance website:http://www.youronlinechoices.com/de/praferenzmanagement/.

6. Newsletter

Newsletter Information

If you would like to subscribe to the newsletter offered on the website, we need your email address as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No other data is collected, or is collected only on a voluntary basis. We use this data exclusively to send you the requested information and do not share it with third parties.

The processing of the data entered in the newsletter sign-up form is based solely on your consent (Art. 6(1)(a) GDPR). You may revoke your consent to the storage of your data and email address, as well as their use for sending the newsletter, at any time—for example, by clicking the “Unsubscribe” link in the newsletter. The lawfulness of any data processing that has already taken place remains unaffected by this revocation.

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, at which point it will be deleted from the newsletter distribution list. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter mailing list, your email address may be stored on a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage in the blacklist.You may object to this storage if your interests outweigh our legitimate interest.

CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that allows us to organize and analyze newsletter distribution. The data you provide to subscribe to the newsletter (e.g., email address) is stored on CleverReach’s servers in Germany or Ireland.

The newsletters we send via CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients opened the newsletter and how often each link in the newsletter was clicked. Using what’s known as conversion tracking, we can also analyze whether a predefined action (e.g., purchasing a product on this website) took place after a link in the newsletter was clicked. For more information on data analysis through CleverReach newsletters, please visit:https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data processing is based on your consent (Art. 6(1)(a) of the GDPR). You may withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of any data processing that has already taken place remains unaffected by this withdrawal.

If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

For more information, please refer to CleverReach's privacy policy at:https://www.cleverreach.com/de/datenschutz/.

Execution of a Data Processing Agreement

We have entered into a data processing agreement with CleverReach and fully comply with the strict requirements of the German data protection authorities when using CleverReach.

7. Plugins and Tools

YouTube

This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our web pages that includes a YouTube video, a connection is established with YouTube's servers. In the process, the YouTube server is informed which of our pages you have visited.

In addition, YouTube may store various cookies on your device. These cookies allow YouTube to collect information about visitors to this website. This information is used, among other things, to track video statistics, improve the user experience, and prevent fraud. The cookies remain on your device until you delete them.

If you are logged in to your YouTube account, you are allowing YouTube to associate your browsing activity directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube to ensure that our online content is presented in an engaging manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be revoked at any time.

For more information on how user data is handled, please see YouTube's Privacy Policy at:https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the Google Maps mapping service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the features of Google Maps, it is necessary to store your IP address. This information is typically transmitted to a Google server in the United States and stored there. The provider of this site has no control over this data transfer.

We use Google Maps to ensure that our online content is presented in an appealing way and that the locations listed on our website are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

For more information on how user data is handled, please see Google's Privacy Policy:https://policies.google.com/privacy?hl=de.

8. Payment Providers and Resellers

Instant Bank Transfer

On this website, we offer, among other options, payment via “Sofortüberweisung.” This payment service is provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).

Using the “Sofortüberweisung” service, we receive real-time payment confirmation from Sofort GmbH and can immediately begin fulfilling our obligations.

If you have chosen the “Sofortüberweisung” payment method, you will provide Sofort GmbH with your PIN and a valid TAN, which it will use to log in to your online banking account. After logging in, Sofort GmbH automatically checks your account balance and processes the transfer to us using the TAN you provided. They will then immediately send us a transaction confirmation. After logging in, your transaction history, your overdraft limit, and the existence of other accounts and their balances are also automatically checked.

In addition to your PIN and TAN, the payment details you enter, as well as your personal information, are transmitted to Sofort GmbH. Your personal information includes your first and last name, address, phone number(s), email address, IP address, and, if applicable, any other information required for payment processing. The transmission of this data is necessary to verify your identity beyond a doubt and to prevent fraud.

The transfer of your data to Sofort GmbH is based on Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract). You may withdraw your consent to data processing at any time. Withdrawal does not affect the lawfulness of data processing operations that took place in the past.

For details on paying via Sofortüberweisung, please visit the following links:https://www.sofort.de/datenschutz.htmlandhttps://www.klarna.com/sofort/.

9. Our Own Services

Handling of Applicant Data

We offer you the opportunity to apply for a position with us (e.g., by email, mail, or via our online application form). Below, we provide information about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data are carried out in accordance with applicable data protection laws and all other legal requirements, and that your data will be treated with the strictest confidentiality.

Scope and Purpose of Data Collection

If you submit an application to us, we will process your associated personal data (e.g., contact and communication information, application documents, notes taken during job interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Section 26 of the New Federal Data Protection Act (BDSG-neu) under German law (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general pre-contractual measures), and—if you have provided consent—Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. Your personal data will be shared within our company exclusively with those individuals involved in processing your application.

If your application is successful, the data you submitted will be stored in our data processing systems in accordance with Section 26 of the BDSG-neu and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.

Data Retention Period

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you have provided for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6(1)(f) GDPR). After that, the data will be deleted and the physical application documents will be destroyed. This retention serves, in particular, as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.

Data may also be retained for a longer period if you have provided the appropriate consent (Art. 6(1)(a) of the GDPR) or if statutory retention requirements prevent its deletion.