Privacy statement

1. Data privacy at a glance

General remarks

The following provides a simple overview of what happens to your personal data when you visit our website. Personal data is all the data that allows you to be identified personally. For detailed information about data privacy, please refer to our data privacy statement below.

Data collection on our website

Who is responsible for collecting data on this website?
Data on this website is processed by the website owner. Contact details can be found on the Imprint page of this website.

How do we collect your data?
Some of the data is supplied by you, for example, data that you enter in a contact form.

Other data is captured automatically by our IT systems when you visit our website. This is mainly technical data (e.g. your browser, operating system, or the time you clicked on a page). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Some of the data is collected to enable the website to be displayed properly. Other data may be used to analyse your user behaviour.

What are your rights in relation to your data?
You are entitled to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to demand the correction, blockage or deletion of such data. To do so, or if you have further questions about data privacy, you can write to us at the address on the Imprint page. You are furthermore entitled to make a complaint to the competent authorities.

Analysis tools and tools of third-party operators
When you visit our website, your surfing habits may be statistically assessed. This is done first and foremost with the aid of cookies and so-called analysis programmes. Analysis of your surfing habits is usually anonymous: they cannot be traced back to you. You can oppose this analysis or prevent it by not using certain tools. You will find more detailed information on this in the data privacy statement below.

You can oppose this analysis. We explain how in the data privacy statement below.

2. General remarks and required information

Data privacy
The operator of these webpages takes protection of your personal data very seriously. We treat your personal data confidentially and in compliance with data privacy legislation and the data privacy statement below.

When you use this website, various items of personal data are collected. Personal data is data that allows you to be identified personally. The data privacy statement below explains what data we collect and what we use it for. It also explains how and for what purpose we do this.

We draw your attention to the fact that data transmission via the Internet (e.g. when communicating by email) can be subject to security flaws. It is not possible to guarantee complete protection of data from access by third parties.

Contact details of the data controller of this website
The data controller for this website is:

Stiftung Händel-Haus Halle
Große Nikolaistraße 5
06108 Halle (Saale)

Phone  +49(0) 345 500 900
Fax  +49(0) 345 500 90 416
Email: stiftung@haendelhaus.de

The data controller is the natural or legal entity who, alone or with others, decides on how and for what purpose personal data (e.g. names, email addresses, etc.) is to be used.

External data protection officer:

GfI Gesellschaft für Informationssicherheit mbH
Universitätsring 14
06108 Halle (Saale)

Email: edsb@gfi-sicherheit.de

Withdrawal of consent to data processing
Many data processing procedures are only possible with your explicit consent. You are entitled to withdraw given consent at any time. All you have to do is send us informal notification by email. This does not affect the legality of the data processing performed prior to your withdrawal of consent.

Right to make a complaint to the competent authorities
Should your data privacy be breached, you are entitled to make a complaint to the competent authorities. The competent authority for data privacy issues is the data privacy commissioner of the federal state in which our company is registered. Below is a link to the list of data privacy commissioners and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability
You are entitled to receive data that we process automatically, either with your consent or in fulfilment of a contract, in a commonly used, machine-readable format either personally or via a third person. If you request that the data should be transmitted directly to another data controller, this will only be done if it is technically feasible.

SSL or TLS- encryption
This webpage uses SSL or TLS encryption for security reasons and to protect transmitted confidential content, such as orders or queries that you send to us as the site operators. You can recognise that a secure connection has been established when the address line of the browser switches from “http://” to “https://” and the padlock symbol appears.

When SSL or TLS encryption is enabled, data that you are transmitting to us cannot be seen by third parties.

Information, blocking, deletion
Under current legislation, you are entitled, at no charge, to obtain information about the stored personal data concerning you, where it came from, who receives it and for what purpose it is processed, and to request that the data be corrected, blocked or deleted. To do so, or if you have further questions about personal data, write to us at the address on the Imprint page.

3. Data collection on our website

Cookies
Our webpages use what are known as cookies. Cookies do no damage to your computer and contain no viruses. Cookies are used to make our offering more user-friendly, more efficient and more secure. They consist of small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are called “session cookies”. They are deleted automatically after your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognise your browser on your next visit.

You can set your browser to inform you when cookies are stored on your computer so that you can accept them only exceptionally, under specific circumstances or never. You can also enable automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to execute electronic communications processes or provide certain features that you wish to use (e.g. the shopping basket feature) are stored in compliance with Article 6 (1 f) of the General Data Protection Regulation GDPR. The website owner has a valid interest in setting cookies to be able to provide services in optimal conditions without technical glitches. Other cookies that are set (e.g. cookies to analyse your surfing habits) are dealt with separately in this data privacy statement.

Server log files
The provider of these webpages automatically collects and stores information in what are known as server log files, which your browser sends us automatically. These are:

  • Browser type and browser version
  • The operating system you use
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not collated with other data sources.

Data is processed pursuant to Article 6 (1 b) of the GDPR, which allows data to be processed to fulfil a contractual agreement or pre-contractual measures.

Contact form
If you send us requests via a contact form, we will store the details from the request form, including the contact data you supplied, for the purpose of processing your request and in the eventuality of further questions. We do not pass this data on to others without your consent.

This means that the data you entered in the contact form is processed solely on the basis of your consent (Article 6 (1 a) of the GDPR). You are entitled to withdraw this consent at any time. All you have to do is send us informal notification by email. This does not affect the legality of the data processing operations performed prior to your withdrawal of consent.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to it being stored, or the purpose for which it was stored is no longer valid (e.g. when processing of your query is completed). This does not affect binding legal provisions, notably storage limitations.

4. Analytical tools and advertising

Matomo (formerly Piwik)
This website uses the open source web analytics tool Matomo. Matomo uses what are known as cookies. These are text files that are stored on your computer and make it possible to analyse how you use the website. For this purpose, the information generated by a cookie about use of this website is stored on our server. The IP address is anonymised prior to being stored.

Matomo cookies remain on your device until you delete them.

Matomo cookies are stored pursuant to Article 6 (1 f) of the GDPR. The website owner has a valid interest in analysing user behaviour anonymously to be able to optimise both the web offering and the advertising.

The information generated by the cookie about the use of this website will not be passed on to third parties. You can prevent cookies from being stored on your computer by changing the settings of your browser software. However, we remind you that if you do, you may not be able to use all the features of this website.

If you disagree with the storage and use of your data, you can disable storage and use here. In this case, an opt-out cookie is stored in your browser that prevents Matomo from storing usage data. When you delete your cookies, this means that the Matomo opt-out cookie will also be deleted. You will have to reactivate opt-out next time you visit our website.

Matomo settings
Matomo is configured on the server side to respect your browser’s DoNotTrack setting. Also, the last 2 bytes of the IP address will be deleted.

Visitor logs are automatically deleted after 90 days. Archived reports are cleaned and deleted after 6 months.

5. Plugins and tools

YouTube
Our website uses plugins from the Google-operated website YouTube. The operator of that site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages with a YouTube plugin installed, you will be connected to YouTube's servers. In that case, the YouTube server will be informed of which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube to make our online offering more attractive. This is a valid interest as defined in Article 6 (1 f) of the GDPR.

You will find further information about how user data is dealt with in YouTube's data privacy statement at: https://www.google.de/intl/de/policies/privacy.

Vimeo
Our website uses plugins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages with a Vimeo plugin installed, you will be connected to Vimeo's servers. In that case, the Vimeo server will be informed of which of our pages you have visited. Vimeo also receives your IP address. This is the case even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is sent to the Vimeo server in the United States.

If you are logged into your Vimeo account, you allow Vimeo to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

You will find further information about how user data is dealt with in Vimeo's data privacy statement at: https://vimeo.com/privacy