Privacy

1. Controller

Details of the association’s representatives are available in our legal notice. For privacy enquiries, email info@berliner-schlosskonzerte.de.

2. Website hosting

This website is hosted by Squarespace. Our provider is Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08N12C, Ireland. Visiting the site involves processing technical information such as your IP address, the time of access, the page requested, browser, operating system and, where applicable, the referring page. This supports delivery, stability and security of the website.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing a secure and reliably accessible website. Squarespace uses further technical service providers. See the Squarespace privacy policy and data processing addendum.

3. Cookies and statistics

Essential cookies support technical functions, security and storage of your cookie choices. Where necessary for the service you expressly request, they are used under section 25(2) of the German TDDDG; processing of personal data is based on Article 6(1)(f) GDPR.

Optional Squarespace analytics cookies are restricted until you consent. You can accept, reject or manage your choices in the cookie banner, and change them at any time through “Cookie settings”. The legal bases for cookies requiring consent and associated processing are section 25(1) TDDDG and Article 6(1)(a) GDPR.

Squarespace uses cookies for visitor and session statistics with lifetimes ranging from 30 minutes to two years. See Squarespace’s cookie information for names, purposes and lifetimes. Technical access information may also be processed for operation and security without optional cookies.

4. Contacting us

When you email us, we process your email address, your name where supplied and the information in your message to answer your enquiry. Booking and membership enquiries are processed under Article 6(1)(b) GDPR; general enquiries are processed on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR.

Please send only information needed for your enquiry. We retain messages for as long as needed to handle and document the enquiry. Statutory retention obligations remain unaffected.

5. Concert newsletter

Newsletter subscriptions are processed through Squarespace. Your email address and any first and last names you provide voluntarily are stored. Subscriptions use a confirmation email: your address is recorded as confirmed only after you confirm. Technical information and timestamps may be recorded as evidence of the subscription.

Use of your information for our concert newsletter is based on your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time for the future, using the unsubscribe link in the newsletter or by emailing us. After unsubscribing, your address will no longer be used to send the newsletter. Evidence of consent and withdrawal may be retained for a limited period to protect legal interests.

6. Protecting newsletter subscriptions

Google reCAPTCHA is enabled for newsletter subscriptions. It checks whether entries come from people or automated programmes and helps prevent spam and abuse. Device, browser and interaction information and your IP address are transmitted to Google; reCAPTCHA may set a security cookie.

Processing serves our legitimate interest in protecting the form under Article 6(1)(f) GDPR. Google Ireland Limited is generally responsible for Google’s consumer services in the European Economic Area. See Google’s privacy policy. You can also contact us directly by email.

7. YouTube video

The concert video on our home page loads only when you select “Load and play video”. Before this, no connection to the YouTube player is made at that position. Loading it gives your consent to the transfer of technical information, particularly your IP address and browser information, to YouTube/Google. We use YouTube’s privacy-enhanced mode.

The legal basis is consent under Article 6(1)(a) GDPR and, where access to your device requires consent, section 25(1) TDDDG. If you are signed in to Google, Google may associate the visit with your account. Close or leave the page to end the connection. You can withdraw consent for the future; this does not affect the lawfulness of earlier processing. See Google’s privacy policy.

8. Ticket partners and other websites

Our ticket links lead to external providers, particularly EVENTIM.Light, Classictic and GetYourGuide. Their own privacy information applies to visits and bookings. Links to venues, artists’ websites, Instagram and Facebook also open external services. Booking and payment details are not entered into a ticket shop operated on this website.

Where we receive booking information from a ticket provider to run a concert, we use it to arrange the concert visit under Article 6(1)(b) GDPR and, where applicable, to fulfil legal obligations under Article 6(1)(c) GDPR.

9. Recipients, international processing and retention

Personal data is accessible to the people within the association responsible for the relevant task and to necessary service providers, particularly for the website, communication and newsletter. Processing outside the European Economic Area is possible with Squarespace and Google. Where required, statutory transfer mechanisms under Articles 44 onwards GDPR are used, such as EU standard contractual clauses. Further details are available in the linked providers’ information.

We generally retain information only for as long as needed for its stated purpose. Relevant factors include the time needed to handle an enquiry, the duration of a subscription or contract, statutory retention obligations and the defence or enforcement of legal claims. Information is deleted when its purpose ends and there is no other legal basis for retention. Service providers’ documented retention and deletion procedures also apply to technical data they process.

10. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time for the future. You may object to processing based on legitimate interests for reasons arising from your particular situation, and may object to direct marketing at any time.

Contact info@berliner-schlosskonzerte.de to exercise these rights. You may also complain to a data protection supervisory authority, particularly the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

You can visit the website and contact us without subscribing to the newsletter. This website does not make decisions with legal or similarly significant effects solely by automated means.