Controller of the website

The controller of this website within the meaning of the EU General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:
Genossenschaft Deutscher Bühnen-Angehöriger (hereinafter “GDBA”) 
Heinrichstraße 23-25
22769 Hamburg
Germany
Telephone: +49 (0) 40 4328244-0
Email: office@gdba.de

Name and address of the data protection officer

The data protection officer of the controller is:
Deutsche Datenschutz Consult GmbH

Stresemannstraße 29

22769 Hamburg
Germany
Telephone: +49 40 228 60 70 0

Email: datenschutz@gdba.de

Server statistics

When you visit our website, the GDBA collects the following data transmissed by your browser:

• Name and URL of the website/file accessed

• Date and time of access

• IP address and the requesting provider

• Browser type and version and the user’s operating system

• Website from which access is made (referrer URL)

Integration of third-party services and content

Third-party content, such as videos from YouTube, is integrated into this website. This always presupposes that the providers of this content (hereinafter referred to as ‘third-party providers’) recognise the IP address of the user. Without the IP address, they would not be able to send the content to the respective user’s browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. Insofar as we are aware of this, we will inform users of this beforehand.

If you have a YouTube account and are logged in, you are enabling YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube to provide a more attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1(f) GDPR.

YouTube is a site operated by Google. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Further information on the handling of user data can be found in YouTube’s privacy policy.

The legal basis for the temporary storage of data is Art. 6 para. 1(f) GDPR.

The temporary storage of the data collected by the system is necessary to enable the website to be delivered to the user’s computer. This also constitutes GDBA’s legitimate interest in the process.

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the collection of data for the provision of the website, this is the case when the respective session has ended. Data is not stored in log files.

Your rights

Right to object

If we process your personal data on the basis of our legitimate interests (Art. 6 para. 1(f) GDPR), you have the right to object to this processing. If we process your personal data for direct marketing purposes, the objection can be made without giving reasons (Art. 21 para. 2 GDPR). In this case, we will cease processing immediately. Otherwise, the reasons arising from your particular situation must be explained (Art. 21 para. 1 GDPR) so that we can reassess the balance of interests under Art. 6 para. 1(f) GDPR accordingly.

Right to information

You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing, in accordance with applicable law, which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

Right to rectification

You have the right to have your data stored by us corrected if it is incorrect.

Right to restriction of processing

Furthermore, you can have the processing of your data restricted under the conditions of Art. 18 para. 1 GDPR (for example, if the accuracy is disputed or the processing is unlawful). We may then only process data affected by this under the conditions of Art. 18 para. 2 GDPR (for example, with your consent or for the exercise of or defence against legal claims).

Right to erasure

You can also request the erasure of your personal data under the conditions of Art. 17 para. 1(a-f) GDPR (for example, if we no longer need the personal data or the processing is unlawful), unless the exceptions of Art. 17 para. 3(a-e) GDPR apply (for example, where we are legally obliged to process the data).

Right to data portability

You are entitled to request that we provide you with your personal data transmitted to us in a format that allows it to be transmitted to another organisation.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority of your choice if you are of the opinion that the processing of your personal data by us is unlawful.

Note on data security

We use the SSL (Secure Sockets Layer) method on our website in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the display of a closed key or padlock symbol next to the URL or in the bottom status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, complete or partial loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

No automated decision-making

We would like to point out that in the context of using our services, you will not be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.