Privacy Policy

2. General Information on Data Processing

We take the protection of your personal data seriously. Personal data is processed only where necessary for the operation of this website, for communication with visitors, for processing applications and enquiries, or where you have given your consent.

Personal data means any information relating to an identified or identifiable natural person, such as a name, email address, postal address or IP address.

3. Hosting and Server Log Files

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When this website is accessed, technical access data is processed by the hosting provider in order to provide and secure the website and to generate technical usage statistics. This may include information such as:

• date and time of access
• requested pages and files
• browser type
• referring website
• HTTP status and technical request information

STRATO states that the hostname or IP address of visitors accessing the website is anonymised in the log files for data-protection purposes.

The hosting administration interface makes log files available for a period of up to six weeks. STRATO also provides aggregated website statistics based on access data, such as pageviews, sessions, requested URLs, referrers and browser types.

The processing is carried out for the secure, reliable and technically efficient provision of this website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website and the analysis of technical website usage.

Where STRATO processes personal data on our behalf, this processing is carried out within the framework of data processing on behalf of the controller pursuant to Art. 28 GDPR.

4. Contact by Email or Telephone

If you contact us by email or telephone, we process the information you provide in order to respond to your enquiry and, where necessary, to handle subsequent communication.

Depending on the nature of your enquiry, the legal basis is Art. 6(1)(b) GDPR where the communication concerns contractual or pre-contractual matters, or Art. 6(1)(f) GDPR for other enquiries. Our legitimate interest is the effective handling of communications addressed to the association.

We retain such information only for as long as necessary for the relevant communication and any resulting legal obligations.

5. Membership Application

Our website provides an online form through which you can apply for membership of Kulturverein Windecker Schlosskeller e.V.

In connection with a membership application, we process the information entered into the form, which may include:

• name
• postal address
• date of birth
• telephone number
• email address
• membership and contribution information
• bank/payment information where provided
• declarations and consents submitted with the application

The data is processed for the purpose of reviewing and administering the membership application and, where an application is accepted, managing the membership relationship.

The legal basis is Art. 6(1)(b) GDPR. Where processing is necessary to comply with statutory obligations, Art. 6(1)(c) GDPR also applies.

The data will be retained for as long as required to process the application and, where membership is established, for the duration of the membership and thereafter in accordance with applicable statutory retention obligations.

6. Applications from Bands and Artists

Bands, artists and other performers can contact us using the application form provided on this website.

We process the information submitted through this form, which may include:

• name and contact details
• band or artist name
• musical genre and repertoire
• performance experience
• technical and equipment information
• accommodation requirements
• links to websites, audio, video or social media content
• press information and descriptions
• other information voluntarily provided in the application

This information is used solely for reviewing the application, communicating with the applicant and, where appropriate, preparing or arranging a performance.

The legal basis is Art. 6(1)(b) GDPR insofar as the processing concerns pre-contractual measures and Art. 6(1)(f) GDPR in other cases. Our legitimate interest is the organisation of our cultural programme and communication with interested performers.

Information that is no longer required will be deleted unless statutory retention obligations require continued storage.

7. Google Maps

This website contains a link to Google Maps to help visitors find the Schlosskeller. Google Maps content is not embedded or automatically loaded on this website.

When you click the link to Google Maps, you leave this website and are redirected to a service provided by Google. From that point onward, data may be processed by Google in accordance with Google’s own privacy policy.

Further information about Google’s processing of personal data can be found in Google’s privacy information.

8. Events Calendar

We use a WordPress event calendar to publish information about upcoming and past events at Schlosskeller Windecken.

The calendar is primarily used to display event information. If additional functionality of the calendar processes personal data or stores or accesses information on visitors’ devices, such processing will take place only on the applicable legal basis and, where legally required, after obtaining consent.

9. Cookies and Similar Technologies

This website may use cookies or comparable technologies that are technically necessary for the operation and security of the website.

Technically necessary cookies or comparable technologies may be used without consent where permitted by law.

Technologies that are not technically necessary, particularly those involving third-party services, analytics, advertising or comparable functions, will be used only where the applicable legal requirements have been met and, where required, after obtaining the visitor’s consent.

10. Recipients of Personal Data

Personal data is disclosed to third parties only where this is necessary for providing the website or the services requested by you, where we are legally obliged to do so, or where another lawful basis applies.

Service providers acting on our behalf receive personal data only to the extent necessary to perform their respective services.

11. Retention of Personal Data

Unless a specific retention period is stated elsewhere in this Privacy Policy, personal data is retained only for as long as necessary for the purpose for which it was collected.

Where statutory retention obligations apply, the relevant data may be retained for the duration required by law.

Data will also be retained where this is necessary for the establishment, exercise or defence of legal claims.

12. Your Rights

Under the GDPR, you have rights in relation to your personal data. Subject to the applicable legal requirements, these include the right to:

• obtain information about personal data concerning you (Art. 15 GDPR)
• request rectification of inaccurate data (Art. 16 GDPR)
• request erasure of your data (Art. 17 GDPR)
• request restriction of processing (Art. 18 GDPR)
• receive data in a portable format where the legal requirements are met (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a competent data protection supervisory authority.

13. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or access.

Please note that transmission of information over the internet can never be guaranteed to be completely secure.

14. Changes to this Privacy Policy

We may update this Privacy Policy when changes to the website, the services used on it or applicable legal requirements make this necessary.

The current version of the Privacy Policy is available on this website.