Privacy policy

The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is the Frankfurt University of Music and Performing Arts (HfMDK), legally represented by its President Prof. Elmar Fulda.

University of Music and Performing Arts Frankfurt am Main
Eschersheimer Landstraße 29-39
D 60322 Frankfurt am Main
T. +49.69.154.007-0
F. +49.69.154.007-108

The Hochschule für Musik und Darstellende Kunst Frankfurt am Main is a university of the State of Hesse and is both a public corporation and a state institution.

You can contact our data protection officer at datenschutz@orga.hfmdk-frankfurt.de and exercise the following rights:

• Information about your data stored by us and its processing,
• Correction of incorrect personal data,
• Deletion of your data stored by us,
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations,
• Objection to the processing of your data by us and
• Data portability if you have consented to data processing or have concluded a contract with us.

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your place of residence, your work or the alleged infringement. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Nature and purpose of processing

When you access our website, i.e. if you do not fill out a contact form or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed for the following purposes in particular:

• Ensuring a smooth connection setup of the website,
• Ensuring the smooth use of our website,
• Evaluating system security and stability and
• to optimize our website.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in anonymized form in order to optimize our website and the technology behind it.

Legal basis and legitimate interest

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized so that it is no longer possible to identify the accessing client.

Provision prescribed or required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Storage duration and cookies used

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Nature and purpose of processing

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We require cookies for the following applications:

• Adoption of language settings
• Remembering search terms

Legal basis and legitimate interest

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Provision prescribed or required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection

Please read the information on your right to object under Art. 21 GDPR below.

Type and purpose of processing

The data you enter will be stored for the purpose of individual communication with you. This requires at least a valid e-mail address. This is used to assign the request and subsequently answer it. Depending on the form, further personal data may be required, such as your first name and surname.

Below you will find a list of the forms on our website with the required and optional personal data:

Legal basis

The data entered in the contact forms is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the forms, we want to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients

Recipients of the data may be processors.

Storage period

The personal data will only be collected, processed and stored by the HfMDK until the process has been completed.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required

The provision of your personal data is voluntary. However, we can only process your request via a contact form if you provide us with the necessary data (at least a valid e-mail address, depending on the form, further data may be required).

On our website, users are given the opportunity to subscribe to a newsletter. The kulturkurier.de system from data kulturlink ag (Berlin) is used as the newsletter system.

Double opt-in

The so-called "double opt-in" procedure is used for a legally secure and data protection-compliant design. The potential recipient first receives an e-mail with a confirmation link. Only after confirmation is the address added to the mailing list. You can revoke your consent to the storage of your data and the use of your address for sending the newsletter by clicking on the "Unsubscribe link" at the end of each newsletter. You can find further information here: https://kulturkurier.info/kulturnewsletter/

Which personal data is transmitted to the data controller when you subscribe to the newsletter can be seen from the input mask used for this purpose. When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration.
The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject's e-mail address at a later date and therefore serves as legal protection for the controller.

Type and purpose of processing

The personal data collected when subscribing to the newsletter is used exclusively to send our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties.

To track opening and click rates, we use so-called tracking codes in the newsletter to record the opening of the newsletter and the calling up of web links. The data is recorded in pseudonymized storage by replacing all personal data (e.g. the email address) with a code number (pseudonym). This means that we do not store any personal data together with usage data such as opening the newsletter or accessing web links. It also ensures that this data cannot be merged at a later date. If you as a recipient wish to object to this pseudonymized tracking, you can unsubscribe from the list via the opt-out link at the end of each newsletter.

Legal basis

On the basis of your expressly granted consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.

Recipients

Recipients of the data may be processors.

Storage period

The data will only be processed in this context for as long as the corresponding consent is available. It will then be deleted.

Provision prescribed or required

The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.

Revocation of consent

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can unsubscribe via the link contained in every e-mail or by contacting the data protection officer or the person responsible for data protection listed below.

Scope of data processing

When individual pages of our website are accessed, the following data is stored:

• 3 bytes of the IP address of the user's accessing system
• the website accessed
• the website from which the user came to the website accessed (referrer)
• the subpages that are accessed from the accessed website
• the time spent on the website
• the frequency with which the website is accessed

The software runs exclusively on the servers of our website. This data is only stored there. The data is not passed on to third parties. The software is set so that the IP addresses are not stored in full, but the last byte of the IP address is masked (e.g.: 192.168.134.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

Purpose of data processing

The processing of this personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

Legal basis

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f GDPR.

Possibility of objection and removal

We offer users the option of opting out of the analysis process on our website. In this way, a cookie is set on your system that signals our system not to store the user's data. If you delete the corresponding cookie from your own system in the meantime, you must set the opt-out cookie again.

You can find more information on the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.

Check and edit settings

You can check your settings and opt out here: matomo.e-fork.net

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

We embed the videos in extended data protection mode. This means that only when you start a YouTube video on our website does the provider use cookies to collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy(https://policies.google.com/privacy).

Revocation of consent

The provider does not currently offer the option of simply opting out or blocking data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

The Frankfurt University of Music and Performing Arts uses its social media presence on Facebook, Instagram, LinkedIn, Twitter and YouTube exclusively as part of its public relations work. It is not necessary to use our social media channels to contact us or to receive our information. Information that we publish via our social media sites can also be accessed in the same or similar form via the HfMDK website. You can also contact us personally at any time using the contact details provided on our website.

The central social media presence of the HfMDK and the decentralized pages of individual institutions of the university are also visible to everyone without registration, but a personal profile is always required for interactions. We would like to point out that you use the social media services offered and their functionalities on your own responsibility. This applies in particular to the use of interactive functions, such as sharing or commenting. Please refer to the privacy policies of the respective social media providers (see below) for information on the purpose and scope of data collection and the further processing and use of your data as well as your rights in this regard.

The data collected about you when you use social media services is processed by the provider and may be transferred to countries outside the European Union. The HfMDK Frankfurt has no influence on the type and scope of the data processed by the provider, the type of processing and use or the transfer of this data to third parties, in particular to countries outside the European Union.

Facebook

Information on what data is processed by Facebook and for what purposes can be found in the service's privacy policy: https://www.facebook.com/privacy/explanation

Instagram

Information on what data is processed by Instagram and for what purposes can be found in the service's privacy policy: https: //help.instagram.com/519522125107875?helpref=page_content

Twitter

Information on what data is processed by Twitter and for what purposes can be found in the service's privacy policy: https://www.twitter.com/de/privacy

LinkedIn

Information on what data is processed by LinkedIn and for what purposes can be found in the service's privacy policy: https://de.linkedin.com/legal/privacy-policy?

YouTube

Information on what data is processed by YouTube and for what purposes can be found in the service's privacy policy: https://policies.google.com/privacy?hl=de&gl=de

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information about your right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Recipients of an objection

Data protection officer

If you have any questions about data protection, please contact the person responsible for data protection at the HfMDK Frankfurt directly.

Data Protection Officer: Felix Leidinger
Deputy Data Protection Officer: Bernhard Siebert

Contact: datenschutz@orga.hfmdk-frankfurt.de

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

The privacy policy was created with the help of activeMind AG, the experts for external data protection officers.