Data protection

Data protection

Data protection declaration
This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within the scope of the provision of our services as well as within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our social media profiles (hereinafter jointly referred to as “online offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (DSGVO).

Person responsible

Cornelia Marschall
c/o Anhalt Theatre Dessau

Friedensplatz 1a

06844 Dessau

Types of data processed

– Inventory data (e.g. names, addresses),
– Contact data (e.g. e-mail, telephone numbers),
– content data (e.g. text entries, photographs, videos),
– Usage data (e.g. websites visited, interest in content, access times),
– Meta/communication data (e.g. device information, IP addresses).

Categories of data subjects

Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as “users”).

Purpose of processing

– Inventory data (e.g. names, addresses),
– Contact data (e.g. e-mail, telephone numbers),
– Content data (e.g. text entries, photographs, videos),
– Usage data (e.g. websites visited, interest in content, access times),
– Meta/communication data (e.g. device information, IP addresses).

Terminology used

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually any handling of data.

“pseudonymisation” means the processing of personal data in such a way that personal data can no longer be related to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.

“Profiling” means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location.

Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Relevant legal basis

In accordance with Art. 13 DSGVO, we inform you of the legal basis for our data processing. For users from the area of application of the General Data Protection Regulation (DSGVO), i.e. the EU and the EEC, the following applies if the legal basis is not stated in the data protection declaration:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO;
The legal basis for processing for the fulfilment of our services and implementation of contractual measures as well as answering enquiries is Art. 6 (1) lit. b DSGVO;
The legal basis for processing for the fulfilment of our legal obligations is Art. 6 para. 1 lit. c DSGVO;
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
The legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6(1)(d) of the GDPR.