Data and Privacy

1 Contact details of the data controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection provisions is:

Hochschule für Musik und Theater Hamburg

Harvestehuder Weg 12

20148 Hamburg

Tel.: +49 40 428482-200

Fax: +49 40 428482-666

The HfMT Hamburg is a public corporation. It is legally represented by Prof. Elmar Lampson, President of the Hochschule für Musik und Theater Hamburg, Harvestehuder Weg 12, D-20148 Hamburg.

2 Contact details of the data protection officer at the HfMT Hamburg:

datenschutz nord GmbH Konsul-Smidt-Straße 88 28217 Bremen http://www.datenschutz-nord-gruppe.de/ office(@)datenschutz-nord.de

3 Scope of Processing the Personal Data

3.1 Log files

When you visit our website, you transmit data to our web server via your Internet browser. The following data are temporarily recorded in a log file via an active connection that is established for communication purposes between your Internet browser and our web server:

The IP address of the requesting computer The date and time of access The name, URL, and the size of the retrieved file that has been transferred Access status (the requested file was transferred, not found, etc.) Identification data about the used browser and operating system (if transmitted by the requesting web browser) Referring website (if transmitted by the requesting web browser) In individual cases, i.e., in response to reported faults, errors, and security incidents, a manual analysis is performed.

The legal basis for processing this data is Art. 6 sec. 1 subsec. 1 e), sec. 3 GDPR, § 4 HmbDSG, § 3 HmbHG.

3.2 Submission of Papers

In case you submit papers the personal data that is included in your papers will be available on our website.

The legal basis for processing this data is Art. 6 sec. 1 subsec. 1 b) GDPR.

3.3 E-mail contacts

It is also possible to establish contact via the e-mail addresses provided on the _MUTOR website. In this case of public interest, the user’s personal data that are transmitted by e-mail will be stored in the inbox of the recipient. Such data are not forwarded to third parties.

The legal basis for processing this data is Art. 6 sec. 1 subsec. 1 e), sec. 3 GDPR, § 4 HmbDSG, § 3 HmbHG.

3.4 Information about cookies

To optimize our web presence, we use necessary session cookies. These are small text files stored in your computer’s main memory. These cookies are deleted after you close the browser.

The legal basis for processing this data is Art. 6 sec. 1 subsec. 1 e), sec. 3 GDPR, § 4 HmbDSG, § 3 HmbHG.

3.5 Incorporation of third-party services and content

We use content from third parties on our online offering, such as videos from YouTube and maps from Google Maps. This requires that the providers of this content (hereinafter referred to as “third party providers”) are able to see the IP addresses of users as the content cannot be sent to the browser of the respective user without the IP address. Therefore, the IP address is required to display such content. Nevertheless, we have no influence over whether such third-party providers store the IP address, such as for statistical purposes, for example. We will inform the users about any details we have in this respect.

3.5.1 Regarding the usage of YouTube plug-ins

Our website incorporates a plug-in from www.youtube.com, which is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

If you access pages on our website that contain such a plug-in, you will be connected to the YouTube servers and the plug-in will be displayed on the website by communicating with your browser. The plug-in will send back data to the YouTube server about which IP address you used to access our Internet sites. If you are logged in as a member of YouTube/Google, YouTube will associate this information with your respective personal user accounts on these platforms. When you use these plug-ins, such as, for example, by clicking on the video or its play button or by submitting a comment, this information will be associated with your YouTube user account, for example.

You can prevent this information from being transmitted by logging out of your personal Google account before using our websites.

Additional information about how data are collected and used by the platform or plug-ins can be found in the YouTube Data Privacy Policy at the following link: https://policies.google.com/privacy?hl=en-GB

By default, we will embed any YouTube videos according to the extended data protection setting You can also choose upfront whether you want to use the services of YouTube and watch the video: Until you click on the confirmation banner to access the video, no data will be transmitted to YouTube. If you do not want to use this service this can limit the functionality as a result.

The legal basis for processing this data is the informed consent according to Art. 6 sec. 1 subsec. 1 a) GDPR.

3.5.2 Regarding the usage of VIMEO plug-ins

Our website uses features provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo server is established. Here the Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo when you visit our website or do not have a Vimeo account. The information is transmitted to a Vimeo server in the US, where it is stored.

If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on how to handle user data, please refer to the Vimeo Privacy Policy at https://vimeo.com/privacy.

By default, we will embed any Vimeo videos according to the extended data protection setting You can also choose upfront whether you want to use the services of Vimeo and watch the video: Until you click on the confirmation banner to access the video, no data will be transmitted to Vimeo. If you do not want to use this service this can limit the functionality as a result.

The legal basis for processing this data is the informed consent according to Art. 6 sec. 1 subsec. 1 a) GDPR.

3.5.3 Google Maps

This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website. The Google Maps service uses persistent cookies. When visiting the page on our website that uses Google Maps, Google will receive a notification that you have accessed the page. This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you will need to log out before accessing the map feature. Google stores your data as a user profile and utilises it for advertising, market research and/or to provide personalised services on their website. More specifically, such analysis is carried out (even for users who are not logged in) to provide targeted advertising and to provide other social network users with information about your activities on this website. You have the right to object to the creation of these user profiles. This right can be exercised directly with Google.

For more information regarding the purpose and extent to which Google collects, processes and uses data as well as your rights in this regard and the settings available to protect your privacy, please see Google’s privacy policy: https://www.google.de/intl/de/policies/privacy.

You can choose upfront whether you want to use the services of Google Maps: Until you click on the confirmation banner to access the map, no data will be transmitted to Google Maps. If you do not want to use this service, this can limit the functionality of our Internet offers as a result.

The legal basis for processing this data is the informed consent according to Art. 6 sec. 1 subsec. 1 a) GDPR.

4 Deletion of the Personal Data

Your personal data will be deleted after the purpose for which they were collected has been fulfilled, unless you have given your consent to be contacted again. Consent can be revoked with effect for the future. After expiry of deadlines as per tax-related and commercial regulations, these data are deleted unless you have expressly consented to their further use.

5 Rights of the Data Subject

Users of our website have the following rights:

Right to access your personal data that is stored by us (Art. 15 GDPR). Right to request rectification of incorrect or incomplete personal data (Art. 16 GDPR). Right to the erasure of personal data concerning you, unless the processing of such data is required for purposes of exercising the right of freedom of expression and information or of complying with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims (Art. 17 GDPR). Right to the restriction of the processing of personal data (Art. 18 GDPR). Right to object to any processing that is in the public interest or is used for purposes of profiling, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Art. 21 GDPR). Right to revoke your previously given consent to the collection, processing and use of your personal data at any time for future collection, processing and use (Art. 7 (3) GDPR). If you exercise this right, we may no longer perform the data processing that we had been performing on the basis of such consent. Right to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the terms of the GDPR (Art. 77 GDPR).