Privacy Policy | Was uns am Herzen liegt

This is a convenience translation. Only the German version is legally binding.

1. Data protection at a glance

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified.

The most important point first: this website uses no analytics or tracking services (no Google Analytics, no Facebook pixel or similar) and sets no cookies for advertising or analytics purposes. We only process personal data where you provide it to us yourself – for example when ordering tickets, signing up for the newsletter or sending us a message – and to the technically necessary extent that arises whenever any website is accessed (e.g. server log files).

2. Controller

The controller responsible for data processing on this website is:

Was uns am Herzen liegt e. V.
Gartenstr. 1
71717 Beilstein
represented by the board, Chairman: Prof. Dr. Dirk Schieborn

Phone: +49 (0)173 8583938
Email: [email protected]

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

3. Your rights

Within the framework of the applicable statutory provisions, you have the right at any time to:

free-of-charge access to your stored personal data, its origin, recipients and the purpose of the processing (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure of your data, insofar as no statutory retention obligations prevent this (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability: data that we process automatically on the basis of your consent or in performance of a contract can be handed over to you or a third party in a common, machine-readable format (Art. 20 GDPR),
objection to the processing of your data, insofar as it is based on legitimate interests (Art. 21 GDPR).

For this purpose, as well as for any further questions on the subject of data protection, you can contact us at any time at the address given above.

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

4. Hosting and technical provision

Hosting

This website is hosted by an external service provider:

ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

The personal data collected on this website (e.g. server log files, order data from the ticket shop, messages sent via forms) is processed on the host's servers in Germany. The host is used in the interest of a secure, fast and efficient provision of our online offering (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website – for this purpose the server log files must be collected.

Cloudflare

We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare is used as a so-called content delivery network (CDN) and to secure the website (e.g. protection against attacks). All data traffic between your browser and our website passes through Cloudflare's infrastructure; in the process, Cloudflare processes technical connection data such as your IP address.

Cloudflare is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in providing our website as securely and reliably as possible. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer of data to the USA is thereby safeguarded under data protection law. Further information can be found in Cloudflare's privacy policy.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

This website does not set any cookies for analytics, tracking or advertising purposes. Technically necessary cookies may be used in individual cases, for example by Cloudflare to secure the website. Such cookies are stored on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free and secure provision of our services.

5. Data collection on this website

Contact by email and feedback form

If you contact us by email or via the feedback form, your message including the contact details you provide will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. Providing an email address in the feedback form is voluntary.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested. The data remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for the data storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Ticket shop

Via our ticket shop you can order tickets for our concerts. In doing so, we collect the data required to process your order: name, email address, postal address (street, postcode, city), the tickets ordered and the chosen payment method. You will receive an order confirmation by email; in addition, the board of the association is notified internally of incoming orders.

This data is processed for the performance of the contract on the basis of Art. 6(1)(b) GDPR. The data is not passed on to third parties, with the exception of the payment service provider you have chosen (see below). The order data is stored on our host's server in Germany and deleted after expiry of the statutory retention periods (in particular under tax and commercial law, up to ten years).

Payment via PayPal

If you choose payment via PayPal in the ticket shop, the data required for payment processing (in particular name, order amount and order number) is transmitted to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transmission takes place on the basis of Art. 6(1)(b) GDPR (contract performance) and only if you actively choose this payment method. If you choose payment by bank transfer instead, no data is transmitted to PayPal.

Further information can be found in PayPal's privacy policy.

If you wish to subscribe to our newsletter, we require a valid email address from you; providing your first and last name is voluntary. Registration takes place using the so-called double opt-in procedure: after registering, you will receive an email in which you must confirm your registration. Only then will you be added to the mailing list. This ensures that no one can sign you up without your knowledge; for this purpose, your IP address as well as the date and time are also logged during registration.

We use the data collected exclusively for sending our newsletter, with which we provide information about our concerts and association activities at irregular intervals. The data is not passed on to third parties. The processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by using the unsubscribe link in every newsletter or by contacting us informally by email. The lawfulness of the data processing already carried out remains unaffected by the withdrawal. After unsubscribing, your data will be deleted from the newsletter mailing list.

Newsletter dispatch via rapidmail

We use the rapidmail service to manage and send our newsletter. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany. The data you provide for receiving the newsletter is stored on rapidmail's servers in Germany. rapidmail uses this data exclusively on our behalf; we have concluded a data processing agreement with rapidmail in accordance with Art. 28 GDPR.

Further information can be found in rapidmail's privacy policy.

6. Plugins and embedded services

YouTube videos with enhanced privacy mode

On some pages we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use embedding via the domain “youtube-nocookie.com”, the enhanced privacy mode provided by YouTube. According to YouTube, no information about visitors is stored before they play a video.

When you play an embedded video, a connection to YouTube's servers is established. In the process, YouTube learns which of our pages you have visited. If you are logged into your YouTube account at the time, YouTube can assign your browsing behavior to your personal profile; you can prevent this by logging out of your YouTube account beforehand.

YouTube is used in the interest of an appealing presentation of our online offerings (Art. 6(1)(f) GDPR). Further information can be found in Google's privacy policy.

Google Fonts

For the uniform display of fonts, this site uses so-called web fonts provided by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. As a result, Google learns that our website was accessed via your IP address.

Google Fonts is used in the interest of a uniform and appealing presentation of our online offerings (Art. 6(1)(f) GDPR). If your browser does not support web fonts, a standard font from your computer will be used. Further information can be found at https://developers.google.com/fonts/faq and in Google's privacy policy.

Links to social networks

On our website you will find links to our profiles on Instagram, Facebook, YouTube and LinkedIn. These are pure links, not embedded social media plugins: when merely visiting our website, no data is transferred to the operators of these networks. Only when you click on one of the links will you be taken to the respective platform; from then on, its privacy policies apply.

Last updated: July 2026