Legal
We are a non-profit association and collect as little data as possible. This page explains what happens when you visit this website, which data is processed and what rights you have.
The controller for data processing on this website is:
Accento Orchester München e.V.
Silberblattstraße 17
81377 München
Email: info@accento-muenchen.de
Represented by the board: Philip Rust, Lukas Nolte and Jasmin Gfader. We are not required to appoint a data protection officer; questions about data protection will be answered at the email address given above.
Each time the site is accessed, your browser transmits technical data to our server, where it is stored in what are known as log files: the address requested, the date and time, the volume of data transferred, the status message, the browser type and version, the operating system, the previously visited page and the IP address.
This processing is technically necessary for the operation of the website and serves its stability and security. The legal basis is our legitimate interest in trouble-free operation (Art. 6(1)(f) GDPR). The log files are not merged with other data and are deleted automatically after a short time. The connection to the website is encrypted throughout via TLS.
The website is hosted by GoDaddy (GoDaddy Operating Company, LLC; contact point for Europe: c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne, Germany). The provider processes the data arising when the site is accessed exclusively on our behalf, on the basis of a data processing agreement pursuant to Art. 28 GDPR. The servers for this site are located in the European Union; where access from the USA cannot be ruled out, the transfer is based on the European Commission’s standard contractual clauses.
Die Auslieferung der Seiten läuft über das Content-Delivery-Netzwerk von Cloudflare, das GoDaddy dabei als Unterauftragnehmer einsetzt. Cloudflare filtert automatisierte Zugriffe heraus und setzt dazu zwei technisch notwendige Cookies (__cf_bm, Laufzeit 30 Minuten, und cf_clearance, Laufzeit bis zu einem Jahr). Ein Nutzungsprofil entsteht dabei nicht.
Ohne deine Einwilligung setzt diese Website nur Cookies, die für den Betrieb technisch erforderlich sind: die Abwehr automatisierter Zugriffe (siehe Abschnitt 3) und die Verwaltung deiner Einwilligung selbst. Dafür nutzen wir die Software Complianz, die auf unserem eigenen Server läuft; dabei werden keine Daten an Dritte übertragen. Gespeichert wird lediglich in deinem Browser, ob und welchen Cookies du zugestimmt hast (Cookies mit dem Namensbeginn cmplz_, Speicherdauer bis zu zwölf Monate). Alles darüber hinaus läuft erst, wenn du im Cookie-Banner zustimmst — derzeit ist das ausschließlich die Reichweitenmessung unseres Hosters, die im nächsten Absatz beschrieben ist.
Reichweitenmessung des Hosters. Stimmst du Statistik-Cookies zu, lädt die Seite ein Skript von GoDaddy („Real User Metrics“), das erfasst, wie schnell die Seite lädt und wie sie genutzt wird. Dabei werden deine IP-Adresse, technische Angaben zu Browser und Gerät sowie die aufgerufenen Seiten an GoDaddy übertragen; gesetzt werden die Cookies _tccl_visitor (ein Jahr), _tccl_visit (30 Minuten) und _scc_session (Sitzung). Ohne deine Zustimmung wird das Skript nicht geladen und keines dieser Cookies gesetzt. Rechtsgrundlage ist deine Einwilligung; widerrufst du sie, endet die Messung für die Zukunft.
Rechtsgrundlage für die technisch notwendigen Cookies ist § 25 Abs. 2 TDDDG in Verbindung mit Art. 6 Abs. 1 lit. f DSGVO, für alle übrigen § 25 Abs. 1 TDDDG in Verbindung mit Art. 6 Abs. 1 lit. a DSGVO. Eine einmal erteilte Einwilligung kannst du jederzeit über den Link im Cookie-Banner widerrufen. Eine Übersicht aller eingesetzten Cookies findest du in der Cookie Policy.
The Manrope typeface used here is stored on our own server and loaded from there. No connection to Google servers is established when the page is opened, and no IP address is transmitted to Google.
Via the form on the page Join us we collect your first and last name, email address, telephone number, instrument and your message. This information is sent to us by email and stored in the website. In addition, we file it outside the website in our internal systems — in the mailboxes of the people responsible and in the association’s records — so that we can deal with your enquiry, invite you to a rehearsal or audition and reach you if we have questions.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without formality, together with our interest in responding to your enquiry (Art. 6(1)(f) GDPR). If you subsequently play with us, we continue to use the information in running the orchestra – in section and mailing lists, in rehearsal planning and, where applicable, in membership administration; the basis is then the membership relationship (Art. 6(1)(b) GDPR). If you do not join us, we delete the information as soon as the enquiry has been dealt with. To protect against automated submissions, the form contains an additional field that is invisible to you and a security token; no additional personal data is collected in the process.
For the newsletter, your email address is enough – plus your first name if you like. We use both exclusively to tell you about concerts, dates and news from the orchestra, two to three times a year. The legal basis is your consent (Art. 6(1)(a) GDPR).
Sign-up uses the double opt-in procedure: you first receive an email with a confirmation link, and only when you click it do we add you to the mailing list. We log the sign-up and the confirmation with a timestamp so that we can demonstrate your consent.
The newsletter is sent and managed via Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, 405 N. Angier Ave. NE, Atlanta, GA 30308, USA. Your sign-up data is transmitted there and remains stored there for as long as you receive the newsletter. Mailchimp processes it exclusively on our instructions; the basis is a data processing agreement (Data Processing Addendum) including the European Commission’s standard contractual clauses, and Mailchimp is additionally certified under the EU-U.S. Data Privacy Framework through its parent company Intuit. As part of the usual delivery statistics, Mailchimp also records whether a message is opened and which links in it are clicked.
You can unsubscribe at any time: via the unsubscribe link in every message, or with a short email to us. We will then delete your address from the mailing list at Mailchimp. We keep the record of your consent for as long as it may be needed to defend against possible claims.
If you write to us, we process your information in order to deal with your enquiry (Art. 6(1)(b) or (f) GDPR). We keep the correspondence for as long as it is needed for follow-up questions and delete it afterwards, unless statutory retention periods apply.
No payment data is collected via the website itself: the bank details on the Support page lead to a transfer made through your own bank. When you donate, we receive your name, the IBAN, the amount and the payment reference from our bank. We process this information for our accounting and for donation receipts; the legal basis is Art. 6(1)(c) GDPR in conjunction with the tax retention periods of usually ten years.
Wir erstellen keine Nutzungsprofile, binden keine Social-Media-Plugins, Kartendienste oder Videoplayer von Drittanbietern ein und schalten keine Werbung. Über die in Abschnitt 4 beschriebene Reichweitenmessung des Hosters hinaus, die nur mit deiner Einwilligung läuft, setzen wir keine Analyse- oder Trackingdienste ein. Es findet keine automatisierte Entscheidungsfindung einschließlich Profiling statt.
Outside the association, only our service providers have access to the data: the hosting provider and, for the newsletter, Mailchimp – both strictly on our instructions as processors. Within the association, access is limited to the people who deal with the enquiry in question or who maintain the mailing list and the running of the orchestra; for this we use our email mailboxes and an internal filing system. For technical reasons, the website temporarily logs the emails it sends so that delivery problems can be identified.
We store personal data only for as long as it is needed for the purpose in question: enquiries until they have been dealt with; newsletter addresses until you unsubscribe; the details of players for as long as you play with us. Records of fiscal or commercial significance – relating to donations, for example – are kept for the statutory periods of usually six to ten years. The data is deleted thereafter.
Data is transferred to countries outside the EU and the EEA only within the scope described above – when the newsletter is sent via Mailchimp and, where access cannot be ruled out, in hosting. In both cases the transfer is based on the European Commission’s standard contractual clauses.
Access (Art. 15 GDPR) – You can find out whether and which data we process about you.
Rectification (Art. 16 GDPR) – We correct inaccurate data and complete incomplete data.
Erasure (Art. 17 GDPR) – We delete data that we no longer need or are no longer permitted to process.
Restriction (Art. 18 GDPR) – Instead of erasure, you can also have the processing restricted.
Data portability (Art. 20 GDPR) – We provide the data you have given us in a common format.
Objection (Art. 21 GDPR) – You can object to processing that is based on a legitimate interest.
Withdrawal (Art. 7(3) GDPR) – You can withdraw consent once given at any time with effect for the future.
An informal email to info@accento-muenchen.de is all it takes.
If you believe that we are not handling your data properly, you can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
If the website changes – because a new form or a new service is added, for example – we will adapt this policy. The version published here applies in each case.
