Privacy

We process personal data that you give us (a tour request, a casting application, a saved stage, an email) and what the server needs to deliver the pages to you.

If you switch the language, the technically necessary cookie “PARAGLIDE_LOCALE” stores your choice (de or en) for 400 days (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR).

The controller for data processing on this website is Culture Hub e.V., Industriestraße 13, 66740 Saarlouis, represented by Sven Köhn (Chair). Email: hallo@culture-hub.de

The website and its database run on our own server at IONOS, in a data centre in the EU; IONOS processes the data on it as our processor on our behalf (Art. 28 GDPR). Database backups are made every night on the same server and kept for 30 days: deleted data can remain in a backup for up to 30 more days. Unexpected errors of the website are reported with technical details to our own error monitoring (GlitchTip) on the same server, to no third party. We delete the reports after 90 days (Art. 6(1)(f) GDPR).

When you open a page or open a confirmation email with images, the server processes your IP address, the address requested, the date and time, and details about your browser and device, to deliver the page and run it securely. We delete these server logs, including errors recorded for troubleshooting, after 14 days. To protect against spam and abuse, for each attempt to use a form or the stage planner the server stores the time and a hash of the IP address (for IPv6 only of the first four blocks), the email address or the stage ID, not the addresses themselves, and deletes these entries after one day. Against duplicate submissions it remembers in memory, for 24 hours, the submission ID, a hash of the details and what the page showed you afterwards. With every tour request, every event request and every casting application we also store your full IP address, so that we can detect and fend off misuse of the forms, and delete it with the request or application. The legal basis in each case is our legitimate interest in running the website securely and without errors (Art. 6(1)(f) GDPR).

We count visits with Umami, which runs on our own server: without cookies, without a personal profile and without storing your IP address. Per day it counts which pages are opened, which page you came from, what type of device you use and from which country (Art. 6(1)(f) GDPR).

For a tour request we process your name, email address, phone number, preferred date and time, and your note if you write one, to arrange a time for the tour with you and to call you if an email does not arrive or something changes at short notice.

Everything except the note is required: without it we cannot arrange a time with you.

When you send your request, we store it in a database on our server and send the team an email with your details. We only send you a confirmation email if you tick the box for it in the form. With this tick the team can also send you emails about the status of your request or casting application (date, acceptance, rejection) and resend emails; without it, the team writes to you from its own mailbox. We send these emails through Brevo (Brevo GmbH, Berlin, Germany) as our processor on our behalf (Art. 28 GDPR). We store the text of a status email and the sending state of every email with your request and delete them with it. For the daily limit the server counts sent emails without address or content and deletes this count after 30 days.

Anyone who has the personal link you get after sending can read your details but not change them; it works until we delete the request.

Brevo records whether and when the confirmation email is opened and which links in it are clicked, and sees your IP address, the time and details about your email program. By ticking the box for the confirmation email you consent to this measurement (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by emailing hallo@culture-hub.de; withdrawal does not affect the lawfulness of the measurement carried out before it. Brevo’s terms set no fixed period for the measurement data: Brevo deletes or anonymises it after our contract with Brevo ends.

If you write to us directly at hallo@culture-hub.de, we use your message and your contact details to answer you: for tour and rental enquiries under Art. 6(1)(b) GDPR, otherwise on the basis of our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

On our side, only the team sees your details: in our mailbox and in a password-protected internal area of the website. Our mailboxes are at United Domains (united-domains GmbH, Starnberg, Germany), as our processor on our behalf (Art. 28 GDPR). The legal basis for the tour request is Art. 6(1)(b) GDPR. We delete emails and contact details as soon as we no longer need them for your request, and the tour request in the database by hand, 6 months after it reached us at the latest, unless statutory retention duties require longer, for example if you then rent from us.

For your casting application we process the details from the form, to run the casting: to select the cast, send you your casting time and give you feedback. Required are your name, age, email address, whether you sing, dance or both, a headshot, your text about yourself, whether the rehearsal time works for you and, if you sing, your voice type, music genres and two songs with titles; everything else is optional. We need the required details to process your application; without them you cannot send the form.

The server removes metadata such as where a photo was taken from your photos and sends the team a short notice through Brevo to our casting mailbox (name, role, voice type or dance style, a link to our internal area); files are not sent by email. It also stores your answers in a database on our server, so you can reread them through a link. We store your uploaded files there too: photos, playbacks (MP3 or MP4) and own references (video, audio, image or PDF). The page shows you the link right after you send; anyone who has it can read your application. With the tick for the confirmation email we also send you the link by email through Brevo; for sending, measurement and mailboxes, what is said under “Tour request and email” applies. Only our team can see all applications, in a password-protected internal area. To have your application deleted sooner, write to casting@culture-hub.de.

Without the tick we keep your application for at most 6 months and normally delete it after the casting. We delete the copy on our server, with all its files, by hand, 6 months after it reached us at the latest. The legal basis is Art. 6(1)(b) GDPR. With the tick for future productions we may also contact you about them and, for that, keep your whole application, with all your details and files, until you withdraw your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future by emailing casting@culture-hub.de; we then delete your application by hand within one month. Withdrawal does not affect the lawfulness of processing carried out before it.

For an event request, we process the details you give in the form on our events page to plan a programme with you, make you an offer and reach you about it. Required are who is asking, the occasion, the place, the questions about the audience and the programme, your name and your email address; everything else is optional.

When you send your request, we store it in a database on our server and send the team an email with your details via Brevo. For the confirmation email, emails about the state of your request, their measurement and our mailboxes, what is said above about the tour request applies. Only our team sees your details. The legal basis is Art. 6(1)(b) GDPR. We delete the request in the database by hand, 6 months after receipt at the latest, unless legal retention duties require more, for example if we then perform for you.

You draw in the stage planner without an account. We ask for no email address and send no emails. When you save a stage, we process the title, the venue, the drawing with all its scenes and its history, IDs, the secret key from your edit link, times and whether you asked for deletion. Anyone with the view link sees the title, venue and drawing; only someone with the edit link can change it.

A stage stays saved until you delete it; we then delete it by hand, with its whole history. The legal basis is Art. 6(1)(b) GDPR.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). To use them, write to hallo@culture-hub.de.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken.

You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To do so, write to hallo@culture-hub.de.