Privacy Policy

1) Name and Contact Details of the Controller and of the Corporate Data Protection Officer

This data protection information applies to data processing by:

Lübecker Musik- und Kongresshalle GmbH, represented by managing director Ilona Jarabek Willy-Brandt-Allee 10, 23554 Lübeck
tel.: 0049-(0)451-7904 0
fax: 0049-(0)451 7904 100
e-mail: kontakt@muk.de
person responsible: Ilona Jarabek, as before.

The external data protection officer working for us is:
Lawyer Martin Glänzer, Eppendorfer Landstraße 33, 20249 Hamburg
tel.: 0049-(0)40-355 10 70
fax: 0049-(0)40-355 10 711
e-mail: datenschutzbeauftragter@muk.de

2) Collection and Retention of Personal Data as well as Nature and Purpose of Its Use

a) When visiting the website
When you visit our website https://www.muk.de, the browser used on your terminal automatically sends information to the server of our website. This information is temporarily retained in a log file. In this context, the following information is collected without any action on your part and retained until it is erased automatically:

• IP address of the requesting computer;
• access date and time;
• name and URL of the file accessed;
• website from which the access is made (referrer URL);
• browser used and, where appropriate, the operating system of your computer and the name of your access provider.
• We process the aforementioned data for the following purposes: ensuring comfortable use of our website, evaluating system security and stability as well as for further administrative purposes.

The legal bases for data processing are points (a) and (b) of Art. 6(1) GDPR. Our legitimate interest, where necessary, follows from the data collection purposes specified above. As a rule, we do not use the collected data for the purpose of drawing conclusions about your person.

In addition, we use website cookies as well as analysis services when you visit our website. You can find further explanations on this under cl. 4 and 5 of this Privacy Policy.

b) When subscribing to our newsletter
Where you have explicitly consented under point (a) of Art. 6(1) GDPR (double opt-in), we use your e-mail address to send you our newsletter on a regular basis. Entering an e-mail address is sufficient to receive the newsletter.

Unsubscription is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can always e-mail your unsubscription request to kontakt@muk.de as well.

We use our website to dispatch our newsletter.

c) When using our contact form
If you have any kind of questions, we are providing you with the opportunity to contact us using a form provided on the website. In this case, a valid e-mail address must be entered so that we know who is sending the request and can respond to it. Further particulars can be furnished on a voluntary basis.
Data processing for contacting us is based on point (a) of Art. 6(1) GDPR and the consent given voluntarily by you.
The personal data collected by us when you use the contact form will be erased automatically once the request submitted by you has been dealt with.

3) Data Dissemination
We do not transfer your personal data to third parties for any purposes other than the ones specified below.

We disseminate your personal data to third parties only if

• you have consented under point (a) of Art. 6(1) GDPR, irrevocably at any time;
• this is necessary under point (b) of Art. 6(1) GDPR for the performance of contractual relations and/or in order to take steps prior to entering into a contract and there is no reason to believe that you have any overriding interest worth being protected in your data not being disseminated;
• the dissemination under point (c) of Art. 6(1) GDPR is necessary for compliance with a legal obligation;
• this is legally admissible and necessary for the performance of contractual relationships with you under point (b) of Art. 6(1) GDPR.

4) Cookies
When you visit our website, we display a “cookie banner” to let you know that we use cookies and may use any other tracking technology to improve user experience on our website and for the purposes of web analytics and interest-based advertising.

In doing so, we ask for your consent, revocable at any time, for using various types of cookies that are not technically necessary. If you give your consent, data may also be transferred to companies in third states outside the EU without an adequate level of protection under data protection law (including, in particular, to the USA). In this context, it is possible that authorities, among others, may access the data without any legal remedy or legal recourse.

Most of the cookies used by us are so-called ‘session cookies’. These are erased automatically after the end of your visit to our website. Other cookies remain retained on your terminal device until you delete them yourself. These cookies enable us to recognise your browser the next time you visit our website.

Cookies required to perform the electronic communication process or to provide certain features requested by you (e.g. shopping basked feature) are retained based on point (f) of Art. 6(1) GDPR. Our legitimate interest in the retention of such cookies follows from the technically faultless and optimised provision of these services. To the extent that other cookies (e.g. used to analyse your browsing behaviour) are retained, this is addressed separately in our Privacy Policy.

Using the cookie setting(s) in your browser of your end device, you can view and also change the settings there. Most of these browsers are usually set to automatically accept cookies. You can disable the retention of cookies in your browser and also have the option of erasing them from your hard drive. Using our service on our website may be limited without cookies.

Cookie Categories
Depending on function and purpose, we categorise cookies as follows:

Technically required cookies
Essential or technically necessary cookies enable basic functions and are required to ensure the proper functioning of our website.
Functional cookies
These cookies allow us to retain on our website information already provided (e.g. user name and/or language selection) and to improve the user's possibilities to provide personalised features. These cookies collect anonymised information and can track your movements on other websites.
Performance cookies
These cookies collect information about the use of our website (e.g. which of our pages are visited most frequently). These cookies do not retain information allowing to identify a user. The collected information is summarised and anonymised. These cookies are used exclusively to improve the performance of our website and thus its user-friendliness.
Cookies of external media & services
Contents from social media and/or video platforms are blocked by default. If the user accepts cookies from such external media, access to these contents no longer requires any manual consent.

5) Analysis Tools

a) Tracking Tools
The tracking measures set out hereinafter and used by us are implemented on the basis of point (f) of Art. 6(1) GDPR. When using the tracking measures, our interest is to ensure a needs-based design and the ongoing optimisation of our website. Moreover, we apply the tracking measures to statistically capture the use of our Website and to evaluate its use to optimise our service for you. These interests are to be considered legitimate in the sense of the aforementioned regulation.

For information on the respective data processing purposes and data categories, please refer to the relevant tracking tools.

b) Google Analytics
To ensure a needs-based design, advertising, analysis and continuous optimisation of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://about.google/intl/en) (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use cookies, pixels and web beacons, among other things, for this purpose. Pseudonymised usage profiles are created and cookies (see under clause 4.) are used in this context. The information generated by the cookie about your use of this website, including

• browser language,
• browser type,
• clicked ads,
• cookie ID,
• cookie information,
• visiting date and time,
• IP address,
• referrer URL,
• usage data,
• web enquiry,

is transferred to a Google server in Ireland and retained there. The information is used to evaluate the website use, to compile reports abouts the website activities and to render further services related to the use of both the website and the Internet for market research purposes and to ensure a needs-based design of these web pages. To the extent that this is stipulated by law or third parties process this data by order, this information is also transferred to third parties, where appropriate. We do not amalgamate your IP address with any other Google data in any case. The IP addresses are anonymised to ensure they cannot be assigned (IP masking).

You can prevent the installation of the cookies by changing the settings of the browser software accordingly; however, we would like to draw your attention to the fact that, in this case, it might not be possible to use all functions of this website to the fullest extent.
In addition, you can prevent any gathering of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as any processing of such data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en-GB).

As an alternative to the browser add-on, in particular for browsers on mobile terminals, you can also prevent any gathering by Google Analytics by changing your settings. An opt-out cookie is placed and prevents any future gathering of your data when you visit this website. The opt-out cookie can be used only for this browser and our website and is placed on your device. If you erase the cookies in this browser, you have to place the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help
https://support.google.com/policies/troubleshooter/7575787?hl=en

c) Google Ads Conversion Tracking and Remarketing
We use Google Ads for our website. Google Ads is an online advertising programme provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Where Google Ads is used, your personal data is transferred to Ireland as well. If the data is transferred from there to the USA, please note that there is no adequate level of data protection for this (see under 4. above). The legal basis here is point (f) of Art. 6(1) GDPR. Our legitimate interest follows from the fact that we want to statistically record and evaluate the use of our website to ensure needs-based optimisation.

To statistically capture the use of our website and to evaluate your data for you to optimise our website, we also use Google Conversion Tracking, with Google Ads placing a cookie (clause 4) on your computer if you used a Google ad to get to our website.
These cookies become invalid after 30 days and do not serve personal identification. If the user visits specific pages of the Ads customer’s website and the cookie has not expired yet, Google and the customer can see that the user had clicked on the ad and had then been forwarded to this page.
Every Ads customer receives a different cookie. Cookies can therefore not be tracked through the websites of Ads customers. The information obtained using the conversion cookie serves to compile Conversion statistics for Ads customers having opted for Conversion Tracking. The Ads customers receive information on the total number of users who clicked on their ad and were referred to a page provided with a Conversion Tracking tag, but no information by which users can be personally identified.

If you do not wish to participate in the tracking process, you can also reject the setting of cookies required to that end, for ex. via browser settings generally disabling any automatic setting of cookies. You can also disable cookies for Conversion Tracking by configuring your browser settings in such a manner that cookies will be blocked by the domain. The Google data protection instruction on Conversion Tracking can be found here (https://services.google.com/sitestats/en.html).

With Google Ads, we also use the Remarketing function. This allows us to use cookies to present advertisements to users of our website based on their interests. For this purpose, we analyse the interaction of users on our website, e.g. the services the user was interested in, in order to display targeted advertising to users on other pages even after they have visited our website. The cookies used serve to uniquely identify a web browser on a specific computer and not to identify a person; any personal data is not retained. You can disable the use of cookies by Google by following the link below and by downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin.
More specific information on Google Remarketing as well as the Google Privacy Policy can be found at http://www.google.com/privacy/ads/.
Furthermore, we use Conversion Tracking when using the Google Ads service. When you click on an advertisement placed by Google, a cookie is placed on your terminal for Conversion Tracking. These cookies become invalid after 30 days, contain no personal data, and do not serve the purpose of personal identification. The information obtained using the conversion cookie serves to compile Conversion statistics for Ads customers having opted for Conversion Tracking.

You can prevent cookies from being retained by setting your browser accordingly; however, please note that you may not have full access to all website functions in this case. In addition, you can disable interest-based ads on Google as well as interest-based Google ads on the web (within the Google display network) in your browser by enabling the “Off” button at http://www.google.de/settings/ads or by disabling this at http://www.aboutads.info/choices/. You can find more information about your settings options in this respect and Google's data protection at https://policies.google.com/privacy?hl=en-GB&gl=de
Click here to read the data processor’s privacy provisions: https://policies.google.com/privacy?hl=en-GB
Click here to object on all domains of this processing company: https://safety.google/privacy/privacy-controls/
Click here to read the cookie policy of this data processor: https://policies.google.com/technologies/cookies?hl=en

d) Luca App
We provide our customers and business partners with the opportunity to register with our company using a QR code with the Luca app. The Luca app is operated by culture4life GmbH, Charlottenstraße 59, 10117 Berlin, e-mail: hello(at)luca-app.de.
phone: 030 221 8385 58. Legal basis is point (f) of Art. 6(1) GDPR. Our legitimate interest follows from legal stipulations to register your stay with us.
If you register with us, personal data is retained in the app, e.g.

• contact details, such as surname, first name, address, phone number, e-mail address;
• stay data, such as name or designation of the hosts with whom you stayed as well as date of your stay, beginning and end of your stay, address of your stay;
• additional input data, such as other information relating to and submitted by you via the input fields in our services, e.g. notes you enter in the free text fields of our services;
• functional data, such as data assignment IDs, keys and QR codes;
• temporary usage date, such as data that may temporarily accrue when using the Luca app, i.e. IP address, IP location, type and version of the browser used and browser plug-ins installed, information on the mobile network used, time zone settings, operating system and platform.

The Privacy Policy of culture4life GmbH can be found here: https://www.luca-app.de/app-privacy-policy

e) Corona-Warn-App

This app is provided by the Robert Koch Institute (RKI) for the German Federal Government. The RKI is also responsible for ensuring that your personal data is processed in line with data protection regulations. If you trigger a cross-country alert using the app after a positive Corona test, users of official Corona apps in other countries you met may also be warned. In this case, the RKI and the competent health authorities of the countries participating in the respective transnational alert systems are jointly responsible for data processing. The legal basis is point (a) of Art. 6(1) GDPR and, for health data, point (a) of Art. 9(2) GDPR. Once you have given your consent, you can withdraw it at any time (‘right of withdrawal’). In principle, the Corona-Warn-App collects as little data as possible, which is then forwarded to the RKI. It is important to note that the app does not collect any information that would allow the Robert Koch Institute or other users to infer your identity, health status or location.

The app collects the following data:

access data
• IP address
• view data and time (timestamp)
• transmitted data volume (or packet length)
• message about successful view
• enquiring domain
• operating system used
• device type (smartphone), the manufacturer and model of your smartphone (e.g. “iPhone 7” or “Galaxy”)

meeting dates
• contact date
• contact duration
• contact Bluetooth signal strength

health data
• if the risk investigation function recognises that you may have had contact with a person who has been infected with the Corona virus
• if you register a test
• if you share a positive test result

The RKI Privacy Notice can be found here: cwa-privacy-notice-en.pdf (coronawarn.app)

6) Social Media Plug-Ins
We use social plug-ins of the Facebook, Twitter and Instagram social networks on our website based on point (f) of Art. 6(1) GDPR to make our company more widely known. The promotional purpose behind is to be regarded as legitimate interest in terms of the GDPR. Responsibility for their operation in line with data protection law is to be ensured by their respective provider. We embed these plug-ins using the ‘two-click method’ to protect visitors of our website in the best way possible.

a) Facebook
We draw on Facebook social media plug-ins on our website to make its use more personal. We use the “LIKE” or “SHARE” button for this purpose. This is a service of Facebook Inc, Menlo Park, CA, USA (“Facebook”).

If you access a page of our web presence which contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is directly transmitted by Facebook to your browser and integrated by the browser into the website.

By integrating the plug-in, Facebook is informed that your browser accessed the relevant page of our web presence, even if you do not have a Facebook account at all or if you are currently not logged into Facebook. This information (including your IP address) is directly transmitted from your browser to a Facebook server in the USA and retained there.
If you are logged into Facebook, Facebook can directly assign the visit of our website to your Facebook account. If you interact with the plug-ins, for example by pressing the “LIKE” or “SHARE” button, the relevant information is also transferred directly to a Facebook server and retained there. In addition, the information is published on Facebook and displayed to your Facebook friends.
Facebook can use this information for advertising and market research purposes and to design the Facebook pages according to needs. To this end, Facebook creates usage, interest and relationship profiles, for ex. to evaluate your use of our website regarding the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to render additional services associated with the use of Facebook.
If you do not want Facebook to assign the data collected via our web presence to your Facebook account, you have to log off from Facebook before you visit our website.

For further information on the purpose and scope of data collection, its further processing and use by Facebook and your related rights and setting options to protect your privacy, please refer to the Facebook Privacy Notices (https://www.facebook.com/about/privacy/).

Facebook Fan Page
We also use the Facebook platform for our fan page (@muk.luebeck). For this purpose, Facebook (s. a.) sets cookies on the users’ terminals of our fan page and thus collects information about the use of our fan page. These Facebook cookies each have a unique cookie ID. Based on the data processing operations performed by Facebook in this regard, we (and Facebook) may receive anonymised statistical data from Facebook regarding your use of this fan page. If you have any questions, please do not hesitate to contact us or our data protection officer.

b) Twitter
Our websites contain plug-ins of the short message network of Twitter Inc, 795 Folsom Street, Ste. 600, San Francisco, CA 94107, USA (“Twitter”). You can recognise the Twitter plug-ins (tweet button) by the Twitter logo on our page. An overview of tweet buttons can be found here(https://about.twitter.com/resources/buttons).
If you access a page of our website that contains such a plug-in, a connection is established directly between your browser and the Twitter server. Twitter is informed that you have visited our website by using your IP address. If you click on the Twitter “tweet button” while you are logged into your Twitter account, you can link the contents of our pages on your Twitter profile. This enables Twitter to assign the visit to our pages to your user account. Please note that, as provider of the pages, we have knowledge of neither the content of the transmitted data nor their use by Twitter.

If you do not want Twitter to be able to assign your visit to our pages, please log off from your Twitter user account.

Further information on this can be found in the Twitter Privacy Policy (https://twitter.com/en/privacy).

c) Instagram
Our website also uses social plug-ins (“Plug-Ins”) of Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The Plug-Ins are marked with an Instagram logo, for example in the form of an “Instagram camera”.

If you access a page of our web presence which contains such a Plug-In, your browser establishes a direct connection to the Instagram servers. The Plug-In content is directly transmitted by Instagram to your browser and integrated into the page. This integration enables Instagram to be informed that your browser accessed the relevant page of our web presence, even if you do not have an Instagram account at all or if you are currently not logged into Instagram.

This information (including your IP address) is directly transmitted from your browser to an Instagram server in the USA and retained there. If you are logged into Instagram, Instagram can directly assign the visit of our website to your Instagram account. If you interact with the Plug-Ins, for example by clicking on the “Instagram” button or by posting a comment, the relevant information is likewise directly transmitted to an Instagram and retained there.

In addition, the information is published on your Instagram account and displayed to your Instagram contacts.

If you do not want Instagram to directly assign the data collected via our web presence to your Instagram account, you Instagram to log off from Instagram before you visit our website.

Further information on this can be found in the Instagram Privacy Policy (https://help.instagram.com/155833707900388).

d) YouTube

We have embedded YouTube videos in our online service which have been saved on http://www.YouTube.com and can be directly played from our website. All such videos have been embedded in the “enhanced data protection mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. This is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The following data is captured there:

• device information
• IP address
• referrer URL
• viewed videos

The data stated in paragraph 2 is not transferred before you play the videos. We have no control over the data transferred.
By vising the website, YouTube is informed that you have accessed the relevant sub-page of our website. The data stated under clause 2 a) of this Policy is transmitted as well, regardless of whether YouTube provides a user account you are logged in or whether no user account exists. If you are logged into Google, your data is directly assigned to your account. If you do not want any data to be assigned to your Google profile, you must first log off before enabling the button. YouTube retains your data as usage profile and uses it for advertising and market research purposed and/or to design its website according to needs. Such data is evaluated (even for users not logged in), in particular, to provide needs-based advertising and to inform other social network users about your use of our website. You have the right to object to the creation of such user profiles and can exercise this right by contacting YouTube. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the Privacy Policy. There, you will also find further information about your rights and your privacy settings options.
Click here to read the data processor's privacy provisions: https://policies.google.com/privacy?hl=en-GB.
Click here to object on all domains of the processing company: https://safety.google/privacy/privacy-controls/.
Click here to read the data processor's Cookie Policy: https://policies.google.com/technologies/cookies?hl=en.

e) Google Maps
This is a web mapping service. It is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of data collection and processing is to display maps. Cookies are used for this purpose. The following personal data is captured:

• visiting date and time
• location information
• IP address
• URL
• usage data

The legal basis for such processing is point (f) of Art. 6(1) GDPR. Our necessary legal interest is to be able to show you the exact locations when you use this tool. The e-mail address of the data protection officer of the processing company can be found below. https://support.google.com/policies/troubleshooter/7575787?hl=en
Click here to read the data processor's privacy provisions: https://policies.google.com/privacy?hl=en-GB.
Click here to object on all domains of the processing company: https://safety.google/privacy/privacy-controls/.
Click here to read the data processor's Cookie Policy: https://policies.google.com/technologies/cookies?hl=en.

f) Google Tag Manager
This is a tag management system. It enables the user to update measurement codes and related code fragments, which are called ‘tags’ on the user's website or in the mobile app. This tool is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of data collection and processing is to manage (a) tag(s). Pixels are used for this purpose. The following personal data is captured:

• Aggregated data on tag triggering

The legal basis for such processing is point (f) of Art. 6(1) GDPR. Our necessary legal interest is to ensure that you know exactly how your tags are managed. The e-mail address of the data protection officer of the processing company can be found below.
https://support.google.com/policies/contact/general_privacy_form
Click here to read the data processor's privacy provisions: https://policies.google.com/privacy?hl=en-GB.
Click here to object on all domains of the processing company: https://safety.google/privacy/privacy-controls/.
Click here to read the data processor's Cookie Policy: https://www.google.com/intl/de/tagmanager/use-policy.html.


g) Adobe Typekit
This is a web font service. The processing company is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. The purpose of data collection and processing is to display fonts. Pixels are used for this purpose. The following personal data is captured:

• IP address
• service to provide the fonts
• time required by the browser to download fonts
• browser version
• ID setting
• server providing the fonts
• operating system version
• whether an ad blocker is installed
• application requesting the fonts
• account ID
• fonts provided
• the time it takes for the web browser to download the fonts before they are used
• host name of the page on which fonts are loaded
• referrer URL
• The legal basis for such processing is point (f) of Art. 6(1) GDPR. Our necessary legal interest is to ensure customer friendliness when displacing the selected font. The e-mail address of the data protection officer of the processing company is DPO@adobe.com.
• Click here to read the data processor's privacy provisions: https://www.adobe.com/privacy/policy.html.
Click here to object on all domains of the processing company: https://www.adobe.com/privacy/opt-out.html.
Click here to read the data processor's Cookie Policy: https://www.adobe.com/privacy/cookies.html.

h) Cantao
Cantao helps to create websites and scalable web applications. The processing company is Cantao, owned by Leonhard Feyer, Eibenweg 42, 42111 Wuppertal. This service does not capture any data. Click here to read the data processor’s privacy provisions: https://contao.org/en/privacy-notice.html.

i) Xing
The “XING Share button” is used on this website. Xing is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, tel.: +49 40 419 131-0, fax: +49 40 419 131-11, e-mail: info@xing.com. When you access this website, a connection is briefly established via your browser to XING (“XING”) servers which is used to provide the “XING Share Button” functions (in particular to calculate/display the counter value). XING does not retain any personal data about you when you view this website. In particular, XING does not retain any IP addresses. No cookies are used in connection with the “XING Share Button” to evaluate your usage behaviour either. The current privacy information on the “XING Share Button” and supplementary information can be found on this website: https://privacy.xing.com/en/privacy-policy

j) LinkedIn
The “LinkedIn Share Button” is used on this website. LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, nfo_impressum@cs.linkedin.com. When you access this website, a connection is briefly established via your browser to LinkedIn servers which is used to provide the “LinkedIn Share Button” functions (in particular to calculate/display the counter value). Where LinkedIn is used, your personal data is transferred to Ireland as well. If the data is transferred from there to the USA, please note that there is no adequate level of data protection for this (see under 4. above). LinkedIn does not retain any personal data about you when you view this website. In particular, LinkedIn does not retain any IP addresses. No cookies are used in connection with the “LinkedIn Share Button” to evaluate your usage behaviour either. The current privacy information on the “LinkedIn Share Button” and supplementary information can be found on this website: LinkedIn Privacy Policy

7) Video Conferencing

a) Microsoft Teams
If you hold video conferences with us after prior invitation, we use the Microsoft Teams software as service provider. It is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The following data is processed:

• UU ID,
• WEB ID,
• any cookies set by MS Teams,
• voice and body image.

We process this data on the basis of our legitimate interest and for security reasons to avoid personal meetings based on point (f) of Art. 6(1) GDPR. We do not record such video conferences unless all participants have given their prior consent, which may be revoked at any time. The same applies when making a screenshot of the video conference to ensure documentation or archiving for purposes of proof. Any recordings or screenshots are erased at your request at any time, but after expiry of the statutory retention periods at the latest.

We use our service provider referred to above to process such data, with us only using the standard functions of this tool. For further details on data processing by Microsoft using this tool, please see its Privacy Statement at https://privacy.microsoft.com/en-gb/privacystatement.

Where this tool is used, data may also be transferred to companies in third states outside the EU without an adequate level of protection under data protection law (including, in particular, to the USA). In this context, it is possible that authorities, among others, may access the data without any legal remedy or legal recourse.

b) ZOOM
If you hold video conferences with us after prior invitation, we use the ZOOM software (Zoom Video Communications, Inc., San Jose Headquarters, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113) as service provider for this purpose. Where Zoom is used, your personal data is transferred to the USA as well. If the data is transferred from there to the USA, please note that there is no adequate level of data protection for this (see under 4. above).

• UU ID
• WEB ID
• the cookies set by Zoom
• voice
• body image

We process this data on the basis of our legitimate interest, for security reasons and to avoid personal meetings based on point (f) of Art. 6(1) GDPR. We do not make any recording. If you give us your prior consent, we may take a screenshot of the video conference for documentation or archiving purposes. The screenshot made is erased at your request at any time, but after expiry of the statutory erasure periods at the latest. We use our service provider referred to above to process such data, with us only using the standard functions here. For further details on data processing by ZOOM, please refer to the relevant ZOOM Privacy Policy (https://zoom.us/privacy). You can contact Zoom at the following address: info@zoom.us. The following personal data is processed in the context of video conferencing:

8) Data Subject Rights
You have the right
• to obtain access to your personal data processed by us under Art. 15 GDPR; in particular, you may request access to the processing purposes, the category of the personal data, the categories of recipients, to whom your data has been or will be disclosed, the envisaged retention period, the existence of any right to rectification; erasure, restriction of processing or objection, the existence of any right to lodge a complaint, the origin of your data, where not collected by us, as well as on the existence of any automated decision-making, including profiling, and, where applicable, meaningful information on its details;

• to obtain without undue delay the rectification of inaccurate or the completion of your personal data retained by us under Art. 16 GDPR;

• to obtain the erasure of your personal data retained with us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims under Art. 17 GDPR;

• to obtain restriction of processing of your personal data under to Art. 18 GDPR where the accuracy of the data is contested by you, the processing is unlawful and you oppose its erasure and we no longer need the data, but it is required by you for the establishment, exercise or defence of legal claims, or you have objected to its processing under Art. 21 GDPR;

• to receive your personal, which you have provided to us, in a structured, commonly used and machine-readable format, or to transmit it to another controller under Art. 20 GDPR;

• to withdraw at any time your consent once given towards us under Art. 7(3) GDPR, with the result that we must no longer continue for the future any data processing based on such consent;

• to lodge a complaint with a supervisory authority under Art. 77 GDPR; to this end, you can generally contact the supervisory authority at your place of usual residence or place of work or at our place of business.

9) Right to Object
Where your personal data is processed based on legitimate interests under point (f) of Art. 6(1) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation or if such objection is directed against direct marketing purposes. In the latter case, you have a general right to object which will be implemented by us without any particular situation being stated.
If you want to make use of your right of withdrawal or objection, simply send an e-mail to kontakt@muk.de.

10) Data Security
We use the common SSL procedure (Secure Socket Layer) in combination with the respective highest degree of encryption supported by your browser in the context of the website visit. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use the 128-bit v3 technology instead. You can see whether an individual page of our online presence is transferred in encrypted form by the ‘closed’ icon of the key or lock symbol in the lower status line of your browser.
Other than that, we use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulations, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continuously improved in line with technological developments.

11) Topicality of and Amendments to this Privacy Policy
This Privacy Policy is currently valid and dates from June 2021.
Due to our website and related offerings being developed further or on account of amended legal or official regulations, it may become necessary to amend this Privacy Policy. The respective current Privacy Policy can be accessed and printed out on the website at https://www.muk.de at any time.

12) Supervisory Authority
The supervisory authority under data protection law is:

Marit Hansen
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
(public-law institution), Holstenstraße 98, 24103 Kiel, phone: 0431 988-1200
fax: 0431 988-1223, mail@datenschutzzentrum.de

 

Ihr Browser ist veraltet

Aktualisieren sie bitte ihren Browser um diese Webseite ohne Probleme anzuzeigen.

Your browser is outdated

You have to update your browser to view this webseite without any problems