Privacy policy
Privacy policy for the website
Responsible for the web presence
The person responsible for this website within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Genossenschaft Deutscher Bühnen-Angehöriger
(hereinafter "GDBA")
Heinrichstraße 23-25
D-22769 Hamburg
Phone: +49 (0) 40 4328244-0
Mail: office@gdba.de
Responsible party for the processing of orders or seminars
The person responsible for the processing of orders or seminars within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
Bühnenschriften-Vertriebsgesellschaft mbH
(hereinafter "GmbH")
Heinrichstraße 23-25
D-22769 Hamburg
Phone: +49 (0) 40 4328244-0
Mail: rowohlt@gdba.de
Name and address of the data protection officer
The data protection officer of the controller is:
Deutsche Datenschutz Consult GmbH
https://www.deutsche-datenschutz-consult.de
Stresemannstrasse 29
22769 Hamburg
Phone: +49 40 228 60 70 0
E-mail: datenschutz@gdba.de
Server statistics
When you visit our website, the GDBA collects the following data transmitted by your browser:
- Name and URL of the retrieved website/file
- Date and time of retrieval
- IP address and the requesting provider
- Browser type together with version and operating system of the user
- Website from which the access is made (referrer URL)
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO.
The temporary storage of the collected data by the system is necessary to enable delivery of the website to the user's computer. This is also the basis for GDBA's legitimate interest in the process.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the collection of data for the provision of the website, this is the case when the respective session has ended. Storage in log files does not take place.
Applications
As part of the application process, GDBA only collects the data that you provide to it.
If you send the GDBA your application documents by e-mail, this is done unencrypted. GDBA would like to point out that this unencrypted transmission is not secure under data protection law. GDBA is currently unable to provide an encrypted alternative for electronic transmission. If you do not want to take the risk of the classic e-mail traffic for your application, we would ask you to choose the postal way for your application.
Upon receipt of your application, GDBA will use the information you provide to determine your suitability for the position and to conduct the application process. If necessary, suitable applications will be forwarded internally to the department managers in the organization for the respective open position. The further procedure is then coordinated. In principle, only those persons in the company have access to your data who require this for the proper conduct of the application process.
Your data will be processed exclusively in data centers in the Federal Republic of Germany.
The processing of data that you provide to the GDBA in connection with an application is based on Art. 6 (1) lit. b DSGVO: The processing of the data is necessary for the implementation of pre-contractual measures that take place upon your request.
Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. The interest then consists of the assertion or defense of claims.
If you are awarded a position during the application process, the data from the applicant data system will be transferred to the GDBA personnel information system.
Newsletter
Registration
On the website you can also subscribe to the GDBA newsletter. With the newsletter, GDBA informs its customers and business partners at regular intervals about offers of the organization.
For this, GDBA needs your email address. If you also provide your first and last name, GDBA will address you personally in the newsletter.
When you register for the newsletter, the GDBA will first send you a confirmation email containing a link that you can use to confirm your email address. In this way, the GDBA ensure that you are the owner of the email account that has been registered for the newsletter. Only after clicking on the confirmation link is the registration for the newsletter complete.
In order to be able to prove your consent and the confirmation of your email address, the GDBA stores the IP address assigned to you at that time by the Internet service provider (ISP) as well as the date and time of registration. Your IP address and the date and time when you click on the confirmation link are also logged for this purpose.
The personal data collected in the context of a registration for the newsletter will be used exclusively for sending our newsletter.
The newsletter is sent on the basis of your consent pursuant to Art. 6 (1) a DSGVO. The logging of the registration process is based on the obligation to provide evidence pursuant to Art. 6 para. 1 lit. c in conjunction with. Art. 7 para. 1 DSGVO.
To send the newsletter, GDBA uses the service provider "Sendinblue GmbH" by way of order processing. This service provider processes your personal data exclusively on servers within the scope of the GDPR or in the third countries listed in the order processing agreement. Processing in third countries only takes place if it is ensured that the level of protection guaranteed by the GDPR is not undermined, taking into account the requirements of Chapter V of the GDPR.
You can cancel your subscription to the newsletter at any time by revoking your consent. For this purpose, you will find an "Unsubscribe" link at the end of each newsletter. Of course, you can also inform GDBA by email or mail that you no longer wish to receive the newsletter.
Newsletter tracking
The GDBA newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails with HTML format to log whether the newsletter was opened. This allows GDBA to evaluate how interesting the newsletters are for subscribers.
The personal data collected via tracking pixels are stored and evaluated by GDBA in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject.
This evaluation activity takes place on the basis of your consent, which is obtained together with the registration for the newsletter, Art. 6 para. 1 lit. a DSGVO.
Membership application
You have the possibility to register as a member on this website. In doing so, GDBA collects the following data for the following purposes:
GDBA collects your name (first and last name) in order to manage your membership and to address you personally.
GDBA collects the postal address (street, house number, address suffix, postal code, city, country) in order to contact you by post if necessary and to be able to send you the member magazine.
GDBA collects your telephone number and e-mail address in order to contact you for the performance of its duties.
Your date of birth, gender and nationality are collected for statistical purposes.
GDBA needs your profession, employment status, commitment (stage) for member administration and for assignment to professional groups and local associations.
GDBA needs your monthly gross salary and payment data (payment frequency, payment method and account data) to calculate and collect the membership fee.
The collection of the aforementioned data is necessary for the initiation and implementation of the membership and is thus carried out on the basis of Art. 6 Para. 1 lit. b DSGVO, in relation to the thereby sought affiliation to the union-oriented stage cooperative within the framework of Art. 9 Para. 1, 2 lit. d DSGVO.
In addition, the GDBA also stores the technical data accompanying the registration, such as your IP address, the date and time of registration. The storage of this data is done to protect against misuse of the services of the GBDA, which is a legitimate interest. In this respect, the processing is based on Art. 6 para. 1 lit. f DSGVO.
As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
You can change your personal data at any time by filling out the form again and selecting the "Change request" option.
Member area
After registering, you have the option of logging into the member area using your membership number and e-mail address. There you will get access to content or services which, due to the nature of the matter, can only be offered to registered users.
Publications orders
Orders for publications are processed by the GmbH, to which the data collected via the website are made available by GDBA for this purpose.
The information provided when ordering publications is required by the GmbH to carry out the product order, e.g. for invoicing purposes. In addition to using the order form, it is also possible to order publications in text or written form (by e-mail, fax or post). The following personal data will be collected and processed when processing the order: Company, first name, last name, membership number, address (street, house number, postal code, city), telephone number, e-mail address and payment data.
Registration for seminars
Your rights
Right of objection
If we process your personal data on the basis of our legitimate interests (Art. 6 (1) (f) DSGVO), you have the right to object to this processing. If we process your personal data for direct marketing purposes, the objection can be made without justification (Art. 21 (2) DSGVO). In that case, we will cease processing immediately. Otherwise, the reasons arising from their particular situation must be explained (Art. 21. para. 1 DSGVO), so that we can reassess the balance of interests of Art. 6 para. 1 lit. f DSGVO accordingly.
Right to information
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing, in accordance with applicable law, which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.
Right to rectification
You have the right to have your data stored by us corrected if it is incorrect.
Right to restriction of processing
Furthermore, you can have the processing of your data restricted under the conditions of Article 18 (1) of the GDPR (for example, if the accuracy is disputed or the processing is unlawful). We may then only process data affected by this under the conditions of Art. 18 (2) DSGVO (for example, with your consent or to exercise or defend against legal claims).
Right to deletion
You may also request the deletion of your personal data under the conditions of Art. 17 (1) a-f DSGVO (for example, if we no longer need the personal data or the processing is unlawful), unless the exceptions of Art. 17 (3) a-e DSGVO apply (for example, where we are legally obliged to process the data).
Right to data portability
You have the right to request that we provide the personal data you have provided to us in a format that allows it to be transferred to another entity.
Right of complaint to a supervisory authority
You have the option to lodge a complaint with a data protection supervisory authority of your choice if you believe that the processing of your personal data by us is unlawful.
Note on data security
We use the SSL (Secure Socket Layer) procedure on our website in conjunction with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol next to the URL or in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
No automated decision making
We would like to point out that in the course of using our services and making use of our benefits/services, you will not be subject to any decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you.