With this privacy policy, the University of Music Lübeck (MHL) informs its users about the nature, scope and purpose of the collection and use of personal data on the central website of the university at www.mh-luebeck.de.

The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is MHL, legally represented by its President Bernd Redmann. As a university of the state of Schleswig-Holstein, MHL is a public corporation and a state institution.

Handling of personal data
Personal data is information with the help of which a natural person can be determined, i.e. information by which a person can be clearly identified. This includes, among other things, the name, e-mail address or telephone number. However, data about preferences, hobbies, memberships or information about which web pages have been viewed by individuals also count as personal data. In general, it is not necessary for you to provide personal data in order to use our website. Where personal data is collected on our pages, this is done on a voluntary basis wherever possible. Where services and functions without the option of choice require the collection of personal data or data that can be related to persons (such as IP addresses), you declare your consent to this by continuing to use our web pages.

Any use of your personal data will only be for the purposes stated in this declaration and to the extent necessary to achieve these purposes. We treat your personal data confidentially and in accordance with the statutory data protection regulations (Schleswig-Holstein State Data Protection Act, Telemedia Act) and this data protection declaration. In addition, we take appropriate technical and organisational measures to protect your personal data entrusted to us. Apart from the services and functions described in this declaration, for which third parties are involved, your data will not be passed on to third parties without your express consent. Personal data is only collected on the central MHL website if this is necessary to achieve the stated purposes or if the user expressly consents to the collection of data.

Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer (see below under Contact):

• Information about your data stored by us and how it is processed,
• correction of incorrect personal data,
• deletion of your data stored by us,
• restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
• objection to the processing of your data by us and data portability, provided you have consented to the data processing or have concluded a contract with us.

If you have given us consent, you can revoke this at any time with effect for the future. You can lodge a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state of your residence, your work or the alleged violation. A list of supervisory authorities (for the non-public sector) with address can be found here.

Purposes of data processing by the controller and third parties
We process your personal data only for the purposes stated in this privacy policy. We do not transfer your personal data to third parties for purposes other than those stated. We will only disclose your personal data to third parties if:

• you have given your express consent to this,
• the processing is necessary for the performance of a contract with you,
• processing is necessary to comply with a legal obligation,
• the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
  

Deletion or blocking of data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when visiting our website
When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the contents of web pages requested by you and is compulsory when using the Internet. In particular, it is processed for the following purposes:

• ensuring a smooth connection setup of the website,
• ensuring the smooth use of our website,
• evaluating system security and stability,
• and for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned data collection purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the responsible body and, if applicable, order processors. Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Cookies
Our Internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions desired by you (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent

Cookie consent with Usercentrics
This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website here: (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:

• your consent(s) or revocation of your consent(s)
• your IP address
• information about your browser
• information about your terminal device
• time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consent(s) granted or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c DSGVO.

Contract on order processing
We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

Contact
On our website, we offer you the opportunity to contact members or institutions of the MHL by e-mail and/or via a contact form. If you contact us by e-mail or contact form with regard to questions of any kind, you give us your voluntary consent for the purpose of contacting you. In order to do so, you must provide a valid e-mail address. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. The data will not be passed on to third parties or merged with other data sources. We would like to point out that data transmission via the Internet (e.g. when communicating by e-mail) can have security gaps. It is therefore impossible to guarantee complete protection of data against access by third parties.

Search
We offer you the possibility to search the contents of the MHL website using our search function. The website creates its own search index for this purpose. The search queries are neither stored nor evaluated.

SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Use of Google Maps
This website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about visitors' use of the map functions. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Centre. Detailed instructions on how to manage your own data in connection with Google products can be found here.

Notes on MHL's social media channels
MHL itself does not collect any data in its social media presences and uses the presences exclusively in the context of its public relations work. For other enquiries, please use direct communication channels by e-mail or telephone. The social media channels of MHL and the pages of individual institutions are also visible to everyone without registration, but a separate profile is always required for interactions. Please refer to the data protection notices of the respective social media providers for information on the purpose and scope of data collection and the further processing and use of your data as well as your rights in this regard.

Embedded YouTube videos
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells Youtube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your Youtube account first. If a Youtube video is started, the provider uses cookies that collect information about user behaviour. If you have deactivated the saving of cookies for the Google Ad programme, you will not have to expect any such cookies when watching Youtube videos. However, Youtube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser. Further information on data protection at "Youtube" can be found in the provider's data protection declaration here.

Online ticket presale
Online ticket pre-sales are carried out by media factory GmbH ("Lübeck-Ticket") via the ticket portal www.luebeck-ticket.de operated by media factory. The entire ticket purchasing process, from order processing to ticket dispatch, is handled exclusively by media factory. We do not collect any personal data from you for this purpose. Your personal data is collected exclusively by media factory. Further information on the purpose and scope of the data collection and its processing by media factory, as well as further information on your rights in this regard and setting options for protecting your privacy, can be found on the media factory website or here.

Alumni
MHL does not maintain an official alumni database. There are individually created alumni lists at the Alumni Association of the University of Music Lübeck.

Change of our privacy policy
We reserve the right to adapt this data protection statement so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection statement, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

The data protection declaration was created using the data protection declaration generator of activeMind AG, among others.

Questions to the data protection officer
If you have any questions about data protection, please contact the person responsible for data protection at MHL directly, Mr Alban Alexander Gauhl (see contact).

Status: 24.05.2018

 Data Protection Officer of the MHL
Große Petersgrube 21
23552 Lübeck

Alban Alexander Gauhl
Office Ratzeburger Allee 160
23562 Lübeck
T: +49 (0)451-3101-1090
Mail to Mr. Gauhl