Imprint/Data Protection

Thank you for your interest in the Jewish Chamber Orchestra Munich (hereinafter also: "JCOM") and in our website. The website is operated by the Jewish Chamber Orchestra Munich non-profit GmbH (gGmbH). Data protection is very important to us. We would therefore like to ask you to take the time to read this data protection declaration carefully.

In this data protection declaration, the pronouns "we", "our" etc. refer to the Jewish Chamber Orchestra Munich gGmbH. The pronouns "you", "your" etc. refer to the users of our website or to the data subject whose personal data is being processed.

In principle, it is also possible to use this website without providing personal data. When using certain offers on this website, however, the processing of personal data may become necessary. The collection, processing and use of personal data always takes place in accordance with the General Data Protection Regulation (hereinafter: "GDPR") and with the applicable European and national legal provisions. The collection of personal data takes place on a legal basis or on the basis of the consent of the person concerned. The Orchester Jakobsplatz München gGmbH follows the principle of economical data collection and assures the data subject that the data collected will be handled responsibly and securely.

In this data protection declaration we would like to inform you which personal data we collect, process and use when you use the website and how we handle this data. In addition, we inform you about the legal basis for the processing of your personal data and, insofar as the processing is necessary to protect our legitimate interests, also about our legitimate interests, and clarify the rights to which you are entitled.

The data protection declaration uses the terms used in the GDPR and which are defined in Art. 4 GDPR. So that these terms are understandable and comprehensible for you, we would like to present them in advance:

Personal data is any data that relates to you or says something about you personally and that can be linked to you, either on its own or in combination with other information. According to the GDPR, personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identifier number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

Processing is any process (carried out with or without the help of automated procedures) or any such series of processes in connection with personal data such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, the use, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction.

A restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling is any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects related to work performance, economic situation, health, personal preferences analyze or predict that natural person's interests, reliability, conduct, whereabouts or relocation.

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data not assigned to an identified or identifiable natural person.

The person responsible for the processing of personal data is a natural or legal person, public authority, institution or other body that alone or jointly with others decides on the purposes and means of the processing of personal data.

The processor is a natural or legal person, public authority, institution or other body that processes personal data on behalf of the person responsible.

The recipient of personal data is a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities who may receive personal data as part of a specific investigation order under Union law or the law of the Member States are not considered recipients.

The third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.

The consent of the data subject is any voluntarily given, informed and unequivocal expression of will in the specific case in the form of a declaration or other unequivocal confirmatory action with which the data subject indicates that they consent to the processing of their personal data agrees.

Responsible for the processing of personal data within the meaning of the GDPR is:

Jewish Chamber Orchestra Munich gGmbH
Authorized partner: Daniel Grossmann
Lechstr. 11
80638 Munich
Tel: 49 89 15909750
Fax: +49 89 15980509

INFO(AT)JCOM.DE

HTTP://www.JCOM.DE

Article 6 paragraph 1 letter a) GDPR and Article 7 GDPR serve as the legal basis for the processing of personal data for which we obtain consent for a specific purpose. The legal basis for the processing of personal data for the fulfillment of our services and the implementation of contractual measures or pre-contractual measures is Article 6 Paragraph 1 Letter b) GDPR. The processing to fulfill our legal obligations (e.g. tax obligations) takes place on the legal basis of Article 6 (1) (c) GDPR. If processing could be necessary in exceptional cases to protect the vital interests of the data subject or a natural person, this would be based on Article 6 (1) (d) GDPR.

Finally, the processing of personal data can be based on the legal basis of Article 6 (1) (f) GDPR. The processing of personal data can also be lawful in accordance with Article 6 (1) (f) GDPR if it is not covered by one of the aforementioned legal bases, but if it is necessary to protect the legitimate interests of the person responsible or a third party , unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data prevail, in particular if the data subject is a child. In recital 47 sentence 1 GDPR, the European legislator emphasizes that when assessing the legitimate interest, the relationship between the data subject and the person responsible must be taken into account and the resulting reasonable expectations of the data subject must be taken into account. From the point of view of the European legislator, a legitimate interest can be assumed if the person concerned is a customer of the person responsible (recital 47 sentence 2 DSGVO).

If the processing is based on the legal basis of Article 6 Paragraph 1 Letter f) GDPR, our legitimate interest is the performance of our business activities and the proper operation and improvement of this website.

Each time you visit our website, your browser automatically sends certain information to the website server. The Internet Protocol address (hereinafter: "IP address") of your computer, the request from your browser and the time and date of this request on our website, the website from which you came to our website, are recorded. Furthermore, the product and version information about the browser used and the operating system of your computer are recorded. The data is also stored in the so-called log files of our system. The data of the log files are stored separately from the personal data provided by a person.

The legal basis for the temporary storage of the data and the log files is Article 6 Paragraph 1 Letter f) GDPR on the basis of our legitimate interest in improving the functionality of our website. In addition, we use the information transmitted to our server by your browser in an anonymous form - i.e. without it being possible to draw any conclusions about you - for the operation of our website, for the analysis and improvement of our services. In this way, we can, for example, identify and eliminate possible errors on the website and determine on which days and at what times the website is used particularly heavily, which also serves to make adjustments or improvements.

The stored data will be deleted as soon as they are no longer required to achieve the above purpose, which is usually the case when the visit to the website has ended. If the data is stored in the log files, the data will be deleted after 7 days at the latest. Longer storage is possible, in which case the IP address of your computer will then be deleted or made anonymous by shortening it.

On the sub-page of our website for JCOM online ticket sales we use so-called cookies, which collect and store information about your use of our website every time you visit this sub-page. As soon as a data subject accesses the website, a cookie is transferred to the hard drive of the data subject's computer. Cookies are small text files that are stored on your data carrier and that save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an identification number for the cookie ("cookie ID"). Cookies enable our systems to recognize the user's device when you return to our website, thereby storing information about your preferred activities on the website and making any preferences immediately available.

On the subpage of our website for JCOM online ticket sales, for example, the cookie is used, among other things, to save the selected tickets in the virtual "shopping cart" and thus enables and simplifies the ordering process.

Only the data explained above (see Section 4.1) about your use of the website is stored in the cookies we use. This is not done by assigning you personally, but by assigning a cookie ID. The cookie ID is not merged with your name, your IP address or with similar data that would enable the cookie to be assigned to you. Insofar as personal data is also processed by cookies, the processing takes place either in accordance with Article 6 (1) b) GDPR to carry out pre-contractual measures (e.g. to carry out the ordering process for JCOM online ticket sales) and in accordance with Article 6 (1) lit. f) GDPR on the basis of our legitimate interest in improving the functionality and user-friendliness of the ordering process on our website.

If a data subject does not want browser cookies to be used, they can set their browser so that storage of cookies is not accepted or only accepted after express confirmation by the data subject. In addition, cookies that have already been set can be deleted at any time via an Internet browser or, if necessary, via another program. If the setting of cookies is deactivated, it must be noted that in this case our website may only be usable to a limited extent.

Due to legal regulations, the website provides information on rapid electronic contact (by e-mail) with us. If an affected person contacts us by email, personal data (name, email address) will be collected. This data is used and stored for the purpose of answering your request or for contacting you and the associated technical processing. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR. If the establishment of contact serves the purpose of concluding a contract (e.g. via a sponsoring partnership) or another contract, Article 6 Paragraph 1 lit. b) GDPR is also the legal basis for the processing. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

On the subpage of the website for the "Opera School Project" there is the possibility for the bearer of parental responsibility (in the following: parents/parent) of an interested child between the ages of 7 and 18 to contact us. The aim of the opera school project is to give children the opportunity to develop and implement an opera from start to finish with other children and young people within 1,5 years. You can find detailed information about the opera school on our website. We provide a contact form on the website for contacting us. Parents can enter the name, the child's date of birth and their own name, date of birth, address, telephone number, e-mail address and the way in which the child would like to participate in the opera school and send it to us. If the completed application form is sent to us, we collect and process the personal data provided by the child and the parent. The processing takes place electronically. This data is used and stored for the purpose of answering your request or for contacting you and the associated technical processing. The parent’s personal data is processed on the legal basis of Art. 6 (1) (a) GDPR and Art. 7 GDPR. The processing of the child's personal data takes place on the legal basis of Art. 8 Para. 1 S. 2 DSGVO with the consent of the parents. Consent is given for the purpose of answering the parents' and the child's inquiry about the opera school project and deciding on the child's inclusion in the opera school project, as well as for the purpose of informing the parents and the child about organizational matters and news if they participate inform. If the child is included in the project with the consent of the parents, the child's data will also be processed on the legal basis of Article 6 (1) (b) GDPR to fulfill the contract for participation in the project.

If you do not participate in the project, the data provided will be automatically deleted. We would like to point out that the parents and the child can revoke their consent at any time (see also Section 8.10). The data will then be deleted, provided that there are no legal storage requirements to the contrary.

On the subpage of our website for JCOM online ticket sales, we offer users the opportunity to buy tickets for concerts by the Jakobsplatz Munich Orchestra online. You do not have to register for this. If you place an order on our website and we process your name and email address as mandatory information. Furthermore, we collect and process your address, the name of your company and your telephone number if you enter this in the order form. The processing takes place on the basis of Article 6 Paragraph 1 Letter b) GDPR for the processing of your order and the fulfillment of the purchase contract.

The duration of the storage of personal data depends on the respective statutory retention period (e.g. the retention period under tax and commercial law). After the period has expired, the corresponding data will be routinely deleted, unless you have consented to further storage in accordance with Article 6 Paragraph 1 Sentence 1 lit. a) GDPR or statutory regulations require longer storage.

The payment is processed via the payment service provider PayPal. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Payments are processed via so-called PayPal accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed through an email address.

When paying via PayPal, data (e.g. name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing) of the person concerned is automatically transmitted to PayPal. By selecting this payment option, the data subject agrees to the transfer of personal data required for payment processing. The transmission of the data is intended for payment processing and fraud prevention.

The transmission of the personal data to PayPal takes place on the basis of Art. 6 Para. 1 lit. b) GDPR for the processing of your order and the fulfillment of the purchase contract. Furthermore, it is carried out on the basis of our legitimate interests in a user-friendly design of payment processing in accordance with Article 6 (1) (f) GDPR. The personal data exchanged between PayPal and the person responsible for processing may be transmitted by PayPal to credit agencies. This transmission takes place for identity and creditworthiness checks. We would like to point out that PayPal may pass on personal data to affiliated companies or other companies if this is necessary to fulfill contractual obligations or if the data is to be processed on behalf of the customer.

The person concerned can revoke their consent to the processing of personal data at any time by contacting PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

Further information on the subject of data protection at PayPal can be found in PayPal's data protection declaration: HTTPS://WWW.PAYPAL.COM/DE/WEBAPPS/MPP/UA/PRIVACY-PREV.

You have the right to request confirmation from us at any time as to whether your personal data is being processed. To do this, you can send us an application by post or email (see contact details in section 2 above). Furthermore, you have the right to receive information and a copy of this information about your personal data processed by us within the scope of Art. 15 GDPR.

This information includes the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, if possible, the envisaged storage period or otherwise at least the criteria for determining this Duration. In addition, you have the right to know that you have the right to have your personal data corrected or deleted, or to restrict processing or to object to data processing, or that you have the right to lodge a complaint with a supervisory authority. If we do not collect personal information directly from you, you have the right to all available information about the origin of the data.

Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization and the data subject has the right to be informed of the appropriate guarantees under Art. 46 GDPR in connection with the transmission.

You have the right to immediately request the correction of incorrect data (Article 16 GDPR). You also have the right, taking into account the processing purposes, to request the completion of incomplete data. If you would like to exercise your right to rectification, you can contact us at any time (see contact details in Section 2 above).

You have the right, under the conditions described in Art. 17 GDPR, to request that we delete your personal data. In particular, these requirements provide for the existence of a reason for deletion and that the processing is not necessary. A right to erasure exists in particular if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases in which you revoke your consent (and there is another legal basis for the processing is missing). Furthermore, there is a right to erasure if there is an objection (if there are no overriding legitimate reasons for the processing), if there is unlawful processing and if there is an obligation to erasure under Union law or the law of the member state to which we are subject.

If Orchester Jakobsplatz München gGmbH has made the personal data public as the person responsible and Orchester Jakobsplatz München gGmbH is obliged to delete them, it shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to ensure that those responsible for data processing process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data and the processing is not necessary.

In order to assert your right to erasure, you can contact us at any time (see contact details in Section 2 above).

As the data subject, you have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if you contest the accuracy of the personal data for a period of time that enables us to check the accuracy of the personal data, and in the event that the processing is unlawful and instead of deletion you request a request restricted processing; also in the event that the data is no longer required for the purposes we are pursuing, but you need the personal data to assert, exercise or defend legal claims. Furthermore, there is a right to restriction of processing if you have raised an objection to the processing, as long as it is not certain whether our legitimate reasons outweigh your interests.

To assert your right to restriction of processing, you can contact us at any time (see contact details in Section 2 above).

If you have asserted the right to correction, deletion or restriction of processing against us, we will inform all recipients to whom personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. In accordance with Art. 19 GDPR, you have the right to be informed about these recipients. To assert your right to information, you can contact us at any time (see contact details in section 2 above).

You have the right to receive from us the personal data that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR, provided this does not affect the rights and freedoms of other people. When exercising your right to data portability, you have the right to have the personal data transferred directly from one controller to another, where technically feasible.

In order to exercise your right to data portability, you can contact us at any time (see contact details in section 2 above).

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based, among other things, on Article 6 Paragraph 1 lit. e) or f) GDPR in accordance with Article 21 submit GDPR; this also applies to profiling based on these provisions. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the Orchester Jakobsplatz München gGmbH processes personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data relating to them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

You also have the right, for reasons arising from your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless the processing is necessary to fulfill a task in the public interest.

To assert your right to object, you can contact us at any time (see contact details in Section 2 above).

We do not use automated decision-making or profiling on this website.

We would also like to point out that, in accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or significantly affects you in a similar way . This does not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and the person responsible, or the decision is permissible on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions require appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or the decision is made with the express consent of the data subject.

If the decision is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or it is based on the data subject's explicit consent, we shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, for which purpose at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

In order to assert your rights in connection with automated decisions, you can contact us at any time (see contact details in Section 2 above).

You also have the right to contact the competent supervisory authority in the event of complaints.

You have the right to revoke your consent to the processing of personal data at any time. The lawfulness of the processing that took place on the basis of the consent until the revocation remains unaffected. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent.

In order to exercise your right to revoke your consent, you can contact us at any time (see contact details in section 2 above).

The duration of the storage of personal data depends on the respective statutory retention period (e.g. the retention period under tax and commercial law). After the period has expired, the corresponding data will be routinely deleted if they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.

We would like to point out that the provision of personal data may be required by law (e.g. by tax regulations) or contractually (e.g. by the contractual agreement to provide information on the contractual partner) or may be necessary for the conclusion of the contract. The data subject may also be obliged to provide personal data. For example, when concluding a contract with OJM online ticket sales, you are obliged to provide us with personal data (e.g. name, address, contact details). Without provision, the conclusion of such a contract would not be possible. Before providing personal data, the data subject should contact us. We will inform you as the data subject in relation to the individual case whether the provision of the personal data is required by law or contract or is necessary for the conclusion of a contract, whether the data subject is obliged to provide the personal data and what the possible consequences of non-provision would be.

The Website may contain hyperlinks to and from third party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection conditions. Please make sure of the applicable data protection conditions before you submit any personal data to these websites

We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data on the basis of legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

However, a technical transfer can take place if and to the extent that this is necessary for the operation of our website or for other reasons for the establishment, implementation or processing of your user relationship with us. This can be the case, for example, if the website is hosted by an external service provider, i.e. an external service provider operates the server for us. If this is not an order processing, the transfer is based on Article 6 Paragraph 1 Letter b) GDPR.

We have integrated components of the company Facebook into this page. Facebook is a social network operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for data processing. The purpose of integrating the Facebook plugin is to enable our users to disseminate the content of this website in order to make this website better known and thus increase the number of users of this website.

You can recognize the Facebook plugins by the Facebook logo or the addition “Social Plugin from Facebook”/ “Facebook Social Plugin”. You can access an overview of the Facebook plugins and their appearance at https://developers.facebook.com/docs/plugins.

If you call up a subpage of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Your browser transmits information (including the IP address) to Facebook in the USA that your browser has accessed a corresponding sub-page of our website. This data is stored there. This is also the case if you do not have a Facebook profile or are not logged into it.

In the event that you are logged into Facebook, Facebook can assign the call-up of the corresponding sub-page of our website to your Facebook profile. This also applies if you activate the plugin, for example if you activate a "Like" button or the share function. The information will also be published on your Facebook profile and shown to your Facebook friends. If you do not want this, you must log out of Facebook before visiting our website.

It is possible to install applications (including add-ons for your browser) that prevent the Facebook plugins from loading and data transmission to Facebook, e.g. with the script blocker "NoScript" (http://noscript.net/) .

Facebook Inc. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.

The data processing described above takes place in accordance with Article 6 (1) (f) GDPR on the basis of Facebook’s legitimate interests. This consists, among other things, of displaying personalized advertising in order to inform other Facebook users about your activities on our website. You have the right to object, although you must contact Facebook to do so.

The purpose and scope of the collection, processing and use of personal data by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in Facebook's data protection information, which can be found at HTTP://WWW.FACEBOOK.COM/POLICY.PHP are retrievable.

We have integrated components of the company Twitter into this page. Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 USA operates a publicly accessible microblogging service with which users can publish short messages with a maximum of 140 characters (so-called tweets), share them with so-called followers or link them . The latter are also people who are registered with Twitter. Some of the tweets can also be read by people who are not registered on Twitter. The purpose of integrating the Twitter component is to enable our users to redistribute the content of this website in order to make this website better known and thus increase the number of users of this website.

If you call up a subpage of our website into which a Twitter component is integrated, your browser establishes a direct connection to the Twitter servers. The content of the component is sent directly to your browser by Twitter and integrated into the page. Your browser transmits information to Twitter that your browser has accessed a corresponding sub-page of our website.

If you are logged in to Twitter, Twitter can assign the access to the corresponding sub-page of our website to your Twitter user account. This also applies if you activate the integrated Twitter component. The data or information transmitted in this way is assigned to the Twitter user account and stored and processed by Twitter. If you do not want this, you must log out of Twitter before visiting our website.

The data processing described above takes place in accordance with Article 6 (1) (f) GDPR on the basis of Twitter's legitimate interests. This consists, among other things, of displaying personalized advertising in order to inform other Twitter users about your activities on our website. You have the right to object, although you must contact Twitter to do so.