legal documents

Disclaimer

IMPRINT

Privacy Policy

Preamble
With the following privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as "data") we process for which purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both within the scope of providing our services and especially on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer"). The terms used are not gender-specific.

Status: June 25, 2024

Responsible Party

Urban Theater e.V.
Eosanderstr. 12
10587 Berlin
Authorized representatives: Chairpersons Natalia Lapina and Dr. Witalij Schmidt
Email address: info@urban-theater.com
Imprint: www.urban-theater.com/privacy

Overview of Processing
The following overview summarizes the types of processed data and the purposes of their processing and refers to the affected individuals.

Types of processed data
• Inventory data
• Location data
• Contact data
• Content data
• Contract data
• Usage data
• Meta, communication, and procedural data
• Log data
• Member data

Categories of affected individuals
• Communication partners
• Users
• Members

Purposes of processing
• Communication
• Security measures
• Direct marketing
• Organizational and administrative procedures
• Feedback
• Marketing
• Provision of our online offer and user-friendliness
• Information technology infrastructure
• Public relations
• Sales promotion

Relevant Legal Basis
Relevant legal basis according to the GDPR: The following provides an overview of the legal basis of the GDPR on which we process personal data. Please note that, in addition to the GDPR regulations, national data protection regulations may apply in your or our country of residence or domicile. If specific legal bases are relevant in individual cases, we will inform you of these in the privacy policy.
Consent (Art. 6 (1) sentence 1 lit. a) GDPR): The data subject has given consent to the processing of personal data concerning them for a specific purpose or several specific purposes.
Contract performance and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR): The processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures taken at the request of the data subject.
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR): The processing is necessary to protect the legitimate interests of the controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not override them.
Contract concerning membership (Statutes) (Art. 6 (1) sentence 1 lit. b) GDPR).
National data protection regulations in Germany: In addition to the GDPR data protection regulations, national data protection regulations apply in Germany. This includes, in particular, the Federal Data Protection Act (BDSG). The BDSG contains special regulations on the right to information, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes, and transmission, as well as automated decision-making in individual cases, including profiling. In addition, state data protection laws of the individual federal states may apply.
Notice on the application of GDPR and Swiss DSG: These data protection notices serve both to provide information according to the Swiss DSG and the General Data Protection Regulation (GDPR). For this reason, please note that due to the broader territorial application and understandability, the terms of the GDPR are used. In particular, instead of the terms "processing" of "personal data," "overriding interest," and "special categories of personal data" used in the Swiss DSG, the terms "processing" of "personal data," "legitimate interest," and "special categories of data" used in the GDPR are used. The legal meaning of the terms is still determined according to the Swiss DSG within the framework of its application.

Security Measures
We take appropriate technical and organizational measures according to the legal requirements, considering the state of the art, the implementation costs, the nature, scope, circumstances, and purposes of the processing, as well as the different likelihoods of occurrence and the severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.
Measures include ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to data and the related access, input, transfer, securing availability, and separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data, and responses to data threats. We also consider protecting personal data already during the development or selection of hardware, software, and procedures according to the principle of data protection through technology design and data protection-friendly default settings.

Transmission of Personal Data
In the course of our processing of personal data, it happens that the data is transmitted to other bodies, companies, legally independent organizational units, or persons or disclosed to them. Among the recipients of this data can be, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

International Data Transfers
Data processing in third countries: If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if the processing takes place in the context of using third-party services or disclosure or transmission of data to other persons, bodies, or companies, this will only occur in accordance with the legal requirements. Unless otherwise specified, the data processing will only occur if the data protection level in the third country is recognized by an adequacy decision (Art. 45 GDPR), or if the data protection level is secured in another way, such as through standard contractual clauses (Art. 46 (2) lit. c) GDPR), explicit consent, or in the case of contractual or legally required transfer (Art. 49 (1) GDPR). We will inform you of the basis for the third-country transfer in the context of the individual processing procedures. Information on third-country transfers and adequacy decisions can be found on the EU Commission's website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en.
EU-US Trans-Atlantic Data Privacy Framework: In the context of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the data protection level for certain companies from the USA as safe within the framework of the adequacy decision of July 10, 2023. The list of certified companies and further information about the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). We inform you within the data protection notices which service providers used by us are certified under the Data Privacy Framework.

General Information on Data Storage and Deletion
We delete personal data that we process according to the legal requirements as soon as the consents underlying the processing are revoked or other legal grounds for the processing no longer exist. This applies, for example, if the original processing purpose no longer applies or the data is no longer needed. Exceptions to this rule exist if legal obligations or special interests require longer storage or archiving of the data.
In particular, data that must be retained for commercial or tax reasons or whose storage is necessary for legal prosecution or to protect the rights of other natural or legal persons must be archived accordingly.
Our data protection notices contain additional information on the retention and deletion of data specific to certain processing operations.
When multiple retention periods or deletion deadlines apply to data, the longest period is always relevant.
If a period does not explicitly begin on a specific date and is at least one year, it automatically starts at the end of the calendar year in which the triggering event occurred. In the case of ongoing contractual relationships in which data is stored, the triggering event is the time of the effectiveness of the termination or other ending of the legal relationship.
Data that is no longer needed for the originally intended purpose but is stored due to legal requirements or other reasons is processed solely for the reasons justifying its storage.

Further Information on Processing Operations, Procedures, and Services:
Retention and deletion of data: The following general periods apply to retention and archiving under German law:
10 years: Retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets, as well as the necessary instructions and other organizational documents for their understanding, booking vouchers, and invoices (§ 147 (3) in conjunction with (1) no. 1, 4 and 4a AO, § 14b (1) UStG, § 257 (1) no. 1 and 4, (4) HGB).
6 years: Other business documents: received commercial or business letters, copies of sent commercial or business letters, other documents relevant to taxation, such as timesheets, operating account sheets, calculation documents, price tags, as well as payroll documents unless they are already booking vouchers and cash register strips (§ 147 (3) in conjunction with (1) no. 2, 3, 5 AO, § 257 (1) no. 2 and 3, (4) HGB).
3 years: Data required to consider potential warranty and compensation claims or similar contractual claims and rights, as well as associated inquiries based on previous business experiences and usual industry practices, are stored for the duration of the regular statutory limitation period of three years (§§ 195, 199 BGB).

Rights of the Data Subjects
Rights of the data subjects under the GDPR: As a data subject, you have various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:
Right to object: You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling, to the extent that it is related to such direct marketing.
Right to withdraw consent: You have the right to withdraw any consent given at any time.
Right of access: You have the right to request confirmation of whether personal data concerning you is being processed, to access this data, and to receive further information and a copy of the data in accordance with the legal requirements.
Right to rectification: You have the right, in accordance with the legal requirements, to request the completion or correction of inaccurate personal data concerning you.
Right to erasure and restriction of processing: You have the right, in accordance with the legal requirements, to request that personal data concerning you be deleted without undue delay or, alternatively, to request a restriction of the processing of the data in accordance with the legal requirements.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, in accordance with the legal requirements, or to request that it be transferred to another controller.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

Fulfillment of tasks according to statutes or articles of association
We process the data of our members, supporters, interested parties, business partners, or other persons (collectively referred to as "data subjects") when we are in a membership or other business relationship with them and fulfill our tasks as well as receive services and benefits. Furthermore, we process the data of data subjects based on our legitimate interests, such as in administrative tasks or public relations.
The data processed, the type, scope, purpose, and necessity of its processing are determined by the underlying membership or contractual relationship, from which the necessity of any data disclosures arises (otherwise, we point out necessary data).
We delete data that is no longer necessary for the fulfillment of our statutory and business purposes. This is determined according to the respective tasks and contractual relationships. We retain the data as long as it is relevant for the business transaction and in terms of any warranty or liability obligations based on our legitimate interest in regulating them. The necessity of data retention is regularly reviewed; otherwise, the statutory retention obligations apply.
Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); contract data (e.g., contract object, term, customer category). Member data (e.g., personal data such as name, age, gender, contact data (email address, phone number), membership number, information about membership fees, participation in events, etc.).
Data subjects: Members.
Purposes of processing: Communication; organizational and administrative procedures.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis:Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR); contract concerning membership (statutes) (Art. 6 (1) sentence 1 lit. b) GDPR).

Provision of the Online Offer and Web Hosting
We process the data of users to provide them with our online services. To this end, we process the IP address of the user, which is necessary to deliver the content and functions of our online services to the user's browser or device.
Processed data types: Usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons). Log data (e.g., log files concerning logins or data retrieval or access times).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Provision of our online offer and user-friendliness; information technology infrastructure (operation and provision of information systems and technical equipment (computers, servers, etc.)). Security measures.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Collection of access data and log files: Access to our online offer is logged in the form of so-called "server log files." Server log files can include the address and name of the accessed websites and files, date and time of access, transferred data volumes, messages about successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider. Server log files can be used for security purposes, e.g., to avoid overloading the servers (especially in the case of misuse attacks, so-called DDoS attacks), and to ensure server stability and performance.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).
Deletion of data: Log file information is stored for a maximum duration of 30 days and then deleted or anonymized. Data whose further retention is required for evidence purposes are excluded from deletion until the final clarification of the respective incident.

Use of Cookies
Cookies are small text files or other storage markers that store information on end devices and read information from them. For example, to store the login status in a user account, the content of a shopping cart in an online store, or the accessed content or functions of an online offer. Cookies can also be used for different purposes, such as ensuring the functionality, security, and comfort of online offers and creating analyses of visitor flows.
Notice regarding consent: We use cookies in accordance with the legal requirements. Therefore, we obtain prior consent from the users unless it is not required by law. Consent is especially not necessary if the storage and reading of the information, including cookies, is strictly necessary to provide the user with a telemedia service (i.e., our online offer) expressly requested by them. The revocable consent is clearly communicated to the users and contains information on the respective cookie use.
Notice regarding legal basis: The legal basis on which we process the personal data of the users using cookies depends on whether we ask the users for consent. If the users consent, the legal basis for processing their data is the declared consent. Otherwise, the processed data based on cookies is processed based on our legitimate interests (e.g., an economically viable operation of our online offer and its improvement) or if the use of cookies is necessary to fulfill our contractual obligations.
Storage duration: Regarding the storage duration, the following types of cookies are distinguished:
Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user leaves an online offer and closes their end device (e.g., browser or mobile application).
Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved, and preferred content can be displayed directly when the user visits a website again. The data collected with cookies can also be used for reach measurement.
General information on withdrawal and objection (opt-out): Users can withdraw their consent at any time and object to the processing per the legal requirements, including through their browser privacy settings.
Processed data types: Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
Data subjects: Users (e.g., website visitors, users of online services).
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR); consent (Art. 6 (1) sentence 1 lit. a) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Processing of cookie data based on consent: We use a consent management solution where the consent of the users to the use of cookies or the procedures and providers mentioned within the consent management solution is obtained. This procedure serves to obtain, document, manage, and revoke consent, especially regarding using cookies and similar technologies for storing, reading, and processing information on the users' devices. Users have the opportunity to manage and revoke their consent. The consent declarations are stored to avoid repeated queries and to prove consent per the legal requirements. Storage takes place server-side and/or in a cookie (so-called opt-in cookie) or using similar technologies to assign consent to a specific user or their device. Unless otherwise stated, the storage duration of consent is up to two years. A pseudonymous user identifier is created, which is stored together with the time of consent, the information on the scope of the consent (e.g., categories of cookies and/or service providers), as well as information on the browser, system, and end device used.
Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR).

Blogs and Publication Media
We use blogs or similar means of online communication and publication (hereinafter "publication medium"). The data of readers is processed for the purposes of the publication medium only as far as it is necessary for its presentation and communication between authors and readers or for security reasons. Otherwise, we refer to the information on processing the visitors of our publication medium within this privacy policy.
Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and contributions and the related information, such as authorship details or creation time); usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Feedback (e.g., collecting feedback via online form); provision of our online offer and user-friendliness; security measures; organizational and administrative procedures.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Comments and contributions: When users leave comments or other contributions, their IP addresses may be stored based on our legitimate interests. This is done for our security if someone leaves illegal content in comments and contributions (insults, forbidden political propaganda, etc.). In this case, we could be held liable for the comment or contribution and are therefore interested in the identity of the author.
We also reserve the right to process the information provided by users for spam detection based on our legitimate interests.
On the same legal basis, we reserve the right to store IP addresses of users for the duration of surveys and to use cookies to avoid multiple votes.
The information provided in the context of comments and contributions about the person, possible contact and website information, as well as the content-related information, will be permanently stored by us until the users object.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Contact and Inquiry Management
When contacting us (e.g., by mail, contact form, email, phone, or via social media) and within existing user and business relationships, the information provided by the inquiring persons is processed as far as necessary to respond to the contact inquiries and any requested measures.
Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and contributions and the related information, such as authorship details or creation time); usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons).
Data subjects: Communication partners.
Purposes of processing: Communication; organizational and administrative procedures; feedback (e.g., collecting feedback via online form); provision of our online offer and user-friendliness.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR); contract performance and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Contact form: When contacting us via our contact form, email, or other communication channels, we process the personal data provided to respond to and handle the respective request. This typically includes information such as name, contact details, and any additional information provided that is necessary for appropriate processing. We use this data exclusively for the specified purpose of contact and communication.
Legal basis: Contract performance and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Newsletters and Electronic Notifications
We send newsletters, emails, and other electronic notifications (hereinafter "newsletter") only with the consent of the recipients or based on a legal permission. If the content of the newsletter is specifically described in the context of a registration, it is decisive for the users' consent. For registration to our newsletter, it is generally sufficient to provide your email address. However, to offer you a personalized service, we may request your name for personal address in the newsletter or other information if necessary for the newsletter's purpose.
Retention and deletion: We may retain the unsubscribed email addresses for up to three years based on our legitimate interests to prove a previously given consent. The processing of these data is limited to the purpose of potential defense against claims. An individual deletion request is possible at any time, provided the former existence of a consent is confirmed simultaneously. If we are obligated to observe objections permanently, we reserve the right to store the email address solely for this purpose in a blocklist (so-called "blocklist").
The logging of the registration process is carried out based on our legitimate interests to prove its proper execution. If we engage a service provider to send emails, this is done based on our legitimate interests in an efficient and secure mailing system.
Content:
Information about us, our services, actions, and offers.
Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons); usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions).
Data subjects: Communication partners.
Purposes of processing: Direct marketing (e.g., via email or postal).
Retention and deletion:
3 years: Contractual claims (AT) (data required to consider potential warranty and compensation claims or similar contractual claims and rights, as well as handling associated inquiries, are stored for the duration of the regular statutory limitation period of three years (§§ 1478, 1480 ABGB).).
10 years: Contractual claims (CH) (data necessary to consider potential compensation claims or similar contractual claims and rights and for handling associated inquiries are stored for the statutory limitation period of ten years unless a shorter period of 5 years is applicable in certain cases (Art. 127, 130 OR)).
Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR).
Opt-out option: You can cancel the receipt of our newsletter at any time, i.e., revoke your consents or object to further receipt. A link to cancel the newsletter can be found either at the end of each newsletter or by using one of the above contact options, preferably email.

Further Information on Processing Operations, Procedures, and Services:
Measurement of opening and click rates: The newsletters contain a so-called "web beacon," i.e., a pixel-sized file retrieved from our server or, if we use a mailing service provider, from their server when opening the newsletter. Within this retrieval, technical information such as browser and your system details, your IP address, and the time of retrieval are first collected. This information is used to improve our newsletter's technical performance based on the technical data or target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. This analysis also includes determining whether and when the newsletters are opened and which links are clicked. This information is assigned to the individual newsletter recipients and stored in their profiles until deletion. The evaluations are used to recognize our users' reading habits and adapt our content to them or send different content according to the interests of our users. Measuring the opening and click rates and storing the measurement results in the users' profiles.
Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR).

Promotional Communication via Email, Post, Fax, or Phone
We process personal data for promotional communication, which can be carried out via various channels, such as email, phone, post, or fax, in accordance with legal requirements.
The recipients have the right to withdraw given consents at any time or object to promotional communication at any time.
After withdrawal or objection, we store the data required to prove the previous authorization to contact or send for up to three years after the end of the year of the withdrawal or objection based on our legitimate interests. The processing of these data is limited to the purpose of potential defense against claims. Based on the legitimate interest of permanently observing the withdrawal or objection of the users, we also store the data necessary to avoid a renewed contact (e.g., depending on the communication channel, the email address, phone number, name).
Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and contributions and the related information, such as authorship details or creation time).
Data subjects: Communication partners.
Purposes of processing: Direct marketing (e.g., via email or postal); marketing; sales promotion.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR); legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Presences in Social Networks (Social Media)
We maintain online presences within social networks and process user data in this context to communicate with the users active there or to offer information about us.
We point out that user data can be processed outside the territory of the European Union. This may result in risks for the users because, for example, the enforcement of user rights could be more challenging.
Furthermore, user data within social networks are usually processed for market research and advertising purposes. For example, user profiles can be created based on the usage behavior and resulting interests of the users. These usage profiles can, in turn, be used, for example, to display advertisements inside and outside the networks that are presumed to match the users' interests. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and logged in).
For a detailed description of the respective processing forms and the objection options (opt-out), we refer to the data protection declarations and information of the operators of the respective networks.
Also, in the case of information requests and the assertion of data subject rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the user data and can directly take appropriate measures and provide information. If you still need help, you can contact us.
Processed data types: Contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and contributions and the related information, such as authorship details or creation time); usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Communication; feedback (e.g., collecting feedback via online form); public relations.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal basis: Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Instagram: Social network, enables sharing photos and videos, commenting and favoriting posts, sending messages, subscribing to profiles and pages;
service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland;
legal basis: legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR);
website: https://www.instagram.com;
data protection declaration: https://privacycenter.instagram.com/policy/.
Basis for third-country transfers: Data Privacy Framework (DPF).

Facebook Pages: Profiles within the social network Facebook - We are jointly responsible with Meta Platforms Ireland Limited for collecting (but not further processing) data of visitors to our Facebook page (so-called "Fanpage"). This data includes information about the types of content that users view or interact with or the actions they take (see "Things you and others do and provide" in the Facebook Data Policy: https://www.facebook.com/privacy/policy/), and information about the devices used by the users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see "Device Information" in the Facebook Data Policy: https://www.facebook.com/privacy/policy/). As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, called "Page Insights," to page operators to provide them with insights into how people interact with their pages and related content. We have entered into a special agreement with Facebook ("Page Insights Information," https://www.facebook.com/legal/terms/page_controller_addendum), which specifically regulates the security measures Facebook must observe and in which Facebook has agreed to fulfill the data subject rights (i.e., users can, for example, address information or deletion requests directly to Facebook). The users' rights (in particular, to information, deletion, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Page Insights Information" (https://www.facebook.com/legal/terms/information_about_page_insights_data). Joint responsibility is limited to the collection and transmission of data to Meta Platforms Ireland Limited, a company based in the EU. Meta Platforms Ireland Limited is solely responsible for the further processing of the data, particularly the transmission of the data to the parent company Meta Platforms, Inc. in the USA;
service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland;
legal basis: legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR);
website: https://www.facebook.com;
data protection declaration: https://www.facebook.com/privacy/policy/.
Basis for third-country transfers: Data Privacy Framework (DPF).

Plugins and Embedded Functions as well as Content
We integrate function and content elements into our online offer, which are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may include, for example, graphics, videos, or city maps (hereinafter uniformly referred to as "content").
The integration always presupposes that the third-party providers of this content process the users' IP address since they could not send the content to their browser without the IP address. The IP address is therefore necessary for displaying these contents or functions. We strive to use only such content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information, such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the users' devices and contain, among other things, technical information about the browser and operating system, referring websites, visit time, and other information about the use of our online offer, as well as being linked to such information from other sources.
Notice regarding legal basis: If we ask the users for their consent to use the third-party providers, the legal basis for processing data is consent. Otherwise, the users' data is processed based on our legitimate interests (i.e., interest in efficient, economic, and recipient-friendly services). In this context, we also refer you to the information on the use of cookies in this privacy policy.
Processed data types: Usage data (e.g., page views and duration of stay, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, involved persons); inventory data (e.g., full name, residential address, contact information, customer number, etc.); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and contributions and the related information, such as authorship details or creation time); location data (information about the geographical position of a device or person).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Provision of our online offer and user-friendliness.
Retention and deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section. Storage of cookies for up to 2 years (unless otherwise specified, cookies and similar storage methods can be stored on users' devices for up to two years).
Legal basis: Consent (Art. 6 (1) sentence 1 lit. a) GDPR); legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Further Information on Processing Operations, Procedures, and Services:
Google Maps: We integrate the maps of the service "Google Maps" from the provider Google. The processed data can include, in particular, IP addresses and location data of the users; service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland;
legal basis: consent (Art. 6 (1) sentence 1 lit. a) GDPR);
website: https://mapsplatform.google.com/;
data protection declaration: https://policies.google.com/privacy.
Basis for third-country transfers: Data Privacy Framework (DPF).

YouTube Videos: Video content;
service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
legal basis: consent (Art. 6 (1) sentence 1 lit. a) GDPR);
website: https://www.youtube.com;
data protection declaration: https://policies.google.com/privacy;
basis for third-country transfers: Data Privacy Framework (DPF).
Opt-out option: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for displaying advertisements: https://myadcenter.google.com/personalizationoff.

Created with the free privacy generator by Dr. Thomas Schwenke.

Imprint

Content Responsible according to § 55 Abs. 2 RStV:

Urban Theater e.V.
Eosanderstr. 12
10587 Berlin

Email: info(at)urban-theater.com
Web: www.urban-theater.com

Chairpersons: Natalia Lapina and Dr. Witalij Schmidt

Registered in the Register of Associations at the District Court of Charlottenburg under number VR 40897 B.
Tax Number: 27/647/60005

Website Design
Alya Yunusova
Email: guilttrppngxo@gmail.com
Web: www.alyayunusova.ru

Disclaimer

The content of this website has been compiled by us with the greatest care. We assume no liability for the content of external links. The operators of the linked sites are solely responsible for their content. We are not liable to the user for the accuracy of the information or references contained in these domains. Liability for damages that may arise from the use of the link catalog is not assumed.
We explicitly distance ourselves from any potentially illegal content on the linked pages; the webmaster only evaluates the content of these pages at the time they are included in the link catalog, and any later changes cannot be reviewed.
We are also not aware of any trademark or copyright infringements by external providers. If you still consider a violation to be present, please inform us!