Privacy policy

We take the protection of your personal data seriously. This privacy policy explains which data is processed when you use this website.

Controller

Gemeinschaftsgefühl UG (haftungsbeschränkt)
Jungfernstieg 21
24103 Kiel
Germany

Email: info@tohoop-festival.de

Hosting and server logs

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you access the website, the server processes technically necessary data: the anonymised IP address, date and time of access, the page or file requested, amount of data transferred, messages about successful requests, the referring website, and information about your browser and operating system.

This processing is necessary to operate the website securely and reliably, including to investigate errors and defend against attacks. The legal basis is Article 6(1)(f) GDPR. Server logs are deleted after seven days by default. We do not use them to create user profiles or measure audiences; for that we use Matomo, and only with your consent (see below).

Map (OpenFreeMap)

To show the festival location, the home page embeds a map. Your browser loads the map tiles, map style and map fonts directly from the OpenFreeMap service (tiles.openfreemap.org), run by Hyperknot Software Kft., Hungary; the map data itself comes from OpenStreetMap. When the map loads, your IP address and technical information about your browser are sent to OpenFreeMap, which may use a content delivery network (Cloudflare) for this.

The map helps visitors find the venue; the legal basis is Article 6(1)(f) GDPR. Further information is available in the OpenFreeMap privacy notice.

External links

The “Open in Google Maps” link leads to Google Maps. A connection to Google is only made once you select the link. Google’s privacy policy applies to the processing that takes place there.

Contact by email

If you contact us by email, we process the information you send in order to deal with your request. The legal basis is Article 6(1)(b) GDPR where your request concerns entering into or performing a contract; otherwise, it is Article 6(1)(f) GDPR. We delete this information when it is no longer needed to handle your request, unless legal retention obligations apply.

Buying tickets

We sell tickets through our own ticket shop at tickets.tohoop-festival.de. It runs on the open-source software pretix on our servers at Hetzner Online GmbH in Germany. To process an order, we use the information you enter in the shop: your name and email address, the names of the people the tickets are issued to, order and payment details and, where applicable, other information requested for a ticket.

The legal basis is Article 6(1)(b) GDPR (performance of a contract) and, for retention, Article 6(1)(c) GDPR. We keep invoices and accounting records for the statutory periods (section 147 AO, section 257 HGB) of up to ten years.

Order confirmations and tickets are sent through the email service AhaSend, which acts on our behalf. Payment is made by bank transfer, so our bank processes the details of your payment. The ticket shop sets technically necessary cookies for the cart, session and security (section 25(2) no. 2 TDDDG) and asks separately whether you agree to Matomo (see below).

Applying for Art & Light

We collect applications for the Art & Light open call through a Google Forms form. When you open the link, you leave our website; the information you enter there is processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework for this. The legal basis is Article 6(1)(b) GDPR, as we review your application. We delete the information once the selection is complete and no collaboration results from it. See Google’s privacy policy for details.

Audience measurement with Matomo

If you consent, we use the open-source software Matomo to understand how our website is used and how visitors find us (for example via Instagram, flyers or QR codes). We run Matomo ourselves on our servers at Hetzner Online GmbH in Germany (analytics.tohoop-festival.de); the data is not shared with third parties.

We also use Matomo in the ticket shop (tickets.tohoop-festival.de) only with your consent; a separate notice asks you there. If you have agreed on both sites, we link your visit to the website with your visit to the ticket shop to see which campaigns lead to ticket purchases. For a purchase, Matomo then also records the order number, the ticket types bought and the amount, but no names or email addresses.

We process: your IP address shortened by two bytes (used to derive an approximate country and city), date and time, pages viewed and external links clicked, the referring website, campaign parameters in links (e.g. utm_source), and information about your browser, operating system, device type, screen resolution and language. Matomo sets the cookies _pk_id (recognition, 13 months), _pk_ses (session, 30 minutes) and _pk_ref (origin of the visit, 6 months).

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent, Matomo is not loaded and no cookies are set. We store your choice in your browser’s local storage (tohoop-analytics-consent); this is necessary under Section 25(2) no. 2 TDDDG so that we don’t ask you again on every visit. Raw data is deleted after 180 days; only aggregated statistics without personal reference remain.

You can withdraw or give your consent at any time with effect for the future:

Your rights

You have the right to access your personal data and to request its rectification, erasure, restriction of processing and portability. You may also object to processing based on legitimate interests. In addition, you have the right to lodge a complaint with a data protection supervisory authority.