1. Controller
Ovation Events GmbH
Staudacher Str. 3a
81825 Munich, Germany
E-mail: admin@ovation-event.de
2. General information on data processing
As a rule, we process personal data of our users only to the extent necessary to provide a functional website and our content and services (Art. 6 (1) (b) GDPR), or where consent has been given (Art. 6 (1) (a) GDPR).
3. Hosting
This website is hosted by Hostinger (Hostinger International Ltd.). Processing is based on our legitimate interest in the secure and efficient provision of our online services (Art. 6 (1) (f) GDPR) and, where applicable, on a data processing agreement concluded with the hosting provider.
4. Cookies and similar technologies
When you visit the website, a cookie consent banner is displayed through which you can accept or reject the non-essential services listed below. Technically necessary cookies (e.g. for session management, security and language settings) are set on the basis of § 25 (2) TTDSG in conjunction with Art. 6 (1) (f) GDPR. All services beyond that are only activated after your consent pursuant to § 25 (1) TTDSG, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings.
In detail, we use the following services:
WordPress (technically necessary) — for the basic operation, security, session management and technical settings of the website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in error-free operation).
IFB Events Manager (technically necessary) — manages and displays information about performances, venues, dates, cities and ticket links. No personal visitor data is processed in this context. Legal basis: Art. 6 (1) (f) GDPR.
IFB Multilang (technically necessary) — enables multilingual content and stores the language you have selected (usually via a cookie). Legal basis: Art. 6 (1) (f) GDPR.
Google Analytics 4 (subject to consent) — a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Records and analyses how visitors use the website (e.g. pages viewed, time spent). Legal basis: Art. 6 (1) (a) GDPR (consent). A transfer of data to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCC) are used as an additional safeguard.
Meta Pixel (subject to consent) — a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (parent company: Meta Platforms, Inc., USA). Used to measure the performance of advertisements, create advertising audiences and display relevant advertising. Legal basis: Art. 6 (1) (a) GDPR (consent). Data is transferred to the USA on the basis of Standard Contractual Clauses.
Mailchimp (subject to consent, see section 5) — a service of Intuit Mailchimp (The Rocket Science Group LLC, USA) for managing newsletter subscriptions, e-mail delivery, mailing lists and campaign analysis. Legal basis: Art. 6 (1) (a) GDPR. Data is transferred to the USA on the basis of Standard Contractual Clauses.
Non-essential analytics and advertising technologies are only activated once the required consent has been given. You can change your selection at any time via the cookie settings panel on the website.
5. Newsletter
If you subscribe to our newsletter via the “Newsletter” form, we use your e-mail address to send you regular information about our performances. The service provider is Mailchimp (The Rocket Science Group LLC, Atlanta, USA). Subscription uses the double opt-in procedure; you can withdraw your consent to receiving the newsletter free of charge at any time via the unsubscribe link contained in every e-mail.
6. Ticket purchases via third-party providers
Tickets for our performances are sold via external ticketing platforms (including bilietai.lt, bilesuserviss.lv, piletilevi.ee, lippu.fi, sibeliustalo.fi). When you click “Buy tickets”, you leave our website; data processing there is subject to the privacy policy of the respective provider, over which we have no influence.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).
8. Storage period
Personal data is stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations (e.g. under commercial and tax law).