de/en
Heidi Horten Collection
Tickets
 

Privacy Policy

The Heidi Horten Collection processes personal data only in accordance with the statutory provisions of the GDPR. The following section explains which data are collected during your visit to our website or when using our services (contact, social media, job applications), and how these data are used.

Our designated Data Protection Officer can be reached at:

[email protected]

1. PERSONAL DATA

“Personal data” refers to all information relating to an identified or identifiable natural person, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photos, voice recordings, as well as biometric data such as fingerprints. Sensitive data, such as health-related information, may also be included.

We only collect personal data that are necessary for the performance and provision of our services, or that you have voluntarily provided to us.

DATA SECURITY

The protection of your personal data is ensured through appropriate organizational and technical measures. These safeguards particularly concern protection against unauthorized, unlawful, or accidental access, processing, loss, use, and manipulation.

We make every effort to ensure that any data breaches are detected early and, if necessary, promptly reported to you and/or the competent supervisory authority, including relevant categories of affected data.

Our website is secured with an SSL (Secure Socket Layer) certificate, enabling the encrypted transmission of your personal data.

Despite our best efforts to maintain a high level of diligence, it cannot be ruled out that information you provide may be viewed or used by others. Please note that we cannot accept any liability for the disclosure of information due to errors not caused by us during data transmission and/or unauthorized access by third parties (e.g., hacking of email accounts or telephones, interception of faxes).

2. DATA PROCESSING

We collect, process, and use your personal data only with your consent, contractual relationship, or legal obligation in accordance with the GDPR. Exceptions apply to statistical purposes, provided the data have been anonymized.

Data processing is carried out on the basis of data protection and civil law provisions (TKG, EU-GDPR, DSG as amended).

DATA PROCESSING OF WEBSITE USERS

You may visit our website without providing any personal information. When you access the site, certain access data (such as your IP address and metadata including user agent) are automatically processed for the purposes of user support, security, and improvement of services offered on the website, and may be anonymized and shared with third parties. As a mere website visitor, you may fully use our information services.

For the online purchase of tickets and products, you will be redirected to hortencollection.com/tickets, where you can enter your data for the purpose of online ticket purchases. The submission of such personal data is voluntary.

We only share your data with third parties if it is necessary for the agreed purposes.

Your data may be shared with:

Our technical partners

Delivery and transport services

Your personal data will only be used for marketing purposes (e.g., newsletters, invitations) if you have provided prior consent.

NEWSLETTER

Subscription to our newsletter may be made by email, postal request, or directly via our website under the “Newsletter” section. We collect your name, address, email address, and gender to allow for personalized communication. On a voluntary basis, you may also provide information on special interests to help us tailor newsletters to your preferences.

To ensure that you have personally authorized the newsletter subscription, we use a double opt-in process for website sign-ups. After registration, a confirmation email will be sent to the email address you provided. By clicking the link in that email, you confirm your subscription.

You may revoke your consent at any time. Every electronic newsletter contains an unsubscribe link. Alternatively, you may contact us at [email protected] and your email address will be promptly removed from our mailing list.

PHOTOS-, AUDIO-, AND VIDEO RECORDINGS 

Please note that photos, audio, and video recordings taken during events may be used by the Heidi Horten Collection without time or location restrictions for documentation, information, and reporting purposes. Such materials may be published in print publications, on our website, in newsletters, and on social media.

Data may be shared with internal departments (IT, Marketing) and processors involved in production, processing, and publication, as well as with third parties (e.g., media) for information and reporting purposes. Data are not shared with recipients pursuing their own purposes. Please note that certain social media providers may acquire usage rights for published content.

Processing, publication, and disclosure are based on our legitimate interest under Art. 6(1)(f) GDPR and §§ 12, 13 DSG to represent our activities and conduct public relations. You have the right to object to such processing at any time, either by contacting responsible staff or photographers on site, or at [email protected].

We respect the rights and freedoms of affected individuals. Notices are provided in advance (e.g., invitations, on-site). We ensure that legitimate interests of depicted persons are not infringed. If rights and freedoms are impaired for specific reasons, we will take appropriate measures to stop further processing. Please note that anonymization of already published print materials is not possible. However, removal from our website or social media is possible within technical limits.

EVENTS

In the course of event management, we process your basic and contact details, your attendance or non-attendance, event participation, invitation and attendance history, and any voluntarily provided information (e.g., dietary preferences, allergies, disabilities).

Legal basis:

Art. 6(1)(a) GDPR – your consent

Art. 6(1)(f) GDPR – legitimate interests (organization and follow-up of events, fulfillment of participant requests, marketing strategies, client acquisition).

Special categories of personal data (e.g., allergies, disabilities) are processed exclusively on the basis of your voluntary consent. Lack of consent may prevent us from fulfilling certain participant requests. Consent may be withdrawn at any time.

Data are retained for a maximum of 3 years after the last contact. Data may be shared with processors (e.g., catering, event management, registration, security), who are contractually bound to comply with data protection requirements and delete data after service fulfillment. Data processing takes place exclusively within the EU.

DATA TRANSFER TO THIRD COUNTRIES:

Some of the above recipients may be located outside your country or process personal data abroad. Such countries may not provide an equivalent level of data protection. Data are transferred only to countries recognized by the European Commission as having an adequate level of protection, or we implement safeguards such as EU Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC).

3. DATA RETENTION

We will not retain data longer than necessary to fulfill contractual or legal obligations and to defend against liability claims.

4. YOUR RIGHTS

Under applicable data protection law, you have the following rights:

Right of access: You may request information about the personal data we process about you, including origin, recipients, and purposes of processing. The first request is free of charge; subsequent requests may incur fees.

Right to rectification and erasure: You may request correction of inaccurate data or deletion of unlawfully processed data.

Right to object: You may object, in whole or in part, to the processing of your personal data for specific reasons relating to your personal situation.

Right to data portability: You may request transmission of your data to a third party in accordance with legal requirements.

To exercise any of these rights, please contact us at [email protected].

If you believe that our processing of your personal data violates applicable law or infringes your data protection rights, you may lodge a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority. 

YouTube

Our website uses YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA), represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to embed videos. By default, your IP address is transmitted to YouTube when accessing a page with embedded videos, and cookies may be installed.

However, we embed our videos using YouTube’s enhanced privacy mode. According to Google, this means personal data are not evaluated unless you actively view the video. By clicking on a video, your IP address will be transmitted to YouTube, and if you are logged in, this may be linked to your user account. You can prevent this by logging out of YouTube before playing a video.

We have no control over further data processing by YouTube. For more information, please see YouTube’s privacy policy at www.google.de/intl/de/policies/privacy/

Analytics

This website uses Matomo, an open-source, cloud-hosted analytics platform, to collect anonymous usage data.

Matomo uses cookies, which are stored on your device. The data collected are processed solely by us and not shared with third parties. Cookies are stored for a maximum of 13 months. Details: https://matomo.org/faq/general/faq_146/; 

  • Matomo processes the following data:
  • Cookies
  • Anonymized IP addresses (last 2 bytes removed, e.g., 198.51.0.0 instead of 198.51.100.54)
  • Pseudonymized location (based on anonymized IP)
  • Date and time
  • Page titles and URLs visited
  • Referrer URLs (if allowed)
  • Screen resolution
  • Local time
  • Files clicked and downloaded
  • External links clicked
  • Page generation time
  • Country, region, city (low accuracy based on IP)
  • Browser language
  • Browser user agent
  • Form interactions (not including form content)

Right to lodge a complaint: If you believe our use of Matomo violates the law, you have the right to file a complaint with the Data Protection Authority.

Your Privacy Settings