Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can be used to personally identify you. For detailed information regarding data protection, please refer to our privacy policy listed below.

Data collection on our website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

Some of your data is collected when you provide it to us—for example, information you enter into a contact form.
Other data is automatically collected by our IT systems when you visit the website. This primarily consists of technical data (such as your internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter our website.

What data do we collect?

To use the services offered and properly process your orders, we collect the following personal data:

Salutation
Name, First Name
company name, if applicable
Username
address
Phonenumber
Mail-Address
Birthdate
Account details
IP-Address

For what purposes do we use your data?

We process the personal data you provide in order to identify you as a contractual partner; to verify your age and check the plausibility of your data; to process your order and handle customer service inquiries; to provide our products and services without errors, keep you informed, and improve our offerings for you; and to facilitate the processing of warranty claims.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, or deletion of this data. You may contact us at any time at the address provided in the legal notice regarding this matter or any other questions concerning data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Analytics tools and third-party tools

When you visit our website, your browsing behavior may be statistically analyzed. This is primarily done using cookies and analysis tools. As a rule, the analysis of your browsing behavior is anonymous; the behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You may object to this analysis. We provide information about the options for objecting in this privacy policy.

2. General information and mandatory information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.

Please note that data transmission over the Internet (e.g., via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the controller

The entity responsible for data processing on this website is:

Folkert Uhde
Köthener BachGesellschaft mbH
Theaterstraße 12
D-06366 Köthen

Phone: +49 (0) 34 96 – 30 39 85
Fax: +49 (0) 34 96 – 30 39 87
Mail: info@bachfesttage.de
Web: www.bachfesttage.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, or similar).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke consent you have already given at any time. An informal notification sent to us by email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based.

A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content—such as orders or inquiries that you send to us as the site operator—this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, following the conclusion of a contract requiring payment, there is an obligation to provide us with your payment details (e.g., account number for direct debit authorization), these data are required for payment processing.

Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are processed exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in the browser bar.
With encrypted communication, the payment details you transmit to us cannot be intercepted or read by third parties.

Information, blocking, deletion

Subject to applicable legal provisions, you have the right at any time to obtain information free of charge regarding your stored personal data, its origin and recipients, and the purpose of the data processing, as well as—where applicable—the right to have this data corrected, blocked, or deleted. You may contact us at any time at the address provided in the legal notice regarding this matter or for any further questions concerning personal data.

Objection to promotional emails

The use of contact details published in compliance with mandatory legal notice requirements for the purpose of sending unsolicited advertising or informational materials is hereby expressly prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional information being sent, such as via spam emails.

3. Data Protection Officer

Statutorily required data protection officer

We have appointed a data protection officer for our company.

Folkert Uhde
Köthener BachGesellschaft mbH
Theaterstraße 12
D-06366 Köthen

Phone: +49 (0) 34 96 – 30 39 85
Fax: +49 (0) 34 96 – 30 39 87
Mail: info@bachfesttage.de
Web: www.bachfesttage.de

4. Data collection on our website

Cookies

Some of these web pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. They serve to make our service more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies in specific cases or generally, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary for carrying out the electronic communication process or for providing specific functions you have requested (e.g., the shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. Any other cookies (e.g., cookies for analyzing your browsing behavior) that are stored are addressed separately in this privacy policy.

Server log files

When using our website for purely informational purposes—that is, if you do not register or otherwise transmit information to us—we collect only the data that your browser transmits to our server (so-called “server log files”).

When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The website we visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you arrived at the page
Browser and browser version used
Operating system used
IP address used (where applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to retrospectively examine the server log files should concrete evidence point to unlawful use.

Contact form

If you send us inquiries via the contact form, the information provided in the form—including the contact details you supply—will be stored by us for the purpose of processing the inquiry and handling any follow-up questions. We will not share this data without your consent.

The data entered into the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time. An informal notification sent to us via email is sufficient for this purpose. The lawfulness of data processing operations carried out prior to the revocation remains unaffected by the revocation.
The data you enter into the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions—particularly retention periods—remain unaffected.

Registration on this website

You can register on our website to access additional features. We use the data provided for this purpose solely to enable your use of the specific service or offering for which you have registered. All mandatory information requested during registration must be provided in full; otherwise, we will decline the registration.

For significant changes—such as to the scope of services or technically necessary modifications—we use the email address provided during registration to inform you.

The data entered during registration is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. An informal notification sent to us via email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation remains unaffected.

The data collected during registration is stored by us for as long as you remain registered on our website and is subsequently deleted. Statutory retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent necessary to establish, define the content of, or modify the legal relationship (inventory data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract. We collect, process, and use personal data regarding the use of our websites (usage data) only to the extent necessary to enable the user to utilize the service or to bill for it.

The collected customer data will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission upon conclusion of a contract for online shops, retailers, and goods shipment

We only transmit personal data to third parties if this is necessary for the performance of the contract—for example, to companies entrusted with the delivery of goods or the financial institution commissioned to process payments. No further transmission of data takes place unless you have expressly consented to such transmission. Your data will not be passed on to third parties without your express consent, for instance for advertising purposes.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract.

Data transmission upon conclusion of a contract for services and digital content

We only transmit personal data to third parties if this is necessary for the performance of the contract—for example, to the financial institution commissioned to process payments.
No further transmission of data takes place unless you have expressly consented to such transmission. Your data will not be passed on to third parties without your express consent, for instance for advertising purposes.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract.

5. Social Media

Facebook-Plugins (Like & Share-Button)

Plugins from the social network Facebook (provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA) are integrated into our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. This informs Facebook that you have visited our site using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account.

Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

You can find further information on this in Facebook’s privacy policy at: https://de-de.facebook.com/policy.php.

If you do not wish for Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Instagram Plugin

Features of the Instagram service are integrated into our pages. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used by Instagram.

You can find further information on this in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

6. Analytics tools and advertising

Google Universal Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies.” These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its online services and its advertising.

IP Anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be truncated by Google within the Member States of the European Union or in other states party to the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings of your browser software; however, please note that doing so may mean you are unable to make full use of all the functions of this website. Furthermore, you can prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set that prevents your data from being collected during future visits to this website: Disable Google Analytics.

You can find more information about how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing on behalf of a controller

We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “Demographics” feature of Google Analytics. This allows for the creation of reports containing information on the age, gender, and interests of site visitors. This data is derived from Google’s interest-based advertising and visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection.”

Google Analytics Remarketing

Our websites use Google Analytics Remarketing features in conjunction with the cross-device capabilities of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature enables the linking of advertising audiences created via Google Analytics Remarketing with the cross-device capabilities of Google AdWords and Google DoubleClick. This allows interest-based, personalized advertising messages—tailored to you based on your past usage and browsing behavior on one device (e.g., a mobile phone)—to be displayed on another of your devices (e.g., a tablet or PC).

If you have given your consent, Google links your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be displayed on any device where you sign in with your Google account.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create audiences for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account; to do so, please follow this link: https://www.google.com/settings/ads/onweb/.

The consolidation of collected data in your Google account takes place exclusively based on your consent, which you may grant to or revoke from Google (Art. 6(1)(a) GDPR). For data collection processes that are not consolidated in your Google account (e.g., because you do not have a Google account or have objected to such consolidation), the collection of data is based on Art. 6(1)(f) GDPR. The legitimate interest arises from the website operator’s interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

Google AdWords und Google Conversion-Tracking

This website uses Google AdWords. AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use a feature called conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits specific pages on this website and the cookie has not yet expired, both Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked across the websites of AdWords customers. The information obtained via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt out of this usage by easily disabling the Google conversion tracking cookie through your internet browser’s user settings. You will then not be included in the conversion tracking statistics.

“Conversion cookies” are stored based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its online services and its advertising.

You can find more information about Google AdWords and Google conversion tracking in Google’s privacy policy: https://www.google.de/policies/privacy/.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to refuse cookies in specific instances or generally, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Facebook Pixel

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), for conversion tracking.
This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and allows future advertising measures to be optimized.

As the operators of this website, we treat the collected data as anonymous; we cannot draw conclusions regarding the users’ identities. However, the data is stored and processed by Facebook, enabling a link to the respective user profile and allowing Facebook to use the data for its own advertising purposes in accordance with its Data Use Policy. This enables Facebook to display advertisements both on and off the Facebook platform. We, as the site operators, have no control over this use of the data.

You can find further information on the protection of your privacy in Facebook’s data policy: https://www.facebook.com/about/privacy/.

You can also disable the “Custom Audiences” remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

7. Newsletter

Newsletter data

If you wish to subscribe to the newsletter offered on the website, we require an email address from you, as well as information allowing us to verify that you are the owner of the provided email address and consent to receiving the newsletter. No further data is collected, or any such data is collected only on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.

The data entered into the newsletter sign-up form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke your consent to the storage of the data and your email address, as well as their use for sending the newsletter, at any time—for example, via the “unsubscribe” link in the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the revocation.

The data you have provided to us for the purpose of receiving the newsletter will be stored until you unsubscribe and will be deleted once the subscription is cancelled. Data stored for other purposes (e.g., email addresses for the member area) remain unaffected by this.

8. Plugins and Tools

YouTube

Our website uses plugins from YouTube, a site operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

Spotify

Features of the music service Spotify are integrated into our website. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on our site. An overview of the Spotify plugins can be found at: https://developer.spotify.com.

This allows a direct connection to be established between your browser and the Spotify server via the plugin when you visit our pages. As a result, Spotify receives information that you have visited our site using your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of our pages to your Spotify profile. This enables Spotify to associate your visit to our pages with your user account.

You can find further information on this in Spotify’s privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not wish for Spotify to be able to associate your visit to our pages with your Spotify user account, please log out of your Spotify user account.

Google Web Fonts

This page uses so-called web fonts provided by Google to ensure the uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.