This data protection information refers to the processing of personal data in connection with the internal reporting office in accordance with ticket purchases at the university.

The controller, i.e. the organisation responsible for data processing as defined in data protection legislation, especially the General Data Protection Regulation (GDPR), is the:

University of Music Würzburg
Hofstallstr. 6-8
97070 Würzburg
Phone: +49 (0)931-32187-0
Fax: +49 (0)931-32187-2800

The University of Music Wuerzburg is an organisation under public law and a state institution (article 4 (1) of the Bavarian Higher Education Innovation Act (BayHIG)). It is represented by the president, Professor Dr. Christoph Wünsch.

You can contact our official Data Protection Officer at:

Data Protection Officer of the University of Music Würzburg
Mr. Daniel Bachmeier
Hofstallstr. 6-8
97070 Würzburg
E-Mail: datenschutz@hfm-wuerzburg.de

Your data is collected in order to contact you in relation to your ticket purchase, to organise the dispatch of tickets and to process payment.

Legal basis:
The legal basis for the processing of personal data is article 6 (1) point b of the GDPR.

As part of the ticket purchase process, your personal data is collected and processed for the following purposes:

Name, address, telephone number, e-mail address, date of birth, payment method details (account or credit card details, PayPal details etc.), ID card details.

In addition, further data may be processed in individual cases that are necessary for:

• participation in the event or access and seating (e.g. information on allergies, food intolerances, wheelchair users);
• Authorisation to book certain price levels (school pupils, severely disabled persons, etc.)

• Ticket buyers
• Event visitors

Your personal data will be passed on to Reservix GmbH (order processor). Your ticket purchase is organised with the help of electronic data processing by Reservix GmbH (reservation and booking of seats in the seating plan, invoicing of the order, preparation of dispatch). In addition, your data will be passed on to the responsible departments within the university, which will be involved in processing the order.

Not planned at present.

Your data will be stored for a maximum of 10 years after collection. Your data can be deleted independently in your account.

Pursuant to articles 15 et seq. of the GDPR, you, the data subject, are entitled to the following rights concerning the processing of your data:

• You can ask for information about whether data concerning you is being processed. If this is the case, you are entitled to information about which data is processed and other information relating to the processing (article 15 of the GDPR). Please note that this right to information can be restricted or excluded in certain cases (see in particular article 10 of the BayDSG).
• If the personal data concerning you is/has become inaccurate or incomplete, you can request that this data is rectified and/or completed (article 16 of the GDPR).
• If the legal requirements are met, you can request that your personal data be deleted (article 17 of the GDPR) or processing of your data be restricted (article 18 of the GDPR). The right to deletion pursuant to article 17 (1) and (2) of the GDPR does not apply in certain cases, however, such as if the processing of personal data is vital for the performance of a task that is in the public interest or is performed in the exercise of official authority (article 17 (3) point b) of the GDPR).
• If you have consented to data processing or there is a contract concerning data processing and data is processed automatically, you may be entitled to data portability (article 20 of the GDPR).
• If there is an international transfer of personal data without the basis of an adequacy decision of the EU Commission, you have the right to obtain a copy of the contractual safeguards from us upon request.
• You are entitled to file a complaint concerning the processing of your personal data with a supervisory authority as defined in article 51 of the GDPR. The pertinent supervisory authority for the Bavarian public service is the Bavarian Data Protection Commissioner, Wagmüllerstraße 18, 80538 München. In addition to the right of appeal, you can also seek a judicial remedy.

Insofar as processing is based on consent, you have the right to revoke your consent at any time. The revocation is only effective for the future; this means that the revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You may object to the processing of your personal data at any time due to reasons based on your personal circumstances (pursuant to article 21 of the GDPR).

If the legal requirements are met, we will then not further process your personal data.

If you choose to exercise the rights stated above, the public office will check whether the legal requirements for doing so have been met.

We reserve the right to change this data protection declaration to accommodate changes to legislation or changes in the services we provide (e.g., if we introduce new services).

If you have any further questions, please feel free to contact the Data Protection Officer.