PRIVACY POLICY

PART 1 - INTRODUCTION

The protection of your data is important! At DIGGIstage we are committed to protecting your privacy. On this page you will learn how your data is collected and processed.

The processing of personal data (e.g. name, address, e-mail address or telephone number) always takes place in accordance with the basic data protection regulation and in accordance with the country-specific data protection regulations applicable to us. By means of this data protection declaration we would like to inform you about the type, the extent and the purpose of the personal data collected, used and processed by us and - if personal data is collected or processed - about the rights to which you are entitled.

In the context of our data protection declaration we use various legal and technical terms. Explanations can be found in the section "Definitions".

As the person responsible for data processing, we have implemented numerous technical and organisational measures to ensure that the personal data processed by us is protected as completely as possible. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are also free to transmit personal data to us by alternative means, for example by telephone.

This data protection declaration applies to the personal data of visitors to our websites, artists under contract with us as well as partners and suppliers.

The company responsible for data processing within the meaning of the applicable data protection laws (including, among others, the Basic Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR") ("DIGGIstage" or "we"):

DIGGIstage Daniel Matka
Hainsberger Str. 14
01159 Dresden
GERMANY
E-Mail: daniel@diggistage.com
Websites: all DIGGIstage websites and services.

You can always contact us directly if you have any questions or suggestions regarding data protection.

Important: Please note that this Privacy Policy may change from time to time. Please use this page to inform you, as we will post any changes here.

If you do not agree with any aspect of our privacy policy, you may be entitled to legal claims which are also described here.

PART 2 - SUMMARY:

OUR PRIVACY POLICY AT A GLANCE

What personal information do we collect?

Visitors of our web pages:

We collect a limited amount of information from visitors to our websites and use it to help you manage our websites and to better manage the services we offer. This includes information about how you use our websites and how often you access them.

For more information about what information we collect about you when you visit our websites, please see the "Our Privacy Policy in Detail" section.

Customer data / data of contractual artists:

If you are a DIGGIstage artist or our customer, we may need to collect and use certain personal information to provide services to you, such as: (1) Marketing and publishing your music (2) Producing and finishing your works (3) Ensuring license management for your music and preventing copyright infringement, and (4) Information about offers that may be useful to you.

A more detailed description of the personal data we collect in this way can be found in the section "Our privacy policy in detail".

Supplier data / partner data:

We need a few pieces of information from our suppliers, partners and service providers to ensure a smooth process. This includes the contact details of the responsible persons within your company in order to be able to communicate with you. We also need further information, such as your bank details, so that we can pay for the services you provide (if contractually agreed).

A more detailed description of the personal data we collect about you can be found in the section "Our privacy policy in detail".

Who collects personal data?

Visitors of our web pages:

We automatically collect your data using cookies according to the cookie settings in your browser when you visit our websites. We also collect information from you when you contact us through the Websites, for example when you enter information into a contact form or use a possible chat function. In general, if you access our websites or read or click on an e-mail from us, we may also collect certain data automatically. For more information about cookies and your choices, please see the relevant section of this Privacy Policy.

Customer data / data of contractual artists:

We only collect your personal data directly from you.

Supplier and partner data:

We only collect your personal data directly from you in the course of a cooperation.

Why we collect your personal data and how we use it

Visitors of our web pages:

We use your data to make our websites easier for you to use, for example by showing you content that we think may be of interest to you.

For more information about cookies, such as how we use them and what choices you have, please see the "Our Privacy Policy in Detail" section.

Customer data / data of contractual artists:

We collect and use information about our contractual artists and customers primarily to ensure that the contractual agreements between us can be properly implemented to ensure a smooth business relationship. For example, we need personal data in order to process license and record contracts and to be able to deliver services or performances ordered by you.

For more information on how we use your personal data, please see the "Our Privacy Policy in Detail" section.

Supplier and partner data:

We use your personal data mainly for two reasons: firstly to ensure that the contractual agreements between us can be properly implemented and that a smooth business relationship is possible, and secondly to ensure compliance with legal regulations.

For more information on how we use your personal data, please see the "Our Privacy Policy in Detail" section.

Passing on of personal data

Visitors of our web pages

Unless you choose otherwise, we may share your information with web analytics service providers, affiliate networks, marketing automation platforms and social media services to ensure that you only receive targeted advertising.

In general, we reserve the right to transfer your data to third countries outside the EU or the EEA. In this case, however, we will ensure through appropriate agreements that the level of data protection at least corresponds to the level of protection guaranteed by the GDPR.

Customer data / data of contractual artists

We pass your data on for the following purposes: (1) primarily to ensure that you can make use of the services ordered from us and, for example, also receive mail from us. (e.g. passing on to a parcel service provider), (2) to payment service providers such as PayPal or banks (payment of royalties), (3) to companies that may send us a newsletter and/or (4) to companies that provide support services for us.

An overview of the categories of possible recipients to whom we may disclose your personal data can be found in the section "Our privacy policy in detail".

Supplier and partner data

Unless you specify otherwise, we may share your information with related third parties, such as service providers and organizations we provide services to.

An overview of the categories of possible recipients to whom we may disclose your personal data can be found in the section "Our privacy policy in detail".

Duration for which we store personal data

The criterion for the duration of the storage of personal data is the respective legal retention period, after which they are deleted. Furthermore, we only store the corresponding data if they are still necessary for the fulfilment of the contract.

For more information about our policy regarding the storage of personal information, please see the "Our Privacy Policy in Detail" section.

Rights of data subjects - what rights do you have with regard to your personal data stored by us?

Even if we already have your personal data, you have various rights with regard to this data. If you would like to contact us in this context, please contact us. We will endeavour to process your request as quickly as possible and in any case in accordance with the applicable legal provisions. Please note that we may keep records of our communications in order to better resolve any problems you raise.

If we process your personal data, you are entitled to certain statutory rights (so-called "rights of data subjects"), which we will briefly describe below. More detailed explanations of the individual rights can be found in the section "Our privacy policy in detail".

Right to information:

You have the right to request confirmation from us at any time as to what information we hold about you and to ask us to change, update or delete this information. We can comply with your request. In addition, we have the following options:

We may ask you to confirm your identity or request further information about your request and, if permitted by law, we may refuse your request. In this case, however, we will explain the reasons for the refusal.

Right of objection:

If we use your data because we believe that this is in our legitimate interests and you do not agree to this, you have a right of objection. We will respond to your request within 30 days. In certain cases we are entitled to extend this period. As a rule, we will only object to you under certain, narrowly defined circumstances.

Right to revoke the consent:

If we have obtained your consent to process your personal data for certain activities (for example to send advertising to you), you can revoke your consent at any time.

Right to correction:

You have the right to request the immediate correction or integration of personal data concerning you.

Right of deletion:

In certain situations (for example, if we have processed your data unlawfully) you are entitled to ask us to delete your personal data. We will respond to your request within 30 days (however, in certain cases we may be entitled to extend this period) and will only object to your request under certain, narrowly defined circumstances - for example, if the data is absolutely necessary to continue providing our services to you or to guarantee the protection of our intellectual property. If we agree to your request, we will delete your information, but usually assume that you would like us to add your name to our list of people who do not wish to be contacted. This way we minimize the chance that you will be contacted in the future if your data is collected separately under different circumstances. If you do not wish this, please let us know.

Right to limitation of processing:

Instead of deletion, you may also request us to restrict the processing of your data and to block data processing. As a rule, we will also comply with this request within 30 days, unless we still need the data, for example to be able to continue to provide our services to you or to guarantee the protection of our intellectual property.

Right to data transferability:

If you wish, you are entitled to transfer your data from us to another person responsible. We will support you by sending your data directly to us or by providing you with a copy in a common machine-readable format.

Rights related to automated decisions (profiling):

You have the right, under certain circumstances, not to be subject to a decision based exclusively on automated processing that has legal effect against you. However, under certain circumstances we may have a legitimate interest in such automated decision-making.

Right of appeal to a supervisory authority:

In addition, you have the right to complain to the responsible local supervisory authority. Details can be found in the section "Our privacy policy in detail".

Use of cookies

Our websites / web services use so-called cookies. Cookies are small text files that are stored on the hard disk of your own computer (clients) for a defined period of time.

Most of the cookies we use are deleted from your hard disk at the end of the browser session (so-called session cookies).

Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent or persistent cookies).

Cookies usually contain a so-called cookie ID. This cookie ID is a pseudonymised date in the form of a unique identification of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser (client) in which the cookie was stored.

In principle, a distinction is made between first and third party cookies when cookies are used.

First-party cookies are issued exclusively by the website you are currently visiting (for example, the website with the domain diggistage..com).

DIGGIstage uses first-party cookies for essential website functions such as storing website settings, restoring sessions and securing your session data.

For example, diggistage.com will remember whether someone is logged in via a cookie for a certain period of time. The time period is usually 30 minutes (the log-in function has not yet been set up). However, most areas of our website function without the use of cookies.

Access will only take place in a non-personalized form and only when you visit our website. Other websites cannot access this information.

In order to guarantee the data security of our visitors, the use of the DIGGIstage user area (not yet set up), the DIGGIdope user area (not yet set up) and the DIGGIstage webshop requires the approval of first-party cookies.

Third-party cookies are set by a DIGGIstage-authorized third party, not by the actual website you are currently visiting.

By using these cookies we can adapt our offer to the customer's wishes in the best possible way and make your surfing with us as comfortable as possible (advertising, conversion tracking and personalisation).

Furthermore, we use third party providers for the purpose of collecting web statistics (analytics) as a basis for improving and measuring the success of our web offerings.

Even when cookies are used via third party providers, data is only accessed in non-personalised form.

You can find an overview of the third-party providers on our websites in the section "Our privacy policy in detail".

All essential services of our websites / web services function basically also without the use of third party cookies.

You can prevent the configuration of cookies at any time by selecting the setting "do not accept cookies" in your browser. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers.

PART 3: OUR PRIVACY POLICY IN DETAIL

A. Detailed information on the processing of user and supplier data

1. What personal data do we collect?

Customer data / data of contractual artists:

We collect some data about our customers and contractual artists which we need for the smooth execution of contracts and the license management of our product portfolio. For example, in order to process an artist's contract, we require data such as name, address, telephone number, e-mail address and possibly also detailed information such as tax numbers and bank details in order to be able to make payments directly.

If for any reason we need additional personal information from you, we will let you know. Basically we only collect this data directly from the customer / contractual artist.

Supplier and partner data:

We only collect the information about suppliers that is necessary to ensure a smooth business relationship. We collect information about our contacts within your organization, such as names, phone numbers and e-mail addresses. We also collect bank information to make payments to you. We may also store additional information that someone from your organization has provided to us on their own initiative.

2. Who collects personal data?

We only collect personal data directly from you. We do not receive any personal data from other sources.

3. Why we collect your personal data and how we use it

Customer data / data of contractual artists:

In general, we use data about our customers or contractual artists in the following ways:

a) Performance and fulfilment of contract

As a music label we publish and market the contractual works of the artist and invoice them at regular intervals. The distribution and marketing of the works can only take place with the artist's data (e.g. composer, lyricist etc.). The invoices are sent to the respective contractual partner and will be sent to any contractual address.

b) Assertion, exercise or defence of legal claims

In more unusual cases we may also use your personal data to assert, exercise or defend legal claims. (e.g.: Copyrights)

We may use your personal data for these purposes if this is in our legitimate interests.

c) Internal promotion measures, in-house news

We may send you information at regular intervals that we think may be of interest to you. This can be information about new music released on our label or general news about our label and our services.

Supplier and partner data:

We only use your information to optimally conduct our business relationship with you. For this purpose, we store your data in our database so that we can contact you in connection with our agreements and make use of your services. In unusual cases we also use the data to assert, exercise or defend legal claims.

Passing on of personal data

We may share your personal information with the following categories of people in a variety of ways and for a variety of purposes, as appropriate and in accordance with local laws and regulations:

All subsidiaries
tax, audit or other authorities, if we have a good faith belief that we are required by law or other regulation to disclose this information (for example, because of a request from a tax authority or in connection with an anticipated lawsuit)
External service providers providing services on our behalf (including external email providers, auditors and accountants, technical support functions)
Providers of externally assigned IT services and storage providers, if a corresponding processing agreement (or comparable security) exists
Marketing technology platforms and suppliers

If in the future we merge with or are acquired by another company (or there are meaningful discussions about such a possibility), we may disclose your personal data to the (future) new owners of the company or society.

Duration for which we store personal data

We process and store personal data only for the period necessary to achieve the storage purpose or insofar as this has been provided for by the European Directive and Ordinance Giver or another legislator in laws or regulations to which we are subject.

If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be deleted routinely and in accordance with the statutory provisions.

How we protect your personal data

We will take all reasonable and appropriate measures to protect the personal information we hold from misuse, loss or unauthorized access. To this end, we have taken a number of technical and organisational measures. This includes measures to deal with any alleged data breaches.

If you suspect that your personal information has been misused, lost or accessed by unauthorized persons, please let us know as soon as possible. You will find the contact details in Part 1 of this Privacy Policy.

B. Detailed information on the use of our websites

As mentioned above, we collect a limited amount of information from visitors to our websites and use it to help you manage our websites and the services we offer. You can use our websites without having to provide any personal data. In certain cases (e.g. orders in the shop), however, a processing of personal data may become necessary.

1. Collection of general data and information

Our websites collect a series of general data and information with each visit. These general data and information are stored in the log files of our server hosted by the following provider:

Alfahosting GmbH
Anchor road 3b
06108 Hall (Saale)
GERMANY

We may record (1) the browser types and versions used, (2) the operating system used, (3) the website from which an accessing system accesses our websites (so-called referrer), (4) the sub-pages which are accessed via an accessing system on our websites, (5) the date and time of access to the websites, (6) an Internet protocol address (IP address) and (7) other similar data and information which serve to avert danger in the event of attacks on our IT systems.

When using this general data and information, we do not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the contents of our websites, (2) optimize the contents of our websites and the advertising for them, (3) ensure the permanent functionality of our information technology systems and the technology of our websites, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by us statistically and also with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

2. Registration on our websites

We do not currently offer registration on our websites and web services. If this option is set up, the privacy policy will be adapted.

3. Subscription to our newsletter

On our website you have the possibility to subscribe to our newsletter. The personal data transmitted to us when ordering the newsletter is determined by the input mask used for this purpose.

You can only receive our newsletter if you (1) have a valid e-mail address and (2) have registered to receive the newsletter.

The subscription to the newsletter is equipped with two security mechanisms. On the one hand via Re-Captcha Tool and on the other hand by sending an e-mail from the DIGGIstage server requesting you to confirm your newsletter subscription.

The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. They are sent exclusively directly via DIGGIstage with a tool, offers from ACYBA, 12 avenue Tony Garnier, 69007 LYON, FRANCE. The data will not be passed on to third parties. You can revoke your consent to the use of your e-mail address for advertising purposes at any time with effect for the future by clicking on the link "Unsubscribe" at the end of the newsletter. You can also revoke your consent to the storage of personal data that you have given us for sending the newsletter at any time.

4. Newsletter Tracking

Newsletters sent by DIGGIstage are only tracked directly by DIGGIstage and record when a newsletter was opened and clicked on from a specific email address. If you open the newsletter in a browser, you open the website content of diggistage.com or diggidope.diggistage.com and with it a tracking can be triggered by one of our analytics tools.

5. Contact possibility over the web pages

Our websites contain information required by law that enables us to contact you electronically and communicate with you directly, including by e-mail. If you contact us by e-mail or via a contact form, the personal data transmitted by you will be stored automatically. Such personal data transmitted on a voluntary basis will be stored by us for the purpose of processing or contacting you; we will not pass them on to third parties.

6. Use and application of tools and services of third parties on our websites

We have integrated various components of third-party providers on our websites, which primarily serve us to optimize the surfing experience for you and to analyze the behavior of users on our websites. We would like to inform you about this in the following.

a) Google

We use various services of Google Inc. on our web pages and the following services are integrated on our web pages:

Google Analytics

DIGGIstage has integrated the component Google Analytics on these websites.

The Google Analytics component is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google respects the data protection regulations of the "Privacy Shield" agreement and is registered with the "Privacy Shield" program of the US Department of Commerce. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

DIGGIstage uses an anonymisation function for web analysis via Google Analytics, which Google uses to shorten and anonymise the IP address of the Internet connection of the person concerned.

Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to websites. A web analysis service collects, among other things, data on which website a person concerned came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a website was viewed. These web analysis metrics are mainly used as a data basis for optimizing the functions and contents of a website.

Google Analytics places a cookie on the computer of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website, which is operated by DIGGIstage and on which a Google Analytics component has been integrated, the Internet browser on the person's computer is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google obtains knowledge of personal data, such as the IP address of the person concerned, which serves Google, among other things, to trace the origin of the visitors and their behaviour on the site.

Cookies are used to store personal information, such as access time, the location from which access was made and the frequency of visits to our websites by the person concerned. Whenever you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.

You can prevent the setting of cookies through our websites at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the person's computer. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for the person concerned to object to the collection of data generated by Google Analytics relating to the use of this website and to the processing of this data by Google and to prevent such collection. To do this, the person concerned must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the person's information technology system is deleted, formatted or reinstalled at a later time, the person concerned must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within their control, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable data protection regulations of Google Analytics can be called up under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/intl/de/analytics/privacyoverview.html

b) Hotjar

DIGGIstage uses Hotjar software (Hotjar Ltd, Level 2 St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta, EU) to improve the user experience on our website. With Hotjar we can evaluate the user behaviour (mouse movements, clicks, scroll height) on our websites. Hotjar uses cookies on the end device of website visitors and can store technical information (e.g. browser information, operating system, time spent on the site, etc.). More about Hotjar's privacy and opt-out options can be found here: https://www.hotjar.com/privacy.

c) LinkedIn

LinkedIn is a social network for building and maintaining professional business contacts and offers tailored search functions and tools as part of its talent, marketing and sales offering. Users create a career profile that can be viewed privately and publicly according to their own wishes and settings (see profile settings for data protection and opt-out).

LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

As part of its service offering, LinkedIn collects public information (such as career-related news and achievements) and other content that may include information about the specific LinkedIn user (such as mentions in articles, posts, comments); an opt-out is possible. As a targeted social media network with millions of global users, LinkedIn is also a B2B advertising medium for companies through which different ad formats can be targeted to different users. LinkedIn does not share personal information with third parties for their direct marketing purposes without the user's consent (see Advertising Profile Settings and Opt-Out and Opt-Out for Surveys and Services).

LinkedIn stores cookies and similar technologies (e.g. web beacons, pixels, ad tags, device identifiers) to recognize the user and his platform both on and off the platform. Users can restrict this tracking within the ad settings; visitors under "Guest Controls".

DIGGIstage operates its own LinkedIn profile to advertise for advertised positions and to advertise DIGGIstage products. Each DIGGIstage post on the company profile shows how many users have performed a particular action organically or through paid advertising. In addition, DIGGIstage sponsors content through LinkedIn in the form of sponsored posts, text ads and videos. Besides the organic reach of the followers, these advertisements are played out to certain target groups. Target groups can be created based on various targeting options, e.g. by location, professional title, skills, and interests. LinkedIn uses the profile's own information and orientates itself to the individual user approvals that the user has adapted in his profile. DIGGIstage receives information about the effectiveness of advertisements by tracking user behavior via cookies and similar technologies. LinkedIn Insight Tag and specific LinkedIn scripts that can be installed on the DIGGIstage homepage (currently not installed) are used to measure whether a specific action advertised on LinkedIn addresses the desired target pages of DIGGIstage, depending on the advertising campaign. If not desired, the user can restrict this in the LinkedIn display settings.

d) YouTube

We use YouTube to embed videos on our websites.

YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The videos are embedded in the extended data protection mode. Like most websites, however, YouTube also uses cookies to collect information about the visitors to its website. YouTube uses them, among other things, to collect video statistics, to prevent fraud and to improve user-friendliness. This also leads to a connection with the Google DoubleClick network. Starting the video could trigger further data processing. We have no influence on that.

For more information about privacy at YouTube, please see their privacy policy at: http://www.youtube.com/t/privacy_at_youtube

e) Soundcloud

We use Soundcloud to integrate music on our websites.

The operating company is SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin.

Soundcloud also uses cookies for this type of embedding of music on our websites in order to collect information about the visitors to their website. Soundcloud uses them, among other things, to collect music statistics, to prevent fraud and to improve user-friendliness. Starting the music player could trigger further data processing. We have no influence on that.

By using Soundcloud and the functions "Liken", "Share", "Repost" & "Comment", the websites you visit are linked to your Soundcloud account (if any) and made known to other users. Data is also transferred to the Soundcloud. For more information visit: https://soundcloud.com/pages/privacy

f) Twitter

Our pages include functions of the Twitter service. These functions are offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

By displaying Twitter tweets embedded on our websites, Twitter also uses cookies to determine data such as display frequency and refferer.

By using other Twitter functions such as "Re-Tweet", the websites you visit are linked to your Twitter account (if any) and made known to other users. Data is also transmitted to Twitter.

For more information, please see Twitter's privacy policy at http://twitter.com/privacy.

You can change your Twitter privacy settings in your account settings at http://twitter.com/account/settings

C. Your rights regarding the processing of personal data in detail

If and to the extent that we store or otherwise process personal data relating to you, you are entitled to special statutory rights (the so-called "rights of data subjects"), which we would like to briefly explain below.

1. The right to information

In addition, you have the right to request confirmation from us at any time and free of charge as to what personal data is stored about you. You also have the right to receive a copy of this information. The right to information also includes the following information:

the processing purposes;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
the existence of a right to have your personal data concerning you rectified or deleted or to have the controller restrict or object to such processing;
the existence of a right of appeal to a supervisory authority;
the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for you.

You also have a right of access to information on whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transmission.

If you would like to make use of this right to information, you can contact us directly at any time.

2. The right to correction

You have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.

If you would like to make use of this right of correction, you can contact us directly.

3. Right to cancellation (right to be forgotten)

You have the right to demand from us that the personal data concerning you be deleted immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

The personal data was collected or processed by us for purposes for which you are no longer necessary.

You revoke your consent on which the processing was based under Article 6(1)(a) GDPR and there is no other legal basis for the processing.

You file an objection to the processing in accordance with Article 21(1) GDPR, and there are no overriding legitimate reasons for the processing on our part, or you file an objection to the processing in accordance with Article 21(2) GDPR in the case of data processing for the purpose of direct marketing.

We have processed the personal data unlawfully.

The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.

The personal data was collected in relation to information society services offered in accordance with Art. 8 para. GDPR.

If one of the above-mentioned reasons applies and you wish to have your personal data stored with us deleted, you can contact us at any time. We will arrange for the request for deletion to be complied with without delay.

In principle, we do not make any personal data public. If this is the case and we as data controllers are obliged to delete the personal data pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures (including technical measures), taking into account the available technology and the implementation costs, to inform other data processors who process the published personal data that you have requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data processors, insofar as the processing is not necessary. We will do what is necessary in individual cases.

4. Right to limitation of processing

You have the right to request us to restrict processing if one of the following conditions is met:

You dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of your personal data.

The processing is unlawful, it refuses to delete the personal data and instead requires the restriction of the use of the personal data.

We no longer need the personal data for the purposes of processing, but you do need the data yourself to assert, exercise or defend legal claims.

You have filed an objection against the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the justified reasons outweigh justified interests towards you.

If one of the above conditions is met and you would like us to restrict personal data stored with us, you can contact us at any time. We will arrange for processing to be restricted.

5. Right to data transferability

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to request us to transfer this data to another controller, provided that the processing is based on the consent provided for in Art. 6 para. 1 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out using automated procedures.

Furthermore, when exercising your right to data transferability pursuant to Art. 20 para. 1 GDPR, you have the right to obtain that the personal data be transferred directly by us to another person responsible, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.

You can contact us at any time to exercise your right to data transferability.

6. Right of objection

You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 letter f) GDPR in order to protect our legitimate interests. This also applies to profiling based on this provision.

In the event of an objection, we will no longer process the personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms as the data subject or the processing serves to assert, exercise or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to our processing for direct advertising purposes, we will no longer process your personal data for these purposes.

To exercise your right of objection, you can contact us directly.

7. Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

If you would like to exercise your right to withdraw your consent, you can contact us directly.

8. Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect on you or significantly affects you in a similar manner, unless (1) the decision is necessary for the conclusion or performance of a contract between you and us, or (2) is admissible under Union or Member State law to which we are subject and such law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or (3) is taken with your express consent.

If the decision (1) is necessary for the conclusion or performance of a contract with you or (2) is made with your express consent, we will take reasonable measures to protect your rights and freedoms and your legitimate interests, including at least the right for a person on our side to intervene in the decision making, for you to state your position and for you to challenge the decision.

If you wish to exercise your rights in relation to automated decisions, you can contact us at any time.

9. Right of appeal to a supervisory authority

You have the right to file a complaint with the competent local supervisory authority.

Contact details of the responsible local supervisory authority:

Saxony Commissioner for Data Protection and Freedom of Information
Devrientstr. 1
01067 Dresden
GERMANY

Phone: +49 351 493 - 5401
Fax: +49 351 493 - 5490
E-mail: saechsdsb@slt.sachsen.de

D. Our legal basis for the processing of your data

1. Legitimate interest

According to Article 6 (1) f) of the GDPR, we may also process your data without express consent if this is necessary to safeguard the legitimate interests of us or a third party, unless your interests or your fundamental rights and freedoms, which require the protection of personal data, prevail.

We do not believe that the following activities will interfere with people in any way. Rather, you help us to provide tailor-made and more efficient services for you and are therefore an advantage for all parties involved. However, you have the right to object to the processing of your personal data by us on this basis, as described above.

Customer data / contractual artist data:

We need to ensure that our business functions smoothly so that we can continue to offer you our products and services as usual. Therefore we need your data, for example, so that we can execute our contracts with you, bill you for our services and provide you with our services. Last but not least, we also need your data in order to protect our intellectual property and the copyright of every composer effectively against misuse and illegal distribution and copying. It is therefore in our legitimate interest to use your data.

We have our own legal obligations and it is in our legitimate interest to insist on their fulfilment. Therefore, if we believe in good faith that this is necessary, we may disclose your information for the purposes of law enforcement or the collection of taxes or actual or threatened disputes.

Supplier and partner data:

We use and store the personal data of people within your organization to use services from you as one of our suppliers or service providers. We also store your financial data so that we can pay for your services. We assume that all these activities fall within our legitimate interests as recipients of your services.

2. Consent

Under certain circumstances, we may need your consent to process your personal data in connection with certain activities. Depending on exactly what your data is needed for, we will obtain this consent explicitly by "opt-in" or tacitly by "soft opt-in".

According to Article 4(11). of the GDPR, consent (by opt-in) is "any voluntary declaration of intent, in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, which the data subject indicates that he/she agrees to the processing of personal data concerning him/her". Put simply, this means that:

you must voluntarily give us your consent without us putting any form of pressure on you;
you need to know what you are consenting to - so we will ensure that we have informed you sufficiently; and
you must give us your consent in the form of a positive, affirmative act.

In most cases, we will provide you with a field that you must mark so that this requirement is clearly and unambiguously fulfilled.

We keep records of the consents you have given in this way.

As already mentioned, in some cases consent by soft opt-in is sufficient. We may advertise products and services that are related to the products we offer (especially content we offer and music published by us) and services (for example in the marketing area) if you have not actively unsubscribed from these communications.

As already mentioned, you have the right to revoke your consent for these activities. Please contact us directly.

3. Asserting, exercising or defending legal claims

Sometimes it may be necessary for us to process personal data in connection with the exercise or defense of legal claims. This may occur, for example, if we need legal advice in relation to legal proceedings or are legally obliged to preserve or disclose certain information in the course of legal proceedings.

PART 4 - DEFINITIONS

DIGGIstage's Privacy Statement is based on the terms used by the European Directive and Regulation Giver in the adoption of the Basic Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use the following terms, among others, in this data protection declaration:

"Personal data": Personal data is all information that relates to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

"Data subject": Data subject is any identified or identifiable natural person whose personal data are processed by us.

"Processing" means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. These include, but are not limited to, the collection, arrangement, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, comparison or linking, restriction, deletion or destruction of personal data.

"Profiling": Profiling means any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or relocation of that natural person. As a responsible company, we refrain from any profiling.

"Pseudonymisation": Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information.

"Controller": the natural or legal person, authority, institution or other body that alone or together with others decides on the purposes and means of processing personal data.

"Processor" means a natural or legal person, authority, institution or other body processing personal data on behalf of the data controller.

"Recipient" means a natural or legal person, authority, institution or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.

"Third party" means a natural or legal person, authority, institution or other body other than the data subject, the data processor, the data processor and the persons authorised to process the personal data under the direct responsibility of the data processor or the data processor.

- DIGGIstage in January 2021 -