Privacy Policy

In this Privacy Policy we inform you about the processing of your personal data. 

  1. Controller

Responsible for the processing of your personal data is:

Teen World of Arts GmbH
c/o Cormoran GmbH
Am Zirkus 2, 10117 Berlin
Germany

Managing Directors: Christina Ezrahi and Ariel M. Ezrahi
editors@teenworldarts.com
+44 7493 927917

2. Purposes of data processing and legal basis

We process personal data (Article 4 No. 2 GDPR) in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes: 

a. Provision of the Website

We process your personal data in order to provide you the website

 www.teenworldarts.com ("Website").

aa. Log files

When you visit the Website, the browser used on your end device sends information automatically to our website server. This information is temporarily stored in a so-called log file. The following information is collected without you being involved and stored until automatic deletion: IP address of the requesting device, date and time of access, name and URL of the accessed file, website from which the access is made ("referrer URL"), if applicable the search engine used by you, browser used and if applicable the operating system of your device as well as the name of your access provider. Log files serve as a source of information for error analysis in the event of a system crash, allowing lost data to be reconstructed. They can also be used to analyse user behaviour.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interests follow in particular from the following purposes:

  • Ensuring a functioning connection of the Website,

  • Ensuring a comfortable use of the Website,

  • Statistical evaluation using a pseudonym in order to optimise the Website as well as the quality and range of our services,

  • Evaluation of system security and stability, and

  • Fulfilment of other administrative purposes.

   bb. Cookies

Cookies are small text files that are placed in the memory of your browser or device when you visit the Website. 

(1) Technically necessary cookies

Most of the cookies we use on the Website are technically necessary to enable you to use the Website. Our legitimate interest in data processing lies in this purpose. The legal basis for the use of cookies is Art. 6 para. 1 p. 1 lit. f GDPR.
These cookies are placed by the provider Squarespace Ireland Ltd, Le Pole House, Ship Street Great, Dublin 8, Ireland ("Squarespace"), which hosts the Website for us. Via the cookies Squarespace collects information on your use of the Website. This includes:

·      Information about your browser, network and device;

·      Web pages you visited before coming to the Website;

·      Web pages you access on this Website; and

·      Your IP address. 

Squarespace needs the data to operate the Website and to provide their services. Squarespace belongs to the group of Squarespace, Inc. 225 Varick Street, New York, NY 10014, USA. Your data may therefore be transferred to and stored on servers in the USA, a third country outside the European Union (EU) and the European Economic Area (EEA) not recognized under EU Data Protection Law as providing an adequate level of protection for your personal data. Squarespace may also use sub-processors in such countries. We have concluded a data processing agreement within the meaning of Art. 28 GDPR with Squarespace including the EU Standard Contractual Clauses (SCC) to make sure that the processing of your data is covered by appropriate guarantees within the meaning of Art. 46 para. 2 p. 1 lit. c GDPR.The Cookes will only be stored on your device as long as your browser is active (“session cookies”). We will not combine the data with other personal data and will not use the data for advertising purposes.

If you wish to deactivate the use of cookies, you can change the settings of your browser accordingly and delete existing cookies in your browser. Please be aware that if you deactivate cookies, you may not be able to use all the functions of the Website. For more information on the purpose and scope of the data collection and processing by Squarespace, please visit https://www.squarespace.com/dpa.

(2) Statistic and marketing cookies

If you have given your consent on the Website, we also use cookies to create pseudonymous usage profiles for the purpose of web analysis ("web analysis cookies"). These cookies enable us to recognize returning users (device owners), analyse their behaviour on the Website, optimize the Website and measure its reach. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. a GDPR. You give your consent to this tracking on the Website by clicking on "Accept" in our cookie banner or by specifically allowing the service under the settings; no web analytics cookies are set before this happens. We do not merge the data with other personal data, and we do not use it to target individual users for advertising purposes. The web analytics cookies will be deleted after 24 months at the latest or if you withdraw your consent before then.

Google Analytics

For this web analysis, we use the web analysis service Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and – If you are a resident of the European Economic Area (EEA) or Switzerland – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google uses cookies that are stored on your device and that enable an analysis of your use of the Website. The information generated by the cookie about your use of the Website (including pages viewed, user interactions, browser type/version, operating system used, referrer URL, host name of the accessing computer (IP address), approximate location (region), date and time of server request) is usually transmitted to and stored by Google on servers in the United States, Singapore, Taiwan and Chile. These countries are considered to have an insufficient level of data protection according to EU standards. We use Google Analytics 4 (“GA4”). In this version of Google Analytics, according to Google, IP-addresses are not logged or stored. Google only uses your IP-address to draw meta data like location and device data from your IP address (for example “country”, “state”, city”, “device model”) and then automatically anonymizes your IP-address. This data processing is performed on EU-servers only. Google may, however, later merge this information with other information, so that conclusions can be drawn about your person. This may also take place outside the EU and the EEA.We have therefore provided guarantees for the protection of your data by concluding so-called Standard Contractual Clauses (SCC) within the meaning of Art. 46 (2) lit. c GDPR. If the data is transferred to the USA, there is nevertheless a risk, according to the data protection authorities, that your data will be processed by authorities, for control and for monitoring purposes, possibly also without any legal remedy. With your consent to the use of cookies, you consent at the same time in accordance with Art. 49 (1) p. 1 lit. a GDPR that your data is processed in the USA and in other countries outside the EEA despite this risk. On our behalf, Google uses the information generated by the cookies to evaluate your use of the Website for us, to compile reports on website activity and to provide us with other services related to website and internet use. You can withdraw your consent at any time by clicking on the CookieYes icon at the bottom left of the the Website and selecting the appropriate setting.

You may also refuse the use of cookies by selecting the appropriate settings on your browser (see above); however, please note that if you do this you may not be able to use the full functionality of the Website.

You can also prevent the collection of data generated by the cookie and related to your use of the Website (including your IP address) to Google, as well as the processing of this data by Google for all websites, by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on the terms of use and privacy policy of Google Analytics, see https://www.google.com/analytics/terms/de.html and https://support.google.com/analytics/answer/6004245?hl=de.

 

    cc. Integration of YouTube videos

This Website uses plugins from the website www.youtube.com, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (in the EEA and Switzerland) or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in other countries) ("YouTube"). With the help of the plugins, we can integrate videos stored on www.youtube.com into our online offer so that they can be played directly on the Website. 

Only if you have given your consent (Art. 6 para. 1 p. 1 lit. a GDPR, Sec. 25 (1) Data Protection and Privacy in Telecommunications and Telemedia Act, TTDSG) on our Website by clicking on "Accept" in our cookie banner, specifically allowing the service under the settings or clicking a button and thereby activating the video, will YouTube receive the information that you have accessed the corresponding subpage of our Website. In addition, further data is transmitted to YouTube's servers in the USA and other countries outside the EEA (e.g. browser information, device information, IP address). This is regardless of whether you have a YouTube user account or are logged in to YouTube. If you are logged in to YouTube and play a video, your data will be directly associated with your account. If you do not wish to have your data associated with your YouTube account, you must log out before visiting our Website. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular to provide demand-oriented advertising and to inform other users of the social network about your activities on our Website. You have the right to object to the creation of these user profiles, which you must claim from YouTube. We have no influence on the data transfer and processing by YouTube.

Some of the countries outside the EEA (so-called third countries) are considered to have an insufficient level of data protection according to EU standards. In particular, if the data is transferred to the USA, according to the data protection authorities there is a risk that your data may be processed by US authorities, for control and for monitoring purposes, without you being informed or having the right to appeal. Prior to activating the video we therefore also obtain your consent that data may be transferred to and processed in the USA and in other third countries (Art. 49 para. 1 p. 1 lit. a GDPR). 

If you are under 16 years of age, your parents or other legal guardians must decide whether to give the consent to the transfer of data to YouTube.

You and/or you legal guardians can withdraw the consent at any time by clicking on the CookieYes icon on the bottom left of the Website and choosing the appropriate settings. 

If you and/or your legal guardians do not give or withdraw the consent, you cannot view the videos embedded on the Website via our Website

For more information on the purpose and scope of the data collection and processing by YouTube, please visit https://www.google.de/intl/de/policies/privacy. There you will also receive further information on your rights and setting options to protect your privacy.

dd. Simple link to our Instagram profile

Our Website also contains a simple link to our profile on Instagram. If you click on the link, you will leave the Website. The data processing on the website of Instagram is governed by the data protection provisions available there.

   b. Newsletter

Based on your express consent (Art. 6 para. 1 p. 1 lit. a GDPR), we will use your email address to send you news about articles about dance, music, art and lifestyle published by TWoA to your inbox. Your consent will be logged.

In order to receive the newsletter, you have to provide us with an e-mail address. To make the newsletter more personal, we also ask you to provide your name and surname. The provision of this data is optional. For the newsletter registration we use the so-called double opt-in procedure. After registering for the newsletter on the Website, you will receive an e-mail in which we ask you to confirm your registration. Only after confirmation are you registered for the newsletter and will receive our newsletter from then on. The double opt-in procedure ensures that no third-party registers with your e-mail address.

If you are under 16 years of age, your parents or other legal guardians must agree with your registration.

The logging of your registration takes place based on our legitimate interests for the purposes of proving that consent has been properly obtained. We use Squarespace (see Section 2 a) bb) above) as external service provider and processor within the meaning of Art. 28 GDPR for the dispatch of emails. We commission Squarespace based on our legitimate interests in using an efficient and secure system for sending the newsletter. We share your contact information with Squarespace, so that Squarespace can send the newsletter on our behalf. Squarespace may process your data outside the EEA in countries not recognized under EU Data Protection Law as providing an adequate level of protection for your personal data. We have concluded Standard Contractual Clauses (SCC) within the meaning of Art. 46 para. 2 p. 1 lit. c GDPR to provide guarantees for the protection of your data. If the data is transferred to the USA, in the opinion of the data protection authorities, there is nevertheless a risk that your data will be processed by US authorities, for control and for monitoring purposes, possibly also without the possibility of legal redress. By registering for the newsletter, you also consent to the processing of your data in the USA and other countries outside the EEA in accordance with Art. 49 para. 1 p. 1 lit a GDPR, despite this risk.

You can unsubscribe at any time, for example via the link at the end of each e-mail. Alternatively, you and/or your legal guardians may also send us your unsubscribe request by e-mail to editors@teenworldarts.com. If you unsubscribe, your e-mail address will be deleted from our email distribution list and added to our blacklist. The withdrawal of your consent will only take effect for the future. Processing that took place before the withdrawal is not affected by this.

c. Interview

If you or your child take part in an interview and have given us your consent, we collect personal data via the consent form and during the oral interview. This data may in particular include full name, date of birth/age, address and email-address of the participant, date of the interview, answers and statements related to the questions asked, photo and/or video and/or sound recordings. We will store and use the data exclusively for the interview and will only publish the interview, photo and/or video and/or sound recordings if you have given your consent (Art. 6 para. 1 p. 1 lit. a GDPR). You can withdraw your consent at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the revocation is not affected.

d. Fulfilment of contractual and pre-contractual obligations

We further process personal data for the conclusion and implementation of contracts with business partners, including the implementation of pre-contractual measures, the processing of payments, and the answering of enquiries in connection with our business relationship. The legal basis is Art. 6 para. 1 p. 1 lit. b GDPR. The purposes and further details of the data processing are defined in the respective contract.

e. Protection of legitimate interests

In addition, we process your data to protect the legitimate interests of us or third parties such as, in particular, in the following cases:

  • Responding to your enquiries outside of a contract or a pre-contractual measure (in particular if provided via the Website´s contact form),

  • Assertion of legal claims and defence in legal disputes,

  • Ensuring IT security and IT operations,

  • Prevention and investigation of criminal offences, and

  • Measures for business management and further development of our services.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest is to further develop our services or to protect ourselves against impairments and dangers and to enforce our claims.

f. Based on your consent 

If you have given us your consent to process personal data for certain purposes (e.g. passing on data), this processing is lawful based on your consent (Art. 6 para. 1 p. 1 lit. a GDPR). You can withdraw your consent at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the revocation is not affected.

g. Compliance with legal requirements 

In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. tax laws), which require the processing of data. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. c GDPR.

3. No obligation to provide personal data

If we ask you to provide personal data, you can of course refuse to do so. However, we may then not be able to provide certain functions of the Website or to answer your enquiries or have to refuse to conclude a contract. This applies in particular if data is necessary for our newsletter service, for the establishment, implementation and termination of a business relationship or if we are legally obliged to collect data.

4. Categories of recipients

Within our organization, those departments or individuals get access to your data that need it in order to provide the Website and our newsletter and to fulfil our legal obligations.

If you have given us your consent, we will transfer your data to Squarespace (see Section 2 a) bb) and Section b) and d)) andYouTube (see Section 2. b) cc)). 

Furthermore, we share your data with third parties if this is necessary for the fulfilment of a contractual relationship existing between you and us or for the implementation of pre-contractual measures (Art. 6 para. 1 p. 1 lit. b GDPR) or if this is necessary to protect legitimate interests (Art. 6 para. 1 p. 1 lit. f GDPR). Recipients are in particular IT service providers. Our legitimate interest is to outsource functions.

In addition, we will only share your personal data with third parties, if required by law (Art. 6 para. 1 p. 1 lit. c GDPR) or if you have consented (Art. 6 para. 1 p. 1 lit. a GDPR).

When sharing personal data, we observe the legal requirements and, if necessary, conclude contracts or agreements with the recipients to protect your data.

5. Storage duration and erasure

We and our service providers will process and store your personal data in accordance with applicable data protection law to the extent and for the duration necessary for the processing purposes set out in this Privacy Policy.

Log files are generally deleted after the end of the respective browser session, at the latest after seven days, unless their further storage is exceptionally necessary and lawful. The storage period of the cookies is usually two years. If we process your personal data based on your consent, we store the data for the period required to process your personal data in accordance with your consent.

Something else applies if we are legally obliged or entitled to store your personal data for a longer period. With regard to the pursuit of civil claims, the storage period also depends on the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years. In addition, data contained in contracts, communications or business letters may be subject to retention and documentation obligations under national law. In Germany, the retention periods are usually between 6 and 10 years.

6. International data transfer

In addition to the data transfer to Squarespace (see Section 2 a) bb) and Section b) and d)) and YouTube (see Section 2. b) cc)), data transfers to countries outside the EU and EEA only take place in the context of using external IT service providers and only in accordance with the legal requirements. We will provide for the necessary safeguards, e.g. by concluding Standard Contractual Clauses (SCC) within the meaning of Art. 46 para. 2 p. 1 lit. c GDPR or by other measures to provided for by law.

7. Data security

We transmit your personal data securely by using encryption. We use the TLS (Transport Layer Security) coding system for this purpose. Furthermore, we secure the Website and other systems through technical and organisational measures against loss as well as destruction, access, modification or distribution of your data by unauthorised persons.

8. Rights of the data subject

Insofar as you are affected by the data processing, you have the right of access (Art. 15 GDPR), the right of rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). With regard to the right of access and the right to erasure, the restrictions according to Sections 34 and 35 BDSG apply. You also have the right to object to data processing (Art. 21 GDPR). 

Your rights in detail:

  • Right of access: You can request the confirmation as to whether and how we process your personal data. In particular, you have a right of access to your personal data and the information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, if possible the envisaged storage period, or, if this is not possible, the criteria for determining this period; the existence of a right to rectification or erasure of your personal data, to restriction of the processing or to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; the source of the data if the personal data has not been collected from you, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing. If we transfer personal data to a third country or an international organisation, you may also request information about the safeguards we have in place to protect your data. Your right to information may be limited in individual cases by national law (Sections 29 para. 1 sentence 2, 34 BDSG) and the rights and freedoms of others.

  • Right to rectification: You may request the rectification of inaccurate personal data with undue delay or, taking into account the purposes of the processing, the completion of incomplete personal data – also by means of providing a supplementary declaration.

  • Right to erasure: You have a right to immediate erasure of your personal data under certain circumstances, e.g. if your personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if you withdraw your consent and there is no other legal basis for the processing, or if you have objected to the processing of your data for direct marketing purposes. The right does not exist to the extent the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the exercise of a public power vested in us, or for the establishment, exercise or defence of legal claims. Your right to erasure may be limited in individual cases by national law (Section 35 BDSG).

  • Right to restriction of processing: You may request the restriction of processing if you contest the accuracy of the personal data for the duration of the verification of the accuracy by us, if the processing is unlawful but you object to the erasure of your personal data, if we no longer need your personal data but you need the data to establish, exercise or defend legal claims, or if you have objected to the processing.

  • Right to data portability: You have the right to data portability, i.e. the right to receive and transmit the personal data you have provided to us in a structured, commonly used and machine-readable format, if we process your personal data on the basis of your consent or a contract and the processing is carried out by automated means.


Right of objection according to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 p. 1 lit. e GDPR (public security) or  Art. 6 para. 1 p. 1 lit. e GDPR (legitimate interests); this also applies to profiling based on these provisions. We shall no longer process this data upon the lodging of the objection, unless there are compelling reasons for the processing that merit protection, e.g. processing for the establishment, exercise, or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is associated with such direct marketing. We will no longer process your personal data for direct advertising if you exercise your right to object.

If our processing of your personal data is based on consent (Art. 6 para. 1 p. 1 lit. a GDPR), you may withdraw this consent at any time; the lawfulness of the data processing carried out on the basis of the consent until withdrawal remains unaffected by this.

To assert your rights and for further questions on the subject of personal data, you can contact us at any time using our contact details above (see Section 1).

Regardless of this, you have the right to file a complaint with a supervisory authority – in particular in the EU member state of your place of residence, your place of work or the place of the alleged infringement – if you believe that the processing of personal data concerning you violates the GDPR or other applicable data protection laws (Art. 77 GDPR, Section 19 BDSG).

9. No automated decision-making in individual cases

For the establishment and implementation of the business relationship, we generally do not use fully automated decision-making pursuant to Art. 22 GDPR. Should we use this procedure in individual cases, we will inform you of this separately if this is required by law.

Status: September 15, 2022