Privacy Policy

Updated: 20 September 2023

Introduction

Piranha Arts understands and respects the data you share with the company. In this privacy policy, we will share with you why and how we collect, use, disclosure, communicate and make use of your personal data or official information when you use our website or App to browse, or register or create an account with us, or, submit a proposal via our call for proposals website, and the rights you have and own over your data.

This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer").

This Policy applies to the following websites

www.womex.com

www.classicalnext.com

www.piranha-arts.com

www.piranha.de

Information about us as Controller

The party responsible for these websites (the "controller") for purposes of data protection law is

Piranha Arts AG
Kreuzbergstrasse 30, 10965 Berlin, Germany
Phone: +49 30 318 614 0
eMail: connect@piranha-arts.com

If you have any queries about how we use your personal data, you can contact our data protection officer by post to the above address for the attention of the data protection officer or by email: privacy@piranha-arts.com

How the data are processed?

General information on data processing

We process personal data in accordance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us is only carried out on the basis of a legal permission. In order to be able to offer you our website and the services associated with it, we process personal data on the basis of the following legal principles:

  • Consent (Art. 6 para. 1 lit. a GDPR)
  • fulfilment of a contract to which you are a party, or at your request for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR
  • on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR)
  • to fulfil a legal obligation (Art. 6 para. 1 lit. c GDPR)

We will refer to the relevant terms in connection with the respective processing so that you can classify on which basis we process personal data.

If personal data are processed on the basis of your )consent, you have the right to revoke this consent at any time with effect for the future.

If we process data on the basis of a weighing up of interests, you as the person concerned have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

Deletion of data

As a matter of principle, we delete personal data when there is no need for further storage. A requirement can exist in particular if the data is still needed to fulfil contractual services. In the case of statutory storage obligations, deletion shall only be considered after the expiry of the respective storage obligation.

Service Providers

Data that you provide to us will not be passed on to third parties. Piranha Arts have never sold or will never sell your personal data including your name and contact information – to external or third parties for their own marketing purposes.

However, we may use service providers for the operation of this website or for further products or services from us. In this case it can happen that a service provider obtains knowledge of personal data. We select our service providers carefully - especially with regard to data protection and data security - and take all measures required by data protection law for permissible data processing.

Data processing outside the European Union

Insofar as personal data is processed outside the European Union, this can be seen from the concrete explanations.

Automated data processing of the server

In the case of purely informative use of our website, general information is initially stored automatically, which your browser sends to our server. This includes by default: browser type/version, operating system used, page accessed, the page previously visited (referrer URL), IP address, date and time of the server request and HTTP status code.

The collected data will be temporarily stored, but not in association with any other of your data.

The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 letter f) GDPR. This processing serves the technical management and security of the website.

The IP address will be deleted within no more than 180 days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Data processing by user data

Registration for WOMEX/virtualWOMEX, Classical:NEXT/CN:NET

A business account is automatically created or updated upon confirmation of registration for WOMEX or virtualWOMEX. When you register as a Delegate for an edition of WOMEX / Classical:NEXT or if you register for virtualWOMEX/C:N NET membership, you have to create an account with us, where we collect your personal and business information.

Individuals or companies/institutions who book a stand at the WOMEX Trade Fair (Exhibitors) and Delegates participating in a shared stand or “Umbrella”-stand (Co-Exhibitors) may have their company name (or person name if no company name was given) and stand number included in various print materials related to the Trade Fair, such as the Trade Fair chapter in the WOMEX Guide or printed maps.

Any data provided beyond the required registration information is optional. Any data you choose to add will be saved in your account and profiles.

Processed data types

Inventory data (e.g. name, addresses), contact data (e.g. eMail, phone nr.), payment information (e.g. bank details, invoices, payment history)

Purposes of processing

We use the information provided by you to verify and respond to your requests, suggestions, questions, including providing you with any requested information about our products and services. We also save your data for invoicing, billing and tax purposes and of course, to communicate better with you

We process this information to improve the WOMEX and virtualWOMEX platforms, services and our customers’ experience with it, and where it is necessary for the adequate performance of our services and events. Your information is used to connect you with other members for networking purposes and create potential new business developments, to create additional value for our community and us, which is one goal of our business

Legal Basis

  • to fulfil our agreement obligations (Art. 6 Abs. 1 lit. b GDPR)
  • our legitimate interests (Art. 6 para. 1 lit. f GDPR)

Video-, Audio-, Photo-Footage

During our events (on site and/or virtual) we make audiovisual recordings and photo-footage. These are used exclusively for the following purposes:

  • Presentation website
  • Advertising
  • press coverage as well as any future promotional applications and sponsorship acquisition by Piranha Arts AG in all media

The legal basis for the use of the recordings is our legitimate interest for the above-mentioned purposes in accordance with Art. 6 para. 1 lit.f GDPR.

At our events audiovisual recordings can also be made by the participants of the event on their own responsibility. We ask the participants for mutual consideration of their personal rights. Media representatives may be present during the event and take pictures on their own responsibility.

Video-, Audio-Recordings virtual only

We use video conferencing tools from the following providers to host the online meetings:

  • ZOOM
  • Jitsi Meet (Self-hosted)

When using the service providers, various data is processed. The scope of the data also depends on the information you provide before or during participation in an "online meeting".

In particular, the following personal data is processed:

  • Information about the user
  • Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
  • For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
  • When dialling in by phone: information on incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
  • Text, audio and video data: You may be able to use the chat, question or survey functions in an "online meeting". To this extent, the text entries you make are processed in order to display and, if necessary, log them in the "online meeting". In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time using the service provider's applications.

The legal basis for data processing when hosting "online meetings" is Art. 6 para. 1 lit. b GDPR, insofar as

the meetings are conducted within the framework of contractual relationships.

If no contractual relationship exists, the legal basis is Art. 6 para. 1 lit. f GDPR. Here too, we are interested in the effective implementation of "online meetings".

Data processing outside the European Union (EU) does not take place. However, we cannot exclude the possibility that data is routed via Internet servers located outside the EU. This may be the case in particular if participants in "online meetings" are in a third country.

If the service provider used for the "online meeting" is based outside the European Economic Area, we have agreed a contract processing agreement with this service provider, including the EU standard contract clauses. As a supplementary protective measure, we have also implemented our zoom configuration in such a way that only data centrers in the EU, the EEA or safe third countries such as Canada or Japan are used for holding "online meetings". In addition, we will ask you for your explicit consent before participating in such an "Online Meeting", with reference to any lack of data protection.

Further data protection information about the service provider

Privacy Policy of Zoom: https://eu01web.zoom.us/de-de/privacy-and-security.html

Advertisement Booking and Contact Form

We process data of our contractual and business partners within the scope of contractual and comparable legal relationships and related measures and within the scope of communication with the contractual partners (or pre-contractual), e.g. to answer booking inquiries.

We process this data to fulfil our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organisation.

Processed data types

Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of the contract, duration, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

Purposes of processing

Provision of contractual services and customer service, contact inquiries and communication, office and organizational procedures, administration and answering of inquiries, security measures.

Legal Basis

Fulfilment of contract and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Payment via Worldline

For the processing of payments we use the external payment service provider Worldline Schweiz AG, Hardturmstrasse 201, 8021 Zurich, Switzerland.

We do not collect and store the payment data ourselves, but the service provider itself collects the data directly. To initiate the respective payment, we only transmit the order number and the invoice amount.

Processed data types

Payment information (e.g. order-id, invoice amount)

Purposes of processing

The purpose of transmitting the data to the service provider is to process the payment.

Legal Basis

  • to fulfil our agreement obligations (Art. 6 Abs. 1 lit. b GDPR)
  • our legitimate interests (Art. 6 para. 1 lit. f GDPR)

Further data protection information about the service provider

Privacy Policy of Worldline Schweiz AG: www.six-payment-services.com/privacy-statement

Cookies, Plugins and external content

Matomo (Piwik)

This website uses the open source web analysis service Matomo (www.matomo.org).

The legal basis for data processing for web analysis is Art. 6 para.1 lit. f GDPR. Our legitimate interest is to be able to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Cookies are used for web analysis. These are text files which are stored on your computer and which enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on servers exclusively in Belgium. The IP address is made anonymous before storage, so that no conclusion can be drawn about your identity on the basis of the data collected.

The information generated by the cookie about the use of this website is not passed on to third parties. You can object to the storage of cookies for web analysis in the cookie settings of the website. In this case, a cookie will be stored on your device, which stores the information about your objection. This enables us to respect your decision when you continue to visit the website. If you delete the cookies stored in your browser, the Matomo objection cookie will also be deleted and you will be asked again for your consent for web analysis the next time you visit our website.

YouTube

We use YouTube to embed videos to make our website attractive and informative for you. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers would normally be established. However, we use Heise's embetty tool (https://github.com/heiseonline/embetty) on our site to prevent this. All our videos are embedded in our pages by "embetty" in such a way that the transmission of your IP address to the YouTube servers only begins when you actively click on the video. If you do not do this, no data is sent to YouTube during your visit to our website.

The legal basis for the data processing (if it takes place) is your consent according to Art. 6 para. 1 lit. a GDPR, which you give through your active interaction with the video.

YouTube uses cookies to collect information about visitors to its website. YouTube uses them to, among other things, collect video statistics, prevent and detect fraud, and improve user experience. YouTube may also connect to the Google DoubleClick network. If you start a YouTube video, this could trigger further data processing operations. We have no control over this.

If you have a YouTube account and you are logged in at the same time you access our websites, you enable YouTube to assign your surfing behaviour directly to your personal YouTube profile. You can prevent this by logging out of your YouTube account.

For more information about YouTube's privacy policy, please see their privacy policy at: www.youtube.de/t/privacy or policies.google.com/privacy?hl=de&gl=de

Mailchimp

We send newsletters through our email marketing service provider Mailchimp, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

To subscribe to our newsletters, all you need to provide is generally your e-mail address. However, we may ask you to provide a name, for the purpose of personal contact in the newsletter, or other information if this is necessary for the purposes of the newsletter.

Processed data types

Contact data: e-mail address, first name, last name, country

Purposes of processing

Direct Marketing

Legal Basis

  • to fulfil our agreement obligations (Art. 6 Abs. 1 lit. b GDPR)
  • our legitimate interests (Art. 6 para. 1 lit. f GDPR)

Further data protection information about the service provider

Privacy Policy of Mailchimp: https://mailchimp.com/legal/privacy/

Google Tag Manager

This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tool Manager only implements tags. That means: no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain for all tracking tags as long as they are implemented with the Google Tag Manager.

WOMEX/Classical:NEXT App

For a better experience, while using our service, we may require you to provide us with certain personally identifiable information, including but not limited to your location. The information that we request is will be retained by us and used as described in this privacy policy.

The app does use third party services that may collect information used to identify you.

Link to privacy policy of third party service providers used by the app

  • Google Play Services
  • Mapbox
  • Firebase Analytics
  • Log Data (as specified below)

Location: Your Location is only used to show your current location on the Mapbox map and only if you explicitly allow the app to do so.

Log Data: Whenever you use our Service, in a case of an error in the app we collect data and information (through third party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our service, the time and date of your use of the service, and other statistics.

Your rights as a data subject

Your Rights

You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and a copy of the data. You can contact us for this information at any time. In the case of a request for information that is not made in writing, we ask for your understanding that we may require you to provide evidence that proves that you are the person you claim to be.

Furthermore, you have the right to correction or deletion or to restriction of processing, as far as you are legally entitled to do so.

Finally, you have the right to object to the processing within the scope of the statutory provisions.

You also have a right to data transferability within the framework of the data protection regulations.

Right to complain to a supervisory authority

You have the right to complain about the processing of personal data by us to a data protection supervisory authority.