§ 1 Information on the collection of personal data
(1) In the following, we inform you about the processing of personal data in connection with the use of this website. Personal data is all data that relates to you personally. This includes, for example, your name, address, email address and user behaviour. In this way, we would like to inform you about our processing operations and at the same time fulfil our legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Kulturhauptstadt Europas Chemnitz 2025 gGmbH, Fabrikstraße 11, 09111 Chemnitz, Germany, e-mail: datenschutz@chemnitz2025.de (see also our legal notice).
(3) When you contact us by e-mail, the data you provide - e.g. e-mail address, first name, surname, telephone number if applicable - will be stored by us for the purpose of individual communication with you. (The legal basis arises from Art. 6 para. 1 sentence 1 lit. b GDPR or from Art. 6 para. 1 sentence 1 lit. f GDPR.) We delete your data that arises in this context, if the enquiry is assigned to a contract, after the deadlines for the contract period, otherwise after the storage of the data is no longer necessary. If statutory retention obligations exist, we restrict the processing.
(4) If we use contracted service providers for individual functions of our offer, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
§ 2 Your rights
(1) You have the following rights with regard to your personal data:
- Right to information
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to the processing
- Right to data portability.
(2) With regard to your personal data, you also have the right to complain to a data protection supervisory authority about the processing by us.
§ 3 Collection of personal data for informational use
If you use the website for informational purposes only, i.e. if you do not transmit information to us in any other way, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis results from Art. 6 para. 1 sentence 1 lit. f GDPR):
- IP address
- Date and time of the enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/http status code
- amount of data transferred in each case
- previously visited website
- browser
- operating system
- Language and version of the browser software.
§ 4 Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other common functions to analyse or market our offers, which are presented in more detail below. For this purpose, you may have to provide additional personal data or we process such additional data that we use to provide the respective services. The aforementioned data processing principles apply to all data processing purposes described here.
(2) In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly monitored.
(3) We will inform you about the services of service providers on our website that are based in a country outside the European Economic Area (EEA) in the respective description of the service.
§ 5 Objection to or revocation of the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.
(2) If we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.
(4) Your revocation or objection is best addressed to the contact options mentioned in § 1 para. 2.
§ 6 Use of cookies
(1) In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical perspective before going into more detail about your individual choices by describing technically necessary cookies and cookies that you can voluntarily select or deselect.
(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis are explained below:
Transient cookies, in particular session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the joint session and your computer can be recognised when you return to our website.
Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies set and the duration at any time in your browser settings and delete the cookies manually.
(3) The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
(4) We only set various cookies with your consent, which you can select when you first visit our website using the cookie consent tool. The functions are only activated with your consent and can be used in particular to enable us to analyse and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognise you when you visit us again or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal.
The functions we use, which you can select and revoke individually via the Consent Manager, are described below.
§ 7 Application
When you contact us for your application by e-mail to bewerbung@chemnitz2025.de, the data you provide will be stored by us for the purposes of individual communication with you and for the application process. If we subsequently conclude an employment contract with you, we will delete your data once it is no longer necessary to store the data for the purpose of processing the employment relationship. If there are statutory retention obligations, we will restrict the processing. If no employment contract is subsequently concluded between us and you, the application documents will be deleted or returned six months after delivery, unless you have consented to a longer storage of your data or their further processing is necessary for a predominantly legitimate interest.
The legal basis for processing is Art. 6 para. 1 lit. b) GDPR, Art. 6 para. 1 lit. f) GDPR. If you have consented to a longer storage period, we process your data on the basis of Art. 6 para. 1 lit. a) GDPR.
§ 8 Newsletter subscription
(1) We use Brevo (https://www.brevo.com/de/, Sendinblue GmbH) to send newsletters by email. You can subscribe to our newsletter by giving your consent. You will receive a weekly update, which is particularly important in the European Capital of Culture.
(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you are the owner of the e-mail address provided and that you wish to receive the notifications. If you do not confirm your registration, you will not be added to the subscriber list. However, there are logs for the individual e-mail addresses. These are automatically deleted after 30 days. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email.
§ 9 SSL or TLS encryption
(1) This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser display.
(2) If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
§ 10 Integration of YouTube videos
(1) A YouTube video is used on the subpage chemnitz2025.de/3000garagen. A connection to Google does not take place without your own involvement by clicking on the "Load video" button. Only when you click on the button will further cookies be processed and data transmitted. The legal basis for displaying the video is then Art. 6 para. 1 sentence 1 lit. a GDPR.
(2) Only when you play the video will the following data be transmitted: YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as IP address, is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) The information collected is stored on Google servers, including in the USA. Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider: www.dataprivacyframework.gov/s/participant-search/participant-detail
(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: .google.de/intl/de/policies/privacy.
§ 11 Use of Google Analytics
(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable us to analyse your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offering and make it more interesting for you as a user.
(2) We primarily record the interactions between you as a user of the website and our website using cookies, device/browser data, IP addresses and website or app activities. In Google Analytics, your IP addresses are also recorded to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user originates (so-called "IP location determination"). For your protection, however, we naturally use the anonymisation function ("IP masking"), i.e. Google shortens the IP addresses by the last octet within the EU/EEA.
(3) Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at: www.dataprivacyframework.gov/s/participant-search/participant-detail
(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout.
(5) For more information on the scope of services provided by Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at google.de/intl/de/policies/privacy/.
§ 12 Social media links
(1) This website does not use any social media plug-ins. These are links - Facebook, Twitter (X), Instagram, Linkedin) that redirect you to the respective platform.
(2) Meta Platforms, Inc., LinkedIn Corporation and X Corp. are certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider: www.dataprivacyframework.gov/s/participant-search/participant-detail
§ 13 Updating this privacy policy
We reserve the right to update this privacy policy on a regular basis. We therefore ask you to look at our privacy policy from time to time.
