Ars Ad Mundum
Ars Ad MundumHome»COLLAGE«Concerts & ProjectsEnsemblePressPartnersContact

Privacy Policy

Introduction and Data Controller

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences such as our social media profiles (hereinafter collectively referred to as the “online offering”). Regarding the terms used, such as “processing” or “controller,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Data Controller:

Ars Ad Mundum

Postfach 21 10

48550 Steinfurt

Germany

Email: arsadmundum@gmail.com

Categories of Data Processed

  • Inventory data (e.g., names, addresses).
  • Contact data (e.g., email, phone numbers).
  • Usage data (e.g., websites visited, interest in content, access times).
  • Meta/communication data (e.g., device information, IP addresses).

Purpose of Processing

Provision of the online offering, its functions, and content.

Responding to contact inquiries and communicating with users.

Security measures.

Reach measurement/marketing.

Legal Bases

Art. 6(1)(a) GDPR: Legal basis for obtaining consent.

Art. 6(1)(b) GDPR: Legal basis for processing to fulfil our services, carry out contractual measures, and respond to inquiries.

Art. 6(1)(c) GDPR: Legal basis for processing to fulfil our legal obligations.

Art. 6(1)(f) GDPR: Legal basis for processing to safeguard our legitimate interests.

Security Measures

In accordance with Art. 32 GDPR, and taking into account the state of the art, implementation costs, the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access to, input, disclosure, and availability of the data and its segregation. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to data risks. We also take the protection of personal data into account already when developing or selecting hardware, software, and procedures, in line with the principle of privacy by design and by default (Art. 25 GDPR).

Cooperation with Processors and Third Parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them, or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g., if transferring the data to third parties, such as payment service providers, is necessary for contract performance pursuant to Art. 6(1)(b) GDPR), if you have consented, if a legal obligation provides for it, or on the basis of our legitimate interests (e.g., when using web hosting providers, etc.).

If we engage third parties to process data on the basis of a “data processing agreement,” this is done on the basis of Art. 28 GDPR.

Hosting and Email Delivery

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services, and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, and meta/communication data of customers, prospects, and visitors to this online offering on the basis of our legitimate interest in an efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Email Service (Resend)

We use the Resend service to send emails, in particular for contact form confirmations and notifications.

Resend's privacy policy can be found here: https://resend.com/legal/privacy-policy.

Your Rights as a Data Subject

  • Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether data concerning you is being processed, and to information about that data as well as further information and a copy of the data.
  • Right to rectification (Art. 16 GDPR): You have the right to request that incomplete data concerning you be completed or that inaccurate data concerning you be corrected.
  • Right to erasure (Art. 17 GDPR): You have the right to request that data concerning you be deleted without delay, or alternatively to request a restriction of the processing of that data.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request that the processing of your personal data be restricted, under certain conditions.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to request its transfer to another controller.
  • Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent given at any time, with effect for the future.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with the competent supervisory authority.

Cookies

This website uses technically necessary cookies to ensure basic functionality. These include cookies that enable navigation on the website and provide security functions. We do not use analytics or marketing cookies without your explicit consent, which you give by accepting our cookie banner.

You can adjust your browser settings to reject cookies or to be notified when cookies are set. Please note that the functionality of this website may be limited if you reject all cookies.

Cloudflare Turnstile

We use Cloudflare Turnstile on this website to prevent abuse and ensure the security of our contact forms. Turnstile is a security service provided by Cloudflare, Inc. (“Cloudflare”) to distinguish human visitors from bots.

When you submit a form on our website, Turnstile runs in the background. In doing so, various data such as IP address, browser information, and mouse movements are collected to perform a risk assessment and verify that you are human. This data is processed by Cloudflare and stored in the USA.

The use of Turnstile serves the interest of our website's security and protection against spam and abuse. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Further information on Cloudflare's data protection practices can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/