Personal information is defined as information about your identity. This includes e.g. information such as name, address, telephone number, e-mail address. When ordering our newsletter, tickets or our kultCARD, we need your name and address as well as other information so that we can provide the services requested or the delivery of our product. The processing of personal data takes place exclusively for the fulfillment of the requested service and for the preservation of own justified business interests.
The use of our site is possible without an indication of personal data. Different regulations may apply to the use of individual services on our site, which will be explained separately in this case below. Your personal data will only be processed by us in accordance with the provisions of the European Union and German data protection law. Data is personal when it can be clearly assigned to a specific natural person.
The legal basis of data protection can be found in the General Data Protection Regulation of the EU (GDPR) as well as in the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider:
Kultur, Tourismus und Messebetriebe Zwickau GmbH (Kultour Z.)
Telephone: +49 (0) 375 2713-110
We point out that Internet-based data transmission may be vulnerable, but we take all possible measures to protect against access by third parties.
People under the age of 18 should not submit any personal data to us without the consent of their parents or guardians.
Collection and processing of personal data
We collect and process personal data only for the following purposes:
- Order processing, in accordance with Art. 6 para. 1 letter b of the GDPR
- Processing of ticket reservations, in accordance with Art. 6 para. 1 letter b of the GDPR
- Processing of kultCARD memberships, in accordance with Art. 6 para. 1 letter b of the GDPR
- Responding to requests in accordance with Art. 6 para. 1 (a) of the GDPR
- Provision of newsletter advertising, in accordance with Art. 6 para. 1 (a) of the GDPR
The provision of personal data is necessary in order to fulfill the purposes stated here. Non-provisioning can not fulfill the respective tasks.
It may also be necessary to maintain customer relations, so that we or a service provider contracted by us can use this personal information to inform you of new offers from us.
Other service providers
For administrative and technical reasons, the following service providers also gain access to personal data sent to us via this website for the purpose of processing ticket reservations, kultCARD memberships and the provision of newsletter advertising:
ö_konzept – Agentur für Werbung und Kommunikation GmbH & Co.KG
Telephone: +49 (0) 375 21194-10
Fax: +49 (0) 375 21194-19
Any other transfer of your personal data to third parties will not take place without your explicit consent. The collection of personal data as well as their transmission to government institutions and authorities entitled to receive information only takes place within the framework of the relevant laws or insofar as we are obliged to do so by a court decision.
Our employees and the service companies commissioned by us are obliged to observe secrecy and to comply with the provisions of the BDSG, the TMG and the GDPR.
Routine erasure and blocking of personal data
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.
If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or erased in accordance with legal requirements.
Rights concerning collection and processing of your data
You have the right to information, correction, deletion and restriction of the processing of your personal data. You also have the right of opposition, data portability and the right to revoke your consent to the collection and processing of personal data at any time. According to Art. 77 GDPR, you also have the right to complain to a supervisory authority if you believe that the processing of your personal data is unlawful.
Data protection supervisor
Do you have questions or do you think that the processing of your personal data is not legal? Then you can contact our responsible data protection officer and ask for verification: firstname.lastname@example.org.
For organizational and technical reasons, the following data is automatically stored when using our Internet pages: the names of the pages accessed, the browser and the operating system used, the date and time of access, used search engines, names of downloaded files and your IP address.
We evaluate these technical data anonymously and only for statistical purposes, in order to constantly optimize our website and make our offers even more attractive. These anonymous data are stored separately from personal information on secure systems and do not allow any conclusions to an individual person.
There are additional terms and conditions for our kultCARD. These can be found here.
Subscription of our newsletter
On the website of the Kultur, Tourismus und Messebetriebe Zwickau GmbH the users are given the opportunity to subscribe to the newsletter of our company. Which personal data are transmitted to the data controller when the newsletter is ordered, results from the input mask used for this purpose.
The Kultur, Tourismus und Messebetriebe Zwickau GmbH informs its customers and business partners at regular intervals by newsletter about offers of the company. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by an affected person for the first time for newsletter mailing using the double-opt-in procedure. This confirmation email is used to check whether the owner of the e-mail address as the person concerned authorized the receipt of the newsletter.
When registering for the newsletter, we also store the IP address of the Internet service provider (ISP) of the computer system used by the data subject at the time of registration and the date and time of registration. The collection of this data is necessary in order to understand the (possible) misuse of an affected person's e-mail address at a later date and therefore serves as legal safeguard for the controller.
The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. In addition, subscribers to the newsletter may be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. There will be no transfer of the personal data collected as part of the newsletter service to third parties. Subscription to our newsletter may be terminated by the person concerned at any time. The consent to the storage of personal data that the data subject has given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the controller's website, or to inform the controller in a different way.
Our newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. We automatically regard a withdrawal from the receipt of the newsletter as a revocation.
Contact possibility via the website
Our website contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
On our site we use so-called cookies to recognize multiple uses of our offer by the same user / Internet access owner. Cookies are small text files that your Internet browser stores and saves on your computer. They serve to optimize our website and our offers. These are mostly so-called "session cookies", which are deleted after the end of your visit.
However, these cookies sometimes provide information to automatically recognize you. This recognition is based on the IP address stored in the cookies. The information obtained in this way serves to optimize our offers and to give you easier access to our site.
You can prevent the installation of cookies by setting your browser accordingly. This will not cause you any grave disadvantage when using this website, with the following exceptions:
- Your watchlist will be deleted when the website is closed.
- You can not opt-out for Google Analytics. See the end of the following "Google Analytics" section for more information.
We use Google Analytics, a web analysis service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter "Google". Google Analytics uses so-called "cookies", text files that are stored on your computer and thus allow an analysis of the use of the website by you.
The information generated by these cookies, such as the time, location and frequency of your website visit, including your IP address, is transmitted to Google in the United States and stored there. We use Google Analytics on our website with the addition "_gat._anonymizeIp". In this case, your IP address will already be shortened and thus anonymised by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google will use this information to evaluate your use of our site, to compile reports on our website activity and to provide other services related to website activity and internet usage. Google will also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google does not claim to link your IP address to any other data provided by Google.
Alternatively, you can prevent the tracking by Google Analytics on this page by clicking on this link to set a so-called "opt-out cookie". If you ban the setting of cookies for this website in general, of course, the opt-out cookie does not work either.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.
On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network.
A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.
If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the "Like" button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.
Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.
The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.
Our website uses features provided by the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages featuring a Vimeo plugin, a connection to the Vimeo servers is established. Here the Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo when you visit our website or do not have a Vimeo account. The information is transmitted to a Vimeo server in the US, where it is stored.
If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Our social media appearances
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered.
In detail: If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.
Individual social networks
We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link:
You can customise your advertising settings independently in your user account. Click on the following link and log in:
Should you be recognizable on an image on our website and disagree with its publication, you have the right of deletion of the affected image at any time. Please contact us by email at email@example.com.