Data protection policy

Our visitors may be located in different jurisdictions. Our processing of personal data of people who are in the EEA is regulated by the European Union’s General Data Protection Regulation (the “GDPR”).  Our processing of personal data of people who are in the UK is governed by the Data Protection Act 2018, which incorporates the GDPR as the UK GDPR.  This Privacy Notice refers to the GDPR and the UK GDPR collectively as the “GDPR”. This policy is applicable also for visitors from other regions and countries underlying local privacy laws (e.g. Switzerland) and does not limit their subject rights.

Opus Arte (in this Notice when we refer to Opus Arte or “we”/”us”/”our” we mean Opus Arte) is committed to providing quality services to you and this policy outlines our ongoing obligations to you in respect of how we manage your personal Information.

We collect, use and store your personal data exclusively in accordance with the provisions of the applicable data protection laws.

This data protection information applies to data processing by:

Company:

Opus Arte

c/o Royal Opera House

Covent Garden

London

W2CE 9DD

Email: info@opusarte.com

Website: https://www.opusarte.com

Data Protection Officer: Michael Vogelbacher

Telephone:

+49 234 93693-122

Email: info@opusarte.com

Collection and processing of data

Personal information according to the GDPR is any information relating to an identified or identifiable natural person (‘data subject’).

Every access to our website and every retrieval of a file stored on this website is logged. The storage serves internal system-related and statistical purposes. Logged are: Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting computers are logged. Further personal data is only collected if the user of the website and/or customer provides information voluntarily, for example in the context of the online application process, an inquiry or registration or for the conclusion of a contract or via the settings of his browser. The above-mentioned data is collected by us in order to enable a smooth connection setup as well as a comfortable use of our website. In addition, we use the above data to evaluate system security and stability and for other administrative purposes. The legal basis for this data collection is Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in the aforementioned purposes for data collection.

We will gladly send you our directory of processing activities according to Art. 30 (1) GDPR.

Cookies

Our website uses cookies. A cookie is a text file that is sent when you visit a website and is stored temporarily on the hard drive of the website user and/or customer. If the corresponding server of our website is called up again by the user of the website and/or the customer, the browser of the user of the website and/or the customer sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. Cookies can e.g.  advertisements can be controlled or navigation on a website can be facilitated.

The user of the website and/or customer can influence the use of cookies via the consent management tool consentmanager.net. If the user of the website and/or customer also wants to completely prevent the use of cookies, he can do this by making local changes to his settings in the Internet browser used on his computer, i.e. the program for opening and displaying Internet pages (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

Please note that the complete deactivation of cookies may result in you not being able to fully use all the functions of our website. The legal basis for this data collection is Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in the aforementioned data collection purposes.

Consent management tool

A web service provided by consentmanager.net is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to consentmanager.net. The legal basis for the data processing is Art. 6 (1) (f) GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of their collection has been fulfilled. Further detailed information on the processing of the transmitted data can be found in the privacy policy of consentmanager.net.

You can prevent the collection as well as the processing of your data by cookiebot.com by disabling the execution of script code in your browser or by installing a script blocker in your browser.

Disclosure of personal data

Your personal data will only be passed on to third parties if you have given your express consent to this in accordance with Art. 6 (1) (a) GDPR, if the transfer in accordance with Art. 6 (1) (f) GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data, if there is a legal obligation for the disclosure pursuant to Art. 6 (1) (c) GDPR  and if this is legally permissible and required pursuant to Art. 6 (1) (b) GDPR  for the processing of contractual relationships with you.

Google services

Below we inform you which Google services (for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; otherwise: Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are used on our website. Google has certified itself under the EU-US Privacy Shield Agreement (Privacy Shield). This means that Google undertakes to comply with a level of data protection that is comparable to that in the European Union. You can read more about this here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Further information on data protection at Google can be found at: https://www.google.de/intl/de/policies/privacy, in Google's statement on the collection and use of data at https://privacy.google.com/intl/de/your-data.html and at https://support.google.com/analytics/answer/6004245?hl=de.

Google Web Fonts

In order to make our website more readable, we use web fonts (fonts) from Google LLC via an API (application programming interface). When you access our website, these fonts are stored in the cache, i.e. the buffer memory of your web browser. For this purpose, the browser connects to the Google servers and your IP address is transmitted to Google with the information that you have visited our website. If you access our website using a browser that is not compatible with web fonts, the page will be displayed in your computer's standard font instead.

You can find information about Google Web Fonts at https://developers.google.com/fonts/faq.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and stored there. We would like to point out that on our website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure an anonymized collection of IP addresses (so-called IP masking). As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in order to ensure an anonymized collection of IP addresses (so-called IP masking).

In exceptional cases, the full IP address is transmitted to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis is your consent pursuant to Art. 6 (1)(a) EU GDPR.

Doubleclick by Google

As we show YouTube videos on our website, "Doubleclick by Google" is also used on the website. Like YouTube, Doubleclick belongs to Google LLC. Doubleclick uses cookies for advertisements and to measure the success of advertisements. For this purpose, your browser is assigned a so-called pseudonymous identification number (pID). According to Google, DoubleClick cookies do not contain any personal information. However, Google uses the cookies and the pID to identify which pages have been visited in order to place cross-page advertising and to analyze which ads have been displayed and which, if any, have been accessed, i.e. clicked on. DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. We would also like to point out that Google can assign the website visit to your Google account if you are registered and logged in to one of the Google services. Even without registration or login, it is technically possible for Google to retrieve and store your IP address. The information generated by the cookies is transmitted by Google to a server in the USA or another EU third country for analysis and stored there.

Integration of YouTube videos

We use the plugin of the YouTube service, which belongs to Google (for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; otherwise: Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The YouTube plugins are the video boxes in which we upload videos about products, general information about the publisher or events. If you click in the video box, the corresponding video starts on our site. At the same time, your browser establishes a direct connection to the YouTube servers. The YouTube server thus receives information about which specific page of our website you have visited.

If you are also logged into your YouTube account or other Google account, you enable YouTube or Google to assign your surfing behavior directly to your personal profile. You can prevent this possibility of assignment by logging out of your account beforehand. Further information on this can be found in YouTube's privacy policy at http://www.google.com/intl/de/policies/privacy.

The legal basis is your consent pursuant to Art. 6 (1)(a) EU GDPR.

Privacy policy for our online presences in the social networks.

In the following, we inform you about which data is processed when you access our online presences in the social networks.

As the operator of our company website, we receive anonymized visitor statistics (insights) in the respective social network, which are created on the basis of data collected by the respective social network. Page insights are summarized data that provide us with information about how users interact with our site. We do not receive personal data. We therefore do not gain insight into the individual personal data of visitors to our company site. As the operator of the company site, we are jointly responsible for the visitor statistics (Insights) with the provider of the respective social network (Art. 26 DSGVO), with the provider of the respective social network assuming primary responsibility. The legal basis for the use of Insights data is our legitimate interest within the meaning of Art. 6 (1) f) DSGVO to provide information and communication offers for interested parties and customers via social networks. We use this information for economic and communication purposes, including to remain competitive as a company.

When you access our online presences in the social networks, the respective social network places cookies on the device you use for this purpose (i.e. your computer or mobile device), which have the purpose of storing information in the web browsers and remain effective for a period of up to two years, unless they are deleted. The respective social network receives the information stored in the cookies, records it and processes it. This happens not only when you access services of the respective social network such as our Instagram/ Xing/ LinkedIn/ Twitter page, but also for services provided by other members of the corporate group of the respective social network, as well as services provided by other companies that use the services of the respective social network. Partners of the respective social network and third parties also use cookies on the respective social networks to provide services. The data is used by the respective social network and third party companies for product research and development and advertising and sponsored content.

Please note that cookies are placed when you access our company website regardless of whether or not you have an account on the respective social network.

If you have an account on the respective social network, the respective social network collects and processes data when you access the company page, provided you have provided this data in your account. This includes your age, gender, relationship status, professional situation as well as information about your lifestyle, interests and purchases or purchasing behavior (demographic data). The respective social network also collects and processes geographical data such as your location. This is used by the respective social networks to offer their information services and advertising in a targeted manner (personalization). The respective social network can assign this data to your person.

If you do not have an account on the respective social network, the cookie placement will in any case collect your IP address, information about your device, the region or, if applicable, the more precise location where you use it, call time and dwell time, as well as estimate the above demographic data based on your browsing behavior.

You can prevent the collection of the data generated by the cookie and related to your use of our company website (including your IP address) to the respective social network as well as the processing of this data by the respective social network by adjusting your cookie settings before calling up our company website in the social networks. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it is pointed out that the use and especially the user comfort will be limited without cookies. In addition, you can activate the "do not track" function in your browser, disable script code executions in your browser or use a so-called script blocker.

The U.S. providers of the respective social network also have servers in the U.S. as well as other EU third countries and use a network of computers, cloud-based servers and other infrastructure and information technologies as well as other service providers that may be located outside the European Economic Area and Switzerland, i.e., in countries whose data protection does not meet the level of the EU GDPR and the Federal Republic of Germany. In this case, further guarantees such as standard contractual clauses of the EU Commission are concluded.

We maintain online presence on:

Facebook and Instagram, provider: Meta Inc., Headquarters: 1 Hacker Way, 94025 Menlo Park, CA, USA; for users within the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

For more information, please contact

• in Meta's data policy: https://www.facebook.com/privacy/policy/
• https://help.instagram.com/155833707900388?locale=da_DK&cms_id=155833707900388&force_new_ighc=false
• in Meta's Cookie Policy at https://www.facebook.com/privacy/policies/cookies/?subpage=subpage-4.5
• in the information on Page Insights data at https://www.facebook.com/legal/terms/information_about_page_insights_data,

YouTube, provider:

for users within the EU: Google Ireland Limited, Gordon House Barrow St, Dublin 4, Ireland; otherwise: Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

For more information, please see YouTube's data policy:

https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/

X (former Twitter), provider: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, US

For more information, please see X's data policy: https://twitter.com/da/privacy

Data subject rights

As a data subject, you have the right

• to request information about your personal data processed by us in accordance with Art. 15 GDPR;
• pursuant to Art. 16 GDPR, to demand the correction or completion of your personal data stored by us without delay;
• in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, insofar as this does not conflict with any of the reasons stated in Art. 17 (3) GDPR;
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data;
• pursuant to Art. 20 GDPR, to request the transfer of your data provided to us in a structured, common and machine-readable format without any obstacles;
• in accordance with Art. 7 para.3 GDPR, to revoke your consent given to us at any time;
• file a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.

Directory of processing activities

For the respective activities and processing operations, we will gladly send you our directory of processing activities in accordance with Art. 30 (1) GDPR.

Right of objection

You have the right pursuant to Art. 21 GDPR  to object to the processing of your personal data, provided that it is processed on the basis of legitimate interests within the meaning of Art. 6 para.1 lit.f GDPR  and insofar as there are grounds arising from your particular situation or your objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. To exercise your right of revocation or objection, a simple e-mail to info@opusarte.com is sufficient.

You have the right to file a complaint concerning our processing of your personal data with your national (or in some countries, regional) data protection authority.

Data security

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Policy Updates

This Policy may change from time to time and is available on our website.