Skip navigation

Privacy statement
Last update: 24. 05. 2018

Any person concerned can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

Name and address of the person responsible:

Schloss Herrenhausen Veranstaltungs- und Betriebs GmbH
Herrenhäuser Straße 5
30419 Hanover

Contact the data protection officer:

E-mail: datenschutz@schloss-herrenhausen.de
Phone: +49 511 763 744-40

1 General information

This data protection declaration is intended to inform the persons concerned (hereinafter also referred to as "users") of this online offer in accordance with the Federal Data Protection Act, the Telemedia Act and the DSGVO about the type, scope and purpose of the collection and use of personal data by the operator.

We take your data protection very seriously and treat your personal data confidentially and according to the legal regulations.

Remember that data transmission over the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties is not feasible.

1. 1 Legal basis

When using our online services, we process personal data only with your consent (Art. 6 Para. 1 S. 1 a) DSGVO), to fulfil a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 Para. 1 S. 1 b) DSGVO), to fulfil a legal obligation (Art. 6 Para. 1 a) DSGVO), to fulfil a contract (Art. 6 Para. 1 S. 1 b) DSGVO), to fulfil a legal obligation (Art. 6 Para. 1 b) DSGVO), to fulfil a legal obligation (Art. 6 Para. 1 b) DSGVO), to fulfil a legal obligation (Art. 6 Para. 1 b) DSGVO), to fulfil a legal obligation (Art. 6 Para. 1 b) DSGVO). S. 1 c) DSGVO) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 S. 1 f) DSGVO).

1. 2 Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as submitted forms that you send to us as a site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If encryption is activated, the data that you transmit to us cannot be read by third parties.






1. 3 Storage, deletion and blocking

We process and store personal data only for the period of time necessary to achieve the processing purpose or if storage has been prescribed by the European legislator or other legislator.

If the storage purpose no longer applies or if a storage period prescribed by the European legislator or other competent legislator expires, the personal data shall be blocked or deleted routinely and in accordance with the statutory provisions. Such statutory storage obligations
may arise in particular from commercial or tax law regulations.

2 Rights of the user

Pursuant to Art. 15ff DSGVO, you have the following rights against us with regard to the personal data concerning you: Right to rectification, blocking or deletion, limitation of processing, data transferability and the right to be subject to non-automated decisions in individual cases, including profiling, provided that your request does not conflict with a legal obligation to store data.

At your request, you will receive free information about which personal data about you has been stored, processed and collected.

Please address inquiries to the data protection officer, contact data see data protection declaration and imprint.


2. 1 Right of objection

Pursuant to Art. 21 DSGVO, they have the right to object to any processing which is based on the legal basis of Art. 6 (1) sentence 1 f) DSGVO. If we process personal data about you for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 Para. 2 and Para. 3 DSGVO.


2. 2 Revocation of consent

If you have given us a separate consent for data processing, you can revoke this consent at any time for the future in accordance with Art. 7 para. 3 DSGVO. Such revocation shall not affect the lawfulness of the processing which has taken place until the revocation on the basis of the consent.


2. 3 Complaints to a supervisory authority

According to Art. 77 DSGVO, you also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.


3 Type and scope of data collected

3. 1 Server Log Files

The provider of the online offer collects data about accesses to the site and stores these as "server log files". These are e. g:

     Visited website
     Time of access
     Amount of data sent in bytes
     Source/reference from which you came to the page
     Browser used
     Operating system used
     IP address used

The data collected is used only for statistical purposes and to improve the website. These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

The processing is also carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 Para. 1 S. 1 f DSGVO. This processing serves the technical administration and the security of the online offer.

3. 2 Cookies

This website uses cookies. These are small text files that are stored on your mobile device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

Common browsers offer the possibility not to accept cookies. Note: There can be no guarantee that you will have unrestricted access to all functions of this website if the appropriate settings are made. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website may be restricted.

The basis for this is Art. 6 para. 1 lit. f DSGVO. The operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. As far as other cookies (e. g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.

3. 3 Contact possibilities

If you contact us via the contact forms offered, your details will be stored and processed for processing and answering your enquiry. These data will not be passed on to third parties without your consent. The transmission of your data takes place via an encrypted connection.

The legal basis for data processing is Art. 6 Para. 1 S. 1 b DSGVO. To object to the processing, please send us an informal e-mail.

3. 4 Applications and application procedures

If you send us your application documents electronically, for example by e-mail, we will collect and process your personal data for the purpose of handling the application process.

If the data controller concludes an employment contract with an applicant, the transferred data shall be stored for the purpose of processing the employment relationship in accordance with the statutory provisions. If no contract of employment is concluded with the applicant, the application documents will be automatically deleted six weeks after notification of the rejection decision, provided that no other legitimate interests stand in the way of deletion. Other legitimate interests in this sense include, for example, the duty to provide evidence in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

The processing of applicant data is carried out to fulfil our (pre)contractual obligations within the scope of the application procedure as defined by Art. 6 Para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO if the data processing e. g. in the context of legal proceedings for us becomes necessary (in Germany applies additionally § 26 BDSG).

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are voluntarily disclosed in the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b DSGVO (e. g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are requested from applicants as part of the application procedure, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. a DSGVO (e. g. health data, if these are necessary for the exercise of the profession).

3. 5 Comments and contributions

If you use any of the means provided to submit a contribution or comment, your IP address may be used to contact us on the basis of our legitimate interest within the meaning of Art. 6 Para. 1 lit. f. of the German Data Protection Act. DSGVO can be stored. This serves the safety of the operator: If your text offends against valid right, he would like to be able to trace your identity.

3. 6 Subscriptions / Newsletter

You may be able to subscribe to the entire online offering as well as to follow-up comments on your contribution. You will receive an e-mail confirming your e-mail address. Apart from this, no other data is collected. The stored data will not be passed on to third parties. You can unsubscribe at any time.

The operator of the online offer offers you if necessary the registration at a newsletter, in which he informs you about current events and offers. If you would like to subscribe to the newsletter, you must provide a valid e-mail address.

The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients pursuant to Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing pursuant to Art. 6 para. 1 as per f. DSGVO in conjunction with Section 7 (3) UWG.