Skip to main content

Datenschutzerklärung

Jazzstadt UG
Privacy Policy
As of: August 2026

1 · Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Jazzstadt UG (limited liability)
represented by the Managing Director Janning Trumann
Venloer Straße 40
50672 Cologne, Germany
Email: jazzstadt@jazzweek.de

2 · Data Protection Officer

Pursuant to Art. 37 GDPR in conjunction with Sec. 38 BDSG (German Federal Data Protection Act), we are not required to appoint a data protection officer, as the statutory requirements for this are not met. If you have any questions about data protection, you can contact the controller named under Section 1 directly.

3 · General Information on Data Processing

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide it; a failure to provide it has no consequences. “Personal data” means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).

4 · Legal Bases

Where we obtain consent for processing operations, Art. 6 (1) (a) GDPR serves as the legal basis. For the processing of data necessary to perform a contract or to take pre-contractual measures, Art. 6 (1) (b) GDPR serves as the legal basis; in the case of a legal obligation, Art. 6 (1) (c) GDPR. Where processing is necessary to safeguard a legitimate interest on our part or on the part of a third party, and where the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6 (1) (f) GDPR serves as the legal basis.

5 · Storage Period

Unless a more specific storage period is stated in this policy, your data will be deleted or blocked as soon as the purpose for storing it ceases to apply, unless statutory retention obligations prevent this.

6 · Hosting

This website is hosted by an external service provider. The personal data you provide is processed on the host’s servers. This may involve server log files, including:

  • Name of the page accessed, date and time of access
  • Volume of data transferred, notification of successful access
  • Browser type and version, operating system used
  • Referrer URL, IP address, requesting provider

The hosting provider is:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Data processing takes place on Hetzner’s servers in Germany or within the EU/EEA. The use of Hetzner is based on our legitimate interest in the reliable, secure and high-performance provision of our website (Art. 6 (1) (f) GDPR) as well as on a data processing agreement pursuant to Art. 28 GDPR. Server, domain and mail logs are deleted after 14 days, unless they are required for evidentiary purposes.

7 · Submission of Events for the Concert Calendar

Organisers can submit their own events for inclusion in our concert calendar via a form on our website. In doing so, we collect the data you provide, including the name, email address and, where applicable, telephone number of the submitting person, as well as the event details (e.g. venue, date, time, participants, description, links).

Submitted events are reviewed by our editorial team and are only published in the concert calendar after being actively approved by us. The processing is carried out to handle your request and – once approved – to provide the free calendar entry, on the basis of Art. 6 (1) (b) GDPR (initiation or performance of an agreement on publication), and otherwise on the basis of our legitimate interest in a curated, reviewed calendar (Art. 6 (1) (f) GDPR).

Your contact details are not displayed publicly in the calendar unless you expressly request this; the event details themselves become publicly visible upon approval. The data is deleted as soon as the event has taken place and no further retention is required, but no later than 12 months after submission, unless statutory retention obligations prevent this.

8 · Newsletter

You can subscribe to our free newsletter. To do so, we require your email address and a confirmation via the double opt-in procedure. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future, via the unsubscribe link in every newsletter email or by sending us a message.

For sending the newsletter, we use Mailchimp, operated by The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) and a data processing agreement pursuant to Art. 28 GDPR. Mailchimp may use recipient data in pseudonymised form to optimise its own services, but may not use it to contact recipients itself or to pass data on to third parties.

As Mailchimp is based in the USA, a data transfer to a third country takes place. Mailchimp is certified under the EU-U.S. Data Privacy Framework (DPF) as well as its UK and Swiss-U.S. extensions. The data transfer to the USA is therefore based on an adequacy decision of the EU Commission pursuant to Art. 45 GDPR. The current certification can be viewed in the Data Privacy Framework list under “Intuit”.

9 · Links to Social Media

On our website, we link to our Instagram presence. This is a plain hyperlink without an embedded social plugin; no data is transferred to Meta/Instagram when you access our website. The data protection provisions of Meta Platforms Ireland Limited only apply once you actively click the link.

10 · SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the change in the address bar from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

11 · Your Rights as a Data Subject

You have the following rights vis-à-vis us:

  • Access (Art. 15 GDPR) to the data processed
  • Rectification (Art. 16 GDPR) of inaccurate or incomplete data
  • Erasure (Art. 17 GDPR) of your stored data
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR), provided the processing is based on consent or a contract
  • Objection (Art. 21 GDPR) to processing based on Art. 6 (1) (f) GDPR
  • Withdrawal of consent (Art. 7 (3) GDPR) with effect for the future

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is usually:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, ldi.nrw.de

12 · Validity and Amendment of this Privacy Policy

This privacy policy is dated August 2026. As our website develops or due to changes in statutory requirements, it may become necessary to amend it. The current version is always available on this page. This privacy policy has been translated into English for convenience only. In the event of any discrepancy or dispute regarding its interpretation, the German version shall prevail and is legally binding.