Privacy Policy

This privacy policy informs you about the processing of personal data when using the website of TA T – Tieranatomisches Theater on the WWW2 web server of Humboldt-Universität zu Berlin.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Humboldt-Universität zu Berlin
Corporation under public law
represented by the President
Prof. Dr. Julia von Blumenthal
Unter den Linden 6
10099 Berlin
Germany
Phone: +49 (0)30 2093-0
Email: praesidentin@hu-berlin.de
Web: https://www.hu-berlin.de/

Project-related editorial responsibility for the TA T – Tieranatomisches Theater website:
Felix Sattler
Tieranatomisches Theater
Zentrum für Kulturtechnik
Unter den Linden 6
10099 Berlin
Germany
Email: felix.sattler@hu-berlin.de
Phone: +49 (0)30 2093-12870

Data Protection Officer of Humboldt-Universität zu Berlin:
Gesine Hoffmann-Holland
Unter den Linden 6
10099 Berlin
Germany
Phone: +49 (0)30 2093-20020
Email: datenschutz@uv.hu-berlin.de
Web: https://www.hu-berlin.de/datenschutzerklaerung

2. Hosting / Technical Operation

The website of TA T – Tieranatomisches Theater is operated on the WWW2 web server of Humboldt-Universität zu Berlin. Technical operation, in particular operation, maintenance, IT security and technical administration, is carried out by the responsible internal departments of Humboldt-Universität zu Berlin, in particular the Computer and Media Service. Hosting is not outsourced to external hosting providers.

3. Data Processed and Purposes

3.1 Server Log Files

When you access the website, technically necessary access data are processed on the server side. This may include, in particular:

– IP address
– Date and time of access
– Page accessed or file requested
– Amount of data transferred
– Web server status code
– Referrer URL
– Browser and operating system information, in particular the user agent

The data are processed for the following purposes:

– Delivery of the website
– Ensuring technical functionality
– Error analysis
– Ensuring IT security
– Detection and prevention of attacks or misuse

The legal basis is Art. 6(1)(e) GDPR in conjunction with Section 3 of the Berlin Data Protection Act (BlnDSG), insofar as processing is necessary for the performance of the public tasks of Humboldt-Universität zu Berlin and for ensuring secure technical operation.

3.2 Cookies and Consent Management

The website uses cookies and similar technologies. These are small pieces of information that may be stored on or read from your device.

We distinguish in particular between the following categories:

– technically necessary or functional cookies and similar technologies that are required for operating the website or for functions expressly requested by you
– optional statistics cookies or similar technologies
– optional third-party services, in particular embedded content from external providers

Technically necessary cookies are used to provide the website, enable basic functions and store your choices in the consent management system.

Optional cookies and services are only used if you have given your prior consent. This applies in particular to statistical services and embedded content from external providers, insofar as these are not already technically blocked.

Consent management is provided through the WordPress plugin Complianz. Your selection is stored in technically necessary cookies so that the website can take your decision into account.

The legal basis for accessing your device or storing technically necessary information is Section 25(2) of the Telecommunications and Telemedia Data Protection Act (TDDDG). The subsequent processing of personal data is based on Art. 6(1)(e) GDPR in conjunction with Section 3 BlnDSG.

The legal basis for accessing your device or storing optional information is your consent pursuant to Section 25(1) TDDDG. The subsequent processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future or change your selection. To do so, please use the consent management system.

[The consent management system and cookie overview will be embedded here once Complianz has been activated and configured.]

When consent is withdrawn, optional services are deactivated for the future. Cookies that have already been stored may remain on your device until they expire. You can also delete these cookies at any time through your browser settings.

Typical technically necessary cookies may include:

– wordpress_test_cookie – checks whether cookies can be set
– wp_lang – stores a language preference
– cookies used by the consent management system, e.g. cmplz_banner-status, cmplz_policy_id, cmplz_consented_services, cmplz_functional, cmplz_preferences, cmplz_statistics and cmplz_marketing

The cookies and similar technologies actually used in each individual case and their respective retention periods can be viewed in the consent management system or cookie settings.

3.3 Embedded Third-Party Content

Individual pages may contain embedded content from external providers, such as videos, maps, media content or comparable services. Such content is generally only loaded after you have consented to the relevant category or service, insofar as consent is required.

When embedded content is activated, personal data may be transmitted to the respective provider for technical reasons. This may include, in particular, IP address, date and time of access, browser and device information, referrer URL and, where applicable, cookie IDs or similar identifiers. The respective provider may use its own cookies or similar technologies and may process data for its own purposes.

The legal basis for accessing your device or storing or reading information is, where required, your consent pursuant to Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is your consent pursuant to Art. 6(1)(a) GDPR.

3.4 Web Analytics with Matomo

If you consent to the “Statistics” category, we use the web analytics tool Matomo to measure reach and improve the website. Matomo is operated within Humboldt-Universität zu Berlin.

The following data may be processed in particular:

– Pages accessed
– Date and time of access
– Time spent on the website
– Referrer URL
– Technical information about browser, operating system and device
– Pseudonymous visit or session identifiers
– Approximate location information

The analysis is carried out for the purpose of statistically recording the use of the website and improving the website technically, structurally and editorially.

Typical Matomo cookies may include:

– _pk_id – recognition of pseudonymous visits, generally for up to 13 months
– _pk_ses – assignment of a session, generally for up to 30 minutes

The legal basis for accessing your device or storing or reading information is your consent pursuant to Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is your consent pursuant to Art. 6(1)(a) GDPR.

Matomo cookies expire in accordance with the periods stated above. Statistical analysis data are stored only for as long as necessary for the purposes stated. The specific retention period depends on the respective Matomo configuration of Humboldt-Universität zu Berlin.

3.5 Contact by Email

If you contact us by email, we process the information you provide. This may include, in particular, your name, email address, subject, content of the message, time of contact and technical metadata of the email.

The data are processed for the following purposes:

– Processing and responding to your enquiry
– Communicating with you
– Where applicable, documenting the matter
– Where applicable, forwarding your enquiry to the responsible departments within Humboldt-Universität zu Berlin

The legal basis is Art. 6(1)(e) GDPR in conjunction with Section 3 BlnDSG, insofar as processing is necessary for the performance of the public tasks of Humboldt-Universität zu Berlin. Where communication exceptionally serves to initiate or perform a contractual relationship, Art. 6(1)(b) GDPR is the legal basis.

3.6 Newsletter

On our website, we provide a link to an external subscription page operated by our newsletter service provider, CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. Subscription to the newsletter takes place directly on this external CleverReach page.

When you access the external CleverReach subscription page and subscribe to our newsletter, the data required for registration as well as technical data are processed in accordance with CleverReach’s applicable privacy policy.

To subscribe to the newsletter, you are required to provide your email address. Registration is carried out using a so-called double opt-in procedure. After submitting the registration form, you will receive an email asking you to confirm your subscription. Your email address will only be added to the newsletter mailing list after this confirmation.

As part of the registration and confirmation process, evidence of consent is recorded. This includes, in particular, the date and time of registration and confirmation. Where CleverReach records such information, technical data such as the IP address may also be processed. This data serves to document that the registration was properly completed and that consent to receive the newsletter was given.

The newsletter is sent and managed using CleverReach. CleverReach processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

You may withdraw your consent to receive the newsletter at any time with effect for the future. You can do so in particular by using the unsubscribe link included in every newsletter or by contacting us directly. After unsubscribing, your email address will be removed from the active newsletter mailing list or blocked from further mailings.

Evidence of consent may be retained beyond the time of unsubscribing where this is necessary to document the consent given, comply with legal obligations, or establish, exercise or defend legal claims.

Where we use statistical analysis of newsletter usage, information may be processed about whether a newsletter was opened and which links were clicked. Personalised analysis of such usage data will only be carried out where the corresponding consent has been obtained. Where possible, statistical analyses are carried out in anonymised or aggregated form.

Further information on the processing of personal data by CleverReach can be found in CleverReach’s privacy policy.

The legal basis for subscribing to the newsletter, sending the confirmation email as part of the double opt-in procedure, and sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR.

The legal basis for processing evidence of consent in connection with registration and confirmation is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, as we are legally required to be able to demonstrate that consent has been obtained.

3.7 Eventbrite

On our website, we sometimes link to event and ticket pages on the Eventbrite platform. These pages are created and managed by our respective cooperation partners using their own Eventbrite accounts. The TA T does not maintain an active Eventbrite account and does not process ticket or registration data of visitors through Eventbrite.

When you click on such a link, you leave our website and are redirected to a website operated by Eventbrite. From this point onwards, Eventbrite’s privacy policy applies. When you access the Eventbrite website, technical data such as your IP address, browser and device information, as well as information about your use of the website, may be processed. Eventbrite may also use cookies and similar technologies. The data collected by Eventbrite and the purposes for which it is processed are governed by Eventbrite’s privacy policy and cookie settings.

If you register for an event or purchase a ticket through Eventbrite, the personal data collected in this process will be processed in accordance with the arrangements applicable to the respective event. Eventbrite may act both as a controller for its own processing activities and as a processor on behalf of the respective event organiser. The data you provide when registering may be made available to the respective event organiser and, where applicable, to other parties involved in the event. The respective event organiser is generally responsible for this processing.

Further information on the processing of personal data by Eventbrite can be found in Eventbrite’s privacy policy and cookie policy.

4. Recipients of Personal Data

Within Humboldt-Universität zu Berlin, access to personal data is granted only to those departments that require such access for operation, security, administration, editorial management or processing of enquiries. This may include, in particular, the Computer and Media Service, responsible IT departments, responsible administrative departments and the TA T editorial team.

External recipients of personal data may include, in particular:

– Providers of embedded third-party content, where you activate the respective content
– CleverReach GmbH & Co. KG, where you subscribe to the newsletter
– Other technical service providers, where applicable, insofar as they are used for individual functions and there is an appropriate legal basis for this

CleverReach processes personal data in connection with the newsletter as a processor pursuant to Art. 28 GDPR.

5. Transfers to Third Countries

When embedded third-party content is activated, the transfer of personal data to countries outside the European Union or the European Economic Area cannot be ruled out. This applies in particular to services provided by companies based in or affiliated with companies in the United States.

Transfers to third countries only take place where the applicable data protection requirements are met. Depending on the provider, this may be based in particular on an adequacy decision by the European Commission, appropriate safeguards pursuant to Art. 46 GDPR, in particular standard contractual clauses, or your explicit consent pursuant to Art. 49(1)(a) GDPR.

Further information can be found in the privacy information provided by the respective providers.

6. Retention Period

Server log files are generally stored for 7 days and subsequently deleted or anonymised. Longer storage only takes place where necessary in individual cases to investigate security incidents, analyse errors or prevent misuse.

Cookies and similar technologies are stored depending on their respective purpose and your selection. The specific retention periods can be viewed in the consent management system or cookie settings.

Data from email enquiries are stored only for as long as necessary to process your request. Further storage only takes place where statutory retention obligations apply or where storage is necessary for the traceable documentation of the matter, the performance of public tasks, or the establishment, exercise or defence of legal claims.

Newsletter data are processed for the duration of your newsletter subscription. After unsubscribing, your data are removed from the active newsletter mailing list or blocked from further mailings. Evidence of consent may be stored beyond this period where necessary to document consent or establish, exercise or defend legal claims.

Statistical analysis data are stored only for as long as necessary for the purposes stated. The specific retention period depends on the respective technical configuration.

7. Obligation to Provide Data

The provision of access data when visiting the website is technically necessary to deliver the website and ensure IT security. Without this data, the website cannot be accessed.

Consent to optional services, in particular statistics and embedded third-party content, is voluntary. Without consent, these services remain deactivated; the website can generally still be used.

Providing an email address is necessary if you wish to subscribe to the newsletter. Without an email address, a newsletter subscription is not possible. Any additional information in the newsletter form is voluntary unless explicitly marked as a required field.

If you contact us by email, the information required to process your enquiry is necessary for us to process and respond to your request.

8. Your Rights

Subject to the applicable legal requirements, you have the following rights:

– Right of access pursuant to Art. 15 GDPR
– Right to rectification pursuant to Art. 16 GDPR
– Right to erasure pursuant to Art. 17 GDPR
– Right to restriction of processing pursuant to Art. 18 GDPR
– Right to data portability pursuant to Art. 20 GDPR
– Right to object to processing based on Art. 6(1)(e) GDPR pursuant to Art. 21 GDPR

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

You may withdraw or change your consent to optional cookies and services through the consent management system. You may withdraw your consent to receive the newsletter in particular by using the unsubscribe link included in every newsletter or by notifying us directly.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Berlin is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 (0)30 13889-0
Email: mailbox@datenschutz-berlin.de
Web: https://www.datenschutz-berlin.de/

9. Automated Decision-Making / Profiling

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

10. Security

Humboldt-Universität zu Berlin takes technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and unauthorised disclosure. These measures are continuously adapted in line with technological developments.

11. Updates to this Privacy Policy

We update this privacy policy whenever this becomes necessary due to technical changes to the website, the introduction of new services or changes in legal requirements.

Last updated: 04 June 2026