Privacy Policy

1. Data protection at a glance

We take the protection of your personal data seriously. This website is designed to be data-minimising: the public site sets no cookies, embeds no third-party trackers, and hosts its fonts locally. This privacy policy explains what data we process, why, and what rights you have.

2. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

info@ushaberlin.com

3. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access to the data stored about you (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR) and to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please contact us using the details above. You also have the right to lodge a complaint with the supervisory authority responsible for us: the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

4. Hosting

This website is operated on servers within the European Union. Where a hosting provider processes data on our behalf, this is done under a data processing agreement pursuant to Art. 28 GDPR. The legal basis for the processing of connection data is our legitimate interest in the reliable and secure provision of this website (Art. 6 (1)(f) GDPR).

5. IP address and connection data

Every time you access this website your browser transmits technically necessary connection data, including your IP address. We do not store your IP address. It is processed only transiently: to establish the technical connection, to derive the pseudonymous visitor identifier used by our cookieless statistics (see section 8; the IP address itself is never stored) and briefly to prevent abuse and spam (limiting the number of requests per IP address). The application does not keep persistent server log files containing IP addresses. The legal basis is our legitimate interest in the secure and stable operation of the site (Art. 6 (1)(f) GDPR).

6. Cookies

This website does not use cookies or comparable technologies. Your language choice is stored in the URL rather than in a cookie.

7. Contact and booking enquiries

If you send us an enquiry via the form on this website, the data you provide (the type of enquiry, your name, email address and, where you fill them in, your phone number, event/date and party size, together with your message and the language of the form) is transmitted to us, stored in our database and forwarded to us by email so that we can process your request. Your name and email address are required in order to reply; every other field is optional. Your IP address is not stored: the limit on how many enquiries one sender may submit is kept only briefly in memory. If you use the direct email link instead, your enquiry is sent from your own email client and reaches us by email only.

After submitting the form you automatically receive a confirmation email repeating what you sent.

The legal basis for processing this data is Art. 6 (1)(b) GDPR where the enquiry relates to a (potential) contract, and otherwise our legitimate interest in responding to enquiries (Art. 6 (1)(f) GDPR). We retain enquiry data until your request has been fully dealt with and thereafter delete it, unless statutory retention periods (e.g. under commercial or tax law) require longer storage.

We use Mailjet (Sinch France SAS, Frankreich) as a processor pursuant to Art. 28 GDPR to deliver these emails. Your name, email address and the content of your message are transmitted to that provider for this purpose.

8. Reach measurement (our own, cookieless statistics)

To understand how our site is used, we operate our own privacy-friendly, cookieless statistics. For each page view or interaction we store the event type, the page path, the referring website's host (not the full URL) and a pseudonymous visitor identifier. This identifier is a one-way hash calculated from your IP address, your browser's user agent and the current date using a secret key; it rotates every day. Your IP address itself is never stored and the hash cannot be traced back to you.

We do not set cookies, do not track you across websites and do not build personal profiles. Because no information is stored on or read from your device and the data is pseudonymous, this processing does not require your consent; the legal basis is our legitimate interest in the statistical analysis of reach (Art. 6 (1)(f) GDPR).

9. Locally hosted fonts

This website uses web fonts that are hosted on our own server. No connection to third-party font providers such as Google Fonts is established, and no data is transmitted to such providers when you load the site.

10. Links to ticket shops and social media

This website links to external services: the ticket shops that sell our dates, our own profiles on Instagram, SoundCloud, Spotify and Bandcamp, and the profiles and booking pages our residents keep elsewhere. These are plain links, not embedded players or widgets. Nothing is loaded from those services when you view our pages, and no data reaches them until you actively click a link and leave our site. Once you follow one, the privacy policy of the respective provider applies and we have no influence over it.

11. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the 'https://' in the address bar of your browser.