DATA PROTECTION STATEMENT

Party responsible for the content according to Section 18 para. 2 MStV:

1. Name and contact details of the controller responsible for the processing: This data protection information applies to the processing by:

Controller:

SUNDANCE Communications GmbH

Hans-Henny-Jahnn-Weg 35

22085 Hamburg · Germany

Email: info@sundance.de

2. Collection and storage of personal data and the type and purpose of the data’s use

a) When visiting the website

When accessing our website www.sundance.de, the browser in operation on your end-device automatically sends information to the server of our website. This information is saved temporarily in a “logfile”. The following information is collected without any input from you and is saved until it is automatically deleted:

IP address of the requesting computer,

Date and time of access,

Name and URL of the file accessed,

Website from which the access originates (referrer URL),

Browser used and, where applicable, the operating system of your computer and the name of your access provider.

The above data is processed by us for the following purposes:

ensuring smooth connection to the website,

ensuring convenient use of our website,

assessing the system security and stability and

other administrative purposes.

The legal basis for the processing of the data is Art. 6 para. 1 s.1f GDPR. Our legitimate interest follows from the above-listed purposes of data collection. We will never use the data collected for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when our website is visited. You can find more detailed explanations in sections 4 and 5 of this Data Protection Statement.

b) When registering for our newsletter

If you have expressly given your consent pursuant to Art. 6 para. 1 s. 1a GDPR, we will use your email address to regularly send you our newsletter.

Our interest is oriented towards the operation of user-friendly and secure newsletter systems that serve both our commercial interest and the users’ expectations. Submitting an email address is sufficient for receiving the newsletter. We offer you the additional option of stating your name and country

in the newsletter, for the purpose of personal greeting and country-specific details.

Double opt-in and logging: Registration for our newsletter uses the double opt-in procedure. This means that after registering you receive an email in which you are asked to confirm your registration. This registration is necessary to prevent anyone registering with another person’s email address. Registrations for the newsletter are logged so that the registration process can be evidenced in accordance with the legal requirements. This includes the storage of the time of registration and confirmation as well as the IP address. Any changes to your details as stored by the distribution service-provider are also logged.

Distribution service-provider: The newsletter is distributed using “MailChimp”, a newsletter distribution platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the distribution service-provider here: https://mailchimp.com/legal/privacy/. The email addresses of our newsletter recipients, as well as their other data as described in this text, are stored on MailChimp’s servers in the USA. MailChimp uses this information for distributing and evaluating the newsletter on our behalf. According to its own information, furthermore, MailChimp can use this information for optimising or improving its own services, for example for the technical optimisation of distribution and of the presentation of the newsletter, or for commercial purposes in order to determine the countries from which recipients come.

However, MailChimp does not use the data of our newsletter recipients for writing to them itself; neither does it pass the data on to third parties.

We trust the reliability, IT security and data security of MailChimp. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement, thereby guaranteeing compliance with the European level of data protection

(https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).

You can unsubscribe at any time, for example by using a link at the end of each newsletter. Alternatively, you are welcome to send your request to unsubscribe at any time by email to info@sundance.de.

c) When using our contact form

We offer you the option of contacting us via a form provided on the website. When using the “Event” contact form, please state the artist, client, contact partner, email address, telephone number, event, date and venue, so we know what your enquiry is about, whether the artist is available andhow we can reach you. You are also welcome to enter other details. When using the “Interview” contact form, please state the artist requested, the medium, contact partner, email address, telephone number, interview subject, interview deadline and duration and publication details for the interview so that we know what your enquiry is about, whether the artist is available and how we can reach you. You are also welcome to enter other details.

The data processing undertaken in order to establish contact with us is carried out in accordance with Art. 6 para. 1 s.1a GDPR on the basis of your freely given consent.

The personal data collected by us for the use of the contact form is automatically deleted after the enquiry you submitted has been resolved.

3. Transfer of personal data

Your personal data is not transferred to third parties for any purposes other than those listed below. We only transfer your personal data to third parties if:

you have given your express consent for us to do so pursuant to Art. 6 para. 1 s. 1a GDPR,

the transfer is necessary pursuant to Art. 6 para. 1 s. 1f GDPR for raising, exercising or defending legal claims and if there are no grounds to assume that you have an overriding interest, which is worthy of protection, in the non-transfer of your data,

there is a legal obligation pursuant to Art. 6 para. 1 s. 1c GDPR to make the transfer and

this is legally permissible and necessary pursuant to Art. 6 para. 1 s. 1b GDPR for the handling of the contractual relations with you.

4. Use of cookies

We use cookies on our website. These are small files that your browser creates automatically and that are saved on your end-device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do no damage to your end-device and contain no viruses, Trojans or other malware.

The cookie contains information produced in the specific context of the end-device used. This does not mean, however, that we obtain direct knowledge

of your identity.

The use of cookies serves, firstly, to make it more convenient for you to use our service. For example, we use “session cookies” to detect when you have already visited particular pages of our website. These are automatically deleted after you leave our website.

In addition, we use temporary cookies for optimising user-friendliness. These are stored for a set period on your end-device. If you use our website again

in order to make use of our services, it is automatically detected that you have visited us before. The preferences you have set are remembered

so you do not have to enter them again.

Secondly, we use cookies to statistically record usage of our website and for purposes of analysing the optimisation of our services for you.

These cookies enable us to recognise, as soon as you return to our website, that you have visited us before. These cookies are deleted automatically

after a specific period.

The data processed by cookies is necessary for the purposes listed in order to ensure our legitimate interest as well as that of third parties pursuant

to Art. 6 para. 1 s. 1f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are saved on your computer

or so that a message always appears before a new cookie is set. Complete deactivation of cookies may, however,

5. Creation of pseudonymised use profiles for web analysis

a) Tracking tools

The tracking measures taken by us and listed below are implemented on the basis of Art. 6 para. 1 s. 1f GDPR. Our intention for the tracking measures used is to ensure a needs-based design and continuous optimisation of our website. We also use tracking measures to statistically record our website and for purposes of optimisation of our service for you. These interests can be regarded as legitimate within the meaning of the regulation mentioned above.

Each data processing purpose and data category can be taken from the corresponding tracking tool.

b) Google Analytics

To ensure needs-based design and continuous optimisation of our pages, we use Google Analytics, a web analysis service provided by Google Inc. (https://about.google/intl/en/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies (see under 4) are used. The information about your usage that is produced by cookies, for example

browser type/version,

operating system used,

referrer URL (the previously visited website),

host name of the accessing computer (IP address),

time of the server query,

are transferred to a Google server in the USA and stored there. The information is used to analyse use of the website, to compile reports about the

website activities and to provide further services associated with use of the website and of the Internet for purposes of market research and to provide needs-based design of these Internet pages. This information may also be transferred to third parties provided this is legally permitted or if third parties

are processing this data on our behalf. Under no circumstances will your IP address be combined with other data by Google.

You can prevent the installation of cookies by adjusting the settings of your browser software accordingly. However, please note that not all functions

of this website will be usable in full if so.

You can also prevent the collection of the data about your use of the website that is produced by the cookie (including your IP address)

and the processing of the data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

As an alternative to the browser add-on, especially for browsers on mobile end-devices, you can prevent the collection by Google Analytics by clicking on this link https://tools.google.com/dlpage/gaoptout?hl=en. An opt-out cookie is placed to prevent the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website. It is stored on your device. If you delete the cookies in this browser, you must place the opt-out cookie again.

You can find further information on data protection in connection with Google Analytics in the Google Analytics help section (https://support.google.com/analytics/answer/6004245?hl=en). On this website, Google Analytics has been supplemented with the code “gat._anonymizeIp();” to ensure that IP addresses are only collected in anonymised form, thus preventing a direct connection to a person

(this is known as IP masking).

6. Facebook Social Plugins

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online service within the meaning of

Art. 6 para. 1f GDPR) we use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may represent interaction elements or contents (e.g. videos, graphics or text sections) and can be identified by one of the Facebook logos (white “f” on blue tile, the word “like” or a “thumbs up” icon) or are labelled with the phrase “Facebook Social Plugin”. The list and the appearance of the Facebook Social Plugins can be seen here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield agreement, thus offering a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). If a user accesses a function of this online service that contains this kind of plugin, their device establishes a direct connection with Facebook’s servers. The content of the plugin is transferred to Facebook directly on the user’s device, and Facebook incorporates it in the online service. Usage profiles for the users can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the aid of this plugin, and we therefore inform users within the scope of our knowledge.

By incorporating the plugin, Facebook is informed that a particular page of the online presence has been accessed. If the user is logged in to Facebook, Facebook can assign the visit to the user’s Facebook account. When users interact with the plugins, for example by clicking the Like button or posting

a comment, information to this effect is sent directly from your device to Facebook and saved there. Even if a user is not a member of Facebook,

it is still possible that Facebook will find out their IP address and store it. According to Facebook, it only saves anonymised IP addresses in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and settings options for protecting the user’s privacy are available to users in Facebook’s data protection statement: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not wish for Facebook to collect information about them via this online presence and to link this with their membership data with Facebook, they must log out of Facebook and delete their cookies before using our online presence. It is possible to make further adjustments and objections to the use of data for advertising purposes within the Facebook profile settings:

https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are implemented independently of the platform, that is, they are adopted for all devices,

such as desktop computers or mobile devices.

7. Incorporation of third-party services and contents

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online presence within the meaning of Art. 6 para. 1f GDPR), we use contents or services from third-party providers in our online presence, e.g. by incorporating videos or fonts (hereinafter referred to collectively as “contents”). This always presupposes that the third-party provider of these contents is aware of the users’ IP addresses, because without the IP address they would not be able to send the contents to the users’ browsers. The IP address is therefore essential for the presentation of these contents.

We endeavour only to use contents whose providers use the IP address only for delivery of the contents. Third-party providers can, furthermore, use “pixel tags” (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The pixel tags can be used to analyse information such as visitor traffic to the pages of this website. The anonymised information can also be saved in cookies on the user’s device and may contain such details as technical information on the browser and operating system, referring website, visit time and other facts about the use of our online presence, and may also be combined with similar information from other sources.

The following description is an overview of third-party providers and their contents, as well as links to their data protection statements, which contain

further information on the processing of data and, as listed in part here already, opt-outs:

External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The Google Fonts are included by means of a server call to Google (generally in the USA). Data protection statement https://www.google.com/policies/privacy/, opt- out: https://www.google.com/settings/ads/.

Maps obtained from the “Google Maps” service of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection statement: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Videos from the platform “YouTube” of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection statement: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Functions of the Google+ service are incorporated into our online presence. These functions are offered via the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link to the contents of our web pages with your Google+ profile by clicking on the Google+ button. This enables Google to assign your visit to our web pages to your user account. Please note that as the operator of the pages we receive no information about the content of the data transferred and the use of this data by Google+. Data protection statement: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Functions of the Twitter service are incorporated into our online presence. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and shown to other users. In the process, data is also transferred to Twitter. Please note that as the operator of the pages we receive no information about the content of the data transferred and the use of this data by Twitter. Data protection statement by Twitter at http://twitter.com/privacy. You can adjust your data protection settings with Twitter in the account settings at https://twitter.com/account/settings.

Functions of the Instagram service are incorporated into our online presence. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link to the contents of our web pages with your Instagram profile by clicking on the Instagram button. This enables Instagram to assign your visit to our web pages to your user account. Please note that as the operator of the pages we receive no information about the content of the data transferred and the use of this data by Instagram. Data protection statement: http://instagram.com/about/legal/privacy/.

8. Data subject rights

Your have the right:

pursuant to Art. 15 GDPR, to request information about your personal data that has been processed by us. In particular, you can request information about the purpose of the processing, the category of the personal data, the categories of recipients to whom your data has been or is being disclosed, the planned duration of storage, the existence of the right to rectification, erasure, restriction of processing or the right to object, the origin of any of your data that was not collected by us, and the existence of an automated decision-making process including profiling and, where applicable, significant information on the details of this;

pursuant to Art. 16 GDPR, immediate rectification of your personal data that is stored by us where it is incorrect, or completion of your data;

pursuant to Art. 17 GDPR, to request the erasure of your data that is stored by us, unless the processing is necessary for exercising the right to free expression and information, for fulfilling a legal obligation, for reasons of public interest or for raising, exercising or defending legal claims;

pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of your data, if the processing is unlawful but you do not wish for it to be erased and we no longer need it, if you nevertheless require the data for raising, exercising or defending legal claims or if, pursuant to Art. 21 GDPR, you have submitted an objection to the processing;

pursuant to Art. 20 GDPR, to request to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to have it sent to another controller;

pursuant to Art. 7 para. 3 GDPR, to withdraw the consent you have previously given to us at any time. This has the result that we are no longer allowed to continue the data processing based on this consent in the future and

pursuant to Art. 77 GDPR, to complain to a supervisory authority. As a rule, to this end you can contact the supervisory authority of your usual place of residence, your workplace or our corporate office.

9. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data provided there are grounds resulting from your particular situation or if the objection is to direct advertising. In the latter case, you have a general right to object that may be exercised without reference to any particular situation.

If you would like to make use of your right to object, it is sufficient to email info@sundance.de.

10. Data security

Within your website visit we use the widespread SSL (Secure Socket Layer) procedure in combination with the highest applicable level of encryption that is supported by your browser. As a rule this means 256-bit encryption. If your browser does not support 256-bit encryption, we default to 128 v3-technology

as an alternative. You can find out whether a particular page of our website is transferred under encryption by looking for the enclosed key or lock icon in your browser’s lower status bar.

We also make use of appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulations, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological development.

11. Current version and revision of this Data Protection Statement

This Data Protection Statement is up to date, and its current version is dated March 2021.

It may become necessary, because of the further development of our website and services or due to changed legal or regulatory provisions,

to revise this Data Protection Statement. You can access and print out the current Data Protection Statement at any time from our website at http://en.sundance.de/impressum/.