Privacy

Version: 28 October 2026

Controller

Freundeskreis Klosterkirche Maihingen e. V.
Klosterhof 6
86747 Maihingen, Germany
Email: freundeskreis@klosterkirche-maihingen.de

The main website

This static main website sets no cookies, uses no tracking, loads no external fonts and embeds no third-party services. The web server processes technically necessary connection data, in particular the time, requested address, transferred data volume, browser identifier and IP address, to provide the website securely and reliably. This data is not combined with membership or event data.

Language choice

When you choose DE or EN in the language switcher, we remember your choice on this device for up to one year (365 days). Only the language code and an expiry date are saved in your browser’s local storage, with no visitor identifier or browsing history. This setting is not sent to our server or to third parties and is not linked to membership applications, newsletter subscriptions or ticket orders.

The setting is saved only when you use the language switcher. Ordinary page visits do not extend its lifetime. Once expired, it is ignored and removed on your next visit. Your browser may clear website data earlier or prevent storage; switching language through the page address still works.

The remembered language is used when you open the main address without a language prefix. Direct links to German or English pages keep their language. Choosing the other language in the language switcher replaces your previous choice. You can remove the setting at any time by clearing this website’s data in your browser. The current page keeps its language; your next visit to the main address uses your browser settings again.

Online membership application

The application processes the applicant’s name, address, country, email address and preferred language, as well as an optional telephone number, date of birth, message and additional annual donation. A SEPA mandate additionally requires the account holder’s name, email address and IBAN. A different account holder receives a separate confirmation link and sees no unrelated applicant information.

The data is used to process the requested membership application, perform email confirmation and hand the application to the responsible Board member. Data required for the application is processed under Article 6(1)(b) GDPR. A SEPA mandate is processed only following the account holder’s explicit declaration. The website does not initiate a debit.

The confirmation link is valid for five days. Unconfirmed applications are marked as expired and deleted after a further seven days. Once the confidential application PDF has been delivered to the protected membership mailbox, the encrypted server copy is deleted after 14 days. The responsible person then transfers the PDF into the association’s existing membership and SEPA process, where the applicable statutory and organisational retention rules apply.

Full bank details are not included in web-server logs or email subject lines. The full IBAN appears only in the confidential PDF for the responsible person. Delivery uses the association’s own mailbox. There is no automatic transfer to a bank or payment provider.

Our email newsletter covers association news, concerts and events. Subscribing is voluntary and independent of membership; neither membership nor ticket purchases imply consent. See the newsletter page for current signup availability.

We process your email address, chosen language and evidence of your separate consent (Article 6(1)(a) GDPR). Standalone signup requires email confirmation. If the optional newsletter choice is offered and selected during an online membership application, it is confirmed separately in the same email confirmation step. Paper signup requires separate consent. Only the applicant may consent; a different payer cannot do so on their behalf.

Lists are managed using self-hosted Listmonk, with Lettermint B.V. as the delivery processor. Email opens and link clicks are not tracked. Confirmation links expire after five days; unconfirmed requests are deleted after seven days. Active subscriptions are kept until withdrawal. Under the association’s approved retention policy, minimal consent evidence is retained for three further years solely for accountability and legal defence, not for further marketing. Necessary suppression records prevent accidental re-enrolment.

Local newsletter-service operational logs are kept for no more than seven days and its local application backups for no more than 30 days. Lettermint has separate periods: its published documentation states that messages, metadata and delivery events are deleted after 28 days. Technical logs are normally retained for no more than 14 days; selected records may be needed longer for active security, abuse or legal investigations. Access-restricted backup residues may remain for up to 14 days after active-system deletion. Erasure requests and necessary exceptions are reviewed individually.

You can withdraw newsletter consent at any time for the future using the unsubscribe link or by emailing info@klosterkirche-maihingen.de. This does not affect membership or the lawfulness of processing before withdrawal. Privacy information is also available on paper on request.

Your rights

Data subjects may in particular request access, rectification, erasure or restriction of processing and object to incorrect processing. A SEPA mandate may be revoked for the future by contacting the association. Requests can be sent to the email address above. You also have the right to lodge a complaint with a data-protection supervisory authority.

Ticket shop and concert tickets

The association named above operates the separate shop at tickets.klosterkirche-maihingen.de using self-hosted Pretix software. We process the purchaser’s name and email address, selected event and ticket category, order and payment status, ticket codes and any admission checks. Individual names and email addresses for every guest are not collected by default. For assisted cash sales, the association can use its booking mailbox and print the documents.

We use these data to process orders and contracts, payments, ticket delivery, enquiries, refunds and admission checks (Article 6(1)(b) GDPR). Legally required booking and accounting records are retained under Article 6(1)(c) GDPR. Technical connection data and necessary security logs support secure operation and abuse prevention (Article 6(1)(f) GDPR).

For online card payments we redirect you to Mollie B.V.’s payment page. Mollie processes the payment details entered there as a separate controller. Pretix receives payment references, amounts and statuses; full card numbers and card security codes are not stored in the association’s shop. See Mollie’s privacy notice. Assisted cash sales do not involve a Mollie payment.

Order and ticket emails are sent through the mailbox configured by the association. Infrastructure and mail providers engaged for operation receive only the data required for their tasks. Protected external backups are used for recovery after failures, not for advertising. Access is restricted to responsible people.

We keep booking data for as long as needed to deliver and account for the concert, deal with enquiries and refunds, and handle possible claims. Legally required booking documents are subject to the applicable statutory retention periods. Personal data no longer needed are then deleted or anonymised. Backup copies are replaced through the regular backup cycle; deletions are reapplied if data are restored. Statutory retention requirements remain unaffected.

The shop uses necessary session and security cookies for the basket, checkout and access to your order. They are not used for audience measurement or advertising. No advertising profiles are combined between the main website and shop. An order neither subscribes you to the newsletter nor makes you a member.

Required order data are necessary for the contract; without them an online booking cannot be processed. The association does not make automated decisions with legal effect. Contact the controller above to request access, rectification, erasure, restriction, portability or to object. You may complain to a data-protection supervisory authority. For booking help, email buchung@tickets.klosterkirche-maihingen.de or call +49 151 56119565.

The Ticket Terms and Accessibility information also apply.