Privacy Policy

As at September 2026

This Privacy Policy explains how we handle your personal data when it is collected, processed and used in connection with your visit to our website and our communications with you outside our website. Personal data is information that can be used to identify you or to determine facts about you, such as your name, address, telephone number, or email address. We process your personal data only for the purposes set out in this Privacy Policy, in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1. Responsibility

The data controller is:

Literaturhaus Berlin e.V.
Fasanenstraße 23
10719 Berlin

Chair: Britta Jürgs; Deputy Chair: Prof. Dr Jan Hegemann

+49  (030) 887 286 0
info@literaturhaus-berlin.de

2. Purposes and legal bases for data processing

We process personal data, on the one hand, to fulfil contractual and pre-contractual obligations in accordance with Article 6(1)(b) of the GDPR, i.e. in particular to conclude and execute contracts, for invoicing, to carry out pre-contractual measures, to respond to enquiries relating to contractual relationships, and for all activities necessary for the operation and administration of the Literaturhaus Berlin. This includes, for example, contractual data (e.g. services used, content and information provided, names of contact persons) and, in the case of services subject to a fee, payment data (e.g. bank details, payment history, etc.).

Furthermore, we process your data to safeguard our legitimate interests or those of third parties in accordance with Article 6(1)(f) of the GDPR. This is done, for example, for the purpose of providing our online services, their functions and content; to respond to enquiries outside of contractual relationships and to communicate with you; to assert legal claims and defend ourselves in legal disputes; to ensure our IT security and IT operations; and to investigate criminal offences.

Where you have given us your consent to process personal data for specific purposes (newsletter, contact form, see below), the lawfulness of this processing is based on your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR. Consent that has been given may be withdrawn at any time. Please note that the withdrawal of consent only takes effect for the future. Processing carried out prior to the withdrawal is not affected by this.

Furthermore, we are subject to various legal obligations, i.e. statutory requirements (e.g. tax laws), which necessitate the processing of data. The legal basis for such data processing is Article 6(1), first sentence, point (c) of the GDPR.

The collection of personal data is proportionate to the purpose and limited to what is necessary for the purposes of the processing.

Retention period

Unless otherwise stated in the following sections, the following applies:

Where necessary, we process and store your personal data for the duration of our contractual relationship, which also includes, for example, the initiation and execution of a contract. It should be noted that, depending on the individual case, our contractual relationship may be a continuing obligation spanning several years.

In the case of contractual relationships, as well as other civil law claims, the retention period is also governed by the statutory limitation periods, which, for example, under Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but may extend to up to thirty years in certain cases.

Furthermore, we are subject to various retention and documentation obligations arising, amongst other things, from the German Fiscal Code (AO). The retention and documentation periods specified therein are 10 years for accounting documents and business correspondence (Section 147(1) and (3) AO).

Disclosure of data to third parties

Within our organisation, access to your data is granted only to those departments that require it to fulfil our contractual and legal obligations.

As a general rule, we only disclose your data to the recipients named in this privacy policy. Furthermore, your personal data may be disclosed or transferred where required by law (Article 6(1), first sentence, point (c) of the GDPR) or where you have given your consent (Article 6(1), first sentence, point (a) of the GDPR).

Where this is necessary to fulfil a contractual relationship between you and us, to take steps prior to entering into a contract (Article 6(1), first sentence, point (b) of the GDPR) or to safeguard legitimate interests (Article 6(1), first sentence, point (f) of the GDPR), we will disclose your data to the following categories of recipients: IT service providers; banks for payment transactions; logistics service providers.

Data transfers to third countries

Data transfers to third countries (countries outside the European Economic Area – EEA) take place only on the basis of an adequacy decision by the European Commission or appropriate safeguards in accordance with Article 44 et seq. of the GDPR, in particular the Standard Contractual Clauses approved by the European Commission or binding corporate rules. Data is transferred to the USA in connection with the distribution of the newsletter via Mailchimp.

3. Data processing on this website

Hosting and email

You can visit our website without providing any personal information. Personal data is collected on this website only to the extent technically necessary and is protected in accordance with statutory provisions.

We host the content of our website with the following provider: Host Europe

The provider is Host Europe GmbH, c/o Spaces, Gertrudenstraße 30–36, 50667 Cologne (hereinafter ‘Host Europe’).

Data processing

We have entered into a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

When you access and use our website, your browser automatically sends information to our website’s server hosted by Host Europe. This information is temporarily stored in a so-called log file. This includes: IP address, browser type and version, operating system used, name of your internet service provider, referrer URL (the website visited previously), and the name and URL of the file accessed.

This data is not combined with other data sources. According to Host Europe, the data is deleted as soon as it is no longer required for displaying the website, at the latest after 14 days.

The server used also stores a mail log file which records every email received or sent by the server. It is not the content of the email that is stored, but the IP address of the respective server, as well as the sender’s and recipient’s addresses. The data is deleted after 14 days.

For further details, please refer to Host Europe’s privacy policy:

https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

We process the aforementioned data for the following purposes: to ensure a smooth connection to the website, to facilitate the use of our website, to assess system security and stability, and for other administrative purposes. The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the stated purposes of data collection.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from ‘http://’ to ‘https://’ and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Cookies

We use cookies on our website. Cookies are small text files generated by a website and stored on your hard drive by your web browser when you visit the website. You can prevent the use of cookies at any time by configuring your web browser to refuse new cookies (in particular third-party cookies) or to notify you when new cookies are set. You can also delete cookies that have already been stored via your web browser’s settings. Guidance on changing your cookie settings can be found, for example, in your web browser’s help function. Further information on this and on cookies in general can be found, for example, on the Consumer Advice Centre’s website and at http://www.youronlinechoices.com/de/. Please note that you may not be able to use some features of our website if you do not accept cookies.

We only use technically necessary and functional cookies (so-called session cookies), but no tracking cookies for advertising purposes or web analytics. The legal basis for this is Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest in using cookies is to enable you to use our website. The data is not combined with other personal data and is not used for advertising purposes. Session cookies are deleted at the end of the respective browser session, or after seven days at the latest.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form – including the contact details you specify there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or the processing is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form will be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Enquiries by email or telephone

If you contact us by email or telephone, your enquiry, including all personal data contained therein (name, enquiry), will be stored and processed by us for the purpose of dealing with your request. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or the processing is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent has been sought; consent may be withdrawn at any time.

The data you send to us via contact enquiries will be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Social Media

We are active on the social media platforms Bluesky, Instagram, Facebook, and TikTok. If you click on the relevant link in the footer, you will simply be redirected to our presence on that platform. No personal data is collected in the process. When you access these networks, the terms and conditions and privacy policies of those networks apply. If you communicate with us via these networks, we process your data unless otherwise specified in our privacy policy.

YouTube

We maintain an online profile on the YouTube platform to present our videos (e.g. live streams and event recordings) and to communicate with users. We do not embed YouTube videos directly on our website, but simply provide links to our YouTube channel. If you click on these links, you will leave our website. Data is only transferred to YouTube from this point onwards. We have no influence over the data processing carried out by the platform operator.

The entity responsible for the platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The legal basis for linking to our YouTube channel is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing up-to-date information about our events and in communicating with interested parties. When you visit YouTube, Google processes personal data, in particular your IP address and information about your usage behaviour. This data may also be processed by Google for its own purposes, for example to provide the service, for market research or for advertising purposes. Details on data processing, as well as your rights and settings options for protecting your privacy, can be found in Google’s Privacy Policy: https://policies.google.com/privacy

Newsletter

If you have subscribed to our newsletter and consented to the storage and use of your email address for this purpose in accordance with Article 6(1)(a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. You may withdraw your consent at any time. To receive the newsletter, we require your first name, surname, and email address. Subscription to our newsletter is carried out via a double opt-in procedure. After signing up, you will receive an email in which you must confirm your subscription. This ensures that no one can sign up using someone else’s email address. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send an unsubscribe request to info@literaturhaus-berlin.de at any time.

The data you have provided to us for the purpose of receiving the newsletter will be stored by us or by Mailchimp until you unsubscribe from the newsletter mailing list, after which it will be deleted, provided there are no statutory retention obligations to the contrary.

We reserve the right to delete or block email addresses from our newsletter distribution list in accordance with our legitimate interest under Article 6(1)(f) of the GDPR. Data stored by us for other purposes remains unaffected by this.

Our newsletter contains so-called tracking pixels (web beacons). These are small image files that are loaded when the newsletter is opened. This enables us to determine whether and when a newsletter has been opened. In addition, technical information such as the IP address, the browser used, the time of access, and click behaviour regarding the links contained in the newsletter is recorded.

This data is analysed for statistical purposes and to optimise and tailor the content of our newsletters to your needs. The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect, for example via the unsubscribe link in the newsletter or by notifying us.

Mailchimp

We use Mailchimp, a newsletter platform operated by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA – a subsidiary of Intuit Inc. – to send out our newsletter. Mailchimp acts as our data processor in accordance with Article 28 of the GDPR. If you enter data for the purpose of subscribing to the newsletter (name, email address), this data will be processed on Mailchimp’s servers in the USA.

The transfer of data to the USA is based on the European Commission’s adequacy decision regarding the EU-US Data Privacy Framework (DPF). Mailchimp’s parent company, Intuit Inc., is certified under the EU-US Data Privacy Framework. Furthermore, we have entered into a data processing agreement (Data Processing Addendum, DPA) with Mailchimp in accordance with Article 28 of the GDPR. The DPA contains the standard contractual clauses approved by the European Commission in accordance with Article 46(2)(c) of the GDPR. In this agreement, Mailchimp undertakes to process personal data exclusively in accordance with our instructions and to implement appropriate technical and organisational measures to protect the data. Further information on Mailchimp’s Data Processing Addendum can be found at: https://mailchimp.com/de/legal/data-processing-addendum/.

Once you have unsubscribed from the newsletter mailing list, your email address will be stored by Mailchimp in an internal suppression list. This is to prevent the newsletter from being sent to this address again. The data is used exclusively for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on inclusion in the suppression list. You may object to this storage provided that your interests override our legitimate interest. Further information on data processing by Mailchimp can be found at: https://mailchimp.com/legal/privacy/.

Matomo

We use the open-source web analytics service Matomo on this website. The analysis is carried out via Matomo Cloud, provided by InnoCraft Ltd., 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand. The data processed by Matomo is stored on servers in Frankfurt am Main (Germany).

We use Matomo to analyse the use of our website in order to improve our website both technically and in terms of content. Among other things, this involves processing information about the pages visited, the time the page was accessed, the region from which the website is accessed, and the browser and operating system used.

Matomo is operated in a privacy-friendly configuration. No cookies are stored on your device. Your IP address is anonymised prior to analysis, so that it can no longer be directly linked to you as an individual. No personal user profiles are created.

The use of Matomo is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the statistical analysis of user behaviour to optimise our website. Due to the privacy-friendly configuration, no consent via a cookie banner is required for the use of Matomo on this website.

A contract for data processing has been concluded with the provider of Matomo Cloud in accordance with Article 28 of the GDPR. Processing takes place exclusively in accordance with our instructions and in compliance with the applicable data protection regulations. The provider in New Zealand may access the data in the context of technical support or contract management. An adequacy decision has been issued by the European Commission for New Zealand in accordance with Article 45 of the GDPR, thereby ensuring an adequate level of data protection.

Onlineshop

As part of our programme of events, we offer you the option of ordering tickets online in advance through tickettoaster GmbH, Motzstraße 1, 34117 Kassel. Please view tickettoaster GmbH’s privacy policy regarding our online shop here: https://literatur-berlin.tickettoaster.de/datenschutz.

During the ordering and purchase process, you have the option to create a customer account. The registration process will inform you of the required information. Your user account is not public and is therefore not indexed by search engines. Should you delete your user account, please note that, in the event of a statutory retention obligation, your data will not be deleted but archived. If you create a user account, your IP address and the time of each action you take during the ordering and payment process will be stored to prevent misuse.

To enable payment and delivery of the tickets, we or tickettoaster GmbH process your account, communication, contractual, and payment data. The processing is necessary for the contractual services provided through the online shop, specifically billing, dispatch, and customer service. The data you provide to tickettoaster GmbH for the purposes of payment and ticket dispatch will be deleted ten years after your ticket purchase, in accordance with tax law retention obligations.

4. Data protection rights / Data subject rights

You have the right to access your data (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), and the right to data portability (Art. 20 GDPR). The right of access and the right to erasure are subject to the restrictions set out in Sections 34 and 35 of the German Federal Data Protection Act (BDSG). You also have the right to object to our processing of your data (Article 21 of the GDPR). Where our processing of your personal data is based on consent (Article 6(1), first sentence, point (a) of the GDPR), you may withdraw this consent at any time; this does not affect the lawfulness of the data processing carried out on the basis of your consent prior to its withdrawal.

To exercise any of these rights or to ask further questions regarding personal data, you may contact us at any time by sending a written request by post to Literaturhaus Berlin e.V., Fasanenstraße 23, 10719 Berlin, by telephone on (030) 887 286 0, or by email to info@literaturhaus-berlin.de.

Irrespective of this, you have the right to lodge a complaint with a supervisory authority – in particular in the EU Member State of your place of residence, your place of work or the place of the alleged infringement – if you consider that the processing of your personal data infringes the GDPR or other applicable data protection laws (Article 77 of the GDPR, Section 19 of the BDSG).

Changes to our Privacy Policy and Contact

We reserve the right to update this privacy policy from time to time to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The current privacy policy will then apply to your next visit.