Privacy Policy (GDPR)
1. Controller
Responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Malinovsky Events GmbH & Co. KG
Full provider details (address, representation authority, commercial register entry) can be found in the Impressum of this website.
2. Purpose of Data Processing
Personal data is processed exclusively for the following purposes:
- Conducting online auditions
- Management and evaluation of applications
- Communication with applicants
- Processing of participation fees
- Contractual preparation in case of positive selection
No processing for other purposes takes place.
3. What Data is Processed?
The following data is processed in particular as part of the application:
- First and last name
- Email address
- Contact details
- Artistic resume
- Video recordings (upload or external link)
- Details of selected concert dates
- Payment information (via external payment providers)
4. Legal Basis of Processing
The processing of personal data is carried out pursuant to:
- Art. 6 para. 1 lit. b GDPR (contract / pre-contractual measures)
- Art. 6 para. 1 lit. f GDPR (legitimate interest in conducting the selection process)
5. Data Transfer
No transfer of personal data to unauthorized third parties takes place.
Technically necessary service providers (e.g. payment providers, hosting providers) only receive the data required for fulfilling their tasks and act on the basis of data processing agreements pursuant to Art. 28 GDPR.
6. Payment Processing
Payment processing is handled via external payment service providers (e.g. Stripe, PayPal). The processing of payment data is carried out directly by the respective payment provider in accordance with its privacy policy.
7. Storage Duration
- Application and video data will be deleted after completion of the selection process, unless statutory retention periods apply.
- In case of positive selection, data may be stored for the duration of the contractual relationship.
8. Rights of Data Subjects
Applicants have the right to:
- Access to stored data (Art. 15 GDPR)
- Rectification of incorrect data (Art. 16 GDPR)
- Deletion of personal data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to processing (Art. 21 GDPR)
Requests should be sent by email to the contact address listed in the Impressum.
9. Data Security
Appropriate technical and organizational measures are taken to protect personal data against loss, manipulation, or unauthorized access.
10. Changes
These privacy provisions may be amended if required due to legal or technical changes.