With this data protection declaration, we inform you about the scope of the processing of your personal data (hereinafter referred to as "data").

1. Responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

Barenboim-Said Akademie gGmbH

Französische Straße 33 dD-10117 Berlin

Phone: +49 (0)30 209671700

Web: www.barenboimsaid.de

E-Mail:[email protected]

2. Contact details of our data protection officer

Matthias Rosa (RMPrivacy GmbH)

Am Winterhafen 78

D-55131 Mainz, Germany

[email protected]

3. General information on data processing

As part of our business and website operations, we process data.

This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.

4. Data processing

The affected data, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed below:

a) Application process

We process the following personal data of the applicants in acceptance of the application, for the examination of the admission requirements and for the purpose of carrying out admission and enrolment procedures:

• Photos and video recordings
• Curriculum vitae
• Emergency contact: surname, first name, e-mail address, relationship to applicant
• Master data: surname, first name, e-mail address, date and place of birth, telephone number, address, university entrance qualifications (certificates) + certified copies, residence permit, provisional health insurance, nationality (copies of passports), applicant number, gender

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in.m the form of §§ BerlHG, the admission regulations and the study regulations of the Barenboim-Said Academy and the Student Data Ordinance of the State of Berlin.6(1)(1), 6a(6)

For the application process, we use service providers to whom we transfer the designated data. The data processing is carried out in compliance with instructions on our behalf.

The data is transferred to the following service providers:

1) SlideRoom

The general data protection guidelines for SlideRoom Technologies Inc can be found at: https://www.slideroom.com/privacy/

For data transfers to the USA, there is no valid adequacy decision of the EU Commission. SlideRoom ensures an adequate level of data protection via the EU standard contractual clauses with servers in Ireland (EU). We offer more information and a copy of the contractual clauses on request.  [email protected]

All data is encrypted using industry-standard 256-bit encryption. For more information, please visit: https://www.slideroom.com/security/

2) TuCalendi

The company responsible for data protection is Appload  Solutions S.L., Santa Cruz de Tenerife, Spain. Further information on data protection can be found here:

• https://www.tucalendi.com/en/privacy
• https://www.tucalendi.com/en/terms-and-conditions

b) Management of data during your studies (student file)

To create the matriculation number, name, date of birth, nationality, number of semesters and university semesters and date of enrollment are processed.

For the purpose of managing your student status and student ID as well as for the efficient design of your studies, we process the following data:

• Photos
• Curriculum vitae
• Emergency contact: surname, first name, e-mail address
• Master data: surname, first name, age, address, university entrance qualifications (certificates) + certified copies, residence permit, provisional health insurance, nationality (copies of passports), applicant number, gender
• Matriculation number, validity, GdB, medical certificate in case of withdrawal from examinations, medical certificate in case of compensation for disadvantages, copies of studies (documents and certificates), copies of insurances, passports

We also process the application and the medical certificate for the purpose of applying for a semester of leave.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in combination with § BerlHG.m the admission regulations and the study regulations of the Barenboim-Said Academy and the Student Data Ordinance of the State of Berlin.6, 6a

c) Exam Management

In order to enable you to carry out the examinations properly and to provide proof of the study and examination achievements you have completed, we process results, matriculation number and name, any comments/corrections, name of the examiners or assessors as well as protocols.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in combination with § BerlHG.m the admission regulations and the study regulations of the Barenboim-Said Academy and the Student Data Ordinance of the State of Berlin.1 F No. 44 ff Berlin StudDatVOthe

d) Course Attendance

In order to enable you to have a proper course of study, we process course, surname, first name, user ID, e-mail address, password and grades for intermediate grades for the purpose of course attendance. A data transmission takes place to the provider of our course booking system, who processes the data in accordance with instructions.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. e), para. 3 GDPR in the form of .m the study regulations of the Barenboim-Said Academy.

e) Scholarships and Grants

Within scholarship matters, we process bank details, applicant number, matriculation number, health insurance, sick leave AU certificates as well as downtime for the scholarship applications to be processed and use the available data to award prizes and grants to students.

For the purpose of processing applications for grants and repairs, we process surname, first name and matriculation number.

According to Art. 6 para. 1 b) GDPR, the legal basis for data processing is the fulfilment of our contractual obligations.

f) Rental for scholarship holders

We rent out living space and process for this purpose surname, first name, address, apartment number, rental period, rent, deposit, utility bill, consumption of energy (electricity, gas and water), meter readings.

We work together with the student residence Berlinovo, to whom we forward the data in connection with the rental (first and last names, list of receipts).

Legal basis for data processing According to Article 6 (1) (b) GDPR, the legal basis for data processing is the fulfilment of our contractual obligations.

g) Loans and orders

For the purpose of lending or ordering instruments and other hardware as well as books, sheet music, instruments, and equipment from the library as well as for the purpose of online access to our database, we process surname, first name, matriculation number, period, surname, expiration date, address and rental history contracts and online access data such as e-mail and password.

Legal basis for data processing According to Article 6 (1) (b) GDPR, the legal basis for data processing is the fulfilment of our contractual obligations.

For library lending, we use service providers to whom we transfer the described data and who process the data in accordance with our instructions.

h) Room booking

For the purpose of room booking, we process surname, first name, e-mail address, times and the timetable. A data transfer takes place to the provider of our room booking system, who processes the data in accordance with instructions.

The legal basis for data processing in the case of room booking is our legitimate interest in accordance with Article 6 (1) (f) GDPR and, in accordance with Article 6 (1) (b) GDPR, the fulfilment of our contractual obligations.

i) Publication on the website

We report on our website about current events and information. For the purpose of this reporting, we process personal images for publication on our website.

The legal basis for data processing in the context of the publication of photos on the website is exclusively based on your prior consent in accordance with Article 6 (1) (a) GDPR.

5. Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which it is processed or as long as a consent given by you has been revoked. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 50 years, regardless of the processing purposes. This applies to the following categories of data:

Surname, first name, date of birth, place of birth, course of study, field of study, matriculation number, time of enrolment or admission to the university, time of exmatriculation or completion of studies and the examinations taken (type, subject, date and result)

All other data will be deleted 4 years after graduation or ex-matriculation.

6. Your rights as a data subject

a) Information

Upon request, you will receive information about all personal data that we have stored about you at any time free of charge.

b) Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (as far as this is possible under applicable law) on appropriate instructions. The same applies if we are to process data only restrictively in the future. You have the right to object in particular cases where your data is required due to the performance of a task that is in the public interest or is in our legitimate interest, as well as profiling based on it. Likewise, in the case of data processing for the purpose of direct marketing, you are entitled to such a right of objection.

c) Right of revocation for consents with effect for the future

You can revoke your consent at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of the revocation.

d) Data portability

If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured, and machine-readable format so that you can transfer the data to another device if you wish.

e) Restriction of processing

Data for which we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction, or transfer to another company may be possible, in relation to this data, if you provide us with additional information that allows us to identify.

f) Exercise of your rights as a data subject and right of appeal

If you have any questions about the processing of your personal data, for information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please [email protected]

You also have the option of complaining to a supervisory authority about your rights as a data subject.