Privacy

As at 28 October 2026

This privacy policy provides information about the processing of personal data on the Blue Note Dresden website and in connection with enquiries and attendance at events. Personal data refers to information that can be linked to an individual, such as a name, an email address or an IP address.

1. Data controller and contact details

Glaser & Neumann GbR
Blue Note Club & Bar
Görlitzer Straße 2b
01099 Dresden
Germany

Represented by Mirko Glaser and Christoph Neumann.
Email: info@jazzdepartment.com
Telephone: +49 351 8014275

The contact person for data protection enquiries is Mirko Glaser. Further details about the provider can be found in the Imprint.

2. Purposes and legal bases

We process personal data to the extent necessary for the operation of the website, the handling of enquiries, the initiation and fulfilment of contracts, the organisation and documentation of events, or the fulfilment of legal obligations.

• Consent that has been given forms the legal basis under Article 6(1)(a) of the GDPR.
• Processing in connection with contracts and pre-contractual arrangements is carried out in accordance with Article 6(1)(b) of the GDPR.
• Legal obligations may require processing in accordance with Article 6(1)(c) of the GDPR.
• Processing carried out to safeguard legitimate interests is based on Article 6(1)(f) of the GDPR, provided that this does not conflict with any overriding interests or rights of the data subject. We set out the relevant interest below.

3. Hosting, technical support and server logs

For hosting and technical support of our website we use:

Pat Erler – IT Consultancy
17 Jordanstr. HH
01099 Dresden

When you access the website, the connection data required for transmission to your browser is processed, in particular your IP address. Technical logs may also contain the date and time, the pages and files accessed, status messages, the volume of data transferred, and details of your browser, operating system and the website you visited previously.

The purpose is to ensure reliable service provision, to analyse errors and to prevent unauthorised access. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest is to ensure secure and functional operation. Log data is retained only for as long as is necessary for these purposes. Longer retention may be considered, in particular, to investigate specific security incidents or to comply with legal obligations.

4. Cookies, browser cache and display settings

The public website does not use its own cookies to analyse your visit or for advertising purposes. Technically necessary login and session cookies may be used for the secure WordPress editorial area. Technically essential storage and access to the end device are governed by Section 25(2) of the TDDDG; for any processes beyond this, consent is generally required under Section 25(1) of the TDDDG.

If, for example, you adjust the font size, colours or animation in the ‘Display’ dialogue box, your selection will be stored in your browser’s local storage under the key blue-note-display-v1 stored. This is solely to ensure that your preferred display settings are retained when you visit the site again. Your selection is not shared with us or with third parties, nor is it linked to any event, customer or user profiles.

This data is stored for the purpose of the display function expressly requested within the meaning of Section 25(2)(2) of the TDDDG. It remains stored until it is reset via the dialogue box or the website data is deleted in the browser. If the browser cache is disabled, the selection will continue to function for the respective page view.

Permission to access external media is not stored permanently. It applies only to the selected media and the current page view. For the website itself, we do not use Google Analytics, the Meta Pixel or any other analytics or advertising trackers. Fonts and our own images are provided without accessing external font or image services.

5. Making contact and booking enquiries

When you contact us by email, telephone or via the booking form, we process the information you provide, such as your name, contact details, the content of your message and, where applicable, application or booking documents. The purpose is to deal with your enquiry and to facilitate the necessary communication.

For enquiries relating to contracts, Article 6(1)(b) of the GDPR applies. We respond to other enquiries on the basis of Article 6(1)(f) of the GDPR; our legitimate interest is communication with guests, artists, prospective clients and business partners. Without the contact details required to respond, we may not be able to answer an enquiry.

We delete this data as soon as processing is complete and there are no further grounds for retaining it. Statutory retention obligations and the need to safeguard against or defend against legal claims are taken into account. This website does not use a contact form powered by Contact Form 7 or Google reCAPTCHA.

Access to personal documents and press photographs

The booking calendar shows only dates available for enquiries; it does not display contact details or unpublished project information relating to other bands. Enquiries containing the band’s name, contact person, email address, preferred date and any other optional details are stored internally in WordPress and processed by authorised staff. We are notified by email of new enquiries and documents received.

Once a booking has been confirmed, the band will receive a personalised, time-limited link to the booking documents. This link is valid solely for the booking in question and should only be shared with the relevant individuals. Once opened, the documents section uses a technically necessary session cookie called bn_booking_access, which is valid for a maximum of twelve hours. It is not used for advertising or statistical purposes. Access is closed once the documents have been submitted.

Concert programmes, line-ups, media links, image files and details regarding image credits and permitted use are intended to assist with the preparation of the performance and its promotion. Uploaded original images are initially accessible only internally. Only after editorial approval will versions of the images be made available for the website and the specified press use. Contact details provided in the booking enquiry will not be published as a result, nor will they be added to the newsletter mailing list.

Zum Schutz des Bookingformulars vor Spam und automatisiertem Missbrauch verwenden wir zeitliche Prüfungen, ein zusätzliches Prüffeld und pseudonymisierte Sicherheitszähler. In diesen Zählern werden technische Adressangaben und die angegebene E-Mayl-Adresse nicht im Klartext gespeichert. Die Zählwerte sind für Begrenzungen höchstens 24 Stunden wirksam; abgelaufene technische Zwischenspeicher werden regelmäßig bereinigt. Bei einer Versandbegrenzung bleiben Anfrage und Benachrichtigungsauftrag intern gespeichert, damit die Bearbeitung fortgesetzt werden kann.

6. Newsletter

When you subscribe to our newsletter, your email address – together with your name, if provided – is sent directly to RapidMail upon submission. The registration form does not establish a connection with RapidMail beforehand. WordPress does not maintain any additional mailing list. You can confirm your subscription via the activation link in the confirmation email. We use your details to keep you informed about concerts, events and special offers.

We use RapidMail, a service provided by Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, for sending emails. This is based on your consent in accordance with Article 6(1)(a) of the GDPR. Further information: rapidmail’s Privacy Policy.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in the relevant message or by sending a message to info@jazzdepartment.com Unsubscribe. After that, your data will no longer be used for sending the newsletter. It may be necessary to retain your data for a limited period in order to provide evidence of consent given or to process your unsubscription. Subscribing to the newsletter does not constitute consent to the use of analytics or advertising services on this website.

7. Information on artists, musicians and concerts

In the programme, archive and profiles, we publish information about participating artists and musicians, such as names, publicly listed project assignments, instruments, concert dates, texts provided, images and publicly accessible links. This information is sourced from our events and artists editorial team, from material provided to us, or from previously published announcements and archive records.

The processing is carried out for the purpose of providing information about the programme and documenting the concert archive. Depending on the context, this is based either on contractual agreements pursuant to Article 6(1)(b) of the GDPR or on our legitimate interest in this programme information and documentation pursuant to Article 6(1)(f) of the GDPR. Where consent is required, Article 6(1)(a) of the GDPR applies. Personal rights and image rights must be respected.

Public content is available worldwide and may also be accessed via search engines, the concert calendar or our public events interface. Historical concert details are kept separate from current profile information. If you notice any errors or have any objections to a publication, please contact us at the address given above.

8. YouTube and SoundCloud

Concert pages can feature videos from YouTube and audio samples from SoundCloud. No players, thumbnails or scripts from these providers will be loaded until you have given your explicit approval. The preview uses an image hosted locally.

YouTube: The provider for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Once authorised, we use the enhanced privacy mode via youtube-nocookie.com. This mode does not mean that no personal data is processed during loading or playback. Further information: Google’s Privacy Policy.

SoundCloud: For users outside the USA, the service provider is SoundCloud Global Limited & Co. KG, Karl-Marx-Straße 101, 12043 Berlin, Germany. The authorised player is provided by w.soundcloud.com loaded; a specific ‘no-cookie’ mode is not guaranteed for this. Further information: SoundCloud Privacy Policy.

By clicking the labelled ‘Allow’ button, you consent to the loading of the relevant external content. In doing so, the provider will receive, in particular, your IP address, as well as information about your browser, device and usage, and details about the embedding website. If you have an account with the provider, this information may be linked to that account. Depending on the provider, further data storage or access to your device, as well as processing outside the EU or the EEA – in particular in the USA – may take place.

The legal basis for this consent-based integration is Article 6(1)(a) of the GDPR and, insofar as the end device is accessed, Section 25(1) of the TDDDG. You can stop the integration from loading on future visits to the page by clicking ‘Close player’. Data already transmitted or browser data stored by the provider will not be deleted retrospectively as a result. When you visit the page again, you will need to give your consent once more. Alternatively, you can open the content directly on the provider’s site via a standard link; in that case, the provider’s privacy policy will apply.

9. Ticket sales and external links

Our ticket links lead to Eventim Light, EVENTIM or the ticket outlet specified in the relevant offer. The shop is not loaded as an iframe on our website. Only when you follow an external link will you be redirected to the respective provider’s website. Their privacy policy and consent settings apply to the processing of your data and any cookies or tracking functions on that site.

When purchasing tickets, we process, in particular, the data required for the order, payment and attendance at the event. Where we receive order or participant data ourselves, we use this for the performance of the contract and the organisation of the event in accordance with Article 6(1)(b) of the GDPR, as well as to fulfil legal obligations in accordance with Article 6(1)(c) of the GDPR.

The same applies to standard links to artists’ websites, social media platforms and the map view on OpenStreetMap. No Google Maps or social media plugins are embedded on this website.

10. Recipients and international transfers

Recipients may include, to the extent necessary, service providers engaged for hosting, technical support and communication, the aforementioned media and ticketing providers, and authorities authorised by law. Where service providers process data on our behalf, the requirements of Article 28 of the GDPR must be observed.

In the case of transfers to countries outside the EU or the EEA, the requirements set out in Articles 44 et seq. of the GDPR also apply. In particular, an adequacy decision or appropriate safeguards, such as EU standard contractual clauses, may be decisive. You may request information regarding the recipients and the legal basis for data transfers in relation to a specific transaction via the contact details provided above. Further details on processing carried out by external providers can be found in their linked privacy notices.

11. Retention period

The retention period depends on the specific purpose, statutory retention periods and, where applicable, the need to assert or defend legal claims. Once the purpose and any other grounds for retention no longer apply, data will be deleted or anonymised. In the case of publicly documented concert and artist details, the continuing archival interest may be a determining factor; legitimate objections and the statutory rights of data subjects remain unaffected.

12. Your rights

In accordance with the statutory requirements, you have the following rights in particular:

• Information regarding your personal data in accordance with Article 15 of the GDPR;
• Rectification and completion in accordance with Article 16 of the GDPR;
• Erasure pursuant to Article 17 of the GDPR;
• Restriction of processing pursuant to Article 18 of the GDPR;
• Data portability under Article 20 of the GDPR;
• Withdrawal of consent with future effect pursuant to Article 7(3) of the GDPR.

Objection: You may object to processing carried out pursuant to Article 6(1)(e) or (f) of the GDPR on grounds relating to your particular situation, in accordance with Article 21 of the GDPR. You may object to processing for the purposes of direct marketing at any time; this also applies to any related profiling.

Please address any such enquiries to info@jazzdepartment.com. Withdrawal of consent does not affect the lawfulness of any processing carried out up to that point. No decisions with legal or similarly significant effects, based solely on automated processing, including profiling, as referred to in Article 22 of the GDPR, are made on this website.

13. Right of appeal

Under Article 77 of the GDPR, you may lodge a complaint with a data protection supervisory authority, in particular at your usual place of residence, your place of work or the place where the alleged infringement occurred. The competent regional supervisory authority is the Saxon Data Protection and Transparency Commissioner. You can find information and contact details at www.datenschutz.sachsen.de.

14. Amendments to this statement

We will update this policy if there are any changes to the functions used, the processing of personal data or legal requirements. The version published on this page shall prevail.

EVENTIM.Light Ticket Shop

On our ticket shop page, you can load the external EVENTIM.Light shop (CTS EVENTIM AG & Co. KGaA). Only when you click on ‘Load ticket shop’ – thereby giving your consent – will the shop and the associated display script from Eventim be retrieved. In doing so, Eventim receives, in particular, your IP address, browser information and the referring website. Prior to authorisation, this embedding does not establish a connection to Eventim.

We do not store this consent permanently. Clicking ‘Close ticket shop’ will reload the page and end the embed; your consent will be required again to reload it. Data already submitted and cookies set by Eventim will not be deleted as a result. Eventim may request additional cookie consents for its own optional features. Booking and payment take place in the Eventim shop. You can find details in the EVENTIM.Light’s privacy policy as well as the information provided directly in the shop. Alternatively, you can visit the shop via the direct link on Eventim.

Google Maps on the Contact page

The contact page features an optional Google Maps map. The map remains disabled initially. A connection to Google is only established once you select ‘Load Google Maps’. Unless you give your consent, no data is sent to Google for the map.

Once you have given your consent, Google will, in particular, receive your IP address and technical browser and device information. Google may use cookies or similar technologies and, if you are logged in, may link data to your Google Account. Data may be processed in the USA. The data controller for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information can be found in the Google’s Privacy Policy.

This integration is based on your consent in accordance with Article 6(1)(a) of the GDPR and, insofar as information is stored on or read from your device, Section 25(1) of the TDDDG. You can stop this integration from taking place in future by clicking ‘Close map’. Data already transferred to Google will not be retrieved as a result. Your consent will not be stored for future page views. The direct route link will only open Google Maps when you click on it yourself.