The 2027 programme is set · Tickets from February 2027 · 6 to 11 May 2027 in Berlin

Privacy

Draft based on the technical implementation, as of October 2026. Please have it reviewed legally before publication.

Thank you for your interest in AUGENBLICK MAL! This policy explains which personal data is processed when you visit this website and use the portal, for which purposes and on which legal basis. The website is built so that simply visiting it sends no data to third parties: no cookies, no analytics tools, no content from foreign servers without your click.

1. Controller

Kinder- und Jugendtheaterzentrum in der Bundesrepublik Deutschland (KJTZ)
Children’s and Young People’s Theatre Centre in the Federal Republic of Germany
Schützenstraße 12
60311 Frankfurt am Main, Germany
Phone: +49 69 296661 0
E-mail: info@jungespublikum.de

The KJTZ is run by ASSITEJ e.V. Bundesrepublik Deutschland as its legal entity and is represented by the board: Katrin Maiwald (chair), Julia Dina Heße, Vincent Kresse and Angela Merl (vice chairs) and Johannes Leppin (treasurer).

Data protection officer of ASSITEJ e.V.: Anne-Sophie Garthe, e-mail: datenschutz@jungespublikum.de

2. Key points

  • Visiting the website sets no cookies and uses no analytics or tracking tools.
  • Fonts, scripts and graphics are served from our own server. Nothing is loaded from content delivery networks or other third parties.
  • Embedded third-party content (such as videos or maps) is only loaded once you explicitly allow it with a click.
  • Tickets are not sold on this website but by Theater an der Parkaue.
  • The proposal and review procedure uses a portal with its own account; section 11 applies to it.

3. Hosting and technical operation

Development, operation, maintenance and hosting of the website are carried out on our behalf by WL Artworld Solutions GmbH, Weydingerstraße 6, 10178 Berlin, Germany. The website runs on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in data centres in Germany. Data processing agreements under Art. 28 GDPR are in place with both companies; they process data only on our instructions. The legal basis is our legitimate interest in secure and reliable operation (Art. 6 (1) (f) GDPR).

4. Server log files

With every request the web server automatically records: the requested address, date and time, amount of data transferred, status code, browser type and version, operating system, the previously visited page (referrer) and the IP address. This data serves error analysis, defence against attacks and operational stability (Art. 6 (1) (f) GDPR). It is not merged with other data and is deleted automatically after seven days; only in the event of a specific security incident do we keep individual entries until the matter is resolved.

5. Encryption

All connections to this website are TLS encrypted (recognisable by “https://” and the padlock symbol in your browser). Data you enter therefore cannot be read by third parties in transit.

6. Cookies and local storage in your browser

We set no cookies on the public pages. At your request your browser stores two settings locally (localStorage); they are not transmitted to us or to third parties and can be deleted in your browser at any time:

  • “a11y”: your display settings from the “Accessibility” menu (high contrast, larger text, animations off).
  • “consent”: the providers whose external content you have permanently allowed (see section 7). The link “Reset consent for external content” in the footer deletes these permissions.

The portal (section 11) requires two technically necessary cookies: one that recognises you for ten minutes during the login procedure, and the WordPress login cookie for the duration of your session. The legal basis for this purely functional storage is Section 25 (2) no. 2 of the German TDDDG in conjunction with Art. 6 (1) (b) and (f) GDPR. We do not use fingerprinting.

7. External content only with your consent

Editorial posts may contain third-party content such as videos, maps or posts from social networks. This content is not loaded automatically. Instead you see a placeholder with the provider’s name and a note that loading it transmits data such as your IP address to that provider. Only when you click “Load content” does your browser connect. If you also tick “Always load from now on”, your browser remembers this decision for that provider locally; it can be withdrawn at any time in the footer. YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com).

The legal basis for loading is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). What data the respective provider processes after loading is its own responsibility. Providers based in the USA may transfer data to the USA, where there is no level of data protection comparable to the EU unless the provider is certified under the EU-US Data Privacy Framework. Privacy policies of the providers that may appear on this website:

8. Links to social networks

The icons for Facebook, Instagram, Mastodon, TikTok and YouTube are plain links. No plugins or tracking pixels of these services are embedded; processing by the respective provider only begins when you follow the link.

9. Tickets

Tickets for AUGENBLICK MAL! are sold through the web shop of Theater an der Parkaue (ticketing system of CTS Eventim AG & Co. KGaA). This website links you there. Theater an der Parkaue is responsible for processing your data during the purchase; its privacy policy applies. No order or payment data is processed on this website.

10. Newsletter

For our newsletter we use the service “News & Mail Service” by 4OfficeAutomation GmbH, Schlägelweg 46a, 31275 Lehrte, Germany. It is connected to our address management software Cobra CRM (cobra computer’s brainware GmbH, Weberinnenstraße 7, 78467 Konstanz, Germany), which runs on a KJTZ server. Registration uses double opt-in: you receive an e-mail with a confirmation link, and only afterwards is your address added to the list. Only the e-mail address is mandatory. The service analyses whether newsletters are opened and which links are clicked; if you do not want this, unsubscribe from the newsletter. A data processing agreement is in place with the provider.

The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via the unsubscribe link in every newsletter or by e-mail to us. After unsubscribing, your address is deleted from the list and, where necessary, kept on a suppression list so that it is not contacted again (Art. 6 (1) (f) GDPR). Further information: privacy policy of News & Mail Service.

11. Portal for the proposal and review procedure

Theatres and companies can submit proposals for the guest performance programme through the portal; curators appointed by the KJTZ screen and review the proposals there. Use is voluntary and required to take part in the procedure.

Account and login

An account is created with your first login using your e-mail address. Instead of a password you receive a six-digit one-time code by e-mail at every login, valid for ten minutes. For the account we store the e-mail address, the time of your consent, the last login, the chosen language and the profile data you enter (name, theatre or organisation, phone, address). You can change your profile at any time and delete your account with all its data yourself.

Proposals and reviews

For a proposal we store what you enter in the form: details of the production, descriptions, team, uploaded photos and PDF documents, links to video recordings including access details, and the contact person for queries. Drafts are visible only to you and the KJTZ. Submitted proposals are visible to KJTZ staff and to the appointed curators, who complete review sheets; reviews are stored with the curator’s name and are not visible to proposers. After submission you receive a confirmation e-mail with your details.

The KJTZ may publish individual proposals on the website. Only production-related details then become public: title, theatre or company, city, genre, recommended age, duration, premiere date, descriptions, team, press reviews and press photo. Contact details, video links, passwords and technical documents remain internal.

Audit log and abuse protection

For the security and traceability of the procedure, the portal logs logins and failed code entries, the creation, saving, submission and deletion of proposals, status changes, reviews, permission changes and exports, each with account and time but without IP addresses. Log entries are deleted automatically after twelve months. The login form is protected by ALTCHA: your browser solves a small computational task that our server verifies; no data is sent to third parties and no cookies are set. Code requests are limited per address and connection.

E-mail delivery

Login codes, confirmations and notifications from the portal are sent through the Sweego service of MINDBAZ SAS, 19 rue d’Amiens, 59800 Lille, France. Your e-mail address and the content of the respective message are transmitted for this purpose; processing takes place within the European Union under a data processing agreement (Sweego DPA).

Purposes, legal bases, retention

The data serves to run the proposal procedure, to screen and select the festival programme and to communicate with you (Art. 6 (1) (b) GDPR). The audit log, abuse protection and security measures are based on our legitimate interest in a reliable procedure (Art. 6 (1) (f) GDPR). Your data is kept until you delete your account or the respective procedure is completed. After completion the KJTZ exports proposals and reviews to its internal storage (KJTZBOX, section 12) to document the festival and deletes them from the portal together with accounts that hold no further data.

12. KJTZBOX (Nextcloud)

For internal collaboration and to document the proposal procedure, the KJTZ operates its own Nextcloud-based cloud storage (“KJTZBOX”) on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (data processing agreement in place). Submitted proposals are transferred there for screening. User data of those involved, content and communication data and technical log data are processed. All KJTZBOX administrators at the KJTZ have access to the data stored there. User data is deleted within six weeks after use ends, server backups after six months, log files after 14 days; statutory retention obligations remain unaffected. Information on the software: nextcloud.com.

13. Contacting us

If you contact us by e-mail or phone, we process your details to handle your request (Art. 6 (1) (b) GDPR where a contract or its initiation is concerned, otherwise Art. 6 (1) (f) GDPR). The data is kept until the matter is settled and no retention obligations apply. For data protection questions contact datenschutz@jungespublikum.de.

14. Archives of previous festival editions

The websites of previous editions remain available as static copies at their own addresses (for example 2027.augenblickmal.de). They contain no forms and no accounts; only the server log files described in section 4 are generated. External content there is also shown only after your consent.

15. Your rights

You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21). Consent you have given can be withdrawn at any time with effect for the future. Simply contact the addresses given above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de.

16. Objection to advertising e-mails

We object to the use of the contact details published in the imprint for sending unsolicited advertising and information material. We reserve the right to take legal action if unsolicited advertising, such as spam e-mails, is sent.

17. Changes

We update this policy when the website, the portal or the legal situation changes. The version published here applies. As of October 2026.