With this privacy statement, the State University of Music and Performing Arts Stuttgart (HMDK) informs its users about the type, scope, and purpose of the collection and use of personal data. We ask that you read this privacy statement carefully.
By visiting our websites, you consent to the digital and analog processing and use of your data as described below.
CONTACT FOR DATA PROTECTION
The Data Protection Officer of HMDK Stuttgart, Urbanstraße 25, 70182 Stuttgart, is Irina Weiß, reachable at: datenschutz@hmdk-stuttgart.de
HANDLING OF PERSONAL DATA
Personal data are information that can identify a natural person, such as name, email address, or telephone number. Data on which websites were viewed by individuals are also considered personal data. In general, it is not necessary to provide personal data to use our website. Where personal data are collected on our pages, this is done on a voluntary basis whenever possible. If services or functions require the collection of personal or personally identifiable data (e.g., IP addresses), your continued use of our website constitutes your consent to this collection.
Any use of your personal data—whether collected via online forms (e.g., application for an entrance exam) or on paper—is only for the purposes stated in this privacy statement and only to the extent necessary to achieve these purposes. This includes, for example, contact by the General Student Committee (AStA) with enrolled students or the receipt of the HMDK newsletter, the Career Service newsletter, and the CAMPUS GEGENWART newsletter. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy statement. We also take appropriate technical and organizational measures to protect your personal data. Except for the services and functions described here that involve third parties, your data will not be shared with third parties without your explicit consent.
When we obtain consent for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis.
For processing personal data required to fulfill a contract, Art. 6(1)(b) GDPR is the legal basis. This also applies to processing necessary for pre-contractual measures.
If processing is required to fulfill a legal obligation of the university, Art. 6(1)(c) GDPR applies.
If vital interests of the data subject or another natural person require processing, Art. 6(1)(d) GDPR applies.
If processing is necessary to protect a legitimate interest of the university or a third party, and the interests, rights, and freedoms of the data subject do not outweigh this interest, Art. 6(1)(f) GDPR applies.
PHOTOGRAPHY AT EVENTS
Various events take place in the HMDK premises. To represent this cultural diversity in public relations, photographs are taken. The legal basis is Art. 6(1)(e) GDPR.
Photographers may be HMDK staff or external persons engaged by HMDK.
Signage in event areas indicates that photography may occur, usually capturing larger groups (e.g., audiences). For individuals clearly highlighted in photos, written »consent for photo use« is obtained on site.
Routine deletion of photographs is not currently planned.
VIDEO SURVEILLANCE
There are currently twelve video cameras operating 24/7 in the main building at Urbanstraße 25. Recordings serve to protect students, staff, and visitors, as well as property. Legal basis: Art. 6(1)(f) GDPR.
Camera locations are marked with pictograms. Recordings are deleted after 28 days.
PURPOSE OF DATA PROCESSING
Personal data are only collected on the HMDK Stuttgart website if required to achieve the stated purposes or if the person explicitly consents.
ACCESS DATA/SERVER LOG FILES
HMDK Stuttgart, via its Data Processing Center as the technical operator, collects data on each website access (server log files), including:
IP address of the requesting computer
Date and time of the access
URL path of the requested page/file and access method
Server access status (e.g., file transmitted, file not found)
Amount of data transmitted
Information about the software used for access (usually browser type/version, operating system)
URL from which the page/file was accessed
Server log data are used to identify and track unauthorized access attempts. Log files are stored for seven days and then deleted. For website optimization, stored access data are analyzed in anonymized form so that individuals cannot be identified.
APPLICATIONS
If you apply to HMDK Stuttgart and provide application documents, we process and use these voluntarily provided data solely to handle the application process. Data are only shared with third parties if you expressly authorize this in writing.
CONTACT
Our website allows contact with HMDK members or departments via email. Information provided is stored to process the request. Data are not shared with third parties or merged with other data sources. Processing is based on pre-contractual measures under Art. 6(1)(b) GDPR.
Please note that data transmitted over the internet (e.g., email) may have security vulnerabilities; full protection from third-party access cannot be guaranteed.
ONLINE TICKET SALES
Online ticket sales are handled by Reservix GmbH via their portal: www.hmdk-stuttgart.reservix.de. All ticketing processes, from order processing to ticket delivery, are conducted exclusively by Reservix. HMDK does not collect personal data for this purpose. Your data are collected solely by Reservix. More information on data collection and processing is available in the Reservix privacy policy.
ALUMNI
HMDK Stuttgart does not maintain an official alumni database. Individual alumni lists exist for certain programs (Speech Arts, Puppetry, Opera School). For statistical purposes, HMDK may collect selected data on graduates’ whereabouts in anonymized form.
LINKED WEBSITES
Our websites link to external sites. We have no influence on their content and assume no responsibility or liability for legality, accuracy, representation, or completeness. Visiting external sites may log your IP address with the respective operator. We recommend reviewing the privacy policies of these sites before use. Examples:
YOUTUBE
Embedded YouTube videos on this site use privacy-enhanced mode. YouTube does not store cookies for users who view a page with an embedded video but do not click play. Clicking the video may allow YouTube to store cookies on your device, but no personal cookie data are stored for embedded video playback.
DATA TRANSFER OR SHARING
Your personal data collected, processed, or used by us are not shared with third parties without your consent unless:
Required to fulfill our contractual obligations
Necessary to enforce claims
Legally permitted or required
Required for law enforcement, hazard prevention, or website protection
Necessary to enforce third-party rights or comply with legal/official orders
ROUTINE DATA DELETION
Data stored by HMDK Stuttgart are deleted when:
Legal retention periods expire (e.g., tax/commercial law)
Collection or processing was unlawful
Data are no longer necessary for the purposes for which they were collected
YOUR RIGHTS
Right of Access (Art. 15 GDPR): Request free information at any time about personal data processed by HMDK Stuttgart.
Right to Rectification (Art. 16 GDPR): Request correction or completion of inaccurate or incomplete data.
Right to Erasure/Restriction (Art. 17 GDPR): Request deletion or blocking of your data, subject to statutory retention requirements.
Right to Restriction of Processing (Art. 18 GDPR): Request limitations on processing under Art. 18 GDPR.
Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, common, machine-readable format and, if possible, transmit to another controller.
Right to Withdraw Consent/Object (Art. 21 GDPR): Withdraw consent or object to processing at any time free of charge.
Right to Complain to a Supervisory Authority (Art. 77 GDPR): Lodge a complaint with the Ministry of Science, Research, and Arts Baden-Württemberg if processing violates GDPR.
Right to Judicial Remedy (Art. 79 GDPR): Seek legal remedies if rights are violated due to non-compliant processing.
Right to Compensation (Art. 82 GDPR): Claim compensation for material or immaterial damages resulting from GDPR violations.
UPDATES TO THIS PRIVACY STATEMENT
This privacy statement will be updated in response to new legal requirements, significant changes to website functionality, or internal organizational changes. We recommend reviewing it periodically.
Last updated: 13 November 2025