WEBSITE PRIVACY NOTICE

Your privacy is important to us. Please read our privacy notice.

You may always request information about your personal data processed by us. You have the right to information, correction, deletion, restriction, data transferability and objection to such data at any time. In such case, please contact us underbelow listed e-mail address.

In particular, you can withdraw your consent from receiving any newsletter, updates, information about our offer and/or classical music production and classical music (video) content, publication details and holiday greetings by notifying unsubscribe@aretha.io

Aretha GmbH, Mariahilferstraße 109/10, 1060 Vienna, Austria (“Aretha”); E-Mail: info@aretha.io

In co-operation with Unitel GmbH & Co. KG, Grünwalder Weg 28 d, D-82041 Oberhaching, E-Mail: info@unitel.de („Unitel“). The Data Privacy Policy of Unitel can be found here: http://unitel.de/en/data-privacy-policy.html

1.1. This Website Privacy Notice (this "Notice") explains which personal data are collected when you visit our website www.myfidelio.tv (our "Website") and how this data is processed by Aretha and the co-operation Partner Unitel (collectively "we"). 1.2. This Notice is addressed to any visitor of our Website ("data subject" or "you"). 1.3. We process your personal data in accordance with the EU General Data Protection Regulation ("GDPR") and applicable national data protection laws. Unless otherwise defined in this Notice, the terms used herein shall have the same meaning as defined in the GDPR.

2.1. When you use our Website we may process those personal data which you voluntarily provide to us (e.g. by means of our contact form). 2.2. However, you can also visit our Website without actively providing us with information about you. In this case we collect certain data that your browser transmits to our website server (i.e. log files) as well as data that we collect via the use of cookies or similar technologies. 2.3. The following explanations shall serve to inform you about the different ways we may collect personal data about you on our Website and for what lawful purposes we may use them. 2.4. Personal data you actively disclose to us 2.4.1. When you actively communicate with us via our Website, we process those personal data that you voluntarily provide to us. In particular, this relates to our following services:  Contact and chat forms: When you choose to contact us via the contact form or chat form provided on our Website the personal data you provide to us (e.g. name, email address, correspondence) will be processed for the purpose of answering your questions, fulfilling your requests or otherwise communicating with you (Art 6 (1) b GDPR – performance of (pre-)contractual duties)  Purchase of Video-Content: If you provide us with your personal data (e.g. name, email address, etc.) in the course of accessing/view/purchasing one or more of our resources (e.g. classical music videos), they will be processed for the purpose of giving you access to these online resources demonstration (Art 6 (1) b GDPR – performance of (pre-)contractual duties) and sending you corresponding e-mails and newsletter including customized information about our products and available promotions. If you no longer wish to receive the Newsletter, you can unsubscribe at any time by clicking the respective link in each Newsletter that you receive from us or send us your request for withdrawal by email. (Art 6 (1) a GDPR – consent). We will also use the provided information for the purpose of direct advertising or other forms of marketing or advertising (Art. 6 (1) f GDPR – legitimate interest of Aretha and/or Unitel)”  Job applications: When you choose to contact us in order to apply for job opportunities posted on our Website the personal data you provide to us (e.g. name, contact data, application letter, CV data, photograph, certificates and references, etc.) will be processed for the purpose of reviewing your application and considering it in the recruitment process for the open position. (Art 6 (1) b GDPR –performance of (pre-)contractual duties)  Newsletter: If you have subscribed to our Newsletter via our Website, the personal data you provide to us (e.g. name, email address, product preferences) will be processed for the purpose of sending you the requested newsletter including customized information about our products and available promotions. If you no longer wish to receive the Newsletter, you can unsubscribe at any time by clicking the respective link in each Newsletter that you receive from us or send us your request for withdrawal by email. (Art 6 (1) a GDPR – consent) 2.4.2. Some of the data we request in connection with our above services may be marked as mandatory fields. If you do not provide the data required for the requested service we may not be able to process your request or provide our services. 2.5. Log files 2.5.1. You may also visit our Website without actively providing us with information about you. In this case we collect certain data that your browser transmits to our website server (i.e. log files). 2.5.2. Our log files contain the following information: (i) date and time of retrieval of our Website, (ii) type, version and settings of your web-browser, (iii) your operating system and internet service provider, (iv) requested pages and files, (v) website used prior to visiting our Website as well as (vi) your IP-address. The IP address is a specific number assigned to your computer which enables your device to communicate in a network using the Internet Protocol (IP). IP addresses may qualify as personal data as they technically allow the identification of the user in certain circumstances. 2.5.3. The processing of these log files is necessary for us to maintain the functionality, stability and security of our Website. We may also process them for the purpose of forensic investigations in the case of a security incident or in order to generate user statistics. For statistical purposes your IP-address is used in anonymized form only.

Legal basis: Art 6 (1) f GDPR (legitimate interest in maintaining functionality, stability and security of our Website)

2.6. Cookies 2.6.1. In addition, this Website uses cookies. These are small text files that may be placed on your device while browsing our Website which store certain information about you. Cookies cannot access, read or modify other data stored on your device. When we refer to “cookies” we include other technologies with similar purposes, such as pixel tags. 2.6.2. We use two types of cookies on our Website: (i) Necessary cookies: Without necessary cookies the proper functioning of our Website would not be possible or only to a limited extent. The use of necessary cookies on our Website is possible without your consent. However, you can deactivate cookies at any time by modifying your browser settings. For a detailed description of the used necessary cookies and respective purposes kindly see Section 2.7 below.

Legal basis: Art 6 (1) f GDPR (legitimate interest)

(ii) Optional cookies: These types of cookies may be used to improve our Website, optimize your user experience, analyze user behavior or customize marketing activities. Optional cookies may also be placed by external advertising companies ("third party cookies"). Optional cookies will only be used upon your consent which you may provide by clicking on the button "Allow cookies" on our Website's cookie banner. This consent can be withdrawn at any time with effect for the future. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. For a detailed description of the used optional cookies and respective purposes kindly see Section 2.8 below.

Legal basis: Art 6 (1) a GDPR (consent)

2.7. Cookies used on our Website This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. By clicking "Allow selection" or "Allow all cookies" you consent to the respective use of the selected cookies. You can withdraw your consent at any time in the Cookie Policy. Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Cookie Policy. 2.8. Web Analytics 2.8.1. Google Analytics In case you have consented to the use of cookies by us, this Website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies to help the Website analyze how users use the site.

The information generated by the cookie about your use of our Website (including your IP address and the URLs of the accessed pages) will be transmitted to and stored by Google on servers in the United States. We do not store any of your personal data collected in connection with Google Analytics.

This Website uses an IP anonymization feature provided by Google Analytics. Your IP address will therefore be truncated/anonymized by Google as soon as it receives it. On our behalf, Google will use this information for the purpose of evaluating your use of our Website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to us. Google will not associate your IP address with any other data held by Google.

We process your personal data for purposes of Google Analytics based on your consent which you may provide by clicking on the button "Allow cookies" on our Website's cookie banner (Art 6 (1) a GDPR). This consent can be withdrawn at any time with effect for the future. You may also refuse the use of cookies by selecting the appropriate settings on your browser (see Section 2.10 below). However, please note that if you do this, you may not be able to use the full functionality of this Website. Furthermore, you can prevent Google's collection and use of your data by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout.

Further information concerning Google's terms of use and privacy statement can be found at https://www.google.com/analytics/terms/gb.html.

2.9. How to control and manage the use of cookies 2.9.1. By clicking on the "Allow cookies"-button in the Website's cookie banner you agree to the use of the above listed optional cookies on our Website. Your consent can be withdrawn (for all or individual cookies) at any time with effect for the future by directing your request to gdpr@aretha.io. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. 2.9.2. You may also refuse the use of cookies by selecting the appropriate settings on your browser or by deleting the cookies from the device and browser. Most browsers accept cookies automatically, but you can alter the settings of your browser to erase cookies or prevent automatic acceptance if you prefer. Generally you have the option to see what cookies have been placed and delete them individually, block third party cookies or cookies from particular sites, accept all cookies, to be notified when a cookie is issued or reject all cookies. Visit the ‘options’ or ‘preferences’ menu on your browser to change settings, and check the following links for more browser-specific information: Cookie settings in Internet Explorer Cookie settings in Firefox Cookie settings in Chrome Cookie settings in Safari 2.9.3. You should be aware that any preferences will be lost, if you delete all cookies and many websites will not work properly or you will lose some functionality.

3.1. For the above mentioned purposes we may share your personal data with the following recipients:  our employees, subsidiary company, where necessary in order to perform our services (e.g. where you request certain services via our Website)  our co-operation Partner Unitel GmbH & Co. KG, Grünwalder Weg 28 d, D-82041 Oberhaching  our Operations Partner IDAGIO GmbH, Tempelhofer Ufer 17, 10963 Berlin, Germany  our Technology Partner easy-connect/Ticket Gretchen GmbH, Mariahilferstraße 109/10, 1060 Vienna  (Video) Content Rights Holder  Distribution & Sales Partner  IT service providers who provide hosting, maintenance and security services for our Website  advertising and web-analysis partners (e.g. Google LLC) who provide certain services to us in connection to our Website  our video streaming system “Vimeo”  to any other person upon your consent if necessary  Where disclosure is required (i) by law or regulation or (ii) to establish, exercise or defend legal claims, we may also disclose personal data to a competent authority, such as supervisory, regulatory or criminal authorities, courts of law or other third parties who advise us in this context (e.g. lawyers or forensics experts)  Our Mailing- & Mailing-Campaign-Tool „Mailchimp“ 3.2. Some of these recipients may be located in countries outside the EU/EEA for which an adequate level of data protection has not yet been established by the EU Commission. It should be noted that the level of data protection in such countries may not be the same as within the EU/EEA. Also, subject to local laws and regulations data may be accessible to local authorities or courts. 3.3. However, where personal data is transferred to such third countries we implement appropriate safeguards to ensure that your rights are protected in accordance with the GDPR. This includes the conclusion of the EU Commission's standard contractual clauses for the transfer of personal data (Art 46 (2) c GDPR). Further details on the implemented safeguards as well as copies of the respective agreements are available on request at gdpr@aretha.io. 4.1. Log files (see Section 2.5 above) are generally kept for a period of three months. Beyond this time period log files will only be stored for the purpose of investigating irregularities or security incidents in our system. For the storage duration of cookies see Section 2.6 above. 4.2. We generally retain your personal data for as long as this is necessary for the fulfilment of the purpose for which they were obtained. Thus, in any case we process your personal data for the duration of our contractual or service relationship with you (see Section 2.4 above). Beyond this period we keep your personal data to comply with statutory retention obligations (e.g. to fulfill the 7-year retention obligation under applicable tax and company law). Where necessary we may also keep your data for as long as potential legal claims against us are not yet time-barred; for certain claims the statutory limitation period may be up to 30 years. 4.3. As soon as there are no legitimate grounds for the further storage of personal data available, they will either be deleted or anonymized.

5.1. In accordance with applicable law (in particular Art 15 et seq. GDPR), you have the right to access your personal data, to request deletion or correction of your personal data, to object to the processing of your personal data, to request restriction of your personal data as well as the right to data portability. To exercise these rights send an email to gdpr@aretha.io or a letter to Aretha GmbH, Mariahilferstrasse 109/10, A-1060 Vienna, Austria. If you feel that your rights have been violated, you may also file a complaint (Art 77 GPDR § 24 DSG) with the competent data protection/supervisory authority (in Austria: Austrian Data Protection Authority - Datenschutzbehörde) if he considers that the processing of personal data relating to him infringes this Regulation. 5.2. We do not process your personal data for the purpose of taking decisions based solely on automated processing, including profiling, which produces legal effects concerning you (Art 22 GDPR).

Austrian Data Protection Authority, Wickenburggasse 8-10, A-1080 Vienna, Phone: +43 1 52 152-0; Email: dsb@dsb.gv.at

We may update this Notice to reflect legal, technical or business changes. When we update this Notice, we will take reasonable steps to inform you about the changes made. You will find the date of the "last update" at the beginning of this Notice.

Should you have any requests or questions in relation to the processing of your personal data by us by sending an e-mail to gdpr@aretha.io.

(Last update Nov 30, 2023)