(1) Hereinafter we inform you on the collection of personal data when you use our website. Personal data are all data which may be referred to you personally e.g. name, address, e-mail addresses, user behavior.
(2) Controller pursuant Article 4 paragraph 7 of the EU General Data Protection Regulation (GDPR) is the Foundation Stiftung Nantesbuch gGmbH, Werneckstr. 8, 80802 Munich / Germany. You may contact our data protection officer at firstname.lastname@example.org or Stiftung Nantesbuch gGmbH, Werneckstr. 8, 80802 Munich / Germany, attn.: Datenschutzbeauftragter.
(3) Your data will not be used for advertising purposes.
(1) You have the following rights against us concerning your personal data:
- right of access;
- right of rectification or erasure;
- right of restriction of processing;
- right of objection against the processing;
- right of data portability.
(2) In addition you have the right to lodge a complaint about the processing of your personal data with a supervisory authority.
(1) In case of a mere informational use of the website, i.e. if you do not register or otherwise submit information to us, we collect only the personal data which your browser transfers to our server. If you want to watch our website, we collect the following data which are technically necessary for us to show you our website and to warrant the stability and safety (legal basis for this is Article 6 paragraph 1, 1st sentence lit. f) GDPR):
- IP address;
- date and time by the clock of your request;
- time difference from Greenwich Mean Time (GMT);
- content of the request (individual page);
- access status / HTTP status code;
- data volume transferred;
- website making the request;
- operating system and its interface;
- language and version of the browser software.
(2) We do not use any cookies.
(1) In addition to the merely informational use of our website we offer various services which you may use in case of interest. For this purpose you must normally submit additional personal data which we use for the performance of the requested service and for which the aforementioned principles of data processing apply.
(2) If you contact us via e-mail or via contact form we store the data submitted by you (your e-mail address, in some cases your name and telephone number) to answer your questions. We erase the data submitted in this context, if the storage is no longer necessary, or we restrict the processing if there are statutory storage obligations. The legal basis for the processing of these data is Article 6 paragraph 1 lit. f) GDPR. If the contact is intended to enter into a contract, the additional legal basis for the processing is Article 6 paragraph 1 lit. b) GDPR.
(3) If you register for one of our newsletters, we use with your express previous consent the data submitted by you to send you the newsletter. The indication of your e-mail address is necessary; all other information may be given voluntarily. By way of the newsletter we inform you on actual exhibitions and events. For your registrations to our newsletter we use the so-called double-opt-in procedure. This means that we send you an e-mail to the indicated e-mail address after your registration in which we ask you to confirm that you wish the sending of the newsletter. If you do not confirm your registration within 24 hours, your information is blocked and will be erased automatically after one month. Further, we store any IP-addresses used and the times of the registration and of the confirmation. The purpose of this procedure is to prove your registration and to be able to detect a possible misuse of your personal data. Upon your confirmation we store your e-mail address and any information submitted to us voluntarily for the purpose of sending the newsletter. The legal basis for this is Article 6 paragraph 1, 1st sentence lit. a) GDPR. The data necessary for sending the newsletter will be passed on by us to an external service provider who will be entrusted with the sending of the newsletter. Notice of cancellation may be made at any time. You may declare the revocation or cancellation via a link in the newsletter, via a click on the form of the website, via e-mail to email@example.com or via a notification to the contact addresses indicated in the company details.
(4) Partially we involve external service providers in the processing of your data. We carefully choose and entrust those providers and they are subject of our instructions and are controlled regularly.
(1) If you have granted your consent to the processing of your data, you may withdraw it any time. Such a withdrawal influences the admissibility of the processing of your personal data, once you have declared it to us.
(2) If we base the processing of your personal data upon our legitimate interests, you may object against the processing of your personal data. This applies in particular if the processing is not necessary for the performance of a contract with you, which will be shown by us for the subsequent description of the functions.
If you object against the processing, we ask you to substantiate the reasons why we should not process your personal data as carried out by us. In case of your justified objection we explore the facts and will either stop the data processing or adjust it or show you our compellingly legitimate grounds based upon which we continue the processing.
(1) Via external links identified by pictograms of the corresponding providers you may reach our offers at Facebook, Twitter and Instagram.
You recognize the individual social-media-platform by the pictogram and its first letter or its logo. We offer you the possibility to address our social-media-offer directly via the button of the providers concerned. Only if you click the marked box and thereby follow the link, a connection with the social-media-offer is established. Then inter alia the data mentioned in § 3 of this declaration will be submitted to the addressed social-media-platform. Facebook claims that the IP-address submitted to it is anonymized upon its collection. If you click the social-media-offer, personal data are transferred to the social-media-providers and processed and stored by them (in case of US providers in the US). Since the social media providers carry out the data collection via cookies, we recommend to erase all cookies via the security installations of your browser before you click the link button.
(2) Neither do we have any influence on the data collected or processed by social-media-providers nor do we know the full scope of their data collection, the purpose of their processing or the periods of their storage. In addition we have no information on the erasure of data collected by the social-media-providers.
(3) The social-media-provider stores the data collected from you as user profiles and uses them for purposes of advertising, market research and/or demand-design of its website. Such an evaluation is done (also for users who are not logged in) for the presentation of tailored advertising and to inform other users of the social-media-network on your activities on our website. You have the right to object against the creation of user profiles, but you have to exercise this right against the individual social-media-provider. By way of our social-media-offers we grant you the possibility to interact with the social-media-networks and other users. Thus, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of links to social-media-offer is Article 6, paragraph 1, 1st sentence lit. f) GDPR.
(4) The data transfer is effected irrespective of the fact whether or not you have an account with a social-media-provider and are logged in there. If you are logged in with a social-media-provider, your data are directly attributed to your account with the social-media-provider.
If you want to avoid this, we recommend that you log out regularly after the use of a social-media-network, in particular, however, before you use the link, since with this procedure you can avoid the attribution of your profile with the social-media-provider.
(5) You receive more information on the purpose and scope of the collection and processing of data on the data protection declaration of the social-media-providers. This declaration will give you more information on your rights and set-up-possibilities to protect your privacy.
(6) Addresses of social-media-providers and URL with their data protection information are as follows:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA:
Facebook has subjected itself to the EU-US-Privacy-Shield: www.privacyshield.gov/EU-US-Framework
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA;
Twitter has subjected itself to the EU-US-Privacy-Shield: www.privacyshield.gov/EU-US-Framework
c) Instagram, data controller: Facebook Ireland Ltd., 4 Grand Canal
Square, Grand Canal Harbour, Dublin 2 Ireland, Contact address of the data protection officer:
Data protection guideline: help.instagram.com/519522125107875. Facebook has subjected itself to the EU-US-Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework
Under the URL of www.facebook.com/MuseumSinclairHaus we maintain a Facebook page which includes actual information and possibilities of communication. Together with Facebook Ireland Limited (hereinafter referred to as “Facebook Ireland”) we are joint controllers for the corresponding processing of Insight-Data and we have concluded a “Page Insider Controller Addendum” with Facebook Ireland. The agreement can be inspected under www.facebook.com/legal/terms/page_controller_addendum. Insight-Data (Page Insights) are summarized data which can provide us with information on how users interact with a Facebook page. Facebook will inform the users about the essentials of these Page-Insights-Addendums. The primary responsibility according to the GDPR for the processing of Insight-Data has been accepted by Facebook Ireland and Facebook Ireland will perform any duties according to the GDPR with regard to the processing of Insights-Data (inter alia Art. 12 and 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR).
The legal basis for the processing of personal data of the users is our legitimate interest in effective information of the users and communication with the users according to Art. 6 paragraph 1 lit. f GDPR. If the users are asked for a consent by Facebook (i.e. your consent via ticking a checkbox or your confirmation via clicking a button), the legal basis of the processing is Art. 6 paragraph 1 lit. a GDPR.
For the processing of personal data in connection with Page Insights, which do not apply to the above mentioned Page Insider Controller Addendum, Facebook will remain solely responsible.
Via the external link, “RMV Fahrplanauskunft” in our web offer you can use the information on the traffic schedule of the Rhein-Main-Verkehrsverbund. In this case, you leave our web offer. For the data collected in connection with the use of this offer the controller is Rhein-Main-Verkehrsverbund GmbH. You find further information under: www.rmv.de/c/de/rechtliche-hinweise/datenschutz/
(1) On our website we use the offer of Google Maps. Thus, we can show you interactive maps directly on the website and enable you to comfortably use the map function, for example in order to find your way to us.
(2) If you visit our website, Google receives the information that you have called the corresponding sub-page of our website. In addition, the data mentioned in § 3 of this declaration are transferred to Google LLC. This is effected irrespective of whether or not Google offers a user account, through which you are logged in or whether or not there is a user account. The legal basis for this processing is Art. 6 paragraph 1 lit. b GDPR because your IP-address is needed in order to supply you the content.
If you are logged in with Google, your data are directly attributed to your account. If you do not wish that the data are attributed to your profile with Google, you have to log out before you activate the button. Google stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-design of its website. Such an evaluation is done (also for users who are not logged in) for the presentation or tailored advertising and to inform other users of the social-media-network on your activities on our website. You have the right to object against the creation of such user profiles, but you have to exercise this right against Google.
(3) You receive further information on the purpose and scope of the collection and processing of your data by the plug-in provider in the data protection declaration of the provider (RMV or Google). There, you also receive further information on your rights and set-up possibilities to protect your privacy: www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the US and has subjected itself to the EU-US-Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.
(4) The cooperation with Google LLC with regard to data protection law is based on an agreement about joint controllership according to Art. 26 GDPR available at privacy.google.com/intl/de/businesses/mapscontrollerterms/.