Data Protection

Data Protection Declaration

1. Information on the Collection of Personal Data

1.1. In what follows, Stiftung zur Förderung zeitgenössischer Kunst in Weidingen (‘we’, ‘us’, ‘our’) is providing information on the collection of personal data occurring when you are using our website www.kunst-in-weidingen.de (‘website’). Personal data are all data that can be related to you in person, e.g. name, address, e-mail addresses, user behaviour.

1.2. Stiftung zur Förderung zeitgenössischer Kunst in Weidingen, Gartenstraße 32, 54636 Weidingen, mail@kunst-in-weidingen.de (see our imprint) is the controller pursuant to Article 4(7) EU General Data Protection Regulation (‘GDPR’). Enquiries about data protection issues can be directed to us via mail@kunst-in-weidingen.de or via our postal address, with the addendum ‘Data Protection Matter’.

1.3. If you are contacting us via e-mail or via a contact form, we will be saving data you are providing us with (your e-mail address as well as, possibly, your name and telephone number) in order to answer your questions. We will erase any data produced in this context as soon as saving it is no longer necessary, or restrict processing in case statutory storage obligations hold.

1.4. In case we rely on contracted providers for individual functions of our services or we want to use your data for advertising purposes, we will inform you on the respective processes in detail below. There, we will also state the designated criteria for storage periods.


2. Your Rights

2.1. You have the following rights towards us with regard to personal data concerning you:

a) Right to information,

b) Right to rectification or erasure,

c) Right to restriction of processing,

d) Right to object against processing,

e) Right to data portability.

2.2. In addition, you have to right to complain to a data protection supervisory authority about our processing of your personal data.


3. 
Collection of Personal Data When Visiting Our Website

3.1. When you are using our website merely informationally, that is, when you do not register nor otherwise transmit information to us, we are only collecting the personal data that your browser is transmitting to our server. If you wish to view our website, we are are collecting the following data, which we require technically in order to show you our website and to ensure stability and safety (the legal basis being Article 6(1)(1)(f) GDPR):

a) IP address;

b) Date and time of request;

c) Time zone difference to Greenwich Mean Time (GMT);

d) Content of request (particular page);

e) Access status/HTTP status code;

f) Individual amount of data transferred;

g) Website from which the request originates;

h) Browser;

i) Operating system and its surface; and

j) Language and version of browser software.

3.2. In addition to the data aforementioned, cookies are saved on your computer when you are using our website. Cookies are small text files that are saved on your hard disk under attribution to the browser you are using and by which the entity that is placing the cookies (in this case, us) is obtaining certain information. Cookies are not able to run programmes nor to transmit viruses to your computer. Their purpose is to make the entire internet service more user-friendly and more effective.

a) This website only uses the cookie Concrete5 (ccmUserHash). Our homepage is being saved and administered through the open source CMS Concrete5. It is placing cookies which are used to recognise you when you are navigating on our website and to determine whether you are logged in. The cookie will be deleted automatically as soon as the browser is closed and the session is terminated.

b) You may configure your browser settings according to your preferences, e.g. refuse to accept third party cookies or all cookies. Please note that in this case, you may not be able to use all functions of this website.



4. Embedding of YouTube Videos

4.1. We have embedded YouTube videos in our online services, which are saved on YouTube and which can be played directly from our website. All of these are embedded in ‘privacy-enhanced mode’, which means that no data on you as as user will be transmitted to YouTube unless you play the videos. Only when you play the videos, the data listed in Subsection 2 will be transmitted. We have no influence on this data transmission.

4.2. Upon relevant activity, YouTube obtains the information that you have opened the the respective subpage of our website. In addtion, the data listed in Section 3.1 of this Declaration will be transmitted. This occurs independently of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in with Google, your data will be attributed directly to your account. If you do not desire the attribution with your YouTube profile, you have to log off prior to activating the button. YouTube will save your data as usage profiles and use them for purposes of advertising, market research, and/or demand-oriented design of its website. In particular, such analysis may occur (even for users not logged in) in order to provide demand-oriented advertisement and, potentially – depending on the service of the provider –, in order to inform other users of the social network on your activities on our website in connection with the service. You have the right to object to the formation of these user profiles, for the exertion of which you have to turn to YouTube.

4.3. You can obtain further information on purpose and scope of data collection and processing by YouTube from YouTube’s Data Protection Declaration. From there, you can also obtain further information on your rights in this regard and potential settings for the protection of your pricacy: Data Protection Declaration. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, EU-US Privacy Shield.



5. Embedding of Vimeo Videos

5.1. We have embedded Vimeo videos in our online services, which are saved on Vimeo and which can be played directly from our website. 

5.2. Upon relevant activity, Vimeo obtains the information that you have opened the the respective subpage of our website. In addtion, the data listed in Section 3.1 of this Declaration will be transmitted. This occurs independently of whether Vimeo provides a user account through which you are logged in or whether there is no user account. Vimeo will save your data as usage profiles and might use them for purposes of advertising, market research, and/or demand-oriented design of its website. In particular, such analysis may occur (even for users not logged in) in order to provide demand-oriented advertisement and, potentially – depending on the service of the provider –, in order to inform other users of the social network on your activities on our website in connection with the service. You have the right to object to the formation of these user profiles, for the exertion of which you have to turn to Vimeo.

5.3. You can obtain further information on purpose and scope of data collection and processing by Vimeo from Vimeo’s Data Protection Declaration. From there, you can also obtain further information on your rights in this regard and potential settings for the protection of your pricacy: Data Protection Declaration



6. Embedding of Google Maps

6.1. This Website uses the Google Maps service. This allows us to show you interactive maps directly within the website and allows you the convenient use of the maps function.

6.2. Upon relevant activity, Google obtains the information that you have opened the the respective subpage of our website. In addtion, the data listed in Section 3.1 of this Declaration will be transmitted. This occurs independently of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in with Google, your data will be attributed directly to your account. If you do not desire the attribution with your Google profile, you have to log off prior to activating the button. Google will save your data as usage profiles and use them for purposes of advertising, market research, and/or demand-oriented design of its website. In particular, such analysis may occur (even for users not logged in) in order to provide demand-oriented advertisement and, potentially – depending on the service of the provider –, in order to inform other users of the social network on your activities on our website in connection with the service. You have the right to object to the formation of these user profiles, for the exertion of which you have to turn to Google. 

6.3. You can obtain further information on purpose and scope of data collection and processing by the plugin provider from the Data Protection Declarations of the provider. There, you can also obtain further information on your rights in this regard and potential settings for the protection of your pricacy: Data Protection Declaration. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, EU-US Privacy Shield.


7. 
Newsletter

7.1. You can subscribe to our newsletter, with which we inform you on our current offers. The goods and services advertised are named in the declaration of consent.

7.2. We are using the so-called double opt-in procedure for the registration with our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address given, in which we ask you to confirm that you wish the newsletter to be sent. Unless you confirm your registration within 24 hours, your information will be blocked and, after one month, erased automatically. Furthermore, we will save the IP addresses you used in the relevant cases and the times of registration and confirmation. The purpose of this procedure is to prove your registration and, potentially, to resolve a potential misuse of your personal data.

7.3. The only mandatory information for sending the newsletter is your e-mail address. Providing further data separately marked is voluntary and is used in order to be able to address you in person. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Article 6(1)(1)(a) GDPR.

7.4. Your may revoke your consent into sending the newsletter at any time and unsubscribe the newsletter. You may declare revocation by clicking on the link provided in each newsletter e-mail, via e-mail to mail@kunst-in-weidingen.de or via message sent to the contact data provided in the imprint.

7.5. We make use of the MailChimp e-mail delivery system in order to deliver our newsletter to a large number of subscribers. This software allows us to send the same content of the newsletter to all of our customers and prospects at the same time, and, where required, personalised. If you register for having sent the newsletter via e-mail, you consent into the transmission of data to MailChimp. You may revoke your consent at any time. You can obtain further information on purpose and scope of data collection and processing by the plugin provider as well as further information on your rights in this regard and potential settings for the protection of your pricacy with MailChimp, lead by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA; Data Protection Declaration.

7.6. We point out to you that we analyse your user behaviour when sending the newsletter. For the purpose of this analysis, the e-mails sent contain so-called web beacons or tracking pixels, that is, one-pixel image files that are stored on our website. For the purpose of the analyses, we will link the data listed in Section 3.1 and the web beacons with your e-mail address and an individual ID. 


8. Web Fonts

8.1. We use so-called web fonts provided by Fonticons, Inc. ("Awesome Fonts") for the standardized display of fonts. When you access a web page, your browser loads the web fonts you need into its browser cache to display text and fonts correctly.

8.2. For this purpose, the browser you are using connects to the Fonticons, Inc. servers. By doing so, Fonticons, Inc. obtains information that our website has been accessed via your IP address. If your browser does not support Web Fonts, a standard font will be used from your computer. The web fonts are transferred to the cache of your browser to avoid multiple loading.

8.3. The use of web fonts is in the interest of a coherent and appealing presentation of our online offer. This constitutes a legitimate interest within the meaning of 6(1)(1)(f) GDPR.

8.4.  For more information about Font Awesome, please visit https://fontawesome.com/help and the Fonticons, Inc. privacy policy


9. Online Presences in Social Media

9.1. We maintain online presences on social networks and platforms in order to be able to communicate with customers, interested parties and users and to inform them about our services.

9.2. We would like to point out that user data may be processed outside the European Union. This may entail risks for users, e.g. because it could make it more difficult to enforce the rights of users. With regard to US providers who are certified under the Privacy Shield, we would like to emphasize that they are thus obligated to comply with EU data protection standards.

9.3. The usage profiles can be used further, e.g. to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer in which the user's usage behaviour and interests are recorded. Furthermore, data can also be stored in the user profiles independently of the devices utilised by the users (especially if the users are registered members of the respective platforms and logged in).

9.4. The legal basis for data processing when visiting our online presences in social media is Art. 6 sec. 1 lit. f GDPR, whereby our legitimate interest is to optimise our services and advertising and to offer users more opportunities for communication and interaction with us and each other. If the users are asked by the providers of the platforms for their consent to the aforementioned data processing, the legal basis of the processing is Art. 6 sec. 1 lit. a., Art. 7 GDPR.

9.5. For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the relevant providers.

9.6. In the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can undertake corresponding measures and give information directly. Should you require help nonetheless, you can contact us.

9.7. We maintain online presences on the following social networks:



10. 
Retention Period

10.1. In general, pursuant to Article 13(2)(a) GDPR, we keep your personal data for an appropriate amount of time, as it is required for the purposes for which they have been collected according to this Data Protection Declaration.

10.2. It may occur, however, that we are obligated by statute to store certain data for a longer period. In this case, we take care that your personal data are being treated in accordance with this Data Protection Declaration over the entire period. You can find information on the storage time of cookies in Section 3 of this Declaration.


11. Objection or Revocation of Consent

11.1. In case you declared consent into processing your data, you may revoke it at any time. Such revocation affects the permissibility of the processing of your personal data after you have declared it to us.

11.2. Insofar as we base the processing of your personal data on balance of interests, you may lodge an objection against processing. This is the case if processing, in particular, is not necessary for fulfilling a contract with you, which is described by us, respectively, in the following description of functions. We ask you to present, when exerting such objection, the reasons for which your personal data should not be processed as done by us. Upon your substantiated objection, we will check the facts and either suspend or adjust data processing or present to you our compelling reasons worthy of protection for which we maintain processing.

11.3. Of course, you may object to the processing of your personal data for the purposes of advertising and data analysis at any time. You may inform us on your advertising objection via the following contact data: mail@kunst-in-weidingen.de.


12. External Links

12.1. The website contains cross-references (‘Links’) to content provided by other operators on their websites. The respective third party provider is liable for the content of these websites. We do not have any influence on the content of linked websites and do not make them our own. 

12.2. At the time of first placing the respective links, no evident breaches of law were apparent on the linked websites. It cannot be excluded that the content is changed by the respective third party providers in the aftermath. We do not continually check the linked websites for changes. Should we learn of a breach of law on a linked website, the relevant link will be deleted immediately. Should you consider a linked content to be in breach of law or to have otherwise inappropriate content, please tell us about it.