1) Provision of the website and creation of log files
(a) Legal basis
The legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR).
(b) Purpose
The temporary storage of your personal data by us is a prerequisite for us to be able to display our website on your computer. For this reason, we store your personal data until the end of the respective session.
The further storage of your personal data in so-called log files by us takes place in order to technically ensure the correct functioning of our Internet presence. Furthermore, the log files are used to check and maintain the proper functioning of the security of our information technology systems.
Your data collected for this purpose will not be processed other than for the aforementioned purposes.
(c) Duration of Storage
We delete your personal data as soon as you have left our website.
If we store your personal data in our log files, we delete them after 7 days at the latest. If we want or need to store your data beyond this period, your data will only be stored or processed in anonymised form. Anonymisation means that we can no longer assign your data to you.
2) Technically necessary cookies
(a) Legal basis
Rechtsgrundlage für die Verarbeitung Ihrer personenbezogenen Daten im Rahmen des Einsatzes von technisch notwendigen Cookies ist Ihre freiwillige Einwilligungserklärung gemäß Art. 6 Abs. 1 lit. a Datenschutz-Grundverordnung (DSGVO).
The legal basis for the processing of your personal data in the context of the use of technically necessary cookies is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR).
(b) Purpose
The use of technically necessary cookies is a prerequisite for us to make the website use easier and more accessible for you. Some of the functionalities would not be possible without the use of these cookies. These functionalities require that you are recognized by our website even after you have switched to another page in the meantime. Your personal data will not be used in any other way in this context.
(c) Duration of Storage
We delete your personal data as soon as the actual purpose of the processing has been achieved and its processing is therefore no longer necessary. For many functionalities, this is already the case when you leave the website.
(d) Possibility of objection and removal
We provide an overview of all technically necessary cookies used on our website at the end of this privacy notice.
If we use cookies, they will be stored locally on your computer in case of permission. Since information is transmitted from the cookies to our website, they retain full control over the use of cookies.
Your browser also allows you to restrict or completely disable the transmission of cookies in the settings. You can also delete cookies that have already been stored in the past - also automatically - at any time. However, if you deactivate cookies with regard to our website, we cannot guarantee that all functions of our website can be used by you.
3) WebFont-Schriftarten Monotype GmbH
(a) Legal basis
The legal basis for the processing of your personal data in the context of the integration of web fonts from the provider Monotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).
(b) Purpose
In order to integrate and display the fonts on our website in a standardised manner, we use the services of the provider Monotype GmbH. In this context, your personal data is processed.
(c) Duration of Storage
Your personal data will be deleted after 30 days.
4) Contact form and e-mail contact
(a) Legal basis
The legal basis for the processing of your personal data is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). If, on the other hand, the purpose of your contacting us is to conclude a contract with us, Art. 6 (1) (b) GDPR is relevant as a further legal basis for the processing of your personal data.
(b) Purpose
We process your personal data in connection with your contact in order to process and respond to your enquiry. For this purpose, we need your first and last name, e-mail address and a telephone number so that we can respond to your enquiry promptly. For companies and schools, we also ask you to specify the institution.
(c) Duration of Storage
We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. Personal data transmitted to us in the context of contacting us will be deleted if your request has been processed by us and no legal retention periods oppose the deletion.
(d) Possibility of objection and removal
You can object to the processing of your personal data in connection with your contact at any time for the future. However, if you do so, we cannot and will not process your request any further. Provided that there are no legal retention periods to the contrary, all your personal data related to the contact will be deleted in this case.
5) Bookings (booking form)
(a) Legal basis
The legal basis for the processing of your personal data is the fulfilment of a contract (booking a guided tour) in accordance with Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR).
(b) Purpose
We process your booking enquiry as part of the fulfilment of the contract. For this purpose, we require your first and last name, your address and your contact details (telephone and e-mail address).
In the case of schools and companies, please state the institution.
(c) Duration of Storage
We delete your personal data as soon as it is no longer required for the fulfilment of the contract. If remuneration is paid in the course of contract fulfilment, the storage period is based on the Bavarian Budgetary Regulations (BayHO). The storage period here is 10 years beyond the calendar year in question.
(d) Disclosure to third parties
In the event of payment as part of the fulfilment of the contract, your personal data and your account details will be forwarded to the Staatsoberkasse Bayern in Landshut (STOK). STOK is responsible for processing non-cash payment transactions in the Free State of Bavaria in accordance with the Responsibilities Act.
If external guides are involved, the necessary contact details will be passed on to them.
If the booking takes place in another museum or the Museum Education Centre (MPZ) is involved, they will also receive the necessary contact details.
6) Press area
(a) Purpose
A user account is required in order to grant you access to the press area and at the same time protect the image rights. To register, you will need your first and last name, e-mail address and details of your medium or editorial office.
(b) Legal basis
The legal basis for the processing of your personal data in the context of access to the press area is your voluntary consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).
(c) Duration of Storage
We will delete your personal data until your user account is deleted. You can arrange this in your user account.
(d) Disclosure to third parties
Our programmer ‘the netexperts’ can access your account as part of their work. Otherwise, we do not pass on your personal data to third parties, third countries or international organisations.
7) Online Collection and WebApp Alte Pinakothek Unframed
(a) Purpose
A user account is required to be able to access extended functions in the online collection and the web app. You will need your e-mail address to log in.
(b) Legal basis
The legal basis for the processing of your personal data in the context of access to the user area is your voluntary consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).
(c) Duration of Storage
We will delete your personal data until your user account is deleted. You can arrange this in the profile area of your user account.
(d) Disclosure to third parties
Our programmer ‘the netexperts’ can access your account as part of their work. Otherwise, we do not pass on your personal data to third parties, third countries or international organisations.