Data protection information

according to Art. 13 ff. GDPR

A) Name and adress of the controller

Your contact person as controller within the meaning of the European Data Protection Regulation ("GDPR") and other national data protection laws of the member states as well as other data protection regulations is:

Bayerische Staatsgemäldesammlungen
Richard-Wagner-Str. 1
80333 Munich
+49 (0)8923805 0
info@pinakothek.de 
(hereinafter referred to as "we", "us" or "our")

B) Name and adress of the data protection officer

You can reach our data protection officer at the following contact details:

Bayerische Staatsgemäldesammlungen
Landshuter Allee 8
80637 Munich
+49 (0)89 23805 136
zd.datenschutz@pinakothek.de

C) Data processing within the scope of our Internet presence

1) Provision of the website and creation of log files

(a) Legal basis

The legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR).

(b) Purpose

The temporary storage of your personal data by us is a prerequisite for us to be able to display our website on your computer. For this reason, we store your personal data until the end of the respective session.

The further storage of your personal data in so-called log files by us takes place in order to technically ensure the correct functioning of our Internet presence. Furthermore, the log files are used to check and maintain the proper functioning of the security of our information technology systems.

Your data collected for this purpose will not be processed other than for the aforementioned purposes.

(c) Duration of Storage

We delete your personal data as soon as you have left our website.

If we store your personal data in our log files, we delete them after 7 days at the latest. If we want or need to store your data beyond this period, your data will only be stored or processed in anonymised form. Anonymisation means that we can no longer assign your data to you.

2) Technically necessary cookies

(a) Legal basis

Rechtsgrundlage für die Verarbeitung Ihrer personenbezogenen Daten im Rahmen des Einsatzes von technisch notwendigen Cookies ist Ihre freiwillige Einwilligungserklärung gemäß Art. 6 Abs. 1 lit. a Datenschutz-Grundverordnung (DSGVO).

The legal basis for the processing of your personal data in the context of the use of technically necessary cookies is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR).

(b) Purpose

The use of technically necessary cookies is a prerequisite for us to make the website use easier and more accessible for you. Some of the functionalities would not be possible without the use of these cookies. These functionalities require that you are recognized by our website even after you have switched to another page in the meantime. Your personal data will not be used in any other way in this context.

(c) Duration of Storage

We delete your personal data as soon as the actual purpose of the processing has been achieved and its processing is therefore no longer necessary. For many functionalities, this is already the case when you leave the website.

(d) Possibility of objection and removal

We provide an overview of all technically necessary cookies used on our website at the end of this privacy notice.

If we use cookies, they will be stored locally on your computer in case of permission. Since information is transmitted from the cookies to our website, they retain full control over the use of cookies.

Your browser also allows you to restrict or completely disable the transmission of cookies in the settings. You can also delete cookies that have already been stored in the past - also automatically - at any time. However, if you deactivate cookies with regard to our website, we cannot guarantee that all functions of our website can be used by you.

3) WebFont-Schriftarten Monotype GmbH

(a) Legal basis

The legal basis for the processing of your personal data in the context of the integration of web fonts from the provider Monotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).

(b) Purpose

In order to integrate and display the fonts on our website in a standardised manner, we use the services of the provider Monotype GmbH. In this context, your personal data is processed.

(c) Duration of Storage

Your personal data will be deleted after 30 days.

4) Contact form and e-mail contact

(a) Legal basis

The legal basis for the processing of your personal data is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). If, on the other hand, the purpose of your contacting us is to conclude a contract with us, Art. 6 (1) (b) GDPR is relevant as a further legal basis for the processing of your personal data.

(b) Purpose

We process your personal data in connection with your contact in order to process and respond to your enquiry. For this purpose, we need your first and last name, e-mail address and a telephone number so that we can respond to your enquiry promptly. For companies and schools, we also ask you to specify the institution.

(c) Duration of Storage

We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. Personal data transmitted to us in the context of contacting us will be deleted if your request has been processed by us and no legal retention periods oppose the deletion.

(d) Possibility of objection and removal

You can object to the processing of your personal data in connection with your contact at any time for the future. However, if you do so, we cannot and will not process your request any further. Provided that there are no legal retention periods to the contrary, all your personal data related to the contact will be deleted in this case.

5) Bookings (booking form)

(a) Legal basis

The legal basis for the processing of your personal data is the fulfilment of a contract (booking a guided tour) in accordance with Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR).

(b) Purpose

We process your booking enquiry as part of the fulfilment of the contract. For this purpose, we require your first and last name, your address and your contact details (telephone and e-mail address).
In the case of schools and companies, please state the institution.

(c) Duration of Storage

We delete your personal data as soon as it is no longer required for the fulfilment of the contract. If remuneration is paid in the course of contract fulfilment, the storage period is based on the Bavarian Budgetary Regulations (BayHO). The storage period here is 10 years beyond the calendar year in question.

(d) Disclosure to third parties

In the event of payment as part of the fulfilment of the contract, your personal data and your account details will be forwarded to the Staatsoberkasse Bayern in Landshut (STOK). STOK is responsible for processing non-cash payment transactions in the Free State of Bavaria in accordance with the Responsibilities Act.

If external guides are involved, the necessary contact details will be passed on to them.

If the booking takes place in another museum or the Museum Education Centre (MPZ) is involved, they will also receive the necessary contact details.

6) Press area

(a) Purpose

A user account is required in order to grant you access to the press area and at the same time protect the image rights. To register, you will need your first and last name, e-mail address and details of your medium or editorial office.

(b) Legal basis

The legal basis for the processing of your personal data in the context of access to the press area is your voluntary consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).

(c) Duration of Storage

We will delete your personal data until your user account is deleted. You can arrange this in your user account.

(d) Disclosure to third parties

Our programmer ‘the netexperts’ can access your account as part of their work. Otherwise, we do not pass on your personal data to third parties, third countries or international organisations.

7) Online Collection and WebApp Alte Pinakothek Unframed

(a) Purpose

A user account is required to be able to access extended functions in the online collection and the web app. You will need your e-mail address to log in.

(b) Legal basis

The legal basis for the processing of your personal data in the context of access to the user area is your voluntary consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).

(c) Duration of Storage

We will delete your personal data until your user account is deleted. You can arrange this in the profile area of your user account.

(d) Disclosure to third parties

Our programmer ‘the netexperts’ can access your account as part of their work. Otherwise, we do not pass on your personal data to third parties, third countries or international organisations.

1)      Webshop

(a)    Legal basis

The legal basis for the processing of your personal data in the context of the webshop is Art. 6 para. 1 lit. b GDPR.

(b)   Purpose

We process your personal data in connection with our webshop for the fulfillment of a contract which has been concluded between you and us.

(c)     Duration of Storage

We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. With regard to the processing of the aforementioned personal data, this is the case when the contract has been fulfilled on the one hand and on the other hand all contractual claims have become time-barred and/or there are no longer any legal storage and retention periods.

(d)    Possibility of objection and removal

We can only process the contract concluded between you and us in connection with the webshop by means of your personal data. Since the processing is therefore mandatory, you do not have the option to object to the processing.

 2)      Customer account and registration

(a)   Legal basis

The legal basis for the processing of your personal data in the context of customer account registration is Art. 6 para. 1 lit. b GDPR.

 (b)    Purpose

When you register on our website, this not only enables us to maintain our customer relationship with you, but also serves to conclude contracts. The processing of your personal data in connection with the registration of your customer account is therefore necessary for the performance of a contract, the implementation of pre-contractual measures and the maintenance of our customer profiles and relationships.

(c)    Duration of Storage

We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. This is the case at the latest when you close your customer account with us.

(d)    Possibility of objection and removal

If you no longer wish your data to be processed, you can cancel the registration of the customer account on our website at any time. In this case, we will delete your personal data, unless we are prevented from doing so by legal retention periods.

3)      Contact form and e-mail contact

(a)    Legal basis

The legal basis for the processing of your personal data, which is transmitted in the course of contacting us, is our public performance of duties (Art. 4 Para. 1 Bavarian Data Protection Act - BayDSG in conjunction with. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 p. 1 of the General Data Protection Regulation (GDPR)). If, on the other hand, the purpose of your contacting us is to conclude a contract with us, Art. 6 (1) (b) GDPR is relevant as a further legal basis for the processing of your personal data.

(b)    Purpose

We process your personal data in connection with your contact to process and respond to your request.

(c)     Duration of Storage

We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. Personal data transmitted to us in the context of contacting us will be deleted if your request has been processed by us and no legal retention periods oppose the deletion.

(d)    Possibility of objection and removal

You can object to the processing of your personal data in connection with your contact at any time for the future. However, if you do so, we cannot and will not process your request any further. Provided that there are no legal retention periods to the contrary, all your personal data related to the contact will be deleted in this case.

1) Newsletter

(a) Legal basis

The legal basis for the processing of your personal data within the scope of the newsletter dispatch is your declared consent according to Art. 6 para. 1 lit. a GDPR.

(b) Zweck

We process your personal data to deliver our newsletter to you. The purpose of our newsletter mailing is to inform you about current exhibitions, events such as readings, concerts or film screenings, guided tours, workshops and seminars, programmes for children, young people and families.

(c) Duration of Storage

We delete your personal data as soon as they are no longer required to achieve the purpose of their processing. In connection with the sending of the newsletter, your personal data will be stored until you have unsubscribed from our newsletter.

(d) Possibility of objection and removal

The revocation of your consent is open to you at any time. To do so, you can either explicitly revoke your consent or select the unsubscribe link included in each of our newsletters to let us know that you no longer wish to receive the newsletter.

(e) Data transfer

We have commissioned port-neo Group GmbH (Relenbergstr. 80, 70174 Stuttgart) to send the newsletter. Otherwise, we do not pass on your personal data to third parties, third countries or international organisations.

2) Comfort improvement, website optimization, user behavior analysis and playout of personalized advertising

We use Matomo for web analysis, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo").

Matomo uses cookies with your consent. These are text files that are stored on your computer and enable us to analyse the use of our website. For this purpose, the information obtained by the cookie about your use is transmitted to our server and stored so that usage behaviour can be evaluated. Your IP address and other collected data are immediately anonymised to 2-byte (e.g. ‘192.168.xxx.xxx); you therefore remain anonymous as a user. The information generated by the cookie about your use of this website is not passed on to third parties.

(a) Legal basis
As a legal basis for the processing of your personal data in connection with the use of cookies and similar technologies such as pixels, tags, web beacons, browser fingerprinting, etc. ("tracking cookies") for the purpose of improving your user experience, optimizing our website, analyzing your preferences, wishes and behavior and displaying advertisements that are of particular interest to you (personalized advertising) serves us Art. 6 para. 1 lit. a GDPR.

(b) Purpose
The processing of your personal data serves us to improve your visitor experience by optimizing the website usability and user-friendliness of our content. In addition, this may serve to promote our sales in the area of cultural offers.

(c) Duration of Storage

We delete your personal data as soon as you have revoked your consent or the processing is no longer necessary to achieve the purpose; This is particularly the case after 13 months.

(d) Possibility of objection and removal

We provide a detailed overview of all advertising cookies used on our website at the end of this privacy notice.

 You can revoke your consent given to us for the processing of your personal data in connection with the use of advertising cookies at any time for the future. There are several options available to you for this, which we show you as follows:

3) Social Plugins

(a) Legal basis

 Our legal basis for the processing of your personal data through so-called "social plugins" is your declared consent pursuant to Art. 6 para. 1 lit. a GDPR.

(b) Purpose

Sharing and recommending our content on the website helps us promote our cultural offerings as well as promote our offerings and services on your social network.

(c) Duration of Storage

We delete your personal data as soon as they are no longer required for our previously named purposes. In our case this is given after 13 months.

(d) Possibility of objection and removal

A transmission to Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company und YouTube (Google Ireland Limited) and WhatsApp LLC does not take place automatically when you access our site, but only when you click on the respective social plugin and select it. In this respect, you retain full control over whether your personal data is transmitted to these platforms. If the social plugin has been activated once, it remains active until you deactivate it by clicking on it again.

1) Data subject submission according to Art. 12 et seq. GDPR

(a) Legal basis

If you request information about our processing of your personal data in the context of a so-called data subject submission, the legal basis for the processing of personal data based on the request is Art. 6 para. 1 lit. a and c in conjunction with Art. 12 et seq. GDPR. The legal basis of the documentation of your request to be carried out by us is Art. 6 para. 1 lit. f GDPR.

(b) Purpose

In this context, we process your personal data in order to be able to provide you with information about the data protection content requested in the context of your data subject submission. We must then document both your request and our legally compliant information and processing in order to meet our legal accountability obligation under Art. 5 para 2 of the GDPR.

(c) Duration of Storage

We delete your personal data as soon as we no longer need it to respond to your data subject submission or to fulfill our legal accountability obligations.

(d) Possibility of objection and removal

If you do not want us to process your data in connection with your data subject submission, you can object at any time for the future. Please note that in this case it is not possible for us to answer your request and provide you with information.

However, you do not have the right to object to the documentation of your data subject submission and any objection to data processing in the context of the data subject submission, as this is a legal obligation for us.

2) Legal defense and enforcement

(a) Legal basis

If we have to process your personal data in the context of legal defence and enforcement, the legal basis corresponds to the original processing.

(b) Purpose

If we need to process your data for the purpose of legal defense and enforcement, this is for the purpose of defending against unjustified claims and the legal enforcement and assertion of claims and rights to which we are entitled.

(c) Duration of Storage

We delete your personal data as soon as they are no longer required for legal defense and enforcement purposes.

(d) Possibility of objection and removal

If we have to process your personal data for these purposes, the processing is mandatory. For this reason, you also have no right or possibility to object to the processing.

(a) Legal basis
The legal basis for the processing of your personal data in the context of raffles is Art. 6 para. 1 lit. b GDPR for us.

(b) Purpose
We process your data in connection with your participation in the raffle in order to ensure the fulfillment of the raffle contract concluded between you and us.

(c) Duration of Storage
We delete your personal data when this data is no longer necessary to achieve the purpose. This is the case in connection with the raffle contract, in particular, when the raffle has been completed.

(d) Possibility of objection and removal
You have the option at any time to object to the processing of your personal data in relation to participation in the raffle for the future. In this case, however, you can unfortunately no longer be considered by us in the context of the raffle. In the event of an objection, we will delete all data stored in connection with your participation in the raffle.

The revocation must be sent by e-mail to digital@pinakothek.de or in writing to Bayerische Staatsgemäldesammlungen, Digital Communication, Richard-Wagner-Str. 1, 80333 Munich. Once consent has been withdrawn, the participant's personal data that has been collected and stored will be deleted immediately.

D) Further data processing besides our website

1) Scope of processing

This is a Facebook and Instagram page that allows the user to view current content.

Processing company
Meta Platforms Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://www.facebook.com/help/contact/540977946302970

If you would like to know how Facebook processes your personal data, you can find information on this at:
https://www.facebook.com/legal/terms/information_about_page_insights_data

2) Legal basis

The legal basis for the processing of your personal data in the context of Meta is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the GDPR.

3) Purpose

In order to fill our Meta accounts (Facebook fan page and Instagram account) with content that is of interest to you, we rely on learning about your user behaviour. This is supported by the processing of your personal data, which is collected during use and analysed by Meta. For this purpose, Meta provides us with page statistics that give us information about visitors and their interactions with our site. Furthermore, our Facebook fan page and our Instagram account allow you to communicate directly with us and respond to our posts and content.

4) Origin of the Data

The data collected from you when you use Meta is analysed by Meta and subsequently made available to us.

5) Duration of Storage

We delete your personal data as soon as we no longer need it for the stated purposes. This is the case at the latest when we delete our meta accounts.

6) Possibility of objection and removal

If you do not want Meta to collect your data, you have the option of objecting at any time for the future. If you object to the processing of your personal data by Meta, you can lodge an objection with Meta.

1) Umfang der Verarbeitung
Hierbei handelt es sich um ein Social Plugin von Linked in, das es dem Nutzer ermöglicht, seine Website mit dem sozialen Netzwerk zu verbinden.

Verarbeitendes Unternehmen
LinkedIn Corporation
Attn: Legal Dept. (Privacy Policy and User Agreement)
1000 W. Maude Avenue
Sunnyvale, CA 94085
USA

Falls Sie wissen möchten, auf welche Art und Weise Linked in Ihre personenbezogenen Daten grundsätzlich verarbeitet, finden Sie Informationen hierzu unter:
de.linkedin.com/legal/privacy-policy?

2) Rechtsgrundlage

Als Rechtsgrundlage für die Verarbeitung Ihrer personenbezogenen Daten im Rahmen unserer Linked in-Seite ist Ihre freiwillige Einwilligungserklärung gemäß Art. 6 Abs. 1 lit. a Datenschutz-Grundverordnung (DSGVO).

3) Zweck

Unsere Linked in-Seite ermöglich es Ihnen, auf unsere Beiträge zu reagieren, diese zu kommentieren und uns private Nachrichten zukommen zu lassen. Die Auswertung dieser Daten ist für uns essenziell, um das Nutzererlebnis für die Zukunft zu verbessern und inhaltlich attraktiver zu gestalten. Überdies erhalten wir von Linked in anonymisierte bzw. pseudonymisierte Statistiken, die uns Erkenntnisse über die Besucher unserer Linked in-Seite und deren Interaktionen und ihren Inhalten liefern.

4) Herkunft

Die bei Ihnen bei Ihrer Nutzung unserer Linked in-Seite erhobenen Daten werden seitens Linked in ausgewertet und uns im Nachgang zur Verfügung gestellt.

5) Speicherdauer

Ihre personenbezogenen Daten werden von uns gelöscht, soweit sie für die Erreichung des Zweckes nicht mehr notwendig sind. Die Löschung ihrer personenbezogenen Daten erfolgt, soweit uns dies möglich ist, spätestens mit Einstellung unserer Linked in-Seite.

6) Widerspruchs- und Beseitigungsmöglichkeit

Sofern Sie nicht möchten, dass Linked in Ihre Daten erfasst, haben sie jederzeit die Möglichkeit des Widerspruchs für die Zukunft. Sofern Sie der Verarbeitung Ihrer personenbezogenen Daten seitens Linekd in uns gegenüber widersprechen, können Sie bei Linked in Widerspruch einlegen.

1) Extent of processing

In order to provide artistic impressions to as many people as possible, we operate our own YouTube channel (https://www.youtube.com/user/Pinakotheken), which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). YouTube is a video platform where users can post videos and make them publicly available.

We expressly point out that YouTube stores the data of its users (e.g. personal information, IP address, etc.) in accordance with its data usage guidelines and uses it for business purposes. We have no influence on this data collection and the further use of the data by YouTube.

Information about which data is processed by the YouTube company and for which purposes can be found in the terms of use and privacy statements of YouTube and Google respectively.

https://www.youtube.com/static?gl=GB&template=terms sowie allgemein

https://support.google.com/youtube/topic/2803240?visit_id=637248885594456664-1434476429&hl=en&rd=1

 Our use of YouTube does not imply an unqualified endorsement of that medium or the company or Google LLC's privacy policy.

2) Legal basis

The legal basis for the processing of your personal data is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).

3) Purpose

We process your personal data in order to best tailor our YouTube channel to the interests of our users. The processing of your data is therefore only carried out for this purpose. In particular, your data will not be combined and evaluated with other data sets for other purposes. In addition, we process your data if you contact us within the framework of our YouTube channel or comment on our videos.

4) Origin of the data

The personal data you provide when using our YouTube channel is not collected by us directly, but is rather provided to us by Google.

5) Duration of Storage

We delete your personal data as soon as they are no longer required for our previously named purposes. Your data will be deleted at the latest - insofar as we can influence this - when we discontinue our YouTube channel.

6) Possibility of objection and removal

If you do not want Google to collect your data, you can object at any time for the future. If you object to the processing of your personal data by Google, we will forward this objection request to Google.

1) Extent of processing

We operate an information channel under www.x.com/pinakotheken and use the technical platform and services of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter X) for this purpose. X is a microblogging service on which registered users can send telegram-like messages.

The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has assessed the use of X while not using certain functions (direct messaging function, switching off the dashboard, use of social media plug-ins in line with data protection requirements) as feasible in line with data protection requirements.

The use of X by us does not imply any unrestricted endorsement of this medium or of the company or the privacy policy of Twitter Inc. The following applies to Twitter users: The Twitter short message service offered and its functions are used under your own responsibility. This applies in particular to the use of the interactive functions. We expressly point out that Twitter stores the data of its users (e.g. personal information, IP address, etc.) in accordance with its data usage guidelines and uses it for business purposes. We have no influence on this data collection and the further use of the data by Twitter.

More information about Twitter's privacy policy can be found at: https://twitter.com/en/privacy

2) Legal basis

The legal basis for the processing of your personal data is your voluntary declaration of consent in accordance with Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR).

3) Purpose

We use your personal data, in particular your username and the content you publish, to "retweet" your messages and posts, to reply to them or to write our own tweets that refer to your account or messages. In this way, we also make your data available to our other followers. We use other data, including likes, retweets, etc., in relation to our messages to make our content more relevant to you.

4) Origin of the data

The personal data you provide when using our X channel is not collected by us directly, but is rather provided to us by X.

5) Duration of Storage

We will delete your personal data if it is no longer required to achieve the aforementioned purposes. Your data will be deleted at the latest, insofar as we can influence this, when we close our X channel.

6) Possibility of objection and removal

If you do not want X to collect your data, you can object at any time for the future. If you object to the processing of your personal data by X, we will forward this objection request to X.

1) Umfang der Verarbeitung

Um möglichst vielem Menschen künstlerische Eindrücke zu vermitteln betreiben wir einen eigenen Vimeo-Kanal www.vimeo.com/pinakotheken, der durch Vimeo, LL C, 555 West 18 th Street, New York, New York 10011, USA (im Folgenden „Vimeo“) betrieben wird. Vimeo ist eine Videoplattform, auf der wir Videos einstellen und öffentlich zugänglich machen können.

Wir weisen ausdrücklich darauf hin, dass Vimeo die Daten seiner Nutzerinnen und Nutzer (z.B. persönliche Informationen, IP-Adresse etc.) entsprechend ihrer Datenverwendungsrichtlinien abspeichert und für geschäftliche Zwecke nutzt. Wir haben keinen Einfluss auf diese Datenerhebung und die weitere Verwendung der Daten durch Vimeo.

Wenn Sie eines unserer bei dem Dienstleister Vimeo gespeicherten Videos aufrufen, wird eine Verbindung mit den Servern von Vimeo hergestellt. Vimeo erfährt hierbei, welche Seite Sie aufgerufen haben sowie Ihre IP-Adresse, unabhängig davon, ob Sie über einen Vimeo-Account verfügen oder bei dem Dienstleister eingeloggt sind. Sofern Sie bei Vimeo eingeloggt sind, kann Vimeo Ihr Surfverhalten Ihrem Vimeo Account direkt zuordnen.

Angaben darüber, welche Daten durch das Unternehmen Vimeo verarbeitet und zu welchen Zwecken genutzt werden, finden Sie in den Nutzungsbedingungen und Datenschutzerklärungen von Vimeo.

https://vimeo.com/privacy

Die Nutzung von Vimeo durch uns bedeutet keine uneingeschränkte Befürwortung dieses Mediums oder des Unternehmens oder der Datenschutzerklärung von Vimeo.

Wie weisen ausdrücklich darauf hin, dass die Datenverarbeitung seitens Vimeo teilweise in den USA staatfinden kann und das Unternehmen unter Umständen den Webanalyseanbieter Google Analytics einsetzt.

Nähere Informationen zu Nutzungsbedingungen und Datenschutz von Google Analytics finden Sie unter:

https://www.google.com/analytics/terms/de.html bzw. unter https://support.google.com/analytics/answer/6004245?hl=de.

2) Rechtsgrundlage

Als Rechtsgrundlage für die Verarbeitung Ihrer personenbezogenen Daten im Rahmen unseres Vimeo-Kanals ist Ihre freiwillige Einwilligungserklärung gemäß Art. 6 Abs. 1 lit. a Datenschutz-Grundverordnung (DSGVO).

3) Zweck

Wir verarbeiten Ihre Verkehrs-Daten, um unseren Vimeo-Kanal bestmöglich auf die Interessen unserer Nutzer abstimmen zu können. Die Verarbeitung Ihrer Daten erfolgt durch uns daher nur unter diesem Hintergrund, insbesondere werden Ihre Daten nicht für andere Zwecke mit anderen Datensätze kombiniert und ausgewertet. Für die weitere Verwendung durch Vimeo verweisen wir auf deren Datenschutzhinweise.

4) Herkunft

Die von Ihnen bei der Nutzung unseres Vimeo-Kanals anfallenden Verkehrs-Daten werden nicht durch uns direkt erhoben, sondern werden uns vielmehr von Vimeo zur Verfügung gestellt.

5) Speicherdauer

Wir löschen Ihre Daten, sofern diese für die Erreichung der vorgenannten Zwecke nicht weiter erforderlich sind. Ihre Daten werden spätestens, soweit wir hierauf Einfluss nehmen können, gelöscht, wenn wir unseren Vimeo-Kanal schließen.

6) Widerspruchs- und Beseitigungsmöglichkeit

Sofern Sie nicht möchten, dass Vimeo Ihre Daten erfasst, haben sie jederzeit die Möglichkeit des Widerspruchs für die Zukunft direkt über Vimeo.

E) Categories of recipients

Within our authority or the museum, your personal data will only be passed on to the units that need them to fulfill their tasks. For activities that we cannot perform within our company in terms of personnel or content, we use reliable and trustworthy service providers. A transfer of your personal data to these recipients is therefore also conceivable. The following categories of third-party service providers come into consideration in particular:

  • IT service providers
  • Lawyers and courts
  • Cooperation partners
  • banks
  • Print shops
  • Lettershops

 

F)   Third country transfer

In principle, we process your data within the Federal Republic of Germany or the territory of the EU/EEA. In exceptional cases, however, we may also transfer your data to trusted service providers and entities in third countries. The GDPR defines third countries as all countries outside the European Union or the European Economic Area.

We ensure that the service providers in third countries can guarantee us that your personal data is processed at a level that at least meets the requirements of the GDPR.

Furthermore, a transfer to third countries will only take place if an adequacy decision has been issued by the European Commission for that third country (see the current list of adequacy decisions here) or, in the absence of such a decision, on the basis of standard contractual clauses and if we have provided appropriate safeguards, such as standard contractual clauses, and enforceable rights and effective remedies are available to you

Attention: If you activate the YouTube videos embedded on our site or the Google Maps map, your data will be transmitted to the USA. According to the Schrems II ruling of the ECJ, there is currently no protection of your personal data in the USA that corresponds to European standards. Access to your data by US authorities cannot be ruled out.

G) Your rights

You can request access to your personal data processed by us in accordance with Art. 15 DS-GVO. In your request for access, you should specify your request in order to make it easier for us to compile the necessary data. Please note that your right to access information may be restricted under certain circumstances in accordance with the statutory provisions (in particular Section 34 BDSG and Art. 10 BayDSG).

If a right to access exists, we will inform you about:

  • the purposes of the processing
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed
  • the envisaged period for which the personal data will be stored
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing as well as the right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from you, any available information as to their source
  • the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you

 

If the information concerning you is not (or no longer) accurate, you may request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

Within the framework of the specifications of Art. 18 GDPR, you have the right to demand a restriction of the processing of the data concerning you if one of the following conditions is met:

  •  If you contest the accuracy of your data, for a period of time that allows us to verify the accuracy of the personal data
  • the processing of your personal data is unlawful
  • Our purpose has ceased to exist, but you need the data to assert, exercise or defend legal claims
  • You have objected to the processing pursuant to Art. 21 para 1 GDPR and we are reviewing it

You can request the erasure of your personal data under the conditions of Art. 17 GDPR. Your right to erasure depends, among other things, on whether the data concerning you is still needed by us to fulfill our legal duties.

Your claim exists in particular if

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  • you have withdrawn your consent on which the processing was based and we lack any other legal basis for the processing
  • you have objected to the processing and there are no overriding legitimate grounds for the processing
  • the personal data have been unlawfully processed
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are a subject
  • the data was collected from you as a minor under the age of 16 for offers of information society services

If you have exercised one of the aforementioned rights, we will also inform other recipients of your personal data in this regard.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the legal requirements of Art. 20 GDPR are met.

According to Art. 21 GDPR, you have the right to object to the processing of data relating to you at any time for reasons arising from your particular situation. However, we are not always able to comply with this, e.g. if legal provisions oblige us to process data within the scope of our official task fulfillment.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time.

You have the right to revoke any consent given to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If you are of the opinion that we have not complied with data protection regulations when processing your data, you may, without prejudice to any other administrative or judicial remedy, lodge a complaint with the supervisory authority responsible for us.

The supervisory authority responsible for us is:

Bavarian State Commissioner for Data Protection
(Bayerischer Landesbeauftragter für den Datenschutz)
Wagmüllerstr. 18
80538 München
+49 (0)89/2126720
poststelle@datenschutz-bayern.de

H) Overview of the cookies used

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse traffic to our website. Cookies are small text files that are used by websites to make the user experience more efficient.

This site uses different types of cookies. Some cookies are placed by third parties (Matomo, Vimeo, YouTube, Facebook, Instagram, X, Linked in) that appear on our pages.
You can change or withdraw your consent at any time from the cookie statement on our website.

Change consent

Below we inform you about all cookies used on our website, their purpose and the respective storage period:

Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

ProviderCookie namePurpose/DescriptionDuration of storageTyp
     
     
     

Preference

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.

NameAnbieterZweckAblaufTyp
language  Session 

 

Statistic

Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

NameAnbieterZweckAblaufTyp
matomo Records statistics about the user's visits to the website, such as the number of visits, length of stay and which pages were read.1 JahrHTTP Cookie
     

 If the privacy policy is available in several languages, the German version shall always prevail.

If you have any questions, you can contact our data protection officer at any time.

You are neither contractually nor legally obliged to give us your consent; this is done exclusively on the basis of your voluntary consent. If you do not wish to give your consent, there may be technical restrictions when visiting the website.

Status: August 2024