Source: http://www.museum4punkt0.de/en/data-privacy/
Timestamp: 2019-04-23 04:17:47+00:00

Document:
1. Who is responsible for the content and maintenance of the website?
The Stiftung Preussischer Kulturbesitz is responsible for this website in terms of data protection, legally represented by the President Prof. Dr. hc. mult. Hermann Parzinger.
Who is responsible for data privacy?
2. Why does the Foundation collect data?
Personal data are details about the factual or personal circumstances of a specific or identifiable natural person. These include, for example, your name, your telephone number, your address, as well as any inventory data which you may share in the future, for example, when you sign up to the comment function on the blog.
We only collect and use personal data of our users to the extent that this is necessary for the provision of a functional website and our content and services. We process personal data on our website on the basis of Article 6 of the General Data Protection Regulation. For example, temporary storage of the IP address by the system is necessary to allow us to provide the website to a user’s computer. To do this, the user’s IP address must be stored for the duration of the session.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.
The Stiftung Preussischer Kulturbesitz analyses the use of this website. This will give it information by which to improve it, including, for example, how often certain contents were accessed, or which browser was used to view the site. The Stiftung uses the stored anonymized data exclusively for statistical purposes. Any other use or disclosure of the data to third parties is ruled out.
Personal data are collected and used only after our users have given their consent. An exception applies in those cases where prior consent cannot be obtained for circumstantial reasons and the processing of the data is permitted by law.
3. What rights do users of our website have?
You also have the right to complain to a data protection supervisory authority concerning the processing of your personal data (Article 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für Datenschutz und Informationsfreiheit – BfDI) is the authority responsible for the Prussian Cultural Heritage Foundation.
4. What data are collected?
Log files allow website operators to track activities on their websites. The access logs of the web server record which pages were accessed at which time. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 (e)) GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
The temporary storage of the IP address by the system is necessary to allow us to provide the website to a user’s computer. To do this, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure the website’s functionality. The data are also used by us to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. For the aforementioned purposes it is necessary that we process the data to carry out our task, which is in the public interest or in the exercise of official authority [Article 6 para. 1 (e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)].
The IP addresses of the accessing computers are stored anonymously, traceability is not possible. For this purpose, the last three digits of the IP address are removed. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Any information about the directory protection user that has been applied will be anonymised after one day.
Error logs that record site access errors are deleted after seven days. In addition to the error messages, they record the accessing IP address and, depending on the error, the accessed website.
Access via FTP is recorded in an anonymised form and stored for 60 days.
Collection of data for provision of the website and storage of data in log files is absolutely necessary for website operation. Consequently, there is no option to object on the part of the user.
The technical supervisor of our website, urbanstudio GmbH, has access to these files.
The Stiftung Preussischer Kulturbesitz has carefully selected urbanstudio GmbH and the server operator Mittwald. Both service providers are bound by the instructions of the Stiftung Preussicher Kulturbesitz and are regularly monitored.
Cookies are small text files that are stored on your computer in connection with the browser used when you visit a website. Cookies allow information exchange between computer programs or storage for a limited period of time. The stored cookies transmit certain information to our website. Cookies cannot run programs or transfer viruses to your computer.
Some of the cookies used ensure the proper functioning and display of the website. The validity of these cookies is limited to the website visit. As soon as you exit your browser, these “session cookies” are deleted.
The prerequisite for this is that we process the data to carry out our task in the public interest or in the exercise of official authority (Article 6 para. 1 (e)) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)).
You can decide whether you agree to the collection and analysis of the above statistical data by the Stiftung Preussischer Kulturbesitz.
You can decide here whether or not an explicit web analytics cookie may be stored on your browser to allow the Stiftung Preussischer Kulturbesitz to collect and analyse various statistical data.
If you wish to opt out, click on the following link to install the Matomo deactivation cookie in your browser.
PLEASE NOTE: If you have activated the automatic deletion of cookies in your browser, the deactivation cookie will also be deleted when you exit the program. In this case, you will have to object again to data collection the next time you visit this website. Also, if you use another computer or another web browser, you must again object to the collection of your data.
More information on the privacy settings of the Matomo software can be found on the Matomo website.
You can contact the Stiftung Preussischer Kulturbesitz by e-mail via the respective official e-mail addresses of the employees. In the case of contacting by e-mail, the user’s personal data transmitted with the e-mail – e.g. e-mail address, last name, first name, address, if applicable other information contained in the e-mail with personal reference – are stored. The data are used exclusively for responding to the enquiry or for the purpose of enquiry.
museum4punkt0.de also provides the e-mail addresses of third parties (e.g. partners in the project museum4punkt0). These addresses have no spk-berlin.de after @. If you use one of these addresses for contacting the third party, the Stiftung Preussischer Kulturbesitz is not responsible for the processing of personal data. If you have questions regarding the handling of your personal data by this third party, please contact them accordingly.
The legal basis for the processing of the data transmitted when sending an e-mail is Art. 6 para. 6 (e) of the GDPR in connection with Section 3 of the Federal Data Protection Act (BDSG). If the e-mail contact wishes to conclude a contract, Art. 6 para. 1 (b) of the GDPR provides the additional legal basis for the processing thereof.
The data are processed for communication purposes and in order to deal with any enquiries and concerns.
The transmitted data and information are stored for the purpose of communication and processing of the enquiry.
Users have the right to object to the processing of their data at any time for reasons arising from their particular situation. The data are then no longer processed. In this case, it will not be possible to continue the conversation. All personal data stored when establishing contact with us will in this case be deleted. Processing is possible despite objections of the user if compelling legitimate grounds for the processing are presented by a public authority, when these override the interests, rights and freedoms of the user.
Objections to the data processing can be submitted informally at s.faulstich[at]hv.spk-berlin.de.
museum4punkt0.de uses “social plug-ins”. These plug-ins allow sharing of contents via the social media services Facebook and Twitter. These plug-ins are usually used to transmit data, including personal data, to the service providers.
In order to prevent the transmission of user data without the knowledge and consent of the users, museum4punkt0.de uses the solution “Shariff” of the magazine c’t (Heise Medien GmbH & Co. KG). Shariff replaces the usual share buttons of the social network and thus protects your surfing habits. The usual social media buttons transmit the user data to the mentioned service provider with each website access (user tracking). To do this, users do not have to be logged in or be a member of the network. On the other hand, a Shariff button establishes direct contact between the social network and the user only when the latter actively clicks on the share button. Shariff acts as an intermediary here: the server of the website operator requests the relevant information (e.g. number of likes on Facebook) from the respective service provider instead of the user’s browser. The user remains anonymous. More information about Shariff is available at Heise.de.
The legal basis for transmitting the data is Art. 6 para. 1 (e) of the GDPR in connection with Section 3 of the Federal Data Protection Act (BDSG).
The transmission of the data to social media service providers allows users to further disseminate content found on museum4punkt0.de through social media services and to share it with their contacts. This function is used by a large number of users and is now a standard functionality on websites. The prerequisite is that we process the data to carry out our remit in the public interest or in the exercise of official authority (Article 6 para. 1 (e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)). By using Shariff we take into account the interest of users in the protection of personal data.
The Stiftung Preussischer Kulturbesitz does not store these data. If you use the buttons, the data are stored and processed by the respective service provider. Which data service providers process and store, and how, can be found in their privacy statements.
Since there is no processing and storage of the data by the Stiftung Preussischer Kulturbesitz and no automatic transmission of the data to the service provider, the user can object to the processing and storage of their data only to the respective service provider. Explanations by service providers on possibilities of objection and deletion can be found in their privacy statements.
A cookie that stores your log-in details in your browser is also used for this comment function, so long as you have enabled this option. This information is optional.
The legal basis for the processing of data following the user’s comment, provided the user gave their consent, is Art. 6 para. 1 (a) of the GDPR.
The purpose of processing the data is the commenting on bpb.de content by users. The collection of users’ e-mail addresses is to prevent misuse of the comment function. The names are collected to distinguish individual comments and users.
The data will be deleted as soon as no longer required to achieve the purpose for which they were collected. The e-mail address and the specified name of the users are therefore stored unless the user has objected to publication, or requested deletion, of their comment.
The user has the option of revoking their consent to the processing of the personal data and of having their comment and their data deleted at any time. To do this, the user can, for example, contact the person responsible in the editorial department by e-mail (s.faulstich[at]hv.spk-berlin.de).
Users must consent to the processing of their data. All specified data will be transmitted – depending on the event – to event organisers within the Foundation or to external event service providers and processed and stored there.
The legal basis for the processing of personal data is the consent of the user under Art. 6 para. 1 (a) of the GDPR.
The data are transmitted, processed and stored for the purpose of registration for an event as well as for the planning, execution and further processing of an event.
The data will be deleted as soon as no longer required for the purpose for which they were collected.
The user has the option of revoking their consent to the processing of the personal data and of having their data deleted at any time. To do this, the user can, for example, contact the person responsible in the Foundation by e-mail. If the user requests the deletion of their data before an event, registration or participation in the event cannot be guaranteed.
The Stiftung Preussischer Kulturbesitz integrates some content on museum4punkt0.de through external services. In this case the data can be transferred from museum4punkt0.de to the external services, which can set cookies. The Foundation uses these services to provide users of museum4punkt0.de with multimedia content.
The transmitted data usually provides the information that the content integrated in museum4punkt0.de was accessed. They can also include personal data (e.g. the IP address). The data transmitted in each individual case can always be traced. You should therefore consult information on data collection, storage and use by the respective providers.
The external services are integrated on museum4punkt0.de to provide content, features and information that could not be provided to users without these services.
What data are transmitted and how long they are stored depends on the respective service. You must therefore obtain information about the purpose and scope of the collection, further processing and use and storage of the data as well as your right of objection and deletion from the respective service providers. We have provided the respective privacy-policy links above.
Our website contains links to websites of other providers. We have no influence on whether these providers comply with data protection regulations.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6