Source: https://www.landesmuseum-hannover.de/en/datenschutz/
Timestamp: 2019-04-20 01:00:41+00:00

Document:
The Niedersächsisches Landesmuseum Hannover (hereinafter referred to as "we" or "responsible persons") takes the protection of personal data seriously and complies with the relevant data protection regulations, in particular the provisions of the EU General Data Protection Regulation (DSGVO). In the following, we would like to inform you in particular about when we use which data in the context of the use of our website www.landesmuseum-hannover.de to process.
In principle, we collect and use personal data of our users only to the extent necessary to provide a functioning website and our content and services. The collection and use of personal data of our users takes place only if the processing of the data is permitted by law or by the consent of the user.
Insofar as we obtain the consent of the user for the processing of personal data on our website, Art. 6 para. 1 lit. a GDPR as the legal basis for the processing of personal data.
In the processing of personal data required to fulfill a contract of which the user is a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations that are necessary to carry out a contractual obligation or precontractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our business, Art. 6 para. 1 lit. c DSGVO as legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the user concerned do not prevail over the first interest, then Art. 6 para. 1 lit. f DSGVO as legal basis for data processing (so-called balance of interests).
In addition, there are other statutory legal bases for the processing of personal data, which we will set out below - where relevant - in concrete terms.
The personal data of users will be deleted or blocked as soon as the purpose of the storage is omitted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations governing our operation. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
The processing of personal data stored by you takes place in states of the European Economic Area.
The legal basis for the storage of data and logfiles is Art. 6 para. 1 lit. f DSGVO.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.
The data is permanently stored in the log files. In this case, however, the data is alienated or anonymized, so that an assignment is no longer possible.
On our website you can contact us via the provided e-mail address. In this case, the user's personal data transmitted by e-mail will be stored.
The legal basis for the processing of the data is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract or contract-like contractual relationship, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The processing of the personal data from the e-mail serves us only to process the contact. In the case of a contact, this is also the necessary legitimate interest in the processing of the data.
If you have registered on our website for the receipt of an e-mail newsletter, the contact information requested in the input mask (in this case only the e-mail address) will be sent to us. If you subscribe to the e-mail newsletter via the registration button, we will send you an e-mail first. In order to exclude misuse, the sending of the e-mail newsletter will only be activated after you have confirmed our e-mail.
In connection with the sending of the e-mail newsletter, we commissioned the service provider CleverReach. This company may use your personal data as a so-called processor only to fulfill the tasks on our behalf and is obliged to comply with the relevant data protection regulations. Incidentally, in connection with data processing, the forwarding of the e-mail newsletter does not entail any transfer of the data to third parties. The data will be used exclusively for sending the newsletter.
Legal basis for the processing of the data after registration for the e-mail newsletter by the user is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The collection of the user's e-mail address serves to deliver the e-mail newsletter.
The e-mail address of the user will only be saved as long as the subscription to the e-mail newsletter is active.
In order to make the visit to our website attractive and to enable the use of certain functions, we use "cookies". This is small text information that is stored in the browser or browser on the device. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.
In the aforementioned purpose, our legitimate interest lies in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.
The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest for this lies in the great value that a uniform representation of the typefaces offers. Due to the possibility of a uniform presentation, we keep the design effort less than if we had to respond to font standards of different operating systems or browsers with their own graphically adapted web pages. Google also has, inter alia, a legitimate interest in the collected (personal) data to improve their own services.
By integrating Google Fonts, we aim to let you see consistent fonts on your device.
We have maps from "Google Maps" on our website (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA, EU Office: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) integrated.
When we visit our website, where Google Maps is integrated, we connect to Google's servers in the United States. However, this is done after the two-click solution that we have integrated, but only when the Google Maps application has been activated. Here, your IP and location can be transferred to Google. In addition, Google receives the information that you have accessed the corresponding page. This is also done without a user account at Google. If you are logged in to your Google Account, Google may associate the above information with your account. If you do not want this, you will need to log out of your Google Account. Google creates user profiles from such data and uses this data for the purpose of advertising, market research or optimization of its websites.
The legal basis for this is our legitimate interest in the processing of data according to Art. 6 para. 1 S.1 lit. f) DS-GMO.
This allows us to display the location of addresses and directions directly on our website in interactive maps and to enable you to use this tool.
The references (links) are indicated by the respective logo of the social network; no social plugins of the aforementioned social networks are used.
the existence of automated decision-making including profiling according to Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 DSGVO to be informed in connection with the transmission.
if you have filed an objection against the processing according to Art. 21 para. 1 DSGVO and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.
If the processing of the personal data concerning you has been processed, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If processing has been restricted in accordance with the above conditions, you will be notified by the person responsible before the restriction is lifted.
You gem gem. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO objection to the processing.
The personal data relating to you were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
If the person in charge has made the personal data concerning you public and is acc. Art. 17 para. 1 DSGVO, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and the implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
You have the right at any time, for reasons that arise from your particular situation, against the processing of personal data relating to you, which pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.
You have the option, in the context of the use of information society services - regardless of the 2002 / 58 / EC directive - of exercising your right of opposition through automated procedures using technical specifications.
However, these decisions may not be based on special categories of personal data under Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
With respect to the cases referred to in (1) and (3) above, the controller shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to disclose his or her own Position and contesting the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9