Source: https://www.kettererkunst.com/privacypolicy/index.php
Timestamp: 2019-04-22 08:52:54+00:00

Document:
Each is independently responsible for the respective processing activities pursuant to Art. 6 of the GDPR.
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
We also need this from you - whereby this is granted by you completely voluntarily - in the event that either we ask you for personal data that is not required for the performance of a contract or to take action prior to contract formation, and/or where the lawfulness criteria set out in Art. 6 (1) sentence 1, letters c) - f) of the GDPR would otherwise not be met.
In the event consent is required, we will request this from you separately. If you do not grant the consent, we absolutely will not process such data.
As a general rule, visiting our websites is possible without actively communicating your personal data (except for your IP address, which is sent automatically). We do not establish a profile at the individual level, we do not engage in any database marketing, and we do not sell any data.
IP address, date and time of access, description of the type of browser used and the requested access method/function of the requesting computer, type and/or category of file accessed, data volume, report of whether the attempted access was successful.
This data is saved and evaluated to the extent required for processing and for resolving technical issues. This data is not disclosed to third parties. The IP address is saved for a reasonable and permissible period of time for purposes of discovering abuse, defending against cyber-attacks, and for detecting and fixing malfunctions, and is subsequently anonymized (via truncation). To the extent that analytical tools are used, the IP address is likewise disclosed only in the aforementioned anonymized form.
Other information that we may request from you, for example, in order to perform authentication as required for proper contract fulfillment (examples: copy of your ID, commercial register excerpt, invoice copy, response to additional questions in order to be able to verify your identity or the ownership status of an item offered by you).
You would do this, for example, if you would like to participate in an online auction and/or are interested in certain works of art, artists, styles, eras, etc., or want to offer us (for example) pieces of art for purchase or sale.
Which personal data you will be providing to us is determined based on the respective input screen that we use for the registration or for your inquiries, or the information that we will be requesting from you or that you will be providing voluntarily. The personal data that you enter or provide for this purpose is collected and stored solely for internal use by us and for our own purposes.
We have the right to arrange for this information to be disclosed to one or more external data processors, for example a delivery service, which will likewise use it solely for internal use imputed to the processor’s controller.
The right to information on stored personal data concerning yourself, free of charge, the right to receive a copy of this information, and the other rights in this connection as stated in Art. 15 of the GDPR.
The right to immediate rectification of inaccurate personal data concerning yourself as stated in Art. 16 of the GDPR, and as applicable, to demand the completion of incomplete personal data, including by means of providing a supplementary statement.
The right to immediate erasure (“right to be forgotten”) of personal data concerning yourself provided one of the grounds stated in Art. 17 of the GDPR applies and provided the processing is not necessary.
The right to restriction of processing if one of the conditions in Art. 18 (1) of the GDPR has been met.
The right to data portability if the conditions in Art. 20 of the GDPR have been met.
The right to object, at any time, to the processing of personal data concerning yourself performed based on Art. 6 (1) letter e) or f) of the GDPR as stated in Art. 21 for reasons arising due to your particular situation. This also applies to any profiling based on these provisions.
Where the processing of your personal data is based on consent as set out in Art. 6 (1) a) or Art. 9 (2) a) of the GDPR, you also have the right to withdraw consent as set out in Art. 7 of the GDPR. Before any request for corresponding consent, we will always advise you of your right to withdraw consent.

References: Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 7