Data Protection Declaration
- Person responsible for data processing
The responsible party in terms of the European Data Protection Regulation (DSGVO) and other data protection regulations is:
Georg Kolbe Museum
Director Dr. Kathleen Reinhardt
Sensburger Allee 25
Phone: 030 304 21 44
Contact details of the data protection officer
Phone: 030 304 21 44
2. Scope, purposes, and legal basis of data processing
The processing of personal data of the users* of this website is largely carried out to provide the website and the content located on it. Insofar as there is a legal basis for the processing of personal data, the consent of the users is not required. Otherwise, the processing of personal data of the users of this website only takes place with prior consent in accordance with Art. 6 para. 1 lit. a DSGVO.
The necessary processing of personal data for the initiation or performance of a contract to which the data subject is a party is carried out in accordance with Art. 6 para. 1 lit. b DSGVO.
If the processing is necessary for the performance of our tasks or our legal obligation, the processing is carried out in accordance with Art. 6 para. 1 lit. c, e DSGVO.
As soon as the purpose of the respective data processing is fulfilled, the personal data will be blocked or deleted. The processing of personal data may be carried out by ourselves or by service providers commissioned by us within the scope of commissioned processing pursuant to Art. 28 DSGVO; in doing so, service providers exclusively carry out the activities specified by us, which does not include processing for the service providers‘ own business purposes, which is contractually prohibited.
When you visit our website, our server system automatically collects data via the Google Analytics web analysis tool (see point 6) if you have consented to this.
Provision of your personal data may not be required by law or contract. However, the use of our performance or services may not be possible or may not be carried out correctly if no user data is provided. Statistical evaluations serve to improve the usability and content of our websites.
3. User registrations
The use of certain offers on our website may require prior registration and further processing of personal data, for example, longer-term storage of e-mail addresses and contact details. Such data will only be used if you have informed us of this and expressly consented to the processing in advance. In the following cases, we ask for your consent:
Registration for events
On our websites, you have the option of registering for events and obtaining information material or using certain website services. In doing so, we collect from you the personal data required to carry out the respective process, for example your contact details. Your data will be passed on to third parties insofar as this is necessary in the context of the provision of services and associated processes, for example for the processing of payments. For example, your data will be passed on if an event is not hosted by us but by third parties.
There is an option on our websites to register for the newsletter. In doing so, we collect from you the personal data required to carry out the respective process, for example your contact details. Your data will be passed on to the third-party provider Kulturkurier (Geschäftsleitung data kulturlink ag, Rosenthaler Str. 38, 10178 Berlin), insofar as this is necessary in the context of the service provision and the associated process, namely exclusively for dispatch.
Online ticket purchase
There is the possibility to purchase online ticket on our websites. In doing so, we collect from you the personal data required to carry out the respective process, for example your contact data. Your data will be passed on to third parties (see point 8) insofar as this is necessary within the framework of the service provision and associated processes, for example for payment processing (see point 8).
4. Communication via e-mail or contact form
Communication by e-mail can have security gaps. E-mails can be intercepted and viewed by experienced Internet users on their way to us. If we receive an e-mail from you, it is assumed that our employees are also authorized to reply by e-mail. Otherwise, we ask you to consider another method of communication (for example, by mail).
5. Right of objection, revocation of consent
With regards to the data for the delivery of the website and the storage of the data in log files, no objection is possible, as these are indispensable for the operation of the website.
If you have given your consent to the processing of your data, for example for user* registration, you can revoke your consent at any time and without giving reasons. To do so, please either use the specific hyperlinks or inform us of your revocation by e-mail.
6. Web analysis through Matomo
We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users*.
Scope of the processing of personal data
The software sets a cookie on the user’s computer. If individual pages of our website are accessed, the following data will be stored after your consent:
1. Two bytes of the IP address of the user’s calling system.
2. The website called up
3. The website from which the user accessed the accessed website (referrer)
4. The subpages that are accessed from the accessed website
5. The time spent on the website
6. The frequency with which the web page is accessed
7. Technical details of the browser such as version number or resolution
The software runs exclusively on the servers of our website. A storage of the personal data of the users only takes place there. The data is not passed on to third parties.
The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (example: 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible.
Legal basis for the processing of personal data
The legal basis for the processing of users‘ personal data is Art. 6 para. 1 lit. f DSGVO.
Purpose of the data processing
The processing of users‘ personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we can compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in processing the data according to Art. 6 para. 1 lit. f DSGVO. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently considered.
Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after five years, as we measure the long-term impact of optimizations of our offer.
Possibility of objection and removal
We offer our users the option of opting out of the analysis process on our website. To do this, you must follow the corresponding link. In this way, another cookie is set on your system, which signals to our system not to store the user’s data. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again.
For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.
You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy but will also prevent the owner from learning from your actions and improving usability for you and other users.
Your visit to this website is currently collected by Matomo web analytics. Deselect this checkbox for opt-out.
7. Cookies, third-party plug-ins
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. The cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. However, not accepting cookies may limit the functionality of our website.
Technically necessary cookies are required so that you can navigate websites with forms and use their functions. Without these cookies, functionality, such as actions during a visit (for example, text entry), cannot be guaranteed, even when navigating between pages of the website. Functional cookies allow a website to store information already provided (for example, username, language selection, or where you are located) and improve the user’s ability to provide personalized features. These cookies collect anonymized information and cannot track your movements on other websites. When your browsing session ends, any cookies created by our website are deleted.
8. Online tickets
9. Online presences in social media
We maintain online presences within social networks and platforms to be able to communicate with customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.
10. Data subject rights
As a data subject within the meaning of the GDPR, you can assert the following data subject rights against us.
Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you may request information from the controller about the following:
1. The purposes for which the personal data are processed;
2. the categories of personal data which are processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data, if the personal data are not collected from the data subject;
8. The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
1. if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
3. the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or
4. if you have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.
If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to deletion
Obligation to delete
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DSGVO and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
4. The personal data concerning you have been processed unlawfully.
5. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
The right to erasure does not exist insofar as the processing is necessary:
1. for the exercise of the right to freedom of expression and information;
2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
5. for the assertion, exercise or defense of legal claims.
Right to information
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority (for example, the Berlin Commissioner for Data Protection and Freedom of Information), in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.