Data Protection Declaration
Privacy policy
- Person responsible for data processing
The responsible party in terms of the European Data Protection Regulation (DSGVO) and other data protection regulations is:
Georg Kolbe Museum
Director Dr. Kathleen Reinhardt
Sensburger Allee 25
14055 Berlin
Phone: 030 304 21 44
E-mail: info@georg-kolbe-museum.de
Contact details of the data protection officer
Phone: 030 304 21 44
E-mail: info@georg-kolbe-museum.de
2. Scope, purposes, and legal basis of data processing
The processing of personal data of the users* of this website is largely carried out to provide the website and the content located on it. Insofar as there is a legal basis for the processing of personal data, the consent of the users is not required. Otherwise, the processing of personal data of the users of this website only takes place with prior consent in accordance with Art. 6 para. 1 lit. a DSGVO.
The necessary processing of personal data for the initiation or performance of a contract to which the data subject is a party is carried out in accordance with Art. 6 para. 1 lit. b DSGVO.
If the processing is necessary for the performance of our tasks or our legal obligation, the processing is carried out in accordance with Art. 6 para. 1 lit. c, e DSGVO.
As soon as the purpose of the respective data processing is fulfilled, the personal data will be blocked or deleted. The processing of personal data may be carried out by ourselves or by service providers commissioned by us within the scope of commissioned processing pursuant to Art. 28 DSGVO; in doing so, service providers exclusively carry out the activities specified by us, which does not include processing for the service providers‘ own business purposes, which is contractually prohibited.
When you visit our website, our server system automatically collects data via the Google Analytics web analysis tool (see point 6) if you have consented to this.
Provision of your personal data may not be required by law or contract. However, the use of our performance or services may not be possible or may not be carried out correctly if no user data is provided. Statistical evaluations serve to improve the usability and content of our websites.
3. User registrations
The use of certain offers on our website may require prior registration and further processing of personal data, for example, longer-term storage of e-mail addresses and contact details. Such data will only be used if you have informed us of this and expressly consented to the processing in advance. In the following cases, we ask for your consent:
Registration for events
On our websites, you have the option of registering for events and obtaining information material or using certain website services. In doing so, we collect from you the personal data required to carry out the respective process, for example your contact details. Your data will be passed on to third parties insofar as this is necessary in the context of the provision of services and associated processes, for example for the processing of payments. For example, your data will be passed on if an event is not hosted by us but by third parties.
Newsletter registration
You can register for the newsletter on our website. The necessary registration data is stored by the newsletter provider. The brevo.com system from Sendinblue GmbH (Köpenicker Straße 126 10179 Berlin) is used as the newsletter system.
The so-called double opt-in procedure is used for legally compliant and data protection-compliant design. Users first receive an email with a confirmation link. Only after confirmation is the address added to the mailing list. You can revoke your consent to the storage of your data and the use of your address for sending the newsletter by clicking on the „Unsubscribe link“ at the end of each newsletter. Further information can be found here: https://www.brevo.com/de/legal/privacypolicy/
Which personal data is transmitted to the data controller when you subscribe to the newsletter can be seen from the input mask used for this purpose. When registering for the newsletter, we also store the IP address of the device used by the data subject at the time of registration as well as the date and time of registration.
The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s email address at a later date and therefore serves as legal protection for the controller. The personal data collected when registering for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or in the event of a change in technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties.
To track opening and click rates, we use so-called tracking codes in the newsletter to record the opening of the newsletter and the calling up of web links. The data is recorded in pseudonymised storage by replacing all personal data (e.g. email address) with a code number (pseudonym). This means that we do not store any personal data together with usage data such as the opening of newsletters or the calling up of web links. It also ensures that this data cannot be merged at a later date. If you as a recipient wish to object to this pseudonymised tracking, you can unsubscribe from the list via the opt-out link at the end of each newsletter.
Online ticket purchase
There is the possibility to purchase online ticket on our websites. In doing so, we collect from you the personal data required to carry out the respective process, for example your contact data. Your data will be passed on to third parties (see point 8) insofar as this is necessary within the framework of the service provision and associated processes, for example for payment processing (see point 8).
4. Communication via e-mail or contact form
Communication by e-mail can have security gaps. E-mails can be intercepted and viewed by experienced Internet users on their way to us. If we receive an e-mail from you, it is assumed that our employees are also authorized to reply by e-mail. Otherwise, we ask you to consider another method of communication (for example, by mail).
5. Right of objection, revocation of consent
With regards to the data for the delivery of the website and the storage of the data in log files, no objection is possible, as these are indispensable for the operation of the website.
If you have given your consent to the processing of your data, for example for user* registration, you can revoke your consent at any time and without giving reasons. To do so, please either use the specific hyperlinks or inform us of your revocation by e-mail.
6. Web analysis through Matomo
We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users*.
Scope of the processing of personal data
The software sets a cookie on the user’s computer. If individual pages of our website are accessed, the following data will be stored after your consent:
1. Two bytes of the IP address of the user’s calling system.
2. The website called up
3. The website from which the user accessed the accessed website (referrer)
4. The subpages that are accessed from the accessed website
5. The time spent on the website
6. The frequency with which the web page is accessed
7. Technical details of the browser such as version number or resolution
The software runs exclusively on the servers of our website. A storage of the personal data of the users only takes place there. The data is not passed on to third parties.
The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (example: 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible.
Legal basis for the processing of personal data
The legal basis for the processing of users‘ personal data is Art. 6 para. 1 lit. f DSGVO.
Purpose of the data processing
The processing of users‘ personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we can compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in processing the data according to Art. 6 para. 1 lit. f DSGVO. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently considered.
Duration of storage
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after five years, as we measure the long-term impact of optimizations of our offer.
Possibility of objection and removal
Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
We offer our users the option of opting out of the analysis process on our website. To do this, you must follow the corresponding link. In this way, another cookie is set on your system, which signals to our system not to store the user’s data. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again.
For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.
You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy but will also prevent the owner from learning from your actions and improving usability for you and other users.
Your visit to this website is currently collected by Matomo web analytics. Deselect this checkbox for opt-out.
7. Cookies, third-party plug-ins
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. The cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. However, not accepting cookies may limit the functionality of our website.
Technically necessary cookies are required so that you can navigate websites with forms and use their functions. Without these cookies, functionality, such as actions during a visit (for example, text entry), cannot be guaranteed, even when navigating between pages of the website. Functional cookies allow a website to store information already provided (for example, username, language selection, or where you are located) and improve the user’s ability to provide personalized features. These cookies collect anonymized information and cannot track your movements on other websites. When your browsing session ends, any cookies created by our website are deleted.
Of course, you can object to the use of cookies at any time by setting your Internet browser not to accept cookies. For details, please refer to the help function of your Internet browser. However, we would like to point out that we cannot exclude the possibility that some functions of our website may then not be usable or not fully usable.
8. Online tickets
In cooperation with visitBerlin (Berlin Tourismus & Kongress GmbH, Am Karlsbad 11, 10785 Berlin), online tickets are offered for events and for exhibitions of the Georg Kolbe Museum. When purchasing online tickets, personal data is transmitted to visitBerlin. The forwarding of this information is the responsibility of visitBerlin. For the relevant conditions, please refer to visitBerlin’s privacy policy at https://www.visitberlin.de/de/datenschutzerklaerung.
9. Online presences in social media
We maintain online presences within social networks and platforms to be able to communicate with customers, interested parties and users active there and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, for example, write posts on our online presences or send us messages.
YouTube
We integrate videos on the YouTube platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/,
Opt-Out: https://adssettings.google.com/authenticated.
We embed photos and videos on the facebook platform (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). Privacy policy: https://www.facebook.com/policy.php/,
Opt-Out: https://de-de.facebook.com/ads/settings
We embed photos and videos on the platform instagram of the provider Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. Privacy policy: https://de-de.facebook.com/help/instagram/519522125107875,
Opt-Out: https://help.instagram.com/1415228085373580
10. Data subject rights
As a data subject within the meaning of the GDPR, you can assert the following data subject rights against us.
Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you may request information from the controller about the following:
1. The purposes for which the personal data are processed;
2. the categories of personal data which are processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data, if the personal data are not collected from the data subject;
8. The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
1. if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
3. the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or
4. if you have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.
If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to deletion
Obligation to delete
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DSGVO and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
4. The personal data concerning you have been processed unlawfully.
5. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
Exceptions
The right to erasure does not exist insofar as the processing is necessary:
1. for the exercise of the right to freedom of expression and information;
2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
5. for the assertion, exercise or defense of legal claims.
Right to information
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority (for example, the Berlin Commissioner for Data Protection and Freedom of Information), in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.