Data privacy

Provider of this website for the project museum4punkt0 – Digital Strategies for the Museum of the Future is the Stiftung Preussischer Kulturbesitz (Prussian Cultural Heritage Foundation). It is important for the Foundation to handle your personal data responsibly. Therefore, the following sections explain:

  1. Who is responsible for the website and data privacy
  2. What rights users of this website have
  3. Why and how the Foundation collects your data and what data it records
  4. How you can object to data collection or avoid it

1. Who is responsible for the content and maintenance of the website?

The Stiftung Preussischer Kulturbesitz is responsible for this website in terms of data protection, legally represented by the President Prof. Dr. hc. mult. Hermann Parzinger.

Stiftung Preussischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin, Germany

Phone: +49 (0)30 266 412889
e-mail: info[at]hv.spk-berlin.de
Website: www.peussischer-kulturbesitz.de

Who is responsible for data privacy?

The Stiftung Preussischer Kulturbesitz has appointed a Data Protection Officer as a contact person for questions regarding issues of data protection. The Data Protection Officer is available at the aforementioned postal address with the addition of “Datenschutzbeauftragte” (Data Protection Officer) or via a central e-mail address:

e-mail: dsb[at]hv.spk-berlin.de

Website: http://www.preussischer-kulturbesitz.de…interessenvertretungen.html

2. Why does the Foundation collect data?

What are personal data?

Personal data are details about the factual or personal circumstances of a specific or identifiable natural person. These include, for example, your name, your telephone number, your address, as well as any inventory data which you may share in the future, for example, when you sign up to the comment function on the blog.

Scope of personal data processing and legal basis

We only collect and use personal data of our users to the extent that this is necessary for the provision of a functional website and our content and services. We process personal data on our website on the basis of Article 6 of the General Data Protection Regulation. For example, temporary storage of the IP address by the system is necessary to allow us to provide the website to a user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

The Stiftung Preussischer Kulturbesitz analyses the use of this website. This will give it information by which to improve it, including, for example, how often certain contents were accessed, or which browser was used to view the site. The Stiftung uses the stored anonymized data exclusively for statistical purposes. Any other use or disclosure of the data to third parties is ruled out.

Collection, processing and use of personal data

Personal data are collected and used only after our users have given their consent. An exception applies in those cases where prior consent cannot be obtained for circumstantial reasons and the processing of the data is permitted by law.

3. What rights do users of our website have?

Regarding your personal data, you have the following rights:

  1. the right to information (Article 15 GDPR)
  2. the right to correction and deletion (Articles 16 and 17 GDPR)
  3. the right to restriction of processing (Article 18 GDPR)
  4. the right to object to the processing (Article 21 GDPR)
  5. the right to data portability (Article 20)

You also have the right to complain to a data protection supervisory authority concerning the processing of your personal data (Article 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für Datenschutz und Informationsfreiheit – BfDI) is the authority responsible for the Prussian Cultural Heritage Foundation.

4. What data are collected?

a) Provision of the website and handling of access data (creation of log files)

Every time you access the website museum4punkt0.de, usage data are transmitted by the respective internet browser and stored in log files, known as server log files. The storage is required for internal system-related purposes. The data records stored in this way contain the following data:

  1. Information regarding the used browser type and version
  2. The user’s operating system
  3. IP addresses
  4. Date and time of access
  5. The websites from which the user’s system accesses our website
  6. The visited URL

These data are not stored together with other personal data of the user.

Log files allow website operators to track activities on their websites. The access logs of the web server record which pages were accessed at which time. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 (e)) GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).

The temporary storage of the IP address by the system is necessary to allow us to provide the website to a user’s computer. To do this, the user’s IP address must be stored for the duration of the session. The data are stored in log files to ensure the website’s functionality. The data are also used by us to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. For the aforementioned purposes it is necessary that we process the data to carry out our task, which is in the public interest or in the exercise of official authority [Article 6 para. 1 (e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)].

Our website is located on a server operated by the company Mittwald. It saves data for the following periods:

The IP addresses of the accessing computers are stored anonymously, traceability is not possible. For this purpose, the last three digits of the IP address are removed. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Any information about the directory protection user that has been applied will be anonymised after one day.

Error logs that record site access errors are deleted after seven days. In addition to the error messages, they record the accessing IP address and, depending on the error, the accessed website.

Access via FTP is recorded in an anonymised form and stored for 60 days.

Collection of data for provision of the website and storage of data in log files is absolutely necessary for website operation. Consequently, there is no option to object on the part of the user.

The technical supervisor of our website, urbanstudio GmbH, has access to these files.

The Stiftung Preussischer Kulturbesitz has carefully selected urbanstudio GmbH and the server operator Mittwald. Both service providers are bound by the instructions of the Stiftung Preussicher Kulturbesitz and are regularly monitored.

b) Use of cookies on this website

Cookies are small text files that are stored on your computer in connection with the browser used when you visit a website. Cookies allow information exchange between computer programs or storage for a limited period of time. The stored cookies transmit certain information to our website. Cookies cannot run programs or transfer viruses to your computer.

Cookies can only be stored if you allow this in the settings of your browser. You therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically.

We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after changing pages.

Which cookies does this website use?

Every time you access a website on the internet and call up a file, browsers usually transmit data. The personal data are processed on the basis of Art. 6 para. 1 (f) of the General Data Protection Regulation. From the data transmitted during the visit to this website, the Stiftung Preussischer Kulturbesitz stores the following information:

  1. Browser type / version
  2. Operating system
  3. Referrer URL (the forwarding site)
  4. Date, time and duration of the server request
  5. Accessed page(s) and file(s)
  6. Pseudonymised IP address
  7. Country of origin
  8. Frequency of website accessing

The website museum4punkt0.de uses cookies to a very limited extent. This means that basically you can view this website without cookies. The cookies used on this website have two different functions:

Some of the cookies used ensure the proper functioning and display of the website. The validity of these cookies is limited to the website visit. As soon as you exit your browser, these “session cookies” are deleted.

The Stiftung Preussischer Kulturbesitz uses the web analytics software Matomo (formerly Piwik) recommended by data protection officers for web analytics. Matomo uses cookies. The processing of users’ personal data enables us to analyse the surfing behaviour of our users. We are in a position to gather information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and to make it more user-friendly. Through automatic pseudonymisation of the IP addresses, the collected data can no longer be assigned to specific individuals. As a result, there is no association of usage data or usage profiles with personal data. The software runs exclusively on the servers of our service provider. The personal data of users are only stored there. Your data are not disclosed to third parties. Depending on whether you have accepted or rejected the collection of data, either two web-analytics cookies or a Matomo deactivation cookie are stored on your computer. These are known as “persistent cookies” and are automatically deleted after two years. We offer an opt-out procedure for this application. In this case, a cookie for the opt-out can also be set. You can also delete these cookies at any time in the security settings of your browser. As a result, Matomo will not record any data relating to your session (Please note: if you delete your cookies, you will also delete the deactivation cookie, which you will then have to save again on your next visit to the site).

If individual pages of our website are accessed, the following data are stored:

  1. i Bytes of the IP address of the user’s accessing system
  2. the website accessed
  3. the website from which the user reached the website accessed here (referrer)
  4. the other web pages visited from the main website accessed
  5. the time spent looking at the website
  6. the frequency with which the website is accessed

The prerequisite for this is that we process the data to carry out our task in the public interest or in the exercise of official authority (Article 6 para. 1 (e)) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)).

5. How to object to data collection by the web analysis software Matomo

You can decide whether you agree to the collection and analysis of the above statistical data by the Stiftung Preussischer Kulturbesitz.

You can decide here whether or not an explicit web analytics cookie may be stored on your browser to allow the Stiftung Preussischer Kulturbesitz to collect and analyse various statistical data.
If you wish to opt out, click on the following link to install the Matomo deactivation cookie in your browser.

PLEASE NOTE: If you have activated the automatic deletion of cookies in your browser, the deactivation cookie will also be deleted when you exit the program. In this case, you will have to object again to data collection the next time you visit this website. Also, if you use another computer or another web browser, you must again object to the collection of your data.

More information on the privacy settings of the Matomo software can be found on the Matomo website.

6. Collection of personal data for contacting

Contact by e-mail

You can contact the Stiftung Preussischer Kulturbesitz by e-mail via the respective official e-mail addresses of the employees. In the case of contacting by e-mail, the user’s personal data transmitted with the e-mail – e.g. e-mail address, last name, first name, address, if applicable other information contained in the e-mail with personal reference – are stored. The data are used exclusively for responding to the enquiry or for the purpose of enquiry.

museum4punkt0.de also provides the e-mail addresses of third parties (e.g. partners in the project museum4punkt0). These addresses have no spk-berlin.de after @. If you use one of these addresses for contacting the third party, the Stiftung Preussischer Kulturbesitz is not responsible for the processing of personal data. If you have questions regarding the handling of your personal data by this third party, please contact them accordingly.

The legal basis for the processing of the data transmitted when sending an e-mail is Art. 6 para. 6 (e) of the GDPR in connection with Section 3 of the Federal Data Protection Act (BDSG). If the e-mail contact wishes to conclude a contract, Art. 6 para. 1 (b) of the GDPR provides the additional legal basis for the processing thereof.

The data are processed for communication purposes and in order to deal with any enquiries and concerns.

The transmitted data and information are stored for the purpose of communication and processing of the enquiry.

Users have the right to object to the processing of their data at any time for reasons arising from their particular situation. The data are then no longer processed. In this case, it will not be possible to continue the conversation. All personal data stored when establishing contact with us will in this case be deleted. Processing is possible despite objections of the user if compelling legitimate grounds for the processing are presented by a public authority, when these override the interests, rights and freedoms of the user.

Objections to the data processing can be submitted informally at s.faulstich[at]hv.spk-berlin.de.

7. Processing of personal data for services on this website

a) Use of social media plug-ins

museum4punkt0.de uses “social plug-ins”. These plug-ins allow sharing of contents via the social media services Facebook and Twitter. These plug-ins are usually used to transmit data, including personal data, to the service providers.

In order to prevent the transmission of user data without the knowledge and consent of the users, museum4punkt0.de uses the solution “Shariff” of the magazine c’t (Heise Medien GmbH & Co. KG). Shariff replaces the usual share buttons of the social network and thus protects your surfing habits. The usual social media buttons transmit the user data to the mentioned service provider with each website access (user tracking). To do this, users do not have to be logged in or be a member of the network. On the other hand, a Shariff button establishes direct contact between the social network and the user only when the latter actively clicks on the share button. Shariff acts as an intermediary here: the server of the website operator requests the relevant information (e.g. number of likes on Facebook) from the respective service provider instead of the user’s browser. The user remains anonymous. More information about Shariff is available at Heise.de.

The Stiftung Preussischer Kulturbesitz does not process or store personal data. If you use the buttons, the data are stored and processed by the respective service provider. Which data service providers process and store, and how, can be found in their privacy statements:

Facebook Privacy Policy:  https://www.facebook.com/about/privacy/update?ref=old_policy

Twitter privacy policy: https://twitter.com/de/privacy

The legal basis for transmitting the data is Art. 6 para. 1 (e) of the GDPR in connection with Section 3 of the Federal Data Protection Act (BDSG).

The transmission of the data to social media service providers allows users to further disseminate content found on museum4punkt0.de through social media services and to share it with their contacts. This function is used by a large number of users and is now a standard functionality on websites. The prerequisite is that we process the data to carry out our remit in the public interest or in the exercise of official authority (Article 6 para. 1 (e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG)). By using Shariff we take into account the interest of users in the protection of personal data.

The Stiftung Preussischer Kulturbesitz does not store these data. If you use the buttons, the data are stored and processed by the respective service provider. Which data service providers process and store, and how, can be found in their privacy statements.

Since there is no processing and storage of the data by the Stiftung Preussischer Kulturbesitz and no automatic transmission of the data to the service provider, the user can object to the processing and storage of their data only to the respective service provider. Explanations by service providers on possibilities of objection and deletion can be found in their privacy statements.

b) Comment functionality on museum4punkt0.de

In the blog section of this website you can comment on individual blog posts. For this purpose, the following personal data are sent to us via a comment box:

  1. E-mail address
  2. Name (pseudonym possible)

During the subscription process, your consent is obtained for processing data and reference is made to this privacy policy. The comments as well as the specified name are stored in our content management system and published after revision by the editorial staff. The e-mail address is not published, the name as given is published in the comment. The data collected in connection with the comment function are not disclosed to third parties and are used only for the purpose of commenting.

A cookie that stores your log-in details in your browser is also used for this comment function, so long as you have enabled this option. This information is optional.

The legal basis for the processing of data following the user’s comment, provided the user gave their consent, is Art. 6 para. 1 (a) of the GDPR.

The purpose of processing the data is the commenting on bpb.de content by users. The collection of users’ e-mail addresses is to prevent misuse of the comment function. The names are collected to distinguish individual comments and users.

The data will be deleted as soon as no longer required to achieve the purpose for which they were collected. The e-mail address and the specified name of the users are therefore stored unless the user has objected to publication, or requested deletion, of their comment.

The user has the option of revoking their consent to the processing of the personal data and of having their comment and their data deleted at any time. To do this, the user can, for example, contact the person responsible in the editorial department by e-mail (s.faulstich[at]hv.spk-berlin.de).

c) Registration for meetings and events

The Stiftung Preussischer Kulturbesitz offers various event formats for which interested persons can register. Registration is usually possible by contacting us by e-mail. Depending on the event, personal data are collected and transmitted, e.g.:

  1. Name (first and last name)
  2. Address (street, house number, postcode, city, country), if specified in your e-mail
  3. E-mail as well as further contact data (e.g. telephone number), if you indicate this in your e-mail

This data are required during the organisation of events for the smooth registration and administration of participants. In addition, depending on the event, event-specific data can be collected and transmitted to take into account the interests and needs of the participants, e.g.:

  1. Occupational data (profession, institution/organisation, function, professional contact data)
  2. Age/year of birth
  3. Catering options/intolerances (e.g. for catering)
  4. Accessibility requirements (e.g. barrier-free access)
  5. Language skills (e.g. for interpreters)

Users must consent to the processing of their data. All specified data will be transmitted – depending on the event – to event organisers within the Foundation or to external event service providers and processed and stored there.

The legal basis for the processing of personal data is the consent of the user under Art. 6 para. 1 (a) of the GDPR.

The data are transmitted, processed and stored for the purpose of registration for an event as well as for the planning, execution and further processing of an event.

The data will be deleted as soon as no longer required for the purpose for which they were collected.

The user has the option of revoking their consent to the processing of the personal data and of having their data deleted at any time. To do this, the user can, for example, contact the person responsible in the Foundation by e-mail. If the user requests the deletion of their data before an event, registration or participation in the event cannot be guaranteed.

d) Integration of external content or services on museum4punkt0.de

The Stiftung Preussischer Kulturbesitz integrates some content on museum4punkt0.de through external services. In this case the data can be transferred from museum4punkt0.de to the external services, which can set cookies. The Foundation uses these services to provide users of museum4punkt0.de with multimedia content.

The transmitted data usually provides the information that the content integrated in museum4punkt0.de was accessed. They can also include personal data (e.g. the IP address). The data transmitted in each individual case can always be traced. You should therefore consult information on data collection, storage and use by the respective providers.

Services of the following providers are currently integrated in museum4punkt0.de:

Google (YouTube player):Google services are operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Please see Google’s privacy policy for information on the purpose and scope of the collection, further processing and use of data by Google, as well as your rights in this case and settings options for protecting your privacy: https://policies.google.com/privacy?hl=de

VoiceRepublic (audio player):Voice Republic is operated by Voice Republic Media AG, Langstrasse 10, 8004 Zürich, Switzerland. For information on the purpose and scope of the collection and further processing of data, visit https://blog.voicerepublic.com/privacy-statement/

Vimeo (video player):Vimeo is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. For information on the purpose and scope of collection and further processing of data, visit https://vimeo.com/privacy

The legal basis for transmitting the data is Art. 6 para. 1 (e) of the GDPR in connection with Section 3 of the Federal Data Protection Act (BDSG).

The external services are integrated on museum4punkt0.de to provide content, features and information that could not be provided to users without these services.

What data are transmitted and how long they are stored depends on the respective service. You must therefore obtain information about the purpose and scope of the collection, further processing and use and storage of the data as well as your right of objection and deletion from the respective service providers. We have provided the respective privacy-policy links above.

8. Links to websites of other providers

Our website contains links to websites of other providers. We have no influence on whether these providers comply with data protection regulations.

9. Change of privacy policy

The Stiftung Preussischer Kulturbesitz reserves the right to adapt the privacy policy in line with technical developments and changed legal framework conditions. The current version of this privacy policy can be found immediately below.

Version: August 2018