Data Protection

Data Protection Declaration

We consider the protection of your privacy as a user of our website to be extremely important and we comply with the applicable data protection legislation when processing personal data. As the institution responsible for the processing, we have implemented numerous technical and organisational measures in order to ensure the most comprehensive level of protection possible for the personal data which is processed via this website. However, there is always some security risk involved in Internet-based data transfers, which means that absolute protection cannot be guaranteed. For this reason, all data subjects are free to transfer personal data to us via other channels, such as post, for example.

Contents

1. Name and contact details of the controller responsible for the processing

2. Legal representatives

3. Name and contact details of the data protection officer

4. Purpose of the processing

4.1 Cookies

4.2 Server data / Server log files

4.3 Newsletter

4.4 Campaign Monitor

4.5 Mapbox

4.6 matomo

4.7 YouTube in extended data protection mode

4.8 User registration: press 

4.9 Security of transfers

5. Legal basis for the processing of personal data 

6. Processing on the basis of legitimate interests

7. Recipients of personal data

8. Transfer of personal data to third countries or international organisations

9. Duration of the storage of personal data

10. Rights of the data subject

11. Revocation

12. Complaint to a competent supervisory authority

13. Provision and non-provision of personal data

14. Automated decision making

15. Changes to the purpose of the processing of personal data

16. Changes to the data protection declaration

17. Questions, suggestions and complaints

 

1. Name and contact details of the controller responsible for the processing

Brücke-Museum
Bussardsteig 9
D-14195 Berlin
+49 (0)30 839 00 860
info@bruecke-museum.de

 

2. Legal representatives

Director
Lisa Marei Schmidt

 

3. Name and contact details of the data protection officer

Karsten Knappe
c/o DGI Deutsche Gesellschaft für Informationssicherheit AG
Kurfürstendamm 57
D-10707 Berlin

 

4. Purpose of the processing

4.1 Cookies

Cookies are text files which are saved on your computer and which allow your use of the website to be analysed. For example, information concerning the operating system, browser, your IP address, the previous website accessed by you (referrer URL) and the date and time of your visit to our website is recorded. By using cookies, it is possible to determine the websites which you prefer to visit. Thanks to cookies, we are able to better tailor the content of our sites to the needs of our online visitors and optimise our services. In addition, this information allows us to automatically recognise you again next time you visit our website and to make navigation easier for you. For example, cookies allow us to tailor a website to suit your interests or to save your password, so that you do not need to enter this again in the future.

Cookies cannot be used to launch programs or to transfer viruses to a computer.

It is also possible to use our websites without cookies. Should you not wish for your computer to be recognised in the future, you can stop cookies from being saved on your hard drive by selecting “disable cookies” in your browser settings. Please consult the instructions of your browser provider in order to find out how this works in your individual case. Should you choose not to accept cookies, this can result in the limited functionality of some of our website’s features. You can delete cookies that have already been placed on your computer at any time.

Alternatively, you can set your browser in such a way that cookies from our domain are blocked. This takes place with the assistance of opt-out cookies.

We wish to point out that you may not delete opt-out cookies for the latter, should you not wish for measurement data to be recorded. If you have deleted all of the cookies in your browser, you need to set the relevant opt-out cookie again.

4.2 Server data / Server log files

For technical reasons, the following data, which your Internet browser transfer to us and our web host, will be recorded. This includes:
browser type and version
operating system used
website from which you are visiting us (referrer URL)
website which you are visiting
date and time of access
your Internet protocol (IP) address

This data is anonymised and stored separately from any personal data provided by you and cannot be assigned to a specific person. It is evaluated for statistical purposes, in order to optimise our website and services. We reserve the right to subsequently check this data, should we have specific reason to believe that it is being used unlawfully.

4.3 Newsletter

We use the newsletter to keep you regularly informed about ourselves and our services in the areas of “exhibitions, programme information, supporting programmes” and/or “training schemes for schools, children and families”.

Should you wish to receive the newsletter, we require a valid email address from you, information concerning the subject area which is of interest to you, as well as information which allows us to check that you are the owner of the provided email address and that you consent to receive the newsletter. No further data will be gathered. This data is only used in order to send the newsletter and will not be passed on to third parties. The data which is gathered in this way is not compared with data which may be obtained through other components of our website.

When you register for the newsletter, we save your IP address and the date of registration. The sole purpose of saving this information is to provide proof should third parties misuse an email address and register to receive the newsletter without the knowledge of the owner of the email address.

You can revoke your consent to the saving of the data and the email address, as well as their use, at any time. This revocation can take place at any time, via the link at the end of each newsletter, for example.

4.4 Campaign Monitor

In order to send our newsletter, we use the third party provider Campaign Monitor, which is operated by Campaign Monitor Pty Ltd, 404/3-5 Stapleton Ave, Sutherland, NSW 2232, Sydney, Australia. The data provided by you at the time of registration will be transferred to Campaign Monitor and stored there. The service provider Campaign Monitor is headquartered in Australia, the data is processed on servers / in IT centres in the USA. Following registration, you will receive an email from Campaign Monitor in order to confirm the registration (double opt-in). Campaign Monitor provides comprehensive analysis options concerning how the newsletters are opened and used. This analysis is group-focused and is not used by us in order to individually evaluate the recipients of the newsletter. Further information concerning Campaign Monitor and data protection with this provider can be found at http://www.campaignmonitor.com/privacy. You can terminate and revoke the subscription to this newsletter and thus your consent to the storing of your data at any time with effect for the future. You can find specific information regarding this matter in the confirmation email and in each individual newsletter.

4.5 Mapbox

We use the “mapbox” component from MapBox Inc., 740 15th St NW, Washington, DC 20005, USA on our site (Collection Online, project page “Brücke in Berlin”. Mapbox is used for the purpose of an attractive presentation of our online offerings and, in particular, to simplify finding the locations and premises we indicate on the website. Thereby we would like to improve the user experience and usability on our website. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f GDPR.

In order to use the functions of „mapbox“, it is technically necessary to save at least your IP address and information about the device used. This information is regularly transmitted to MapBox servers in the USA and stored there. By using mapbox, we have no influence on this data transmission. If you do not agree to this processing of your data, you have the option of deactivating the corresponding cookies. The use of our site is then restricted accordingly and your data will not be transmitted to mapbox. For further information on how MapBox handles user data can be found in their privacy policy: https://www.mapbox.com/privacy/.”

4.6 matomo

This website uses matomo (formerly PIWIK), an open source web analysis service. Matomo uses cookies. The personal data generated by the cookies, such as the time, location and frequency of your website visit, including your IP address, is transmitted to our matomo server and stored there. Your IP address is anonymised during this process, so that you as a user cannot be personally identified by us. The personal data generated by the cookies about the use of our website is not passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree to the storage and analysis of this data about your visit, you can dissent to its storage and use at any time by removing the cookies in the browser (e.g. by emptying the cache). An opt-out cookie will then be stored in your browser, which means that matomo will no longer collect any data about your visit. Please note that if you delete the cookies in your browser settings, this may result in the matomo opt-out cookie also being deleted and you may have to reactivate it.

Further information on matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/

4.7 YouTube in extended data protection mode

Our web presence uses plugins from YouTube operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. We use the option “extended data protection mode” provided by YouTube.

When you visit a page that has embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.

According to YouTube, in the “enhanced privacy mode”, data is only transmitted to the YouTube server, specifically which of our sites you have visited when viewing the video. If you are logged in to YouTube at the same time, this information is associated with your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

More information about YouTube’s privacy policy is available from Google at the following link: https://policies.google.com/privacy?hl=en&gl=de

4.8 User registration: press

If you are a member of the press, we offer you the option to register in the press area of our website. The personal data which is provided by you voluntarily in such a case, such as name, address, contact and communication data, as well as your telephone number and email address, is only processed for the use of our service. In case of important changes, e.g. regarding the scope of the service, or should technically necessary alterations take place, we use the email address provided at the time of registration to inform you via this channel. Registered users have the option to alter or delete the data provided at the time of registration at any time. We will also be happy to correct or delete this data following a request by you, unless legal or contractual retention obligations prevent this. Please use the contact information provided on this site for this purpose.

When you register on our website, we will also save your IP address and the date, as well as the time of your registration. This serves to protect us should third parties misuse your data and register on our website using this data without your knowledge. This data is not passed on to third parties and the data which is gathered in this way is not compared with data which is obtained through other components of our website.

4.9 Security of transfers

In order to protect the security of your data during the transfer process, we use encryption methods (e.g. SSL) which reflect the current technical state of the art. You can recognise an encrypted data transfer by the “https://“ featured at the start of the browser address. Please only transfer your confidential data if SSL encryption has been activated.

 

5. Legal basis for the processing of personal data

We only process your personal data where such is necessary in order to enter into, determine the content of or alter the legal relationship, if we are required to process personal data by law or if you have explicitly consented to such.

 

6. Processing on the basis of legitimate interests

In order to safeguard other legitimate interests, we are permitted by law to process personal data, unless the interests or basic rights and freedoms of the data subject outweigh our legitimate interests.

 

7. Recipients of personal data

Within our organisation, only the persons and bodies which require your personal data in order to fulfil the purposes named under Point 4 are able to access this data. Your personal data is only passed on or transferred to external recipients if this is necessary in order to fulfil the purposes named under Point 4 (in particular, processors in accordance with Article 28 GDPR), if there is a legal or official obligation to do so or if you have expressly consented to such in advance. A disclosure or transfer to order processors takes place in accordance with Article 28 GDPR, who process your personal data in the areas of IT services, marketing and finance on behalf of our organisation and in accordance with our instructions in order to fulfil the purposes named in Point 4.

Your data is also passed on to additional service providers or partners on the basis of your express consent and to authorities and/or state institutions on the basis of legal or official obligations, including federal and state administrations, as well as courts, public prosecutors or financial authorities. Our processors are obliged to comply with the applicable provisions of data protection law. Your personal data is not passed on to additional external recipients without your express consent.

 

8. Transfer of personal data to third countries or international organisations

We do not transfer your personal data to third countries or international organisations and do not intend to do so in the future.

 

9. Duration of the storage of personal data

We store personal data for as long as is necessary in order to perform a service which you have requested or consented to, unless other statutory obligations, such as retention periods under commercial law and tax law, exist.

 

10. Rights of the data subject (Art. 12 ff. GDPR)

Right of access by the data subject (Art. 15 GDPR)

You have the right to get inform about the data stored about you or your pseudonym at any time, also regarding its origin, the recipients to whom the data is forwarded and the purpose of the data processing. You can contact us at any time at the address given in the legal notice if you have any further questions about personal data.

Right to rectification (Art. 16 GDPR)

You have the right to demand from us rectification of inaccurate personal data concerning you without delay or completion of incomplete personal data, considering the purposes of the processing.

Right to erasure (Art. 17 GDPR)

The stored personal data will be deleted if you revoke your consent to storage or if you object to the processing of your personal data or if data storage is no longer required to fulfil the purpose for which it was stored or if storage is not permitted due to legal requirements.

Right to restriction of processing (Art. 18 GDPR)

If you dispute the accuracy of the personal data stored about you or if you require the personal data for the establishment, exercise or defence of legal claims, but at the same time we no longer require it, you can request the restriction of the processing of the personal data.

You can also have the processing restricted for the period from the time you lodge an objection to the processing until a decision is made on whether to grant the objection. If the processing of your personal data is restricted, it will not be processed any further.

Right to object or Notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19 GDPR)

If we process your personal data on the basis of a legitimate interest, both on our part and on the part of a third party, or if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, you have the right to object to the processing at any time for reasons arising from your particular situation.

In case of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or if we need to process the data for the establishment, exercise or defence of legal claims.

The right to object applies in the same way to direct marketing and related profiling.

Right to object in case of direct marketing

We particularly object the use of our contact data published as part of obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in case of unsolicited sent advertising information, such as spam e-mails.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another organisation.

You also have the option of requesting that we transfer the personal data in question directly to another organisation, assuming that this is technically feasible.

 

11. Revocation

You have the right to revoke any consent which you have issued at any time. The revocation must take place in writing. The lawfulness of the processing which took place with your consent prior to the revocation is not affected.

 

11. Revocation

You have the right to revoke any consent which you have issued at any time. The revocation must take place in writing. The lawfulness of the processing which took place with your consent prior to the revocation is not affected.

 

12. Complaint to a competent supervisory authority

You have the right to submit a complaint to a supervisory authority regarding the processing of your personal data. You can contact the competent supervisory authority at any time at:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
D-10969 Berlin

 

13. Provision and non-provision of personal data

You can generally use our website without providing any personal details. We do not store any personal data in such a case. However, we wish to inform you that in such a case, you will not be able to have full use all of our website’s functions. In order to improve our service, we only evaluate statistical data, which cannot be used to identify you personally.

 

14. Automated decision making

We do not use any automated decision-making processes within our website.

 

15. Changes to the purpose of the processing of personal data

Should we intend to continue processing personal data for a purpose other than that for which the personal data was gathered, we will inform you of this purpose before we start the continued processing.

 

16. Changes to the data protection declaration

We reserve the right to change our security and data protection measures should this become necessary due to legal and/or technical developments. In such cases, we will also adjust our data protection notice accordingly. Therefore, please always refer to the most current version of our data protection declaration.

 

17. Questions, suggestions and complaints

We can always be contacted in case of queries relating to the processing of your personal data by our organisation. Should you have any questions which are not answered in this data protection declaration, or should you require further information or have any suggestions or complaints, please get in touch with us using the address provided.

Alternatively, you can contact our data protection officer should you have any queries relating to data protection laws. You can find the contact information in Point 3 of this data protection declaration.