Privacy Policy

I. Who is responsible for the website and data privacy protection?

Stiftung Preussischer Kulturbesitz is responsible for this website in terms of data protection. 

Stiftung Preußischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin
Deutschland

 

For questions regarding data protection, the Stiftung Preussischer Kulturbesitz has a data protection officer as a contact person. You can contact him/her at our postal address, addressed to “data protection officer,” or via this e-mail address:

e-mail: Datenschutzbeauftragte(at)hv.spk-berlin.de

II. What forms are personal data processed in?

1. Provision of the website and creation of log files

When you visit our website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a file called a "log file." 

a. Data categories

The following information is recorded without your active involvement and is stored until it is automatically deleted: 

• IP address of the computer requesting access,
• date and time of access,
• name and URL of the file accessed,
• web page from which access has taken place (referrer URL),
• browser used and, if applicable, the operating system of your computer as well as the name of your internet service provider (ISP). 

b. Purpose

The aforementioned data are processed by us for the following purposes:

• ensuring a smooth connection to the website
• ensuring the comfortable use of our website
• evaluating system security and stability as well as other administrative purposes. 

The website is operated as part of public relations work of the Foundation.

c. Legal basis

The legal basis for data processing lies in the protection of legitimate interests in accordance with Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The website is provided as part of our public relations work. 

d. Recipient categories

Our website is located on a server owned by Mittwald. 

The Stiftung Preussischer Kulturbesitz has exercised due diligence in selecting Mittwald as its server host. Mittwald is bound by instructions given by the Stiftung Preussischer Kulturbesitz and is regularly checked. 

e. Storage period

The company Mittwald stores data for the following periods. 

Anonymized IP addresses are retained for 60 days. 

Error logs, which record faulty page views, are deleted after seven days. In addition to the respective error message, they list the IP address from which access was attempted and, depending on the error, the web page that was accessed.  

Access via FTP is logged anonymously and the records are kept for 60 days.

2. Cookies

Cookies are used on this website. These are small text packets that are sent from a website to a browser, are saved by the browser and then sent back as and when requested. 

a. Data categories

The Stiftung Preussischer Kulturbesitz stores the following information from the data that is transmitted when you visit this website: 

• browser type/version
• operating system
• referrer URL (the redirect page)
• date, time, and duration of the server request
• page(s) and file(s) accessed
• pseudonymized IP address
• country of origin
• frequency of access to the website

b. Purpose

The use of cookies is technically necessary and helps us to give you a better experience when you use our website. We only use session cookies to tell which pages of our website, if any, you have visited before the one that you are currently looking at. These are automatically deleted when you leave our website. If you return to our site within that period, these cookies allow it to recognize that you were here earlier and to automatically recall the entries and settings that you made then, so you do not have to enter them again.

With your consent, we use the web analytics service Matomo (formerly Piwik) to analyze the usage of the website. The IP address is anonymized before being stored.

The information generated by the cookie about the use of this website is not shared with third parties.

c. Legal basis

Necessary cookies are processed in accordance with Art. 6 para. 1 (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).

If you have consented to the use of cookies for analytical purposes, the data processing is based on Article 6(1)(a) of the GDPR.

d. Storage period

The cookies are usually deleted when the browser is closed.

3. Registration 

A members' area is provided on our website, for which prior registration and login are required.

a. Data categories

When you register for the members' area, the data requested in the registration mask are processed. A username and password are assigned to you in advance and are not chosen by the user. In addition, the date and time of account creation as well as the date and time of your last login are stored. 

b. Purpose

The processing of these data serves to provide a password-protected area where specific content or services are made available to a defined group of members. It also serves to prevent misuse of the website and to ensure the security of our information technology systems.

c. Legal basis 

The legal basis for the processing of data for the members' area is Art. 6 para. 1 (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (BDSG), as the provision of the information is part of the public relations work and the fulfillment of the Foundation's tasks.

d. Recipient categories 

The data are stored on the servers of our hosting provider, Mittwald, who acts as a processor bound by instructions. Access to the member data is restricted to the employees responsible for the technical and content-related administration of the website at the Institute for Museum Research.

e. Storage period 

The data will be stored as long as your registration for the members' area is active. If you delete your member account or request its deletion, the personal data will be erased, provided that no legal storage obligations (e.g. from budgetary law) prevent this.

III. The rights users of this website have

Regarding your personal data, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right of rectification and erasure (Art. 16+17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object (Art. 21 GDPR)
• Right to data portability (Art. 20)

You also have the right to complain to a data protection supervisory authority about the way the Foundation processes of your personal data (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Stiftung Preussischer Kulturbesitz.