It is important for the Foundation to handle your personal data responsibly. Therefore, the following sections explain:
- Who is responsible for the website and data privacy
- Why and how the Foundation collects your data and what data it records
- What rights users of this website have
- How you can object to data collection or avoid it
1. Who is responsible for the content and maintenance of the website?
The Stiftung Preussischer Kulturbesitz is responsible for this website in terms of data protection, legally represented by the President Prof. Dr. hc. mult. Hermann Parzinger.
The Stiftung Preussischer Kulturbesitz has appointed a Data Protection Officer as a contact person for questions regarding issues of data protection. The Data Protection Officer is available at the aforementioned postal address with the addition of “Datenschutzbeauftragte” (Data Protection Officer) or via a central e-mail address:
2. Why does the Foundation collect personal information?
We only collect and use personal data of our users to the extent that this is necessary for the provision of a functional website and our content and services.. For example, temporary storage of the IP address by the system is necessary to allow us to provide the website to a user’s computer. For this purpose, for example, the users’ anonymous IP address must be stored for a period of 7 weeks. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
The Stiftung Preussischer Kulturbesitz analyses the use of this website. This will give it information by which to improve it, including, for example, how often certain contents were accessed, or which browser was used to view the site. The Stiftung uses the stored anonymized data exclusively for statistical purposes. Any other use or disclosure of the data to third parties is ruled out.
3. What rights do users of our website have?
Regarding your personal data, you have the following rights:
- right of access to he personal data (Article 15 GDPR)
- Rectification and erasure (Articles 16 and 17 GDPR)
- the right to restriction of processing (Article 18 GDPR)
- the right to object to the processing (Article 21 GDPR)
- the right to data portability (Article 20)
You also have the right to lodge a complaint to a data protection supervisory authority concerning the processing of your personal data (Article 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für Datenschutz und Informationsfreiheit – BfDI) is the authority responsible for the Prussian Cultural Heritage Foundation.
4. What data are collected?
a) Provision of the website and handling of access data (creation of log files)
Every time you access our website, data are transmitted by the respective internet browser and stored in log files, known as server log files. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 (e) GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The data records stored in this way contain the following data:
- IP addresses
- Log files
- Inventory data, traffic data and content data of the websites
- Error logs.
Log files allow website operators to track activities on their websites. The access logs of the web server record which pages were accessed at which time. They contain the following data: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, and host name accessed.
Our website is located on a server operated by the company Mittwald. It saves data for the following periods:
- The IP addresses of the accessing computers are stored anonymously, traceability is not possible. For this purpose, the last three digits of the IP address are removed. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 7 weeks. Any information about the directory protection user that has been applied will be anonymised after one day.
- Error logs that record site access errors are deleted after seven days. In addition to the error messages, they record the accessing IP address and, depending on the error, the accessed website.
- Access via FTP is recorded in an anonymised form and stored for 60 days.
The technical supervisor of our website, Graphodata AG, has access to these files.
The Stiftung Preussischer Kulturbesitz has carefully selected Graphodata and the server operator Mittwald. Both service providers are bound by the instructions of the Stiftung Preussicher Kulturbesitz and are regularly monitored.
Cookies are small text files that are stored on your computer in connection with the browser used when you visit a website. Cookies allow information exchange between computer programs or storage for a limited period of time. The stored cookies transmit certain information to our website. Cookies cannot run programs or transfer viruses to your computer.
Every time you access a website on the internet and call up a file, browsers usually transmit data. The personal data are processed on the basis of Art. 6 para. 1 (f) of the General Data Protection Regulation in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). From the data transmitted during the visit to this website, the Stiftung Preussischer Kulturbesitz stores the following information:
- Browser type / version
- Operating system
- Referrer URL (the forwarding site)
- Date, time and duration of the server request
- Accessed page(s) and file(s)
- Anonymized IP address
- Country of origin
- Frequency of website accessing
- Some of the cookies used ensure the proper functioning and display of the website. The validity of these cookies is limited to the website visit. As soon as you exit your browser, these “session cookies” are deleted.
How to object to data collection by the web analysis software Matomo
You can decide whether you agree to the collection and analysis of the above statistical data by the Stiftung Preussischer Kulturbesitz.
PLEASE NOTE: If you have activated the automatic deletion of cookies in your browser, the deactivation cookie will also be deleted when you exit the program. In this case, you will have to object again to data collection the next time you visit this website. Also, if you use another computer or another web browser, you must again object to the collection of your data.
You can decide here whether or not an explicit web analytics cookie may be stored on your browser to allow the Stiftung Preussischer Kulturbesitz to collect and analyse various statistical data.
If you wish to opt out, click on the following link to install the Matomo deactivation cookie in your browser.
More information on the privacy settings of the Matomo software can be found on the Matomo website
c. Electronic queries via e-mail or forms
When making inquiries by e-mail or via a web form, you must provide certain data so that the Stiftung Preussischer Kulturbesitz can contact you or send you the information you requested. This personal data is processed on the basis of Par. 6 Sec. 1(e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Press mailing list:
Required fields: Last name, first name, media company (press), department, e-mail address, telephone number
Optional: Bundespressekonferenz accreditation + number, street, house number, postal code, city, fax, comments/questions
Required fields: Last name, first name, e-mail address, media company/department
Optional: telephone number, country
The data on the form, IP address and date are stored in the website backend.
Ordering SPK Magazine:
Required fields: First name, last name, street, house number, postal code, city, country, e-mail address
Optional: Title, institution/company
If you provide the Foundation with personal data for inquiries or orders, this data will only be used for the relevant correspondence or for the purpose stated in the form. The data will be stored for as long required by the purpose stated in the consent prompt. You have the right to revoke your consent effective for the future.
You can unsubscribe from the press mailing list using a form on our website.
You can unsubscribe from the magazine using a form on our website.
d. Use of social media
Stiftung Preussischer Kulturbesitz (SPK) operates a social media channel to communicate with interested users and to inform them about the latest Foundation news. Users who call up the respective networks and platforms, are subject to the terms and conditions and data processing guidelines of the respective operator.
The SPK's Facebook page is run by Facebook Inc. (1 Hacker Way (9.134,11 km) 94025 Menlo Park). It is currently not clear whether Facebook meets the requirements for the degree of personal data protection required in the European Union. With this in mind, the use of the Facebook fan page involves data protection risks.
Facebook collects the data without informing SPK and SPK cannot influence Facebook’s data collection process. The following user data is collected by Facebook:
- Information, communications and content provided by the user: Account registration, content creation and sharing, messaging, metadata, Facebook features (such as camera filters)
- Networks and connections: People, pages, accounts, hashtags, groups, products with which the user is connected, contact information (such as as logs) uploaded by the user
- User behavior: Content that the user views or interacts with, actions, time, duration and frequency of activities
- Transactions: Information on financial transactions (payment information, account authentication information, billing information, shipping information, contact information)
- Information and activities provided by other users: Content analysis, communication, and information about the user to other persons
- Device information (information on the device used by the user): Device attributes, operations on the device, identifiers, device signals, data from device settings, network and connections, cookie data
Details about the handling of user data in Facebook's data protection declaration.
The Stiftung Preussischer Kulturbesitz Vimeo channel is run by Vimeo Inc. (Vimeo, Inc. 555 West 18th Street, New York, New York 10011).
Vimeo collects the data without informing SPK and SPK cannot influence Vimeo’s data collection process. The following user data is collected by Vimeo:
- Profile information
- Transactions: Payment method
- Contents: Video, text, image, etc. along with information and metadata; communication, interaction with third party users
- Technical data Information in the course of Vimeo support: IP address, device information, search history, cookies
- Third party information: Transaction data, data from analysis tool
For details on how Vimeo handles user data, see vimeo's data protection declaration.
e. SPK Newsletter
The Stiftung Preussischer Kulturbesitz uses the services of CleverReach GmbH & Co. KG to distribute the SPK newsletter. The Stiftung Preussischer Kulturbesitz has vetted CleverReach GmbH & Co. KG carefully. CleverReach GmbH & Co. KG is bound by the instructions of the Stiftung Preussischer Kulturbesitz, which regularly monitors their compliance.
Your data are stored in encrypted form on servers located in Germany and Europe. CleverReach uses providers Host Europe GmbH and Amazon Web Services to send mailings.
During the registration the following data are collected:
- E-mail address
- Date and time of registration and activation
This personal data is processed on the basis of Para. 6 Sec. 1(a) of the GDPR. Registration is a “double-opt-in” process: during the process, we obtained your consent and referred you to our data protection declaration. If you register for our newsletter, the data will only be used for this purpose.
Stiftung Preussischer Kulturbesitz would like to regularly adapt the newsletter to reflect the interests of its readers, therefore the links you click are recorded in anonymized form. CleverReach stores this data for 6 months.
When you sign up for the SPK newsletter, your e-mail address is transmitted to CleverReach GmbH & Co. KG
Of course, you can cancel your registration at any time. To unsubscribe, click the link at the end of the newsletter and your data will be deleted immediately. Given these circumstances remember that as a data processor, under the GDPR CleverReach is obliged to ensure data security. The service provider must carry out regular backups for this purpose. These backups are deleted after 30 days.
f. Images and videos of people on the website
Our website may contain images of people. In this case this personal data is processed on the basis of Para. 6 Sec. 1(e) of the GDPR in conjunction with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). If you are affected, you have the right to revoke your consent at any time with right for the future.
Version: Juli 2019