The protection of your personal data during the collection, processing and use on the occasion of your visit to our website is an important concern for us and is carried out within the framework of the legal regulations, about which you can inform yourself e.g. at www.bfd.bund.de.
In the following, we explain what information we collect during your visit to our website and how it is used:
1. Collection and storage of personal data as well as type and purpose of their use
a) When visiting the website
Each time a customer (or other visitor) accesses our website, information is automatically sent to the server of our website by the internet browser used on your end device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a so-called log file.
The following data is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer, as well as device ID or individual device identifier and device type,
- Name of the file retrieved and amount of data transferred, as well as date and time of retrieval,
- notification of successful retrieval,
- requesting domain,
- Description of the type of Internet browser used and, if applicable, the operating system of your terminal device as well as the name of your access provider,
- Your browser history data as well as your standard weblog information,
- Location data, including location data from your mobile device. Please note that most mobile devices allow you to control or disable the use of location services in the settings menu of the mobile device.
Our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO to collect the data is based on the following purposes: ensuring a smooth connection and a comfortable use of the website, evaluation of system security and stability as well as for other administrative purposes.
In no case do we use the collected data for the purpose of drawing conclusions about your person.
b) When using our contact form
If you have any questions, we offer you the possibility of contacting us via a form provided on the website. At least the following information is required: email@example.com, so that we know who the enquiry is from and so that we can answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
c) On conclusion of a contractual relationship
When concluding a contractual relationship on our website, we ask you to provide the following personal data:
- Data that identifies you personally, such as name and e-mail address - contact data, such as billing and delivery address/ and telephone number - academic title - data that identifies your company, such as company name, address, communication data (e-mail address, telephone, fax number), VAT ID or tax number, if applicable) - information on your means of payment.
- other personal data which we are legally obliged or entitled to collect and process and which we need for your authentication, identification or to verify the data we have collected.
The aforementioned data is processed for the purpose of handling the contractual relationship. The processing of the data is based on Art. 6 para. 1 lit. b DSGVO. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual retention obligations.
d) Use of payment service providers
We also work with payment service providers for the payment of contracts concluded with us for a fee. We pass on your payment data to the commissioned payment service provider as part of the payment processing - for the purpose of the payment - insofar as this is necessary for the payment processing. The legal basis for the transfer of data is in each case Art. 6 para. 1 lit. b DSGVO.
e) When registering for our newsletter
If you have given your express consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, we will use your e-mail address to send you our newsletter on a regular basis.
You can unsubscribe at any time, for example via a link at the end of a newsletter. Alternatively, you are welcome to send your unsubscribe request at any time by e-mail (preferably with the subject: "Unsubscribe Newsletter").
2. Transfer of personal data
Your data will not be passed on to third parties for purposes other than those listed below.
We only pass on your data to third parties if:
- you have given your express consent to this according to (Art. 6 para. 1 p. 1 lit. a DSGVO),
- this is necessary for the processing of contractual relationships with you (Art. 6 Para. 1 lit. b DSGVO),
- there is a legal obligation to pass on data (Art. 6 para. 1 lit. c DSGVO),
- the disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 p. 1 lit. f DSGVO).
In these cases, however, the scope of the transmitted data is limited to the necessary minimum.
Our data protection provisions are in line with the applicable data protection regulations and the data is only processed in the Federal Republic of Germany / European Union. A transfer to third countries does not take place and is not intended.
3. Data subject rights
Upon request, we will be happy to inform you whether and which personal data relating to you are stored (Art. 15 DSGVO), in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling.
You also have the right to have any incorrectly collected personal data corrected or incompletely collected data completed (Art. 16 DSGVO).
Furthermore, you have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 DSGVO).
You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request that it be transferred to another controller (Art. 20 DSGVO).
In addition, you have the so-called "right to be forgotten", i.e. you can demand that we delete your personal data, provided that the legal requirements for this are met (Art. 17 DSGVO).
Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection has ceased to exist or the data processing has been carried out unlawfully.
According to Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future.
You also have the right to object to the processing of your personal data at any time, provided that a right of objection is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 DSGVO).
If you wish to make use of your right of revocation or objection, an e-mail to: info(at)picassomuseum.de is sufficient.
In the event of a breach of data protection regulations, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 DSGVO.
4. Duration of data storage
The data collected will be stored by us for as long as is necessary for the performance of the contracts entered into with us or you have not exercised your right to have it deleted or your right to have it transferred to another company.
We use so-called session cookies to recognise that you have already visited individual sub-pages of our website. For example, if you have registered, your password will be stored for the duration of your visit to our website and when you change sub-pages, so that you do not have to re-enter it each time. These session cookies are automatically deleted after you leave our website.
Java applets and Java script are used in the provision of our Internet offer. If, for security reasons, you do not wish to use these utilities or active content, you should deactivate the corresponding setting in your browser.
6. Online marketing/ Analysis tools
The tracking measures we use are carried out on the basis of Art. 6 Para. 1 S. 1 lit. f DSGVO, § 15 Para. 3 TMG. With the tracking measures used, we want to ensure a needs-oriented design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and for the purpose of evaluating and optimising our Internet presence. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
We use Google Analytics, a web analytics service provided by Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"), for the purpose of tailoring the design and ongoing optimisation of our website. In this context, pseudonymised usage profiles are created and cookies are set (see also under point 5). The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and the time of the server request will be transmitted to and stored by Google on servers in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the internet for the purposes of market research and demand-oriented design of these websites. These purposes also constitute our legitimate interest in data processing. The legal basis for the use of Google Analytics is § 15 para. 3 TMG in conjunction with Art. 6 para. 1 lit. f DSGVO.
This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (so-called IP masking).
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link https://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website: Deactivate Google Analytics. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
We also use the online advertising programme "Google AdWords" as part of Google AdWords conversion tracking. Google Conversion Tracking is an analysis service provided by Google. When you click on an ad placed by Google, a cookie for conversion tracking is stored on your end device. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain web pages on our website and the cookie has not yet expired, Google and we will be able to recognise that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie. Thus, there is no way that cookies can be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. This tells customers the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Adwords/ Conversion Tracking is § 15 para. 3 TMG in conjunction with Art. 6 para. 1 lit. f DSGVO.
Our website uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA ("Facebook"). When you open our website with the plugin, it establishes a direct connection with the Facebook servers via your browser. This transmits to Facebook the information that you have accessed the page.
If you are logged in with your Facebook account, clicking on the plugin can assign your visit to our website directly to your profile. Even if you do not have a profile, it cannot be ruled out that your IP address will be stored by Facebook.
If you are a Facebook member and do not want Facebook to collect data about you via our online offer and link it to your membership data stored on Facebook, you must log out of Facebook before visiting our website and delete the corresponding Facebook cookies. It is also possible to block Facebook social plugins with browser add-ons, for example with the "Facebook Blocker".
Plugins of the social network Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) are integrated on our website. You can recognise the Instagram plugin by the "Instagram button" on our website. If you click the Instagram button while you are logged into your Instagram account, you can link the content of our websites to your Instagram profile. This allows Instagram to associate the visit to our pages with your user account.
To prevent YouTube from collecting data when you visit our website, log out of YouTube before visiting. To prevent YouTube from generally accessing your data via websites, you can exclude YouTube plugins by using an add-on for your browser (e.g. https://www.youtube.com/user/disconnecters).
We take all necessary technical and organisational security measures to store your personal data in such a way that they are not accessible to third parties or the public. Should you wish to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted cannot be fully guaranteed when using this method of communication. We therefore recommend that you send us confidential information exclusively by post.
Up-to-dateness and amendment of this data protection declaration
This data protection declaration is currently valid.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection statement at any time on the website at https://kunstmuseum-picasso-muenster.de/footer/datenschutz/.