Data privacy notice
The protection of your privacy is of the utmost importance to us. It is also important to us that you always know when we store data and how we use it.
The following information tells you where we receive information from you when you use our app and how we handle it.
It is generally possible to use the Bundeskunsthalle app without providing any personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
App of the Bundeskunsthalle
Users can use the Bundeskunsthalle's free app to find out about our current range of exhibitions, events and workshops. In addition, multimedia content such as videos, audio tours or 360° views can be used.
Users also have the option of registering and logging in free of charge via the app. Registered users have access to further exclusive benefits, such as free exhibition tickets or price discounts.
When you register in the app, data from the input screen is transmitted to us. Your consent is given as part of a so-called double opt-in. This confirmation email is used to check whether the owner of the address has authorised the registration as the data subject. In this context, the IP address of the accessing device and the date and time of registration are also logged to document your consent. Your data will be passed on to a service provider for CRM systems as part of order processing. Your data will not be passed on to other third parties.
Responsible person
Who is responsible for data processing and who can I contact?
Kunst- und Ausstellungshalle der Bundesrepublik Deutschland GmbH
You can reach our data protection officer at the following e-mail address datenschutz(at)bundeskunsthalle.de
Purposes and scope of data processing when using the app
How is personal data processed when using the app?
Every time a user accesses our app and every time a file is retrieved, access data about this process is stored in a log file on our server.
Each data record consists of:
- IP address
- Date and time of the enquiry
- Requested resource
- Server response status code
- User-Agent
The log files of the server accesses for the app interface are stored for 30 days.
Data is stored for reasons of data security in order to ensure the stability and operational security of the app. The legal basis for this is Art. 6 para. 1 lit. f GDPR.
We do not pass on your data to third parties unless you have consented to this. For certain areas (e.g. the hosting of our app), however, we are dependent on the use of service providers, which we usually oblige to comply with the legal requirements by means of order processing.
Collection of additional data via the app
Contact by e-mail
If you contact us by email, we will only use your personal data (name, email address, message text) to get in touch with you. The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR. We only use your e-mail address to process your enquiry. Your data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is usually the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
Raffles
Data is collected for the purpose of organising competitions. Details on this, such as what data is collected and for what purpose, can be found on the page of the respective competition.
Cookies
The Bundeskunsthalle app uses cookies. Cookies are text files that are stored on your smartphone via the app.
Numerous websites, apps and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a character string that allows websites, apps and servers to be assigned to the specific internet browser or device in which the cookie was stored. This enables the websites, apps and servers visited to distinguish the individual browser or device of the data subject from other internet browsers and devices that contain other cookies. A specific internet browser or device can be recognised and identified via the unique cookie ID.
Through the use of cookies, the Bundeskunsthalle can provide the users of this app with more user-friendly services that would not be possible without the cookie setting. As already mentioned, cookies enable us to recognise the users of our app. The purpose of this recognition is to make it easier for users to use our app. For example, the user of an app that uses cookies does not have to re-enter their access data each time they visit the app because this is done by the app and the cookie stored on the user's device.
The data subject can prevent the setting of cookies by our app at any time by means of a corresponding setting of the device used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via the app or other software programmes. If the data subject deactivates the setting of cookies on the device, not all functions of the app may be fully usable.
We use two types of cookies in the app. Essential cookies ensure the operation of the app and cannot be deactivated. Third-party cookies are required to display additional editorial content from social media channels (Facebook, Instagram, Twitter and YouTube); these can be activated or deactivated at any time via the cookie settings.
The following cookies are used in the app. The essential cookies from the Bundeskunsthalle include: jwt, jwt_expires und cc_consent.
Third-party cookies include
Google Inc.: token, SIDCC, 1P_JAR, NID, AEC, SID, APISID, CONSENT, SAPISID, SSID, LOGIN_INFO, PREF
Twitter Inc.: kdt, auth_token, twid, ct0, guest_id, des_opt_in, eu_cn, dnt, _twitter_sess
Meta Inc.: usida, fr, sb, presence, datr, c_user, xs, mid, id_did, rur, fbsr_*, csrftoken, ds_user_id, sessionid
Spotify: OptanonAlertBoxClosed, OptanonConsent, eupubconsent-v2, sp_dc, sp_key, sp_m, sp_t
Facebook & Instagram
We have integrated components (plug-ins) from Meta Platforms Ireland Ltd. into the Bundeskunsthalle app. These include components for the social networks Facebook and Instagram. A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook and Instagram allow social network users to create private profiles, upload photos and network via friend requests, among other things.
The operating company of Facebook and Instagram is Meta Platforms Ireland Ltd., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, Meta Platforms Ireland Ltd, HARBOUR, 4, Grand Canal Quay, Grand Canal Bridge, Dublin, 2, Irland is responsible for data processing.
The plugins are recognisable in our app by the Facebook logo, Instagram logo and/or the addition "Like" or "Share".
These plug-ins are deactivated by default. A connection to the servers of Meta Platforms Ireland Ltd. will only be established if you activate them and thus declare your consent to communication with Facebook and Instagram. Clicking on one of the corresponding buttons therefore means that you give your consent to transmit data to the operator of the social network.
For further information on the processing and use of your data by Meta Platforms, Inc. as well as your rights in this regard and setting options to protect your privacy, please refer to the data protection information of Meta Platforms, Inc.
Facebook data privacy notice: de-de.facebook.com/privacy/explanation.php
Instagram data privacy notice: help.instagram.com/519522125107875/?helpref=hc_fnav
The purpose of integrating the components is to show our users user-generated content on Facebook and Instagram in addition to our editorially created articles on exhibitions, events, etc. and thus provide an additional insight into our programme. User-generated content can include, for example, photos and/or video clips as well as comments on the respective event.
X (formally Twitter)
We have integrated components (plug-ins) from Twitter into the Bundeskunsthalle app. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and disseminate so-called tweets, i.e. short messages limited to 280 characters. These short messages can be accessed by anyone, including people who are not registered with Twitter. However, the tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Twitter also makes it possible to address a broad audience via hashtags, links or retweets.
The operating company of Twitter is Twitter Inc., 1 Cumberland St S, Fenian St, Dublin 2, D02 AX07, Irland.
The plug-ins are identified in our app by the Twitter logo and/or the addition "Tweet". These plug-ins (social media buttons) are deactivated by default. A connection to the Twitter servers is only established when you activate these buttons and thereby declare your consent to communication with Twitter. Clicking on the buttons therefore means that you give your consent to transmit data to the operator of the social network.
The purpose of integrating the Twitter component is to show our users user-generated content on Twitter in addition to our editorially produced articles on exhibitions, events, etc. and thus provide an additional insight into our programme. User-generated content may include, for example, photos and/or video clips as well as comments on the respective event.
We would like to point out that the Bundeskunsthalle has no knowledge of the use of the transmitted data. The applicable data protection provisions of Twitter can be found at twitter.com/privacy.
YouTube
We use the provider YouTube to embed videos.
YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operating company of YouTube is Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Irland. When using a plugin from the provider YouTube, such as clicking on the start button of a video, a connection is established to the YouTube servers and the fact that you have visited the app is transmitted to them. If you are logged in to YouTube as a member, YouTube assigns this information to your personal user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.
The data protection provisions published by YouTube, which can be accessed at google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
Basic information according to Art. 13/14 GDPR
Which data protection rights exist?
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR, provided that there are no legal requirements to the contrary (in particular under Art. 15, 17 GDPR, Sections 34 and 35 BDSG).
If you are of the opinion that the processing of your personal data is not lawful, you can lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
To what extent is there automated decision-making or profiling?
In principle, we do not use fully automated decision-making or profiling in accordance with Article 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
Information about your right to object in accordance with Article 21 GDPR
Individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests).
How up to date is this privacy policy?
This privacy policy is currently valid and has the status 06/2022.