Privacy

With the following notes, we would like to inform you in detail about the processing of personal data during the use of the website www.nolde-stiftung.de/en as well as about your rights in this regard.

1. Party responsible and Data Protection Officer

The party responsible for the data processing in connection with the use of our website is

Stiftung Seebüll Ada und Emil Nolde
25927 Seebüll/Neukirchen
Telephone: +49 (0)4664-98 39 30
E-mail: info@nolde-stiftung.de

Further contact information can be found in the imprint. The internal Data Protection Officer is:

Mr. Bülent Kremser
Telephone: +49 (0)4664 – 98 39 319
E-mail: datenschutz@nolde-stiftung.de

2. Term definitions

Personal data refers to all the information, which is related to an identified or identifiable natural entity (“person concerned”). A natural entity is regarded as being identifiable if he/she can be identified directly or indirectly, in particular by means of allocation to an identification such as a name, a code number, location data, an online ID or to one or more specific features, which are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural entity.

Cookies are small text files, which are saved locally on the visitor’s end device (e.g. PC, smartphone, tablet-PC) during a visit to a website. They can contain different information about the end device used and the usage behaviour and are resent during a re-connection to the cookie-setting web server with the objective of recognising the user and his/her settings.

GDPR is the abbreviation for DECREE (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL dated 27th April 2016 for the protection of natural entities during the processing of personal data, for free data movement and for annulment of the guideline 95/46/EC (General Data Protection Regulation).

3. Data automatically recorded by us during the use of the website

IP address and log files

a) Explanation and processing purpose:
Each time our website is accessed, we automatically process the following information:

• the IP address of your computer or other end device (e.g. tablet-PC or smartphone) and the request(s) of your browser
• the data quantity transferred, the browser type and the browser version, the screen resolution and the operating system used.

The IP address as well as the information about the request(s) of your Internet browser is technically necessary for calling up and using the website; a website cannot be accessed and displayed without processing this data. The processing of the IP address is anonymised through abridgement or deleted once it is no longer technically necessary for calling up/using the website.

For the rest, we process the above data for the following purposes:

• Guaranteeing smooth connection establishment of the website,
• Guaranteeing comfortable use of our website,
• Analysis of the system safety and stability as well as
• For other administrative purposes.

The information about the data quantity transferred, the browser type and the browser version, the screen resolution and the operating system used is collected and processed to optimise the presentation of the contents, to determine workloads of the system and to carry out adjustments and improvements in the website in future, if applicable, based on statistical evaluations.

The data is deleted once it is no longer necessary for achieving the purpose of its collection. If the data is collected for the provision of the website, this is the case when the respective session has ended. Log files are deleted or anonymised at the latest after seven days so that an allocation of the retrieving client is no longer possible.

b) Legal basis:
Legal basis for the processing is art. 6 para. 1 clause 1 lit. f GDPR. The legitimate interest in the processing lies in the technical facilitation of the retrieval of the website, optimised presentation of the contents for the user and further improvement/optimisation of the website in future.

c) Right of objection:
In case of data processing based on art. 6 para. 1 clause 1 lit. f GDPR, you are entitled to a right of objection irrespective of other rights. Refer below (no. 6: “Rights of the person concerned”)

Use of cookies by our server

a) Explanation and processing purpose:

Our website uses cookies (refer above for explanation) set by our web server; this is pointed out to you with a banner fading in at least when you call up our website for the first time.

The cookies used by our server are so-called session cookies, which serve for recognising multiple related requests of a user and allocating them to a session. They are automatically deleted immediately after the end of the session.

b) Preventing the storage of cookies:
The storage of cookies can be prevented by making corresponding changes in the browser settings; for the rest, you can delete the stored cookies through your browser. As a result of this, certain functionalities of the website called up may not be used at all or may not be used comfortably.

c) Legal basis:
Legal basis for this processing is art. 6 para. 1 clause 1 lit. f GDPR. The legitimate interest in the processing lies in the facilitation and optimisation of the use of the website and its functionalities.

d) Right of objection:
In case of data processing based on art. 6 para. 1 clause 1 lit. f GDPR, you are entitled to a right of objection irrespective of other rights. Refer below (no. 6: “Rights of the person concerned”)

Google Analytics

a) Explanation and processing purpose:

We use Google Analytics on our website, a web analysis service from Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA (“Google”). On the basis of a contract for order processing with us, Google records certain user and usage information, summarises it into pseudonymised usage profiles and stores it in cookies (refer above). This includes, for example, information about the browser type/version used, the operating system used, the screen resolution, referrer URL (the previously visited page), anonymised IP address of the accessing computer, time of the server request, files downloaded, videos watched, advertising banners clicked, orders placed, click paths, frequency of the page calls, entry and exit pages, dwell time on individual pages, etc. This is done for a statistical evaluation in view of the future optimisation of the website design and its contents.

This information is transferred to a Google server, which is possibly located in the USA, and is stored there. Google has obligated itself to adhere to the Privacy Shield agreement published by the US Ministry of Commerce between the EU and the USA about the collection, use and storage of personal data from the EU member states. The certificate is available at www.privacyshield.gov.

We have activated an IP anonymisation tool, as a result of which your IP address is firstly abridged by Google Analytics within member states of the European Union or by Google in other contracting states of the treaty about the European Economic Area and is thus transmitted in an anonymised form. As order processor pursuant to art. 28 GDPR, Google is the recipient of the personal data.

The information is collected to analyse the use of the website statistically in an aggregated form, to prepare reports about the website activities and the behaviour of users of our website and to provide other services associated with the website and its use, e.g. about the effect of online marketing campaigns. This serves to design our website as required and to optimise it continuously. Google does not merge the IP address transmitted by your browser within the scope of Google Analytics with other data.

The maximum storage duration chosen by us for the data collected through Google Analytics is 14 months. The data is automatically deleted after the expiry of this period.

b) Preventing the storage of cookies:
The storage of cookies can be prevented by making corresponding changes in the browser settings; for the rest, you can delete the stored cookies through your browser. As a result of this, certain functionalities of the website called up may not be used at all or may not be used comfortably.

You can also

• prevent the collection and transmission of the data generated by the cookie, which is related to your use of the website, to Google as well as the processing of this data by Google by downloading and installing the Browser-Plugin that is available under the following Link (http://tools.google.com/dlpage/gaoptout?hl=de).

• prevent the collection of your personal data by Google Analytics through an opt-out by clicking the following link: Deactivate Google Analytics. As a result of this, an opt-out cookie is set, which prevents the future collection of your data by Google Analytics when visiting this website.

c) More information about Google Analytics:
More detailed information about the terms of use and data protection can be found under the following links:

http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/

d) Legal basis:
Legal basis for the use of Google Analytics is art. 6 para. 1 clause 1 lit. f GDPR. The legitimate interest in the processing lies in the analysis of usage data to detect and rectify errors and to carry out optimisations in the website design on the basis of this knowledge as well as to determine and optimise marketing measures.

e) Right of objection:
In case of data processing based on art. 6 para. 1 clause 1 lit. f GDPR, you are entitled to a right of objection irrespective of other rights. Refer below (no. 6: “Rights of the person concerned”)

4. Nolde newsletter

a) Explanation and processing purpose:
You can subscribe to a newsletter through our website. It contains interesting news about the activities of Nolde Stiftung in Seebüll. The registration for subscribing to the newsletter requires you to give a separate declaration of consent including the specification of an e-mail address; this is stored and processed exclusively for the purpose of sending the newsletter to this address.

The newsletter is sent and the recipients are managed with the help of the technical service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br. (www.rapidmail.de); the personal data specified with the registration for the newsletter is transmitted to this service provider on the basis of a contract for order processing made between us and rapidmail GmbH.

b) Consent
The newsletter is sent to the e-mail address specified by you on the basis of your prior consent. The consent issued by you when registering for the newsletter has the following content:

I have noted the data protection-related information and agree, until further notice, that Stiftung Seebüll Ada und Emil Nolde shall regularly send me the Nolde newsletter to the e-mail address specified by me as described in the data protection-related information (no. 4).

The issue of the consent required for subscribing to the newsletter is voluntary and can be revoked any time with effect for the future by sending a simple declaration to us (e.g. by e-mail to datenschutz@nolde-stiftung.de). Every newsletter also contains a link at the end, through which you can deregister from the mailing list and thus revoke your consent. A revocation shall not affect the legality of the processing carried out on the basis of the consent until the revocation. It is not possible to subscribe to the newsletter without the consent.

c) Legal basis:
Legal basis for this data processing is art. 6 para. 1 clause 1 lit. a GDPR.

5. Recipients of the personal data

In connection with the provision of our website and the online shop as well as in the context of the contractual processing of orders placed through our online shop, personal data may – always strictly for a specific purpose – be disclosed to third parties, which also include order processors pursuant to art. 28 GDPR, namely from the following categories: IT service providers (maintenance of our hardware and software), web developers/system administrators (maintenance/administration of our website), website analysis (Google; refer above) and newsletter management (rapidmail; refer above).

6. Rights of the persons concerned

a) You have the right to demand a confirmation from us as to whether we are processing your personal data. If this is the case, you have a right to information about this personal data to the legal extent (art. 15 GDPR in connection with § 34 BDSG [Federal Data Protection Act]). This is not applicable if

• the data is still stored, because it may not be deleted due to legal retention obligations or retention regulations according to the Articles of Association or
• the data serves exclusively for purposes of data security or privacy monitoring

and provision of the information would require disproportionate efforts as well as processing for other purposes is ruled out with the help of suitable technical and organisational measures.

b) You also have the right to demand correction of your incorrect personal data and if necessary under consideration of the processing purposes, to demand the completion of incomplete personal data, even by means of a supplementary declaration (article 16 GDPR). In cases stated in article 17 para. 1 lit. a to f GDPR, you also have a right to deletion of the personal data unless an exception pursuant to article 17 para. 3 GDPR is applicable, as well as in cases stated in article 18 para. 1 GDPR, a right to restriction of the processing. In cases stated in article 20 para. 1 GDPR, you have a right to data transferability.

c) You have a right to appeal to the competent supervisory authority if you are of the opinion that the processing of your personal data infringes the GDPR.

d) Right of objection in case of the processing on the basis of a legitimate interest

As long as the data processing is based on art. 6 para. 1 lit. f GDPR (“legitimate interest”), you have the right to object to the processing of your personal data any time for reasons resulting from your special situation. As a result of exercise of the right of objection, you may use our website as a whole or individual services or functions only to a restricted extent or may no longer use them at all.

7. Amendments to this information

This data protection-related information can be amended in future to adapt it to changed circumstances, particularly to adapt it to changes in the legal requirements, the official practice or jurisprudence.

As of: 17.05.2018

———————————————————————————————–

Data protection-related information for video surveillance

Welcome to Seebüll! We are happy to see you here. To make your and others’ visit as safe as possible and to protect our facility and the exhibits, our premises is equipped with video cameras both inside and outside. With the following notes, we would like to inform in detail about the video surveillance undertaken by us.

1. Party responsible and Data Protection Officer

The party responsible for the data processing in connection with the use of our website is

Stiftung Seebüll Ada und Emil Nolde, 25927 Seebüll/Neukirchen
Tel.: +49 (0)4664-98 39 30, e-mail: info@nolde-stiftung.de

The internal Data Protection Officer is: Mr. Bülent Kremser, telephone: 04664 / 98 39 3-19,
e-mail: datenschutz@nolde-stiftung.de.

2. Scope of the video surveillance; storage and storage duration

The video surveillance takes place

• in the interior area: exhibition rooms of the Nolde building
• in the exterior area: Nolde garden
• in the exterior area: private access road

The camera for the private access road records the entering vehicles including the registration plate. The video signals are stored digitally with the following deletion periods:

Area – deletion periods
House – 3 days
Garden – 3 days
Access road – 3 days

3. Purposes and legal basis of the video surveillance

The video surveillance takes place for the following purposes:

• Identification and avoidance of hazards in view of theft, vandalism/damage to the foundation’s property as well as to visitors and preservation of evidence in this regard (prosecution)
• Identification and avoidance of hazards in view of hazards to life, health and the freedom of visitors, our employees or other persons in our premises as well as preservation of evidence in this regard (prosecution).

Legal basisfor this is art. 6 para. 1 clause 1 lit. f GDPR. The legitimate interest lies in the protection of property as well as life, limb and health. Video surveillance is a measure suitable for the specified purposes; it cannot be replaced by any equally suitable and effective measure. There are no indications of outweighing interests of the persons concerned worth protecting. The video surveillance takes place in private premises with a high cultural value and is a protective measure in museums and exhibitions, which the persons concerned are familiar with. For the rest, the persons concerned are not identified generally, but only if and as long as one of the aforementioned hazards is applicable.

There is a right of objection pursuant to art. 21 GDPR (refer below).

4. Recipients of the personal data

Our video surveillance systems are technically implemented by technical service providers, with whom we have made contracts for strictly earmarked order processing. As order processors, these technical service providers are considered as recipients of the personal data.

5. Rights of the persons concerned

a) You have the right to demand a confirmation from us as to whether we are processing your personal data. If this is the case, you have a right to information about this personal data to the legal extent (art. 15 GDPR in connection with § 34 BDSG. This is not applicable if

• the data is still stored, because it may not be deleted due to legal retention obligations or retention regulations according to the Articles of Association or
• the data serves exclusively for purposes of data security or privacy monitoring

and provision of the information would require disproportionate efforts as well as processing for other purposes is ruled out with the help of suitable technical and organisational measures.

b) You also have the right to demand correction of your incorrect personal data and if necessary under consideration of the processing purposes, to demand the completion of incomplete personal data, even by means of a supplementary declaration (article 16 GDPR). In cases stated in article 17 para. 1 lit. a to f GDPR, you also have a right to deletion of the personal data unless an exception pursuant to article 17 para. 3 GDPR is applicable, as well as in cases stated in article 18 para. 1 GDPR, a right to restriction of the processing. In cases stated in article 20 para. 1 GDPR, you have a right to data transferability.

c) You have a right to appeal to the competent supervisory authority if you are of the opinion that the processing of your personal data infringes the GDPR.

d) As long as the data processing is based on art. 6 para. 1 lit. f GDPR (“legitimate interest”), you have the right to object to the processing of your personal data any time for reasons resulting from your special situation.

6. Amendments to this information

This data protection-related information can be amended in future to adapt it to changed circumstances, particularly to adapt it to changes in the legal requirements, the official practice or jurisprudence.

Nolde

Privacy

Nolde