Privacy

The Staatliche Museen zu Berlin – Preussischer Kulturbesitz places great importance on handling your personal data in a responsible manner. To this end, the following information will outline:

• why the Staatliche Museen zu Berlin collects and stores data
• what rights users of this website have
• how the Staatliche Museen zu Berlin collects data and which data it retains
• which kinds of cookies are used on the website of the Staatliche Museen zu Berlin
• how you can object to or avoid the collection of your personal data
• who is responsible for this website and its data privacy policies

1. Why does the Staatliche Museen zu Berlin collect data and utilize user analysis software?

As a general rule, we collect and use personal data related to our users only to the extent that this is necessary for us to ensure the functionality of the website and to deliver our content and services. For example, it is necessary for our system to temporarily save a user’s IP address in order to facilitate a stable and secure delivery of the website to the computer of the user. To this end, it is necessary to save the anonymized IP address of the user for the duration of 60 days. This data is erased as soon as it is no longer necessary
The Staatliche Museen zu Berlin carry out analysis of the ways users interact with this website. This provides us with information to improve our online presence. This includes, for example, knowing how often particular aspects on a website are clicked on, or which browsers are used to view the site. The data that is saved for this is anonymized or pseudo- anonymized, and is used by the Staatliche Museen zu Berlin exclusively for the purposes of statistical analysis. The data is not used for any other purpose, nor is it passed on to third parties.

2. What rights do users have on our website?

In relation to personal data and our website, you have the following rights, as defined by the EU’s General Data Protection Regulation:
• the right of access (art. 15 GDPR),
• the right of notification and erasure (art. 16&17 GDPR),
• the right to restriction of processing (art. 18 GDPR),
• the right to object against processing (art. 21 GDPR),
• the right to data portability (art. 20)
Additionally, you have the right to make a complaint to a data privacy regulating body about the way we have processed your personal data (art. 77 GDPR). For the Staatliche Museen zu Berlin, the Federal Commissioner for Data Protection and Freedom of Information (BfDI) is the relevant body.

3. What data is collected?

a) Website functionality and creation of log files
With every visit to our website, our system automatically collects data and information from the computer system of the computer producing the traffic. The processing of this personal information is regulated by art. 6 para. 1f of the GDPR. The following data is collected:
• IP addresses
• Log files
• Inventory data, traffic data and content data of the website
• Error protocols
Log files allow website operators to monitor activities on their websites. The access logs of the web server keep a record of when each particular page was visited. This includes the following data: IP address, directory protection users, date, time, pages visited, protocols, status codes, data size, referrer, user agent, host name used.
Our website is developed and supervised by SMITH:
• The IP addresses are saved in anonymized form. For this, the final three digits are removed, that is, 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are likewise made anonymous. These anonymized IP addresses are saved for 60 days. Information about the directory protection user will be made anonymous after one day.
• Error logs that monitor failed site visits are deleted after seven days. Along with the error notice, these include the IP address accessing the site and, depending on the kind of error, the website being accessed.
• Visits via FTPs are anonymized and saved for 60 days.
The Staatliche Museen zu Berlin has carefully selected the agency SMITH. A contract was signed to regulate data processing. SMITH are obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated.

b) Which cookies does this website use?
Cookies are small text files which are saved on your computer when you visit a website and are accessed by the browser you use. Cookies allow information to be exchanged between computer programmes or to be saved for a limited time. Specific information is transmitted to our site from the saved cookies. However they are unable to operate a programme or transfer viruses to your computer.
Cookies can only be saved if you have authorized this in your browser settings. Therefore, as a user, you also have full control over the use of cookies. By changing your settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can be done automatically.
With every visit to a website, and every time you access a file online, it is typical for browsers to transmit data. The processing of personal data is regulated by art. 6, para. 1f of the GDPR. Of the data that is transmitted when you visit this website, the Staatliche Museen zu Berlin save the following information:
• Browser type/version
• Operating system
• Referrer URL
• Date and time of the server inquiry
• Page(s) visited and file(s) accessed
• Amount of data transmitted
• Anonymized/pseudo-anonymized IP address
• Country of origin
• Notification of whether the attempt at access was successful.
The website of the Staatliche Museen zu Berlin uses cookies very sparingly. This means that you can generally also view the website without cookies. The cookies used on this website have two different functions:
• Part of the cookies we use (so-called transient cookies) guarantee that the website functions seamlessly. The validity of these cookies is limited to the individual web session. As soon as you shut down your browser, these so-called “session cookies” are deleted.
• For website analysis, the Staatliche Museen zu Berlin employ the user analysis software Google Analytics (with anonymization function). A contract was signed with the service provider to regulate data processing. The processing of the personal data of users allows us to analyse the interaction of our users with the site. Through evaluating this data, we are able to piece together information about the use of individual components on our website. This helps us to continually improve our website and make it more user-friendly. Through anonymized IP addresses, the data collected can no longer be ascribed to particular individuals. This makes it impossible to connect usage data or usage profiles with personal data. The software for this runs exclusively on the servers of our website. It is only there that personal data about users is saved. This data is not forwarded on to third parties. Depending on whether you have consented to or rejected the collection of data, there will either be two website analysis cookies or a Google Analystics deactivation cookie saved on your computer. These are so-called “persistent cookies”, which are automatically deleted after two years. You can also delete these cookies yourself in your browser security settings at any time.
Refusing authorization of data collection by the website analysis software Google Analytics
You have the right to decide whether or not you consent to the Staatliche Museen zu Berlin collecting and analysing the statistical data described above.

PLEASE NOTE: If you have activated automatic deletion of cookies in your browser, when you shut down your programme, the deactivation cookie will also be deleted. In this case, the next time you visit this website, you will need to reject the collection of data once again. Additionally, if you use another computer or another web browser, you also need to reject the collection of your data again.

Disable Google Analytics

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

c) Which data is saved in the event of digital inquiries by email or using a contact form?
For mail inquiries or contact via an online form, you are required to enter specific information so that the Staatliche Museen zu Berlin can contact you or send you the documents you have requested. The processing of your personal data is regulated by art. 6 para. 1a of the GDPR.
If you transmit personal data to the Staatliche Museen zu Berlin through an inquiry, this information will only be used for that specific instance of correspondence or for the purpose named in the form. The data is saved for as long as is required by the purpose for which you have given your consent. You have the right to rescind your consent for future instances.

d) Presence on online channels and incorporation of services and content from third parties
Online channels of the Staatliche Museen zu Berlin
We are active on social media and platforms with our own profiles, in order to communicate with visitors, interested individuals and users, and to inform them about our services.
You can find details about how user data is managed in Facebook’s data privacy policy, at: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
It is currently unclear whether or not Facebook complies with the level of protection required by the European Union in relation to personal data. In light of this, the use of Facebook poses a risk in terms of data privacy.
Details about how user data is managed on Instagram are available in their data policy, at: http://instagram.com/about/legal/privacy/.
Details about how user data is managed on YouTube are available in their data policy, at: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
YouTube
For embedding and displaying video content, our website uses plugins from YouTube. The provider of this video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When visiting a page with a YouTube plugin integrated into it, a connection to the YouTube servers is produced. Through this, YouTube receives information about which of our pages you have visited.
If you are logged into your YouTube account, YouTube can directly connect your internet activity with your personal profile. By logging out in advance, you are able to prevent this from occurring.
We use YouTube in the interests of delivering a dynamic presentation of our online content. This is considered a justified interest as outlined by art. 6 para. 1f of the GDPR.
Details about how user data is managed on YouTube are available in their data policy at: https://www.google.de/intl/de/policies/privacy.
Incorporation of other services and external content
This website incorporates external content, an example being audio recordings from VoiceRepublic, or ePaper from Yumpu. This requires the providers of this content (hereafter referred to as “third party providers”) to process the IP addresses of users, since without the IP address, they could not send the content to the browser of the user. We make an effort to only use content for which the provider uses IP addresses of users exclusively for content provision. However we have no power to prevent third party providers from using the IP addresses for statistical purposes, for example. If we know that such practices are occurring, we make users aware of it.

4. Who is responsible for content and maintenance, and who looks after data protection?

For this website, the Staatliche Museen zu Berlin – Preussischer Kulturbesitz, legally represented by Prof Dr Hermann Parzinger, President of the Stiftung Preussischer Kulturbesitz, is responsible for data protection.
Staatliche Museen zu Berlin – Preussischer Kulturbesitz
General Directorate
Stauffenbergstraße 41
10785 Berlin
Germany
Telephone: +49 (0)30 2660
Email: kommunikation[at]smb.spk-berlin.de
Website: www.smb.museum
For questions relating to data protection, the Stiftung Preussischer Kulturbesitz has a Data Protection Officer whom you can contact at our aforementioned postal address, addressed to the “Datenschutzbeauftragte”. Alternatively, you can contact them at:
Email: Datenschutzbeauftragte[at]hv.spk-berlin.de
Website of the Stiftung Preussischer Kulturbesitz: http://www.preussischer-kulturbesitz.de/service/kontakt/ansprechpartnerinnen/interessenvertretungen.html

 

5. Data protection provisions about the application and use of Google Analytics (with anonymization function)

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

 

6. Changes to the Data Protection Policy

The Staatliche Museen zu Berlin reserves the right to adapt this policy to meet technological developments and changes to legal frameworks. The date of the most recent version of this data protection policy can be found at the end of this notice.
Date: October 2018