Privacy Notice
1. Data privacy at a glance
General information
The following information provides you with a brief description of what happens to your personal data when you visit this website. Personal data are all data from which you can be identified in person.
The body responsible for processing data on this website is:
AlliiertenMuseum e. V. (non-profit)
represented by:
Dr. Jürgen Lillteicher, Director of the Allied Museum
Registered office
Clayallee 135
14195 Berlin
Telephone: +49 (0)30 / 818 199-0
E-mail address: info@alliiertenmuseum.de
How do we collect your data?
Your data are primarily collected when you provide us with them. This may include information you provide when you fill in a contact form.
Other data are collected by our IT systems automatically or by your consent when you visit the website. These are mainly technical data such as your Internet browser and operating system or the time when you accessed our site. The data are collected automatically when you come on to the website. You can find more information about data collection under No. 2 of this Privacy Policy.
What do we use your data for?
Some data are collected to ensure that the website, our content and our services can be provided smoothly and without errors. Other data may be used to analyse your user behaviour.
What is the legal basis for processing?
Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) is the legal basis for our enterprise for processing procedures for which we need to obtain your consent for processing for a particular purpose. When we process your personal data which are necessary for the performance of a contract to which you are party (such as ordering of publications or our newsletters), this is done on the legal basis of Art. 6(1)(b)of the GDPR. This also applies to steps taken prior to entering into a contract. This website is part of the public relations work of the Allied Museum. The legal basis for processing data within the scope of public relations work is Art. 6(1)(e) of the GDPR in conjunction with section 3 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
How long do we store your data for?
Unless any specific storage period has been stated in this Privacy Policy, your personal data will remain with us until they are no longer necessary in relation to the purpose for which we are processing your data. If you make a justified request for the erasure of your data or withdraw your consent for the processing of your data, your data will be erased, unless we have any other legitimate grounds for storing your data (such as safekeeping periods stipulated under tax law or commercial law), in which case your data will be erased once it is no longer necessary to store them for on these grounds.
What are your rights in relation to your data?
Information, erasure and rectification
Within the scope of applicable legal provisions, you have the right at any time to obtain free of charge information about the personal data we have stored concerning you, about the source and recipient of such data and the purpose for which the data are being processed, as well as, if applicable, a right to rectification or erasure of these data. Please contact us at any time if you have any questions regarding these or any other matters relating to personal data.
Withdrawal of your consent to the processing of your data
Many data processing procedures are only possible with your express consent. You may withdraw any consent you have previously given at any time. This will not affect the lawfulness of processing up to the time when you withdraw your consent.
Right to make a complaint to the responsible supervisory authority
In the event of breaches of the GDPR the data subject has the right to make a complaint to the responsible supervisory authority in Berlin. This right to make a complaint is without prejudice to other administrative or judicial legal remedies.
2. Data collection on this website
SSL- respectively TLS encryption
For reasons of security and to protect the transmission of confidential content such as orders or enquiries you send us as the site operator, this site uses SSL respectively TLS encryption. You can recognise an encrypted connection by the fact that the address line in your browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If the SSL respectively TLS encryption is activated, the data you send us cannot be accessed and read by third parties.
Cookies
Our website uses cookies. Cookies are small text files and do no damage to your end device. They are stored on your end device either temporarily for the duration of a session (“session cookies”) or permanently (“permanent cookies”).
Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted after 30 days at the latest by your web browser.
Some cookies may also be stored on your end device by third party enterprises when you visit our website (“third party cookies”). These enable us or you to use certain services provided by the third party enterprise.
Cookies have various functions. Many cookies are necessary for technical reasons, since certain website functions would not work without them (such as the goods basket function or the displaying of videos). Other cookies are used to evaluate user behaviour or to display advertising.
Cookies which are necessary for carrying out electronic communication processes (necessary cookies) or for providing certain functions (functional cookies) or for optimising the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6(1)(f) of the GDPR unless a different legal basis is stated. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimised provision of its services. If consent has been requested to store cookies, the cookies in question are stored exclusively on the basis of this consent (Art. 6(1)(a) of the GDPR; this consent may be withdrawn at any time.
You may configure your browser to inform you when cookies are placed and to allow cookies only on a case-by-case basis, to allow the acceptance of cookies for certain cases or generally to block them, as well as to activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, this may restrict the functionality of this website.
If cookies are placed by third party enterprises or for analytical purposes, we will inform you of this separately within the scope of this Privacy Policy and request your consent if necessary.
General collection of data
When you access our website or view a file, data regarding this process will be stored in a log file on our web server. The following data may be stored:
IP address (if possible this will be stored in an anonymised form)
Domain name of the website, from which you came
Names of the viewed files
Date and time of access
Name of your Internet Service Provider
and if applicable operating system and browser version on your end device
We only store IP addresses for data security reasons, to ensure the stability and security of our system.
Legal basis: Art. 6(1)(f) of the GDPR. We reserve the right to carry out statistical evaluation of anonymised data sets.
Contact form
If you send us an enquiry using the contact form, we store your information from the enquiry form including the contact data you provide on it for the purpose of processing your enquiry and for any follow-on questions there may be. We will not pass these data on without your consent.
These data are processed on the basis of Art. 6(1)(b) of the GDPR if your enquiry is connected with the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) of the GDOR or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data provided by you on the contact form will be retained by us until you ask us to erase them, withdraw your consent to store them or they are no longer necessary in relation to the purpose for which they have been stored (e.g. once the processing of your enquiry has been completed). This does not affect mandatory legal requirements, in particular statutory retention periods.
Links to third-party websites
Links are offered on this website which refer you third-party websites. Data are not transmitted to the link destination until you click on one of these links. This is necessary for technical reasons. The data transmitted include in particular your IP address, the time at which you clicked on the link, the site on which you clicked on the link and details of your Internet browser. If you do not wish these data to be transmitted to the link destination, then do not click on the link.
Matomo
This website uses the open source web analytics service Matomo. Matomo uses technologies which enable cross-site user recognition in order to analyse user behaviour (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. Your IP address will be anonymised before it is stored.
Matomo enables us to collect and analyse data about the use of our website by visitors to the website. Among other things, this enables us to find out which pages are accessed and when and from what region. We also collect various log files, including IP address, referrer, browser being used and operating system, and can measure whether visitors to our website carry out certain actions such as clicks.
This analytical tool is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in anonymised analysis of user behaviour, in order to optimise its web offering. If consent if requested for this (e.g. consent to the storage of cookies), then processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. This consent may be withdrawn at any time.
You may prevent the use of Matomo by deleting the following hook; this will activate the opt-out plug-in:
Matomo Opt-Out
Newsletter data
We use the newsletter tool by Sendinblue.com. If you would like to subscribe to the newsletter offered on the website, we need from you your e-mail address and information that allows us to check that you are the owner of the e-mail address that has been given and confirm that you agree to receive the newsletter. No other data are collected except on a voluntary basis. We will use these data exclusively for sending the requested information and will not pass them on to third parties.
The data provided in the newsletter subscription form are processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and e-mail address and their use for sending the newsletter at any time, for instance by using the “unsubscribe” link in the newsletter. The withdrawal of your consent will not affect the lawfulness of data processing procedures that have already taken place.
We or the newsletter service provider will store the data you provide to us for the purpose of subscribing to the newsletter until you unsubscribe from the newsletter, and the data will be erased from the newsletter distribution list after you unsubscribe from the newsletter or once they are no longer necessary in relation to the purpose for which they were stored. We reserve the right to delete or block e-mail addresses from our newsletter distributor at our own discretion within the scope of our legitimate interest under Art. 6(1)(f) GDPR.
This will not affect data which we have stored for other purposes.
Once you have been removed from the newsletter distribution list, your email address will, if necessary, be stored by us or the newsletter service provider on a blacklist, if this is necessary to prevent future mailings. The data from the blacklist will be used only for this purpose and will not be combined with any other data. This is both in your interests and our interests in complying with statutory requirements relating to the sending of newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). There is no time limit on the storage of data on the blacklist. You may object to this storage if your interests override our legitimate interest.
Flockler
We use Flockler, a social media aggregator tool, in order to manage social media feeds and present social media content which we believe you will find relevant and inspiring. Flockler does not store any data in relation to your visit. Depending on the platform, however, the social media services may store information about you if you decide to interact with the content (e.g. watch a video or visit our social media profile page).
YouTube
We have embedded videos on our website which are stored on our YouTube website at https://www.youtube.com/channel/UCM2JMRCMpnBuJ3eQXx0cMLg. These videos are displayed directly on our website. The embedding of the videos guarantees better user-friendliness and attractive presentation in keeping with our public relations work.
The videos are embedded in extended data protection mode. This means that if you do not view the videos, none of your personal data will be transmitted to YouTube.
We have no influence over the content or scope of use of the data collected by YouTube. For more information about the purpose and scope of data collection and their processing by the provider you should refer to its privacy policy:
YouTube: https://www.google.de/intl/de/policies/privacy/
YouTube is a service owned by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for this data processing is provided by Art. 6(1)(e) GDPR in conjunction with section 3
3. Miscellaneous
Security information
We secure our website and other IT systems with appropriate technical and organisational measures to protect your data against loss, destruction, unauthorised access, unauthorised modification or unauthorised sharing. Complete protection against all risks is not, however, possible in practice despite every care being taken. Because we cannot guarantee complete data security in e-mail communication, we recommend that you send us any confidential information by post.
Changes to this Privacy Policy
We reserve the right to change this Privacy Policy if there is any change in the legal situation or in this online offering or in the kind of data being collected. This only applies, however, to statements in relation to data processing. If we need the user’s consent or if parts of the Privacy Policy include arrangements pertaining to our contractual relationship with users, the Privacy Policy will not be changed until the user’s consent has been obtained.
February 2022