1. Legal basis
The subject of data protection is personal data. According to Art. 4 No. 1 of the European General Data Protection Regulation (GDPR), this is information that relates to an identified or identifiable natural person. This includes, for example, information such as name, address, e-mail address, telephone number or IP address.
Your personal data may only be processed, e.g. collected, stored, used or disclosed, if laws and other regulations permit this or if your consent has been given. As a public body, we are subject to the European Data Protection Regulation and the Baden-Württemberg Act on the Adaptation of General Data Protection Law and Other Regulations to Regulation (EU) 2016/679 (LDSG). As a website operator, we are also subject to the Digital Services Act (DSA) and the Telecommunications Digital Services Data Protection Act (TDDDG).
The processing of your personal data is permissible according to Art. 6 para. 1 DSGVO:
- if your consent has been given,
- to fulfil a contract or to carry out pre-contractual measures,
- for the fulfilment of a legal obligation to which we are subject,
- if vital interests of you or those of another natural person make the processing of personal data necessary.
Furthermore, the processing of your personal data is permissible according to § 4 LDSG:
- if it is necessary for the performance of a task within the competence of the Staatsgalerie Stuttgart or in the exercise of official authority vested in the Staatsgalerie Stuttgart.
2. Processing of personal data
We process your personal data only for the purpose for which they were collected and communicated to us by you. This data is deleted after the process has been completed and the legal deadlines have expired.
As a rule, your data will not be passed on to third parties without your express consent. In certain cases, we use the services of a processor. These can be natural or legal persons, authorities, institutions or other bodies that process personal data on our behalf. We have contracts with our service providers so that your personal data may only be processed in accordance with our instructions. The processors will only share your personal data with us and no other bodies or organisations and will also take necessary technical and organisational measures to process your data securely.
All persons working for us are obliged to maintain data secrecy in accordance with § 3 para. 2 LDSG. In addition, data protection training courses are held regularly at the Staatsgalerie Stuttgart.
3. Logging of accesses
Every time a user accesses the media guide of the Staatsgalerie Stuttgart and every time a file is retrieved, data about this process is temporarily stored and processed in a log file. The storage serves internal system-related and statistical purposes for the improvement of our information offer.
At irregular intervals, the logged data is evaluated internally by employees of the Staatsgalerie (management assistance, press office), e.g. accesses during the duration of an exhibition. The evaluation is not user-related, i.e. the Staatsgalerie Stuttgart does not create any personal user profiles, not even using pseudonyms (e.g. IP address). The data are also not merged with other data sources and therefore do not allow any conclusions to be drawn about specific individuals.
Within the scope of our media guide, we use the services of Sinnoptics – Design und Websites mit System.
Sinnoptics works as our order processor and hosts our web offer. You can obtain further information about Sinnoptics at: https://www.sinnoptics.de
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us for the following purposes:
- Operation, use and improvement of the media guide
- Technical security (defence against attempted attacks)
- Checking in case of suspicion of illegal use
- Elimination of technical faults/errors
- Statistical evaluation
The following data is logged:
- IP address and Session ID
- Device information (anonymised)
- Name of the retrieved file
- Date and time of access
- Amount of data transferred
- Access status (file transferred, file not found, command not executed, etc.)
- Referrer URL (internet address of the website from which the user has reached the website of the Staatsgalerie by clicking on a link)
The transmission is encrypted and in accordance with Art. 32 Para. 1 lit. a DSGVO.
This data is not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. e DSGVO in conjunction with § 5 LDSG. Data in log files are deleted every 30 days.
4. Cookies
We use so-called cookies for data collection and storage. Cookies are small data packets that your browser stores in your end device at our instigation.
Two types of cookies are used. Temporary cookies are automatically deleted when you close your browser (session cookies). Permanent cookies, on the other hand, have a maximum life of up to one month. This type of cookie allows you to be recognised when you return to the website after leaving it. You can refuse to accept cookies in your browser settings.
You can manage your consent in the cookie settings.
5. Web analysis
This website uses Matomo, an open source solution for web analysis. Matomo uses so-called "cookies" text files that are stored on your computer and enable a statistical analysis of the use of the website. The data is stored anonymously on a German server of the provider. The IP address is anonymised before it is stored and cannot be used to identify individual persons.
The data stored by Matomo is not linked to other data sources or passed on to third parties.
You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Techniques such as Java applets or Active-X controls, which make it possible to track the user's access behaviour, are not used.
6. Links
The media guide contains links to the website of the Staatsgalerie Stuttgart. We would like to point out that this website has additional data protection provisions. Therefore, should you chose to follow one of these links, please take notice of the privacy policy of the website of the Staatsgalerie Stuttgart.
7. Amendment of the privacy policy
The Staatsgalerie Stuttgart reserves the right to adapt the privacy policy in line with technical developments and changes in the legal framework. You will find the current status of this privacy policy at the end of the declaration.
8. Your rights
Upon request, you will receive information free of charge and without having to give reasons as to whether and, if so, which of your personal data we process. You can have your data processed by us corrected, deleted or the processing restricted. Furthermore, you can object to the processing of the data concerning you at any time. You can also revoke the consent given to us for the collection and use of data at any time without giving reasons.
We will be happy to answer any further questions you may have about our information, data protection and the processing of your personal data. Please contact us at the address given in the imprint.
You can address complaints against the processing of your personal data to the supervisory authority responsible for us:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32
70025 Stuttgart
T+49 711 615541-0
F+49 711 615541-15
poststelle@lfdi.bwl.de (public key)
9. Contact
Your trust is important to us. If you have any questions about this data protection statement or about data protection at the Staatsgalerie Stuttgart, for example regarding the processing of your personal data, please feel free to contact our data protection officer:
Staatsgalerie Stuttgart
Dr. Marcus Hoinle
Datenschutzbeauftragter
Konrad-Adenauer-Str. 30-32
70173 Stuttgart
datenschutz@staatsgalerie.bwl.de
Status: November 2024