Data privacy state­ment

1. Responsibility for data collection?
Data processing on this website is carried out by the website oper­ator. Their contact details can be found in the legal notice on this website.

2. How are your data recorded?
One way your data are recorded is when you submit them to us, for example by filling in a contact form.

In addi­tion, further, primarily tech­nical data are auto­mat­i­cally collected by our IT systems when you visit the website. Tech­nical data might be the time you visit the site, the oper­ating system you use or your internet browser. As soon as you visit our website, this data collec­tion takes place auto­mat­i­cally.

3. Why are your data recorded?
We record some of your data to ensure fault-free provi­sion of the website and to opti­mize your visit to our home­page. At the same time, other data can also be used to analyze your user behavior.

4. Your rights in relation to your personal data
You have the right to obtain infor­ma­tion without charge at any time, which means you can request free-of-charge infor­ma­tion about the origin, recip­i­ents and purpose of the personal data stored that relates to you when­ever you wish. You also have a right to demand the amend­ment, blocking or dele­tion of this data. Ques­tions on this or other matters relating to data protec­tion can be directed to us using the address provided in the legal notice at any time. Further­more, you also have a right to complain to the rele­vant super­vi­sory authority.

5. Third-party provider and analysis tools
When you visit our website, your browsing behavior can be eval­u­ated by means of cookies and so-called analysis programs. The analysis of your browsing behavior is gener­ally anony­mous, so the browsing behavior cannot be traced back to you person­ally. You can object to this analysis or prevent it by not using specific tools. Details on this and on ways to object can be found in our data privacy state­ment under the heading “Analysis tools and third-party providers”.

II. Mandatory information on data protection
We wish to point out that data transfer via the internet (e.g. in commu­ni­ca­tion via e-mail) may involve gaps in secu­rity. It is not possible to ensure water­tight protec­tion of data from access by third parties.

1. Responsible party
The party respon­sible for data processing on this website is:

SCHIRN KUNSTHALLE FRANK­FURT AM MAIN GMBH
ROEMER­BERG
60311 FRANK­FURT, GERMANY
daten­schutz@​SCHIRN.​de

2. Option to withdraw your consent to data processing
Many elements of data processing may only be carried out with your express consent, but you can with­draw consent already given at any time. An informal e-mail sent to us is suffi­cient for this purpose. The legit­i­macy of the data processing carried out up until the with­drawal of consent remains unaf­fected.

3. Right to data portability
You have the right to request that any data we auto­mat­i­cally process on the basis of your consent or in order to fulfil a contract is trans­ferred to you or to third parties in a commonly used, machine-read­able format. If you require the data to be trans­ferred directly to another respon­sible person, this will only take place where it is tech­ni­cally feasible.

4. Encryption through SSL or TSL
For secu­rity reasons and for protec­tion in the transfer of any confi­den­tial content you send to us as the website oper­ator, such as orders or enquiries, we use SSL or TLS encryp­tion.

When the SSL or TSL encryp­tion is acti­vated, the data you transfer to us cannot be read by third parties. You can recog­nize whether or not a connec­tion is encrypted from the padlock symbol in your browser line and from the fact that the address line changes from “http://” to “https://”.

5. Information, blocking, deletion
Within the scope of the rele­vant statu­tory provi­sions, you have the right to obtain free-of-charge infor­ma­tion at any time about your stored personal data, their origin and recip­i­ents, and the purpose of the data processing, and, where rele­vant, you have a right to the amend­ment, blocking or dele­tion of such data. Ques­tions on this or other matters relating to data protec­tion can be directed to us using the address provided in the legal notice at any time.

III. Data protection officer required by law
We have appointed the following data protec­tion offi­cers for our company.

SCHIRN KUNSTHALLE FRANK­FURT AM MAIN GMBH
ROEMER­BERG
60311 FRANK­FURT, GERMANY
daten­schutz@​SCHIRN.​de

IV. Data collection on our website: Cookies
The web pages some­times make use of so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies help us to make our offering more user-friendly, more effec­tive and more secure. They make it possible to main­tain preset changes made by the user the next time they visit the website too. Cookies are tiny text files that the website stores on your computer in your browser history. When you view a website again, the cookie sends this infor­ma­tion to the server.

We primarily use so-called “session cookies”. These are auto­mat­i­cally deleted after your visit ends. Other cookies remain stored on your end device until you delete them. These cookies enable us to recog­nize your browser the next time you visit the site.

You can set your browser so that you are informed about the storing of cookies and can choose to allow cookies only in indi­vidual cases, to refuse storage of cookies for specific cases or exclude them entirely, or you can acti­vate the auto­matic dele­tion of cookies when your browser is closed.

The deac­ti­va­tion of cookies can limit the func­tion­ality of this website.

Cookies that are required for the execu­tion of elec­tronic commu­ni­ca­tion processes or for the provi­sion of specific func­tions you require (e.g. shop­ping basket func­tion) are stored pursuant to art. 6, para. 1 lit f) GDPR. The website oper­ator has a legit­i­mate interest in storing cookies for tech­ni­cally fault-free and opti­mized provi­sion of its services. Where other cookies are used (e.g. cookies for the analysis of browsing behavior), these are dealt with in a sepa­rate section of the data privacy state­ment.

1. Server log files
The provider of the website auto­mat­i­cally gathers and stores infor­ma­tion that your browser trans­fers auto­mat­i­cally to us in so-called server log files. This relates to:

Type and version of browser system
IP address
There is no merging of these data with other data sources.

The legal basis for the data processing is art. 6, para. 1 lit. b) GDPR, which permits data processing for the perfor­mance of a contract or in order to take steps prior to entering into a contract.

2. Website registration
You can register your­self on our website in order to use addi­tional func­tions on the site. We use the data you enter here purely to enable your use of the offering or service for which you have regis­tered. The manda­tory infor­ma­tion requested during the regis­tra­tion process must be entered in full. Other­wise, the regis­tra­tion will be rejected.

Processing of the data entered in the regis­tra­tion process takes place on the basis of your consent (art. 6, para. 1 lit a) GDPR). You can with­draw any consent you have already given at any time. An informal e-mail sent to us is suffi­cient for this purpose. The legit­i­macy of the data processing already carried out remains unaf­fected.

V. Social media

1. Twitter Plug-in
Our web pages incor­po­rate func­tions of Twitter, a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Fran­cisco, CA 94103, USA. Through the use of Twitter and the “Retweet” func­tion, the websites you visit are linked to your Twitter account and other users are noti­fied. At the same time, data are also trans­ferred to Twitter.

We would like to point out that we, as provider of the web pages, have no knowl­edge of the content of the data trans­ferred or their use by Twitter. Further infor­ma­tion on this can be found in Twitter’s data privacy state­ment at: twitter.com/privacy.

You can change you data privacy settings with Twitter in your account settings at https://​twitter.​com/​account/​settings.

2. Facebook plug-ins (Like and Share buttons)
Our web pages incor­po­rate plug-ins from the social network Face­book, the provider of which is Face­book Inc., 1 Hacker Way, Menlo Park, Cali­fornia 94025, USA. You can recog­nize the Face­book plug-ins from the Face­book logo or the “Like” button on our site.

You can find an overview of Face­book plug-ins here: devel­opers.​facebook.​com/​docs/​plugins/.

When you visit our pages, a direct connec­tion is created between your browser and the Face­book server via the plug in. This means Face­book receives the infor­ma­tion that you visited our site with your specific IP address. When you click on the Face­book “Like” button while you are logged into your Face­book account, you can link the content of our pages to your Face­book profile. This means that Face­book can connect your visit to our site to your user account.

We would like to point out that we, as provider of the web pages, have no knowl­edge of the content of the data trans­ferred or their use by Face­book. Further infor­ma­tion on this can be found in Face­book’s data privacy state­ment at: de-​de.​facebook.​com/​policy.​php.

If you don’t want Face­book to connect your visit to our web pages to your Face­book user account, then please log out of your Face­book account before visiting our site.

3. Pinterest
Our web pages incor­po­rate the func­tions of Pinterest, a service provided by Pinterest Europe Ltd., Palmer­ston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

We would like to point out that we, as provider of the web pages, have no knowl­edge of the content of the data trans­ferred or their use by Pinterest.

Further infor­ma­tion on this can be found in Pinterest’s data privacy state­ment at: https://​policy.​pinterest.​com/​de/​privacy-​policy.

4. Instagram
Our web pages incor­po­rate the func­tions of Insta­gram, a service provided by Insta­gram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

When you are logged into your Insta­gram account, you can link the content of our web pages to your Insta­gram profile by clicking on the Insta­gram button. This means that Insta­gram can connect your visit to our site to your user account.

We would like to point out that we, as provider of the web pages, have no knowl­edge of the content of the data trans­ferred or their use by Insta­gram.

Further infor­ma­tion on this can be found in Insta­gram’s data privacy state­ment at: https://​instagram.​com/​about/​legal/​privacy/.

VI. Analysis tools and third-party providers

1. Google Analytics
This website uses func­tions of Google Analytics, a web analysis service provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA.

Google Analytics uses so-called “cookies”, which permit analysis of your use of the website. The infor­ma­tion gener­ated by the cookie about your use of this website is gener­ally trans­ferred to a Google server in the USA and stored there.

The legal basis for storage of Google Analytics cookies is art. 6, para. 1 lit. f) GDPR. Google will use this infor­ma­tion on behalf of the oper­ator of this website to eval­uate your use of the website, to compile reports about website activ­i­ties, and to provide further services connected to use of the website and internet use as requested by the website oper­ator.

Where IP anonymiza­tion is acti­vated on the website, however, Google will abbre­viate your IP address in advance within the member states of the Euro­pean Union or in other states party to the agree­ment on the Euro­pean Economic Area. Only in excep­tional cases will the full IP address be trans­ferred to a Google server in the USA and abbre­vi­ated there. Google will not merge the IP address trans­ferred by your browser within the scope of Google Analytics to any other data.

We would like to point out that on this website Google Analytics has been expanded with the code “gat._anonymi-zelp();” in order to guar­antee anonymized collec­tion of IP addresses (so-called IP masking). (Source: daten­schutzbeauf­tragter-info.de)

a. Browser plug-in
You can prevent storage of cookies by adjusting the settings of your browser soft­ware accord­ingly. We would never­the­less like to point out that if you do so, it may not be possible to use all the func­tions of this website in their entirety. In addi­tion to this, you can prevent transfer of the data gener­ated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by down­loading and installing the browser plug-in avail­able at the following link: https://​tools.​google.​com/​dlpage/​gaoptout?​hl=de.

b. Objection to data collection
You can prevent the collec­tion of your data by Google Analytics by clicking on the following link. This stores an opt-out cookie, which prevents the recording of your data during any future visits to this website: Deac­ti­vate Google Analytics.

You can find more infor­ma­tion on Google Analytics’ handling of user data in Google’s data privacy policy at: https://​support.​google.​com/​analytics/​answer/​6004245?​hl=de.

2. Commissioned data processing
We have concluded an agree­ment for Google to process data on our behalf and we apply the strict regu­la­tions of the German data protec­tion author­i­ties in our use of Google Analytics.

3. Facebook Custom Audiences
This website uses func­tions of Face­book Custom Audi­ences, a website analysis service provided by Face­book Inc., 1 Hacker Way, Menlo Park, Cali­fornia 94025, USA.

For the use of Website Custom Audi­ences, the adver­tiser gener­ates a tracking pixel in the Face­book adver­tise­ment account and then imple­ments this on its website. The pixel enables them to mark the visitor and target them once again via a Face­book adver­tise­ment.

4. Google Adwords
This website uses the Google AdWords service. Google AdWords is an online adver­tising program provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA (“Google”). Here, we make use of the remar­keting func­tion within the Google AdWords service. This func­tion gives us the possi­bility of presenting users of our website with adver­tise­ments based on their inter­ests when they visit other websites within the Google Display Network (on Google itself, so-called “Google Ads”, or on other websites). To this end, the user’s inter­ac­tion with our website is analyzed, e.g. to see which offer­ings the user is inter­ested in, so that the user can be presented with targeted adver­tising on other sites too even after the visit to our site has ended. To this end, Google stores a number in the browsers of users who visit specific Google services or websites in the Google Display Network. This number, known as a “cookie”, records the indi­vidual user’s visits. This number does not permit the iden­ti­fi­ca­tion of a person and no personal data are stored; rather, this number serves merely for the unequiv­ocal iden­ti­fi­ca­tion of a web browser on a specific computer. You have the option to deac­ti­vate the use of cookies by Google by clicking on the following link and down­loading and installing the plug-in provided there: www.​google.​com/​settings/​ads/​plugin.

You can find more infor­ma­tion on the handling of user data in Google’s data privacy policy at: http://​www.​google.​com/​privacy/​ads/.

5. Other analysis tools
Our website uses func­tions of Google Tag Manager, Google AdWords User Lists, AdWords Conver­sa­tion Tracker, and Google Datas­tudio, which are analysis tools provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA.

These analysis tools use so-called “cookies”, which permit analysis of your use of the website. The infor­ma­tion gener­ated by the cookie about your use of this website is gener­ally trans­ferred to a Google server in the USA and stored there.

The legal basis for storage of cookies gener­ated by these analysis tools is art. 6, para. 1 lit. f) GDPR. Google will use this infor­ma­tion on behalf of the oper­ator of this website to eval­uate your use of the website, to compile reports about website activ­i­ties, and to provide further services connected to use of the website and internet use as requested by the website oper­ator.

VII. Newsletter data
Our website offers you the option of receiving a newsletter, for which we require an e-mail address. In part, newslet­ters are not sent directly by us, but rather by a company commis­sioned by us to handle this service, in this case Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, whose servers are located in Germany. Inxmail will not use your data to make contact with you itself, however, neither is there any forwarding of data to third parties in connec­tion with the data processing for the purpose of newsletter dispatch.

The data entered into the newsletter regis­tra­tion form is processed exclu­sively on the basis of your consent (art. 6, para. 1 lit. a) GDPR). You may with­draw your consent to the storage of data, the e-mail address and its use for dispatch of the newsletter at any time. You can do this by clicking on the “unsub­scribe” link in the newsletter. The legit­i­macy of the data processing already carried out prior to consent being with­drawn remains unaf­fected.

The data you have submitted to us for the purpose of receiving the newsletter are stored by us until you unsub­scribe from the newsletter and are deleted after that point. Data we have stored for other purposes (e.g. e-mail addresses for the press area) remain unaf­fected by this.


VIII. Plugins and Tools

1. Spotify Embed
Our website makes use of plug-ins from Spotify, a digital music streaming service provided by Spotify AB Regerings­gatan 19, SE-111 53 Stock­holm, Sweden.

If you visit one of our pages that incor­po­rates a Spotify plug-in, a connec­tion is created with the Spotify servers. At the same time, the Spotify server is informed which of our web pages you have visited.

If you are logged into your Spotify account then you enable Spotify to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your Spotify account.

The use of Spotify aims to make our online appear­ance and our online offering more appealing. This repre­sents a legit­i­mate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more infor­ma­tion on the handling of user data in Spotify’s data privacy policy at: https://​www.​spotify.​com/​de/​legal/​privacy-​policy/#​s13.


2. Soundcloud Embed
Our website uses plug-ins from Sound­Cloud, an online music service provided by Sound­Cloud Limited, Rhens­berger Straße 76/77, 10115 Berlin, Germany.

When you visit one of our pages that incor­po­rates a Sound­Cloud plug-in, a connec­tion is created with the Sound­Cloud servers. As part of this process, the Sound­Cloud server is informed which of our web pages you have visited.

If you are logged into your Sound­Cloud account then you enable Sound­Cloud to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your Sound­Cloud account.

The use of Sound­Cloud aims to make our online appear­ance and our online offering more appealing. This repre­sents a legit­i­mate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more infor­ma­tion on the handling of user data in Sound­Cloud’s data privacy policy at: https://​soundcloud.​com/​pages/​privacy.

3. Vimeo Player
Our website uses plug-ins from Vimeo, a video portal provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages that incor­po­rates a Vimeo plug-in, a connec­tion is created with the Vimeo servers. As part of this process, the Vimeo server is informed which of our web pages you have visited. Vimeo also acquires your IP address, and this applies even if you are not logged into Vimeo or do not have a Vimeo account. The infor­ma­tion acquired by Vimeo is trans­ferred to the Vimeo server in the USA.

If you are logged into your Vimeo account then you enable Vimeo to connect your browsing behavior directly to your personal profile.

The use of Vimeo aims to make our online appear­ance and our online offering more appealing. This repre­sents a legit­i­mate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more infor­ma­tion on the handling of user data in Vimeo’s data privacy policy at: https://​vimeo.​com/​privacy/.

4. YouTube
Our website uses plug-ins from YouTube, a site oper­ated by Google and provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages that incor­po­rates a YouTube plug-in, a connec­tion is created with the YouTube servers. As part of this process, the YouTube server is informed which of our web pages you have visited.

If you are logged into your YouTube account then you enable YouTube to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube aims to make our online appear­ance and our online offering more appealing. This repre­sents a legit­i­mate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more infor­ma­tion on the handling of user data in YouTube’s data privacy policy at: https://​www.​google.​de/​intl/​de/​policies/​privacy/.

5. Google Maps
By means of an API, this website makes use of Google Maps, a map service provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA.

Use of the Google Maps func­tions requires storage of your IP address. This infor­ma­tion is gener­ally trans­ferred to a Google server in the USA and stored there. The provider of this site has no influ­ence over this data transfer.

Use of Google Maps aims to make our online appear­ance and our online offering more appealing, and also makes it easier to find places we refer to in the website. This repre­sents a legit­i­mate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more infor­ma­tion on handling of user data in Google’s data privacy policy at: www.​google.​de/​intl/​de/​policies/​privacy/.