I. General information

The SCHIRN KUNSTHALLE FRANKFURT AM MAIN GMBH takes your data privacy very seriously. We record, use and store personal data exclusively within the scope of the statutory regulations and other provisions relevant to data protection for the purposes of understanding how our customers use our web pages and to identify their preferred settings. This means we are able to offer our customers services and improve their online experience.

The following information gives you a simple overview of what happens to your personal data when you visit our website. Personal data are any data with which you can be identified personally. Detailed information on the topic of data protection, most significantly what data is recorded and what it is used for, can be found in the data privacy statement set out below this text.

Recording of your data on our website

1. Responsibility for data collection?

Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice on this website.

2. How are your data recorded?

One way your data are recorded is when you submit them to us, for example by filling in a contact form.

In addition, further, primarily technical data are automatically collected by our IT systems when you visit the website. Technical data might be the time you visit the site, the operating system you use or your internet browser. As soon as you visit our website, this data collection takes place automatically.

3. Why are your data recorded?

We record some of your data to ensure fault-free provision of the website and to optimize your visit to our homepage. At the same time, other data can also be used to analyze your user behavior.

4. Your rights in relation to your personal data

You have the right to obtain information without charge at any time, which means you can request free-of-charge information about the origin, recipients and purpose of the personal data stored that relates to you whenever you wish. You also have a right to demand the amendment, blocking or deletion of this data. Questions on this or other matters relating to data protection can be directed to us using the address provided in the legal notice at any time. Furthermore, you also have a right to complain to the relevant supervisory authority.

5. Third-party provider and analysis tools

When you visit our website, your browsing behavior can be evaluated by means of cookies and so-called analysis programs. The analysis of your browsing behavior is generally anonymous, so the browsing behavior cannot be traced back to you personally. You can object to this analysis or prevent it by not using specific tools. Details on this and on ways to object can be found in our data privacy statement under the heading “Analysis tools and third-party providers”.

II. Mandatory information on data protection

We wish to point out that data transfer via the internet (e.g. in communication via e-mail) may involve gaps in security. It is not possible to ensure watertight protection of data from access by third parties.

1. Responsible party

The party responsible for data processing on this website is:

SCHIRN KUNSTHALLE FRANKFURT AM MAIN GMBH
ROEMERBERG
60311 FRANKFURT, GERMANY
datenschutz@SCHIRN.de

2. Option to withdraw your consent to data processing

Many elements of data processing may only be carried out with your express consent, but you can withdraw consent already given at any time. An informal e-mail sent to us is sufficient for this purpose. The legitimacy of the data processing carried out up until the withdrawal of consent remains unaffected.

3. Right to data portability

You have the right to request that any data we automatically process on the basis of your consent or in order to fulfil a contract is transferred to you or to third parties in a commonly used, machine-readable format. If you require the data to be transferred directly to another responsible person, this will only take place where it is technically feasible.

4. Encryption through SSL or TSL

For security reasons and for protection in the transfer of any confidential content you send to us as the website operator, such as orders or enquiries, we use SSL or TLS encryption.

When the SSL or TSL encryption is activated, the data you transfer to us cannot be read by third parties. You can recognize whether or not a connection is encrypted from the padlock symbol in your browser line and from the fact that the address line changes from “http://” to “https://”.

5. Information, blocking, deletion

Within the scope of the relevant statutory provisions, you have the right to obtain free-of-charge information at any time about your stored personal data, their origin and recipients, and the purpose of the data processing, and, where relevant, you have a right to the amendment, blocking or deletion of such data. Questions on this or other matters relating to data protection can be directed to us using the address provided in the legal notice at any time.

III. Data protection officer required by law

We have appointed the following data protection officers for our company.

SCHIRN KUNSTHALLE FRANKFURT AM MAIN GMBH
ROEMERBERG
60311 FRANKFURT, GERMANY
datenschutz@SCHIRN.de

IV. Data collection on our website: Cookies

The web pages sometimes make use of so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies help us to make our offering more user-friendly, more effective and more secure. They make it possible to maintain preset changes made by the user the next time they visit the website too. Cookies are tiny text files that the website stores on your computer in your browser history. When you view a website again, the cookie sends this information to the server.

We primarily use so-called “session cookies”. These are automatically deleted after your visit ends. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit the site.

You can set your browser so that you are informed about the storing of cookies and can choose to allow cookies only in individual cases, to refuse storage of cookies for specific cases or exclude them entirely, or you can activate the automatic deletion of cookies when your browser is closed.

The deactivation of cookies can limit the functionality of this website.

Cookies that are required for the execution of electronic communication processes or for the provision of specific functions you require (e.g. shopping basket function) are stored pursuant to art. 6, para. 1 lit f) GDPR. The website operator has a legitimate interest in storing cookies for technically fault-free and optimized provision of its services. Where other cookies are used (e.g. cookies for the analysis of browsing behavior), these are dealt with in a separate section of the data privacy statement.

1. Server log files

The provider of the website automatically gathers and stores information that your browser transfers automatically to us in so-called server log files. This relates to:

Type and version of browser system
IP address
There is no merging of these data with other data sources.

The legal basis for the data processing is art. 6, para. 1 lit. b) GDPR, which permits data processing for the performance of a contract or in order to take steps prior to entering into a contract.

2. Website registration

You can register yourself on our website in order to use additional functions on the site. We use the data you enter here purely to enable your use of the offering or service for which you have registered. The mandatory information requested during the registration process must be entered in full. Otherwise, the registration will be rejected.

Processing of the data entered in the registration process takes place on the basis of your consent (art. 6, para. 1 lit a) GDPR). You can withdraw any consent you have already given at any time. An informal e-mail sent to us is sufficient for this purpose. The legitimacy of the data processing already carried out remains unaffected.

V. Social media

1. Twitter plug-in

Our web pages incorporate functions of Twitter, a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Through the use of Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and other users are notified. At the same time, data are also transferred to Twitter.

We would like to point out that we, as provider of the web pages, have no knowledge of the content of the data transferred or their use by Twitter. Further information on this can be found in Twitter’s data privacy statement at: twitter.com/privacy.

You can change you data privacy settings with Twitter in your account settings at https://twitter.com/account/settings.

2. Facebook plug-ins (Like and Share buttons)

Our web pages incorporate plug-ins from the social network Facebook, the provider of which is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plug-ins from the Facebook logo or the “Like” button on our site.

You can find an overview of Facebook plug-ins here: developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is created between your browser and the Facebook server via the plug in. This means Facebook receives the information that you visited our site with your specific IP address. When you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This means that Facebook can connect your visit to our site to your user account.

We would like to point out that we, as provider of the web pages, have no knowledge of the content of the data transferred or their use by Facebook. Further information on this can be found in Facebook’s data privacy statement at: de-de.facebook.com/policy.php.

If you don’t want Facebook to connect your visit to our web pages to your Facebook user account, then please log out of your Facebook account before visiting our site.

3. Pinterest

Our web pages incorporate the functions of Pinterest, a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

We would like to point out that we, as provider of the web pages, have no knowledge of the content of the data transferred or their use by Pinterest.

Further information on this can be found in Pinterest’s data privacy statement at: https://policy.pinterest.com/de/privacy-policy.

4. Instagram

Our web pages incorporate the functions of Instagram, a service provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

When you are logged into your Instagram account, you can link the content of our web pages to your Instagram profile by clicking on the Instagram button. This means that Instagram can connect your visit to our site to your user account.

We would like to point out that we, as provider of the web pages, have no knowledge of the content of the data transferred or their use by Instagram.

Further information on this can be found in Instagram’s data privacy statement at:  https://instagram.com/about/legal/privacy/.

VI. Analysis tools and third-party providers

1. Google Analytics

This website uses functions of Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”, which permit analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there.

The legal basis for storage of Google Analytics cookies is art. 6, para. 1 lit. f) GDPR. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activities, and to provide further services connected to use of the website and internet use as requested by the website operator.

Where IP anonymization is activated on the website, however, Google will abbreviate your IP address in advance within the member states of the European Union or in other states party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Google will not merge the IP address transferred by your browser within the scope of Google Analytics to any other data.

We would like to point out that on this website Google Analytics has been expanded with the code “gat._anonymi-zelp();” in order to guarantee anonymized collection of IP addresses (so-called IP masking). (Source: datenschutzbeauftragter-info.de)

a. Browser plug-in

You can prevent storage of cookies by adjusting the settings of your browser software accordingly. We would nevertheless like to point out that if you do so, it may not be possible to use all the functions of this website in their entirety. In addition to this, you can prevent transfer of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

b. Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. This stores an opt-out cookie, which prevents the recording of your data during any future visits to this website: Deactivate Google Analytics.

You can find more information on Google Analytics’ handling of user data in Google’s data privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.

2. Commissioned data processing

We have concluded an agreement for Google to process data on our behalf and we apply the strict regulations of the German data protection authorities in our use of Google Analytics.

3. Facebook Custom Audiences

This website uses functions of Facebook Custom Audiences, a website analysis service provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

For the use of Website Custom Audiences, the advertiser generates a tracking pixel in the Facebook advertisement account and then implements this on its website. The pixel enables them to mark the visitor and target them once again via a Facebook advertisement.

4. Google AdWords

This website uses the Google AdWords service. Google AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Here, we make use of the remarketing function within the Google AdWords service. This function gives us the possibility of presenting users of our website with advertisements based on their interests when they visit other websites within the Google Display Network (on Google itself, so-called “Google Ads”, or on other websites). To this end, the user’s interaction with our website is analyzed, e.g. to see which offerings the user is interested in, so that the user can be presented with targeted advertising on other sites too even after the visit to our site has ended. To this end, Google stores a number in the browsers of users who visit specific Google services or websites in the Google Display Network. This number, known as a “cookie”, records the individual user’s visits. This number does not permit the identification of a person and no personal data are stored; rather, this number serves merely for the unequivocal identification of a web browser on a specific computer. You have the option to deactivate the use of cookies by Google by clicking on the following link and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin.

You can find more information on the handling of user data in Google’s data privacy policy at: http://www.google.com/privacy/ads/.

5. Other analysis tools

Our website uses functions of Google Tag Manager, Google AdWords User Lists, AdWords Conversation Tracker, and Google Datastudio, which are analysis tools provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

These analysis tools use so-called “cookies”, which permit analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there.

The legal basis for storage of cookies generated by these analysis tools is art. 6, para. 1 lit. f) GDPR. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activities, and to provide further services connected to use of the website and internet use as requested by the website operator.

VII. Newsletter data

Our website offers you the option of receiving a newsletter, for which we require an e-mail address. In part, newsletters are not sent directly by us, but rather by a company commissioned by us to handle this service, in this case Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, whose servers are located in Germany. Inxmail will not use your data to make contact with you itself, however, neither is there any forwarding of data to third parties in connection with the data processing for the purpose of newsletter dispatch.

The data entered into the newsletter registration form is processed exclusively on the basis of your consent (art. 6, para. 1 lit. a) GDPR). You may withdraw your consent to the storage of data, the e-mail address and its use for dispatch of the newsletter at any time. You can do this by clicking on the “unsubscribe” link in the newsletter. The legitimacy of the data processing already carried out prior to consent being withdrawn remains unaffected.

The data you have submitted to us for the purpose of receiving the newsletter are stored by us until you unsubscribe from the newsletter and are deleted after that point. Data we have stored for other purposes (e.g. e-mail addresses for the press area) remain unaffected by this.

VIII. Plug-ins and tools

1. Spotify embed

Our website makes use of plug-ins from Spotify, a digital music streaming service provided by Spotify AB Regeringsgatan 19, SE-111 53 Stockholm, Sweden.

If you visit one of our pages that incorporates a Spotify plug-in, a connection is created with the Spotify servers. At the same time, the Spotify server is informed which of our web pages you have visited.

If you are logged into your Spotify account then you enable Spotify to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your Spotify account.

The use of Spotify aims to make our online appearance and our online offering more appealing. This represents a legitimate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more information on the handling of user data in Spotify’s data privacy policy at: https://www.spotify.com/de/legal/privacy-policy/#s13.

2. SoundCloud embed

Our website uses plug-ins from SoundCloud, an online music service provided by SoundCloud Limited, Rhensberger Straße 76/77, 10115 Berlin, Germany.

When you visit one of our pages that incorporates a SoundCloud plug-in, a connection is created with the SoundCloud servers. As part of this process, the SoundCloud server is informed which of our web pages you have visited.

If you are logged into your SoundCloud account then you enable SoundCloud to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your SoundCloud account.

The use of SoundCloud aims to make our online appearance and our online offering more appealing. This represents a legitimate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more information on the handling of user data in SoundCloud’s data privacy policy at: https://soundcloud.com/pages/privacy.

3. Vimeo Player

Our website uses plug-ins from Vimeo, a video portal provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our pages that incorporates a Vimeo plug-in, a connection is created with the Vimeo servers. As part of this process, the Vimeo server is informed which of our web pages you have visited. Vimeo also acquires your IP address, and this applies even if you are not logged into Vimeo or do not have a Vimeo account. The information acquired by Vimeo is transferred to the Vimeo server in the USA.

If you are logged into your Vimeo account then you enable Vimeo to connect your browsing behavior directly to your personal profile.

The use of Vimeo aims to make our online appearance and our online offering more appealing. This represents a legitimate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more information on the handling of user data in Vimeo’s data privacy policy at:  https://vimeo.com/privacy/.

4. YouTube

Our website uses plug-ins from YouTube, a site operated by Google and provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages that incorporates a YouTube plug-in, a connection is created with the YouTube servers. As part of this process, the YouTube server is informed which of our web pages you have visited.

If you are logged into your YouTube account then you enable YouTube to connect your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube aims to make our online appearance and our online offering more appealing. This represents a legitimate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more information on the handling of user data in YouTube’s data privacy policy at:  https://www.google.de/intl/de/policies/privacy/.

5. Google Maps

By means of an API, this website makes use of Google Maps, a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Use of the Google Maps functions requires storage of your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer.

Use of Google Maps aims to make our online appearance and our online offering more appealing, and also makes it easier to find places we refer to in the website. This represents a legitimate interest pursuant to art. 6, para. 1 lit. f) GDPR.

You can find more information on handling of user data in Google’s data privacy policy at: www.google.de/intl/de/policies/privacy/.