Data Protection Declaration / Privacy Statement
By means of this Data Protection Declaration we would like to inform you about type, scope and purpose of the processing of personal data on our website. Personal data are all data having a personal relation with you, for example, name, address, E-mail address or consumer behaviour.
Who is responsible for data processing in our institution?
The following persons are responsible for data processing:
rem gGmbH [limited company operating as a public utility]
Dr. Susanne Wichert, Steffen Heilmann (Management)
Tel.: +49 (0) 621 - 293 31 - 293 31 50
The authorized person for data protection at the Reiss-Engelhorn-Museums is the Commissioner for Data Protection of the town of Mannheim:
You will be able to reach our Commissioner for Data Protection by E-mail at Amt30@mannheim.de or at the postal address with the additive: “an den Datenschutzbeauftragten” (to the Commissioner for Data Protection).
You are also welcome to contact the Reiss-Engelhorn-Museums directly by mail: firstname.lastname@example.org
In order to provide our online presence we are making use of an Internet Service Provider on whose server our website is stored (hosting) and who makes available our page on the Internet. In doing so, the Internet Service Provider processes contact data, content data, contract data, usage data, inventory data, meta and communications data on our behalf. Name and address of the Internet Service provider is: TWLkom GmbH Donnersbergweg 4, 67059 Ludwigshafen Germany. You will be able to access its data protection regulations at: https://www.twl-kom.de/datenschutz/
Legal basis: The Internet Service-Provider processes the aforementioned data on our behalf, article 28 DSGVO [General Data Protection Regulation GDPR]. Data processing is carried out due to our justified interest in efficient and secure provision of our internet offer, article 6, section 1 lit. f) DSGVO.
Cookies serve the purpose of organizing our website more user-friendly. Some elements of our website require that the calling browser also can be identified after changing a page. In these Cookies in particular information on language settings or log-in information can be stored.
The aforementioned purposes justify our legitimate interests in data processing. The legal basis for this is article 6, section 1, page 1 lit. f DSGVO [GDPR].
We delete or block your personal data as soon as the purpose of the storage has been fulfilled or it has been omitted. Storage beyond this purpose only is carried out if it is required by national or European provisions. In this case blocking or deletion of data is made when the storage time stipulated for the respective provisions has expired unless we need your data for complying with a contract concluded between you and us or if it is necessary for asserting, carrying out or defending legal claims.
Details regarding contact possibilities retained by us
As far as you access us by E-mail, social media, phone, fax, mail, our contact form or you address us in another way and facilitate us personal data, such as your name, your telephone number or your E-mail-address or further details regarding your person or your concern on this occasion, this data will be stored and processed in our house in order to handle your request. Legal basis: As far as you made your request via our contact form, the legal basis for processing your data is article 6, section 1 lit. a DSGVO. Provided that you made your inquiry within the framework of contractual or pre-contractual relations with us, the legal basis for processing your data is article 6, section 1, lit. b. DSGVO. Provided that your inquiry does not fall in one of the categories mentioned before, our justified interest in processing your data is in answering your inquiry in an orderly way and in your sense. Article 6, section 1, lit. f DSGVO. Deletion: The personal data raised by us will be deleted provided that they are no longer necessary. We check the need every two years. Furthermore you can revoke the data protection at any time.
You have the possibility to register on our website and to set up a user account in order to be able to access specific contents of our website. For this purpose it is necessary to indicate personal data, which result from the input mask. The data which is asked there is in particular your name, password and your E-mail-address. This data will be stored and processed by us in order to facilitate you the access to your user account. You will be able to change or delete the data at any time. The data will not be passed on to third parties unless they serve for the implementation of contracts. In order to protect you and us from abusive registrations, we store the IP address used at the registration, as well as the date and hour of the registration. This data will not be passed on to third parties.
Legal basis: We process your data on the basis of article 6, section 1 lit. b. DSGVO for the purpose of making available your user account.
Deletion: Personal data as well as the IP address, date and hour will be stored as long as the purpose for storing is dropped. The deletion of data, which was collected within the scope of the registration, will be made as soon as the corresponding account on our website has been deleted or changed: You can delete your account at any time or request deletion by the above mentioned person responsible for processing.
In regular time intervals we send a newsletter in order to inform our customers and business partners and interested parties about our offers and about news in connection with them. You have the possibility to sign up on our website to receive our newsletter and to agree to the reception of the newsletter within the scope of the registration. If you register for receiving our newsletter, it will be obligatory that you give your E-mail address. We store the E-mail address in order to be able to send you the newsletter. The indication of further data such as the title or name is voluntary and it will be used in order to address you personally. As soon as registration for our newsletter is made, you will receive a confirmation E-mail to the E-mail address deposited at the registration in the so-called Double-Opt-In-procedure. This E-mail contains a link. If you click on this link, you confirm that you want to receive the newsletter. In this way we guarantee that your E-mail-address has not been abused of at the registration by a third person. Due to the same reason we store the date and the hour of the registration as well as the IP address assigned to you at the registration. We shall not pass on the above mentioned data to third parties.
Legal basis: The legal basis for the processing of your data is article 6, section 1, lit. a DSGVO.
Deletion: The deletion of the E-mail address will take place if one month after sending the confirmation E-mail in agreement with the Double-Opt-In-Procedure you did not click the confirmation link or immediately after you unsubscribed from receiving our newsletter.
Revocation: You may cancel your consent to receive the newsletter at any time and revoke the subscription of the newsletter. We offer the following possibility by which you will be able to declare your revocation:
• Click on the link maintained in the newsletter for this purpose
Delivery by a delivery service provider
We have engaged the following delivery service provider for sending our newsletter: Cleverreach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. The data protection regulations of the delivery service provider can be consulted at: https://www.cleverreach.com/de/datenschutz/ The delivery service provider can use your data in a pseudonymous form, that means, without assigning them to any user, for optimizing or improving its own services, for example for technical optimizing of delivery and for presentation of the newsletter or for statistical purposes. However, the delivery service provider is not entitled to write to you directly or to forward your data to third parties.
Legal basis: The delivery service provider is working for us on the basis of our justified interest in an orderly dispatch of the newsletter according to article 6, section 1 lit. f DSGVO and within the scope of an order processing contract according to article 28, section 3 S. 1 DSGVO
Evaluation of user behaviour
Provided that you have given your consent, we evaluate your user behaviour when delivering the newsletter. For this purpose our newsletter contains tracking pixels and tracking links. With these we are able to recognize if and when you have opened the newsletter and if and which links you have clicked on in the newsletter.
Purpose: As aforementioned, we evaluate the newsletter in order to measure statistic evaluation of the success or failure of our newsletter.
Legal basis: The legal basis for processing your data is article 6, section 1, lit. a DSGVO.
Prevention: You can revoke your consent to receiving the newsletter with the help of the above mentioned possibilities at any time. We delete your data after your revocation has been made.
Your rights according to DSGVO [General Data Protection Regulation GDPR].
According to DSGVO you will have the rights mentioned in the following and which you may assert against the person responsible mentioned in number 1 of this Data Protection Declaration at any time:
• Right of information: Pursuant to article 15 DSGVO you may ask for a confirmation if we are processing your personal data and which ones are concerned. Furthermore you may ask for gratuitous information on the purpose of the processing, the category of the personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain as well as the origin of your data, provided they have not been collected by us. Furthermore you have a right to information if your personal data has been sent to a third country or to an international organization. Provided that this is the case you have the right to receive information on the suitable guarantees in connection with the transmission.
• Right to correction: According to article 16 of the DFGVO you may demand the correction of incorrect data or completion of incomplete personal data which refers to you and is stored with us.
• Right to Deletion: According to article 17 SDGVO you have the right to request deletion of your personal data stored with us provided that we don’t need their processing for the following purposes:
• for complying with a legal obligation
• for asserting, exercising or defending legal claims,
• for exercising the right of freedom of expression and information
• for reasons of cases of public interest mentioned in article 17, section 3 lit c and d DSGVO.
• Right to restriction: According to article 18 DSGVO you have the right to demand restriction of the processing of your personal data if
• the correctness of data has been contested by you, that is to say, for a
duration which enables us to check the correctness of the personal data.
• processing of your data is unlawful, however you deny their deletion and
request the restriction of the data instead,
• we don’t need the personal data any longer for purposes of processing,
however, you need the data for assertion, exercising or defending of legal
• you have filed an objection against processing of your data according to article
21 DSGVO, however it still is not certain if the justified reasons, which
authorized us to further processing, prevail your rights, despite your objection.
• Right to instruction: Provided that you have asserted the right of correction, deletion or restriction of processing against us, we are obliged to inform all recipients, to whom we disclosed your personal data, the correction or deletion of data demanded by you or their restriction of processing unless this turns out to be impossible or it is connected with an disproportionate effort. You have the right to be informed on these recipients by us.
• Right to data portability: According to article 20 DSGVO you can request to receive the corresponding personal data you have made available to us, in a structured, common and machine-readable format or to have it sent to another person responsible.
• Right to appeal: According to article 77 DSGVO you have the right to complain to a supervisory authority. For this purpose you can turn to the supervisory authority of your common place of residence, your place of work or our company seat.
Right of revocation
According to article 7, section 3 DSGVO you have the right to withdraw your consent given to us to process your data at any time. Your declared revocation changes nothing of the legality of processing of personal data done before the revocation.
Right of objection
Due to reasons which result from your special situation, you have the right to file an objection against the processing of personal data concerning you due to a balancing of interests (article 6, section 1 lit. f DSGVO) at any time.
In particular, this is the case if data processing is not necessary for complying with a contract. Provided that you make use of your right to object, we ask you to explain the reasons. We then will no longer process your personal data unless we can prove towards you that compelling legitimate reasons for processing your data outweigh your interests and rights.
Regardless of what was mentioned above you have the right to appeal against processing of your personal data for purposes of advertising and data analysis at any time.
Please direct your objection to the above mentioned contact address of the person responsible.
On this website we use components of You Tube, a service of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA: YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
The use of YouTube enables us to integrate various videos and clips which are made available on the internet platform www.youtube.de. After a page or subpage of our website has been accessed on which such integration has taken place, the internet browser used by you is prompted to download video components of the respective embedded videos or clips. During your visit to our website and its subpages, both, YouTube and Google are informed which page or subpage you accessed by sending your IP address to the external servers of Google in the U.S.A. This transfer of information takes place independently from the fact if the announced videos or clips actually were contemplated or clicked on or if you are logged in at your YouTube or Google Account. Google is a participant of the Privacy Shield Agreement and is certified according to European standards. This information is collected by and assigned to your Google account provided that you are logged in to it at your visit. Purpose: The use of YouTube components on our website serves for providing you videos and clips of the website www.YouTube.de on our website for the purpose of contemplation and interaction.
Legal basis: We employ YouTube on the basis of our justified interest in optimizing and designing our online offer, article 6, section 1 lit f DFGVO.
Prevention: You can prevent data transfer at any time by logging out of your YouTube account or by setting an opt-out Cookie in your Google account under the following link: https://adssetting.google.com/ authenticated after registration in your Google account by pressing the “unsubscribe” botton
Information on the third party:
Registered offices within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
• Data Protection Declaration: http://www.google.de/intl/de/policies/privacy
We use fonts.com, an online character fonts service of Monotype GmbH, Werner-Reimers-Straße 2-4, 61352 Bad Homburg, for uniform presentation of fonts on our Internet web presence.
Due to the use of this service we enjoy certain creative possibilities with the help of which we want to make the design of our website more user-friendly.
The integration of these online fonts is made by a server call at fonts.com. This server delivers fonts in a packed way to your browser where they are unzipped. If you are visiting one of our sites in which we integrate the online fonts of fonts.com, it will be communicated to fonts.com which of our internet sites you have visited. Furthermore, your IP address will be communicated to the server of fonts.com.
Purpose: The aforementioned interests constitute the purpose of the use of Google Web fonts.
Legal basis: We employ fonts.com due to our justified interest in optimizing and designing our online offer, article 6, section 1 lit. f DSGVO. You will find further information on online fonts, used by us via fonts.com at https://www.fonts.com/info/legal and in the Data Protection Declaration of Fonts.com: https://www.fonts.com/info/legal/privacy/ and in the Data Protection Declaration of Monotype GmbH: https://www.monotype.com/legal/privacy-policy/
Our online presence in social networks
We practice online presence within the following social networks listed. If you visit one of these presences, your user data will be collected and processed by the respective provider. In general this is carried out by Cookies, which are stored on the terminal device used by you. Regarding the concept of Cookies, see above under the respective heading. With Cookies your usage behaviour and your interests are stored and corresponding usage profiles are created. In the usage profiles also data can be stored independent from the device you are using. In particular, this is the case if you are a member of the respective platform and you are logged in at this platform.
In general, the collected data will be used by the provider for the purpose of advertising and market research by establishing usage profiles by your usage behaviour. These in turn can be used by providers to send you interest related advertising. You have a right of revocation against the creation of usage profiles. In order to exercise it, you will have to address the respective provider.
If you have an account with the provider, your usage data can be interlinked with it. In order to avoid such interlinking of your data, you will have to log out at the service of the provider before you visit our site.
You will be able to learn from the respective Data Protection Declarations of the providers, which are communicated hereinafter, which is the purpose and the extent the provider collects data. We ourselves do not have any influence on the kind of data collected and how this data is used by the provider. Provided that you ask for information in detail or you want to make use of your rights of the affected party, it will be most effective if you do this at the respective provider itself as it is exclusively the respective provider who has access to your data.
We would like to point out to you that your user data can be transferred and processed outside the area of the European Union. In this case the risk exists that the enforcement of your right of the person affected could be hampered. The US providers certified according to the privacy Shield have committed themselves to comply with the data protection standards of the EU. You will find the information if the respective provider disposes of such a certificate with the information regarding the following listed providers.
Legal basis: Provided that you have been asked for consent to data processing by one of the providers mentioned hereinafter, the legal basis of processing is article 6, section 1 lit.a DSGVO. Apart from that, processing of your data is carried out on the basis of our justified interest to enter in contact with you and to communicate with you, article 6, section 1 lit. f. DSGVO.
Impediment: As far as the respective possibilities of objections are concerned (Opt-Out) we refer to the following linked details of providers.
We maintain web presence with the following social networks:
Google Plus is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 – USA
Registered Offices in the EU: Google Dublin, Google Ireland, Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
• Data Protection Declaration retrievable at: https://policies.google.com/privacy?hl=de
• Opt-Out: https://adssettings.google.com/authenticated
• Privacy Shield: privacyshield.gov/participant
Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA
• Data Protection Declaration retrievable at https://help.instagram.com/155833707900388
• Opt-Out: http://Instagram.com/about/legal/privacy
Facebook is a service of Facebook Inc., 1601 S. California AVE, Palo Alto, CA 94304 – USA.
Registered Offices in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland
• Data Protection Declaration retrievable at https://www.facebook.com/about/privacy/
On our Internet presence we use “Google Analytics”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In order to capture and statistically analyse the flows of visitors on our website, we employ Google Analytics. Google Analytics captures –among others- data explaining from which website you accessed our internet presence (so-called referrers), which subsite you accessed or how often and during what time a subsite has been contemplated and which interactions you carried out. In order to collect and store this data, Google Analytics sets a Cookie on the terminal device (see the concept above under the headline Cookies).
We use the function “AnonymizeIP” in order to anonymise your IP address so that this is abbreviated and can no longer be assigned to your visit on our Internet site. Further information transferred are not assigned or linked to the anonymised IP address by Google. Information created in this way are transmitted to the Google Server in the USA and stored there. Possibly, Google passes on to third parties the personal data collected with the help of this technical procedure. We have made a contract on order management with Google.
According to this, Google is authorized and obliged to analyse the obtained information for us and to elaborate statistic reports on the way and content of the use of the website for us
With the help of these statistics it is possible for us to improve our offer continuously, to make a cost-benefit analysis of our Internet marketing and to organize our Internet presence more interesting and user-friendly for you as a user.
Legal basis: Via a so-called Opt-In we get your consent to the use of this service. That means that the Cookie, the tracking pixels or similar processes, with the help of which your personal data is processed via this service, will not be activated before you have agreed to it. The legal basis is article 6, section 1 lit. a DSGVO. Provided that you are staying in Germany and still have not completed your 16th year of life (in Austria and Switzerland the 14th year) according to the assessment of the respective national lawmaker, you still are not in the position to deliver an effective consent, according to the data protection law. We judge your Opt-In as your reasonable expectation with reference to the use of the Cookie application. As a legal basis we refer in this case to article 6, section 1 lit. f DSGVO.
In this case our justified interest is a user-friendly organization of our online offer and our economic interest in collecting, storing and analysing of data material.
Deletion: The collected and transferred data will be deleted automatically after 26 months.
Impediment: You can prevent the storage of Cookies in downloading and installing the browser Add-On provided by Google.
This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, after that you might possibly no longer be in a situation to use all functions of our website to the full content. Alternatively you can avoid the storage of Cookies by setting a so-called Opt-Out cookie, which prevents that your data is collected on our website in the future. For doing so, please click the following link:
Additionally, you have the possibility to prevent the storage of Cookies by setting your browser. Cookies already placed can be deleted by you at any time.
Information regarding the third provider:
Registered Offices within the EU: Google Dublin, Google Ireland, Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
• User conditions: http://www.google.com/analytics/terms/de.html
• Overview Data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
• Data Protection Declaration: http://www.google.de/intl/de/policies/privacy
• Data use by Google when you use our partners’ websites or apps: https://www.google.com/intl/de/policies/privacy/partners
• Data use for promotional purposes: https://www.google.com/policies/technologies/ads
• Personalized advertisements by Google: https://www.google.de/settings/ads
• Google submitted to the Privacy-Shield-Agreement concluded between the European Union and the USA and certified itself.
• By doing so Google committed itself to comply with the standards and provisions of the European data protection law. You can see more details in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Apart from that we adopt technical and organizational security measures according to the best demonstrated available technology in order to comply with the provisions of data protection laws and in order to protect your data against random or deliberate manipulation, partial or complete loss, destruction or against unauthorized access of third parties.
Up-to-dateness and change of this Data Protection Declaration
This Data Protection Declaration is currently valid and the status of December 2018 is applied. Due to modified legal or administrative requirements it may become possible to adjust this Data Protection Declaration.
This Data Protection Declaration was made with the help of SOS Law. Please find here the “explanation generator” for data protection. “SOS law” is an offer of Mueller.legal_Rechtsanwälte_Partnerschaft with registered offices in Berlin.