Privacy policy

Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Sammlung Goetz
Director Katharina Vossenkuhl
Oberföhringer Straße 103
D - 81925 Munich

Your rights as the data subject

You can exercise the following rights at any time using the contact details of our data protection officer:

  • Information on your data stored by us and the processing thereof (Art. 15 GDPR),
  • Rectification of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data with us (Art. 21 GDPR) and
  • Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time, which will remain in effect in the future.

You can contact a supervisory authority with a complaint at any time, e.g. the supervisory authority of the state of your residence or the authority that oversees us as the responsible party. You can reach it as follows:

Bavarian State Commissioner for Data Protection
Prof. Dr. Thomas Petri
Wagmüllerstrasse 18
80538 Munich
089 2126720
poststelle@datenschutz-bayern.de

Cookies

Type and purpose of the processing:

Like many other websites, we use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

With cookies, we receive certain information such as IP address, type of browser and operating system used.

Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation of our site and properly display our webpages for you.

The data collected by us will not be shared with third parties under any circumstances nor will a link to personal data be created without your consent.

Of course, you can view our website without cookies. Internet browser are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time. Please use your Internet browser’s help function to learn how to change these settings, and keep in mind that individual features of our website may not work if you have disabled the use of cookies.

Legal Basis:

Your explicit consent (Art. 6 para. 1 lit. a DSGVO).

Retention period and cookies used:

If you allow us to use cookies, via your browser settings or consent, the following cookies may be utilised on our web pages:

Typo3: 90 days
Google Analytics policies.google.com/technologies/types

In the following sections, we provide you with information concerning how these cookies can (also) pertain to personal data.

In your browser settings, you can delete individual cookies or the entire set of cookies. You will also find information and instructions on how to delete these cookies or prevent them from being saved in advance. The following links provide the information you’ll need for the respective browser providers:

Newsletter

Type and purpose of the processing:

Your data will be used exclusively to send you the newsletter you subscribed for via e-mail. We request your name so that we can address you personally in the newsletter and identify you as needed should you want to exercise your rights as a data subject.

To receive the newsletter, providing your e-mail address is sufficient. When you subscribe to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be notified by e-mail about circumstances that are relevant to the service or registration (such as changes to the newsletter offer or technical matters).

We need a valid e-mail address to complete your registration. In order to verify that a registration is actually made by the owner of an e-mail address, we utilise the ‘double opt-in’ procedure. To this end, we log the newsletter subscription request, when a confirmation e-mail is sent and the receipt of the requested reply. Additional data is not collected. The data will be used exclusively for sending the newsletter and will not be shared with third parties.

Legal basis:

Based on your express consent (Article 6 (1) a DSGVO), we will send you our newsletter on a regular basis or comparable information via e-mail to your specified e-mail address.

The consent to save and use your personal data for the newsletter may be withdrawn at any time and remain in effect in the future. Every newsletter contains a corresponding link, and you can also unsubscribe on this website at any time or inform us of your cancellation via the contact option indicated at the end of this privacy policy.

Recipients:

The recipient of the data is the newsletter sender Newsletter2go.

Retention period:

Data are only processed in this context provided that the corresponding consent has been given. The data will be deleted thereafter.

Mandatory or required provision:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact form

Type and purpose of the processing:

The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.

Legal basis:

The data entered in the contact form will be processed on the basis of your expressly granted consent (Art. 6 para. 1 lit. a DSGVO).

By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.

If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).

Recipients:

Your data will not be forwarded to third parties.

Retention period:

Your data will be retained permanently.

Mandatory or required provision:

The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.

Google Analytics

Type and purpose of the processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereafter: "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, further associated services are then to be provided.

Recipients:

Recipient of the data is Google.

Retention period:

https://policies.google.com/privacy?hl=en

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

Profiling:

The tracking tool Google Analytics can be used to evaluate the behaviour of website visitors and analyse their interests. For this purpose we create a pseudonymous user profile.

Embedded Vimeo videos

We can integrate the videos of the platform "Vimeo" of the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA Privacy policy: https://vimeo.com/privacy. We would like to point out that Vimeo can use Google Analytics and refer to the data protection declaration (https://policies.google.com/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or the settings of Google for the use of data for marketing purposes (https://adssettings.google.com/).

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.

Appointed processors

The following organisations, companies or people were commissioned with data processing by the operator of this website:

planet 33 AG
LRZ - Leibniz Rechenzentrum
Newsletter2go
www.newsletter2go.com/gdpr-compliant-email-marketing/

Revision of our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.

Questions for the data protection officer

If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:

Carsten Förster
Bayerische Staatsgemäldesammlungen
Barer Str. 29, 80799 München
T 089 - 23805136
zd.datenschutz@pinakothek.de