Privacy Policy

Deutsch

1.1 Accessing and visiting the website

When this website is accessed, data is automatically sent to the server of this website by the Internet browser used by the visitor and stored for a limited period of time in a log file at our host and service provider for a maximum of two weeks. Until automatic deletion, the following data will be stored without further input by the visitor:

  • IP address of the visitor’s terminal device,
  • date and time of access by the visitor,
  • name and URL of the page accessed by the visitor,
  • the website from which the visitor accessed the website (so-called referrer URL),
  • the browser and operating system of the visitor’s terminal device and the name of the access provider used by the visitor.

The processing of this personal data is based on our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f) General Data Protection Regulation (GDPR). We therefore have a legitimate interest in the processing of data for the purpose of:

  • establishing a connection to the website quickly,
  • enabling a user-friendly application of the website,
  • detecting and ensuring the security and stability of the systems and facilitating and improving the administration of the website.

The processing is expressly not carried out for the purpose of obtaining knowledge about the visitor to the website.

1.2 Contact via e-mail (e-mail client on your computer)

Visitors can send messages to us, in particular via e-mail, voluntarily providing personal data. In order to be able to receive a response from you, it is necessary for you to provide at least a valid e-mail address and your last name. All other information can be given voluntarily by the inquiring person but that person is not obligated to do so. By sending the e-mail, the visitor consents to the transmitted personal data being processed. The data is processed exclusively for the purpose of handling and responding to inquiries. This is done on the basis of the voluntarily consent provided pursuant to Art. 6 para. 1 sentence 1 letter a) GDPR. The data received from you via this communication channel and processed by us will be automatically deleted as soon as the request is completed and there are no reasons for further storage (e.g. subsequent commissioning, a donation or the like).

In the framework of correspondence with us by e-mail, your personal data may also be transferred to service providers outside the European Union and the European Economic Area (EEA) through the e-mail service we use, Microsoft Office 365 in the USA. A transfer will only take place on the basis of EU standard contractual clauses as appropriate safeguards to protect your personal data in an insecure country. Information on the processing of your personal data by the controller “Microsoft Corporation” is provided by the latter under the following link: https://privacy.microsoft.com/de-de/privacystatement.

You can request detailed information on this and on the level of data protection at our service providers in third countries using the contact information above.

The website uses so-called cookies. These are data packets that are exchanged between the server of our website and the visitor’s browser. They are stored by the respective devices used (PC, notebook, tablet, smartphone, etc.) when the website is visited. Thus, cookies cannot cause any damage to the devices used. In particular, they do not contain viruses or other malware. In the cookies, information is stored that arises in each case in connection with the specific terminal device used. We can therefore in no way obtain direct knowledge of the identity of the visitor(s) to the website.
Cookies are mostly accepted according to the basic settings of the browsers. The browser settings can be configured in such a way that cookies are either not accepted on the devices used, or that a special notice is provided in each case before a new cookie is created. However, it should be noted that the deactivation of cookies may mean that not all functions of the website can be used in the best possible way. The use of cookies serves to make the use of our website more comfortable. For example, session cookies can be used to track whether the visitor has already visited individual pages of the website. After leaving the website, these session cookies are automatically deleted.
Temporary cookies are used to improve user-friendliness. They are stored on the visitor’s device for a temporary period of time. When the website is visited again, it is automatically recognized that the visitor has already called up the page at an earlier point in time and which entries and settings were made in the process. As a result, these do not have to be repeated.
Please refer to the list below for the different types of cookies (e.g. cookies that are technically necessary for displaying the website, or cookies that serve statistical and marketing purposes) that are set on your terminal device when you visit our website, as well as further information on these cookies (e.g. provider, purpose, storage period, etc.).
For cookies that are not technically mandatory, we obtain your consent (via the information window that opens at the beginning of your visit to our website) in accordance with Art. 6 Para. 1 lit. a GDPR. The processing associated with the setting of technically mandatory cookies is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.

We process the personal data you provide to us as part of the registration process for the purpose of preparing and holding the respective event as well as for capacity planning on the basis of your consent granted through registration pursuant to Art. 6 (1) lit. a GDPR and, depending on the type of event, on the basis of a contract pursuant to Art. 6 (1) lit. b GDPR. You can revoke your consent at any time with effect for the future. A revocation has the consequence that we can no longer use your personal data for the event—which requires registration—and your participation in the event is therefore excluded.
To the extent necessary, we process your data beyond your consent in accordance with Art. 6 (1) p. 1 lit. f GDPR to protect our or third parties’ legitimate interests, such as for the defense in legal disputes.

Please note that documenta and Museum Fridericianum gGmbH – insofar as this is in their sphere of responsibility – records and then publishes the streams at their online presences and archives them in the documenta archiv. Insofar as you do not wish everybody to see your personal data in connection with your participation or the archiving of the permanently stored records, we recommend that you use a pseudonym as your username and refrain from interactions and communication in the course of the event through the chat, video, or audio functions.

If you have any questions about this information, including your (data protection) rights, you can contact our data protection officer datenschutzbeauftragter@documenta.de.

 

In addition to Zoom, we stream our online events also via the PeerTube service. PeerTube is an alternative to, for example, the video platform YouTube and follows the peer-to-peer principle. The basic feature of peer-to-peer services is that all participants are equal (peers) and there is no differentiation between servers and clients. In fact, every peer can generally have both roles. Communication within these networks is effected through the spontaneously connected devices of their users. For this, communications can be sent, received, or forwarded by every device within the network. These are distributed local networks that cannot be influenced by the provider of the communication software. Therefore, all PeerTube users are responsible for their own actions.

In order to allow larger numbers of participants to attend online events and to allow them to directly interact with the presenters or other participants of lecture series, we may also use the services of the video conferencing service Zoom.

Purpose of processing
We use Zoom as an alternative to the PeerTube tool in cases, in which the number of participants may be unfavorable for a technical realization via PeerTube and in which it is important that presenters can directly interact with the participants of a lecture series. This is to ensure a consistent and interactive experience for all participants even if their number is large. Zoom is a service provided by Zoom Video Communications, Inc. with registered office in the USA.

Controller
The controller who is responsible for the processing of data that is directly related to the holding of online events is documenta und Museum Fridericianum gGmbH. If you access the Zoom website, the Zoom provider company will be the controller of the data. However, accessing the Zoom website is only necessary to download the software for using Zoom. To use Zoom, you can also directly enter the respective meeting ID and any other login credentials for the meeting in the Zoom app. If you chose not to or cannot use the Zoom app, you may also use its basic functions via a browser version that you can also find at the Zoom website.

Which data will be processed?
While using Zoom, several types of data are processed. In this regard, the scope of the data that is processed depends on which data you provide before and/or during your participation in an online meeting and what the subject of the particular event or your participation is.

The following personal data will be processed:

–           Information about the user: first name, last name, telephone number (optional), email address, password (if „Single-Sign-On“ is not used), profile picture (optional), department/position (optional)

–           Meeting metadata: subject, description (optional), participant IP addresses, device/hardware information

–           In the event of recording (optional): MP4 files of all video, audio, or presentation recordings, M4A files of all audio recordings, text files from the meeting chat.

–           If you join by telephone: information about the incoming and outgoing telephone number, country name, start and end time. As the case may be, other connection data such as the IP address of your device can be stored as well.

–           Text, audio, and video data: In online meetings, you can use optional chat, question, or polling functions. Insofar, any text entered by you will be processed to display it in the online meeting or for recording, if so. In order to allow video and/or audio use, data from your device’s microphone and/or camera will be processed during the meeting. You can switch off or mute your camera or microphone yourself at any time by using the Zoom applications.

In order to join an online meeting or enter a meeting room, you must first enter your name or a pseudonym as a minimum.

Scope of processing
We use Zoom to hold online events. Please note that we record and publish online events and also archive them in the documenta archiv. Insofar as you do not wish everybody to see your personal data in connection with your participation and the archiving of the permanently stored records, we recommend that you use a pseudonym as your username and refrain from interactions and communication in the course of the event through the chat, video, or audio functions.

If you are a registered Zoom user, reports about online meetings (meeting metadata, telephone data when joining by telephone, questions and answers in webinars, or polling functions in webinars) can be stored by Zoom for up to one month.

The attention tracking function is disabled by default in all Zoom events that we host so that any data processing to this effect on our side is prevented.

Legal basis of the data processing
The legal basis for a participation in online events can be found under no. 4 of this data privacy information.

Recipient / forwarding of data
The provider of Zoom will necessarily have knowledge of above data to the extent that this is intended within the framework of our data processing agreement with Zoom. Moreover, the recordings will be disclosed to an unlimited group of recipients on the web and archived in the documenta archiv for access by interested third parties. Data that is processed for technical purposes to hold the online event (metadata) will not be disclosed.

Processing of data outside the European Union
Zoom is a service by a provider in the USA. Therefore, personal data will also be processed in a third country. We entered into a data processing agreement with the provider of Zoom that is in accordance with the requirements set out under Art. 28 GDPR. An appropriate level of data protection is guaranteed by including the standard EU contractual clauses. We have no influence on any further processing of the data by Zoom. For information in this regard, see: https://zoom.us/docs/en-us/privacy-and-security.html

Deletion of data
In general, we will delete personal data as soon as their storage is no longer required. Please note that while we document our online events, we may find particular data worthy of archiving that will then become part of the documenta archiv inventory. In the event that records contain your personal data, we process this data based on Art. 6 para. 1 (c) GDPR in connection with Sec. 7, 8 and 11 HArchivG. If, in this connection, we process any special categories of personal data, we process them based on Sec. 25 HDSIG.

We process the personal data you provide to us as part of the registration process for the purpose of preparing and holding the respective event as well as for capacity planning on the basis of your consent granted through registration pursuant to Art. 6 (1) lit. a GDPR and, depending on the type of event, on the basis of a contract pursuant to Art. 6 (1) lit. b GDPR. You can revoke your consent at any time with effect for the future. A revocation has the consequence that we can no longer use your personal data for the event—which requires registration—and your participation in the event is therefore excluded.
To the extent necessary, we process your data beyond your consent in accordance with Art. 6 (1) p. 1 lit. f GDPR to protect our or third parties’ legitimate interests, such as for the defense in legal disputes.
Please note that photographs or video recordings will be made at our events and the image or video material may be published on the Internet, on the sites operated by documenta und Museum Fridericianum gGmbH or its cooperation partners, or on social media and/or in one of the publications of documenta und Museum Fridericianum gGmbH or its cooperation partners, for the purpose of public relations (in particular reporting) on the respective event.
By participating in the event, you consent to the publication of photographs and video recordings made during the event (§§ 22, 23 KUG). The collection, i.e. the photographic recording and its processing, is carried out for the purpose of an illustrated report on the basis of Art. 6 para. 1 p. 1 lit. f GDPR. We would like to point out that you may object to this processing pursuant to Art. 21 (1) GDPR for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
The objection should be sent to the above address.

We would like to point out that the documentation of the event may also result in data worthy of archiving, which may be transferred to the holdings of the documenta archiv. Should archival records contain personal data about you, we will process these data on the basis of Art. 6 para. 1 lit. c GDPR in conjunction with. § 7, 8, and 11 HArchivG. We process the special categories of personal data that may be processed in this context on the basis of Section 25 HDSIG.

If you have any questions about this information, including your (data protection) rights, you can contact our data protection officer datenschutzbeauftragter@documenta.de.

You have rights vis-à-vis us with regard to the personal data concerning you. Special legal regulations may prevent the fulfillment of general data protection rights. If you assert a corresponding right and special legal regulations prevent us from fulfilling it, we will inform you of this, stating the specific reasons. You are entitled to the data protection rights listed below:

7.1 Information

Pursuant to Art. 15 GDPR, you may request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

7.2 Correction

Pursuant to Art. 16 GDPR, you can immediately request the correction of incorrect data or the completion of your personal data stored by us.

7.3 Deletion

Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.

7.4 Restriction of processing

Pursuant to Art. 18 GDPR, you may request the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you object to its deletion and we no longer need the data, or you need it for the assertion, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.

7.5 Data portability

Pursuant to Art. 20 GDPR, you may receive the personal data you have provided to us in a structured, common, and machine-readable format or request that it be transferred to another controller.

7.6 Revocation

Pursuant to Art. 7 (3) GDPR, you have the right to revoke the consent you have given to us at any time (e.g. in writing or by e-mail). This has the consequence that we may no longer continue the data processing based on this consent for the future.

7.7 Complaint

Pursuant to Art. 77 GDPR, you may complain about our processing of your personal data to the responsible supervisory authority at any time. The supervisory authority responsible for us (The Hessian Commissioner for Data Protection and Freedom of Information) is based at Gustav-Stresemann-Ring 1, 65189 Wiesbaden.

7.8 Objection to the processing of your data

To the extent that we base the processing of your personal data on our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f GDPR, you may object to the processing, in particular if the processing is carried out for advertising purposes. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which we show in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of a justified objection on your part, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time.

You can inform us of your objection using the contact details above.

Amendment of the data protection statement
(as of September 14, 2021).

Due to the ongoing iterative development of the Internet offer and/or legal developments, it may be necessary for us to make adjustments to our privacy policy from time to time.