Data Protection Officer
The Data Protection Officer of Städelschule is:
Judith Leitz, Telephone: +49 (0)69 60 50 08-34
Vice Data Protection Officer: Christin Groß-Narten, Telephone: +49 (0)69 60 50 08-35
Rights of the affected party
At all times, you have the right to be provided information at no charge regarding the personal data we have stored on your behalf as well as the origin of it, the recipients, and the purpose for which the data is processed. In addition, you have the right to have the data corrected, blocked or deleted at any time. For any questions pertaining to this – or related to any other data protection measures – please contact us at any time.
For the assertion of these claims, we kindly ask you to contact: email@example.com
Furthermore, you have the right to lodge an appeal with the responsible professional supervisory authority in case of data protection-related issues:
Contact address of the Städelschule professional supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
Telephone: +49 (0)611 14 08-0
If you have authorized Städelschule to process your personal data based on the provision of a consent, you may withdraw this consent for the future at any time. The legality of the data processing that has occurred up to the point in time that the consent is withdrawn, is not affected.
The cancellation declaration should be forwarded to: firstname.lastname@example.org.
Processing of personal data
We only process personal data if this is permitted by law or if we have been provided the consent to do so.
Insofar as we collect consent from the affected party for the processing of personal data, then Art. 6, Sec. 1 (a) of EU GDPR serves as the legal basis.
Insofar as the processing of personal data is used to fulfill a legal requirement to which our company is subject, then Art. 6, Sec. 1 (c) GDPR serves as the legal basis.
The personal data of the affected party is deleted or blocked as soon as the grounds for storing this data have expired. In addition, the data can also be stored if this has been provisioned by the European or national lawmakers in EU regulations, laws or other legal provisions to which the responsible party is subject. Deleting or blocking the data also occurs if a storage period determined by the standards mentioned here expires, unless, due to the fulfillment of a contract, there is a requirement for the further storage of the data.
Each time you access our homepage, our system automatically records data and information from the accessing computer’s systems.
The following data is recorded:
- Information about the type of browser and version used
- The user’s operating system
- The user’s IP address
- Date and time the website was accessed
- Websites that were accessed by the user through our website
Legal groundwork for the temporary storage of the data and the log files is Art. 6, Sec. 1 (f) GDPR.
The temporary storage of the IP address by the system is required to enable the website to be displayed on the user’s computer. For this, the user’s IP address must be stored for the duration of their visit.
The log file is stored to ensure the website’s functionality. Furthermore, we use the data to optimize the website and to ensure the safety of our IT-relevant systems. In this connection, we do not analyze the data for any marketing-related purposes.
Our legitimate interest in data processing as per Art. 6, Sec. 1 (f) GDPR also lies in these purposes.
The data is deleted as soon as the reason for which it was originally collected no longer exists. In the case of the recording of data for the provisioning of the website, this is the case once the respective session has ended.
The deletion of the data in the log files will be completed no later than after seven days. A storage of data going beyond this is also possible. In this case, the users’ IP addresses are deleted or truncated so that it is no longer possible to assign these to the accessing client.
The compiling of data for the provisioning of the website and the storage of data in log files is required for the operation of the website. Therefore, the user is unable to object to this.
The following data is stored and transferred in the cookies:
- Statistic opt-in/opt-out settings
The legal groundwork for the processing of personal data using cookies is Art. 6, Sec. 1 (f) GDPR.
Analysis cookies are used to improve the quality of our website and its content. We use the analysis cookies to determine how the website is being used and therefore can optimize our offers.
Our legitimate interest in the processing of personal data as per Art. 6, Sec. 1 (f) GDPR also lies in these purposes.
On our website, you may sign up for our free newsletter at any time. During the newsletter registration process, the data from the input screen is transferred to us.
When registering for the newsletter, your e-mail address is stored until you unsubscribe from the newsletter. For the mailing of our newsletter, we use the third-party service provider Campaign Monitor, which is operated by Campaign Monitor Pty Ltd, 404/3-5 Stapleton Ave, Sutherland NSW 2232, Sydney, Australia. Further information about Campaign Motor and data protection with the service provider Campaign Motor can be found here: http://www.campaignmonitor.com/privacy. You can unsubscribe at any time, either by sending a message to email@example.com or via the link provided in the newsletter.
In addition, the following data is collected upon registration:
- IP address of the accessing computer
- Date and time of the registration
Your consent for the processing of the data is collected during the registration process and reference is made to this Data Protection Statement.
The legal basis for the processing of the data after registration for the newsletter by the user is, with the user's consent, Art. 6, Sec. 1 (a) GDPR.
The collection of the user’s e-mail address only serves the purpose of mailing the newsletter.
The data is deleted as soon as the reason for which it was originally collected no longer exists. The user’s e-mail address is then stored for as long as the newsletter subscription is active.
The newsletter subscription can be terminated by the user at any time. For this purpose, a corresponding link is available in every newsletter. This also enables the user to revoke the consent to the storage of the personal data collected during the registration process.
Validity and version of the Data Protection Statement
This Data Protection Statement is valid from 25 May 2018.