Data Protection

Data Protection Officer

Judith Leitz
Telephone: +49 (0)69 60 50 08-34
Vice Data Protection Officer: Christin Groß-Narten
Telephone: +49 (0)69 60 50 08-35

Rights of the Affected Party

At all times, you have the right to be provided information at no charge regarding the personal data we have stored on your behalf as well as the origin of it, the recipients, and the purpose for which the data is processed. In addition, you have the right to have the data corrected, blocked or deleted at any time. For any questions pertaining to this – or related to any other data protection measures – please contact us at any time.
For the assertion of these claims, we kindly ask you to contact:
Furthermore, you have the right to lodge an appeal with the responsible professional supervisory authority in case of data protection-related issues:
Contact address of the Städelschule professional supervisory authority:

The Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden

Telephone: +49 (0)611 14 08-0

If you have authorized Städelschule to process your personal data based on the provision of a consent, you may withdraw this consent for the future at any time. The legality of the data processing that has occurred up to the point in time that the consent is withdrawn, is not affected.
The cancellation declaration should be forwarded to:

Processing of Personal Data

We only process personal data if this is permitted by law or if we have been provided the consent to do so.
Insofar as we collect consent from the affected party for the processing of personal data, then Art. 6, Sec. 1 (a) of EU GDPR serves as the legal basis.
Insofar as the processing of personal data is used to fulfill a legal requirement to which our company is subject, then Art. 6, Sec. 1 (c) GDPR serves as the legal basis.
The personal data of the affected party is deleted or blocked as soon as the grounds for storing this data have expired. In addition, the data can also be stored if this has been provisioned by the European or national lawmakers in EU regulations, laws or other legal provisions to which the responsible party is subject. Deleting or blocking the data also occurs if a storage period determined by the standards mentioned here expires, unless, due to the fulfillment of a contract, there is a requirement for the further storage of the data.
Each time you access our homepage, our system automatically records data and information from the accessing computer’s systems.

The following data is recorded:

  • Information about the type of browser and version used
  • The user’s operating system
  • The user’s IP address
  • Date and time the website was accessed
  • Websites that were accessed by the user through our website

Legal groundwork for the temporary storage of the data and the log files is Art. 6, Sec. 1 (f) GDPR.
The temporary storage of the IP address by the system is required to enable the website to be displayed on the user’s computer. For this, the user’s IP address must be stored for the duration of their visit.
The log file is stored to ensure the website’s functionality. Furthermore, we use the data to optimize the website and to ensure the safety of our IT-relevant systems. In this connection, we do not analyze the data for any marketing-related purposes.
Our legitimate interest in data processing as per Art. 6, Sec. 1 (f) GDPR also lies in these purposes.
The data is deleted as soon as the reason for which it was originally collected no longer exists. In the case of the recording of data for the provisioning of the website, this is the case once the respective session has ended.
The deletion of the data in the log files will be completed no later than after seven days. A storage of data going beyond this is also possible. In this case, the users’ IP addresses are deleted or truncated so that it is no longer possible to assign these to the accessing client.
The compiling of data for the provisioning of the website and the storage of data in log files is required for the operation of the website. Therefore, the user is unable to object to this.

Use of Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. Once the user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enable a clear identification of the browser once the website has been accessed again.
We use cookies to make our website more user friendly. Some elements of our website necessitate that the accessing browser can be identified even after moving to a different page.
The following data is stored and transferred in the cookies:

  • Statistic opt-in/opt-out settings

When accessing our website, the user is informed about the use of cookies for analysis purposes. The user’s consent regarding the related processing of their personal data is attained. In this connection, there is a reference to this Data Protection Statement.
The legal groundwork for the processing of personal data using cookies is Art. 6, Sec. 1 (f) GDPR.
Analysis cookies are used to improve the quality of our website and its content. We use the analysis cookies to determine how the website is being used and therefore can optimize our offers.
This website uses Google Analytics, a web analysis service provided by Google, Inc. (“Google”). Google Analytics uses cookies (text files stored on the computer) to analyze your use of the website. The information compiled by the cookie about your use of the website is generally sent to a Google server located in the USA and stored there. In case of the activation of the IP anonymization feature on this website, your IP address is, however, truncated by Google prior to it being transmitted. This is done within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the United States. By order of the operator of this website, Google will use this information in order to analyze your use of the website, in order to compile reports about the website activities, and in order to provide additional services connected with the use of the website and the Internet towards the website operator. The IP address transferred by your browser within the scope of Google Analytics is not combined with any other Google data. You can prevent the storage of cookies by making a corresponding setting in your browser software; however, by doing so, we point that you may not be able to use the full functionality of the website. Beyond that, you can prevent the transferring of the data compiled by the cookie and concerning your website use (incl. your IP address) to Google – as well as the processing of this data by Google – by downloading the browser plugin available here: (
Our legitimate interest in the processing of personal data as per Art. 6, Sec. 1 (f) GDPR also lies in these purposes.
Cookies are stored on the user’s computer and transferred to us by them. Therefore, as a user you also have the full control over the use of cookies. By making a change in your browser’s settings, you can deactivate or limit the transfer of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, then it is possible that not all functions of the website can be fully used.


On our website, you may sign up for our free newsletter at any time. During the newsletter registration process, the data from the input screen is transferred to us.
When registering for the newsletter, your e-mail address is stored until you unsubscribe from the newsletter. For the mailing of our newsletter, we use the third-party service provider Campaign Monitor, which is operated by Campaign Monitor Pty Ltd, 404/3-5 Stapleton Ave, Sutherland NSW 2232, Sydney, Australia. Further information about Campaign Motor and data protection with the service provider Campaign Motor can be found here: You can unsubscribe at any time, either by sending a message to or via the link provided in the newsletter.
In addition, the following data is collected upon registration:

  • IP address of the accessing computer
  • Date and time of the registration

Your consent for the processing of the data is collected during the registration process and reference is made to this Data Protection Statement.
The legal basis for the processing of the data after registration for the newsletter by the user is, with the user's consent, Art. 6, Sec. 1 (a) GDPR.
The collection of the user’s e-mail address only serves the purpose of mailing the newsletter.
The data is deleted as soon as the reason for which it was originally collected no longer exists. The user’s e-mail address is then stored for as long as the newsletter subscription is active.
The newsletter subscription can be terminated by the user at any time. For this purpose, a corresponding link is available in every newsletter. This also enables the user to revoke the consent to the storage of the personal data collected during the registration process.

Validity and Version of the Data Protection Statement

This Data Protection Statement is valid from 25 May 2018.