Data Protection

§1 General information
Data protection is an important issue. In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally.

Responsible person according to Art. 4 para. 7 DSGVO
Kulturstiftung Ruhr
Villa Hügel, Hügel 15
D – 45133 Essen

office@villahuegel.de

§2 Brief overview of data and processing procedures
We are not a friend of long legal texts and want to offer you the required clarity (according to article 12 DSGVO). Therefore we offer the following overview of the processing:

Types of data processed:

sage data Communication data (when accessing a website, IP address, device information, access time and time, etc.)
contact data when registering or entering data
inventory data (name, company, address, etc.)
communication data (meta data about calls, e-mails, if applicable)
content data (especially when sending mails)

In addition, the following (internal) additional data for our customers, interested parties, suppliers and business partners for the provision of services in the areas of quotation and contract management, service and marketing, direct advertising and customer care:

contract data
customer stock data (CRM)
payment details
order data and invoice data

Persons concerned (categories):

Users of this website (also called visitors)
Customers (for mails etc.)
Suppliers

Purposes:

operating the Website and Providing Information
securing the operation of the website and our systems (e.g. firewall)
communication with our customers
answering questions
optimization and analysis of the website
providing information for our (potential) customers and suppliers

§3 General legal basis
We too must become legally correct: Art. 6 para. 1 lit. b DSGVO serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing. This is particularly the case if we use tracking to optimise the website or to measure the reach of the newsletter and in the case of corresponding direct advertising.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the person concerned or another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.
If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Basic Regulation (DSGVO) serves as the legal basis.

§4 Rights of data subjects
Short:

information
deletion / Restriction
corrigendum
transmissibility
revocation
complaint to the authority

Detailed rights:

- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 DSGVO, to immediately request the correction of incorrect or incomplete personal data stored by us;
- to demand the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- to demand the restriction of the processing of your personal data in accordance with Art. 18 DSGVO insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
- in accordance with Art. 20 DSGVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person;
- in accordance with Art. 7 para. 3 DSGVO, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future, and
  to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our office.

Exceptions

The right to deletion does not exist if the processing is necessary.

- on the exercise of freedom of expression and information;
- to fulfil a legal obligation which processing is subject to under the law of the Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
- for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to under section a) presumably makes it impossible or seriously impairs the attainment of the objectives of such processing, or
- for the assertion, exercise or defence of legal Claims

§5 Use of the website

General data when calling the page

(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO):

IP address
date and time of the request
time zone difference to Greenwich Mean Time (GMT)
contents of the request (concrete page)
access status/HTTP status code
amount of data transferred in each case
website from which the request originates
browser
operating system and its interface
Language and version of the browser software.

Logfiles

The data is stored in logfiles in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO.

The data will be deleted as soon as they are no longer required for the purpose for which they were collected.

If the data is stored in log files, this is the case after seven days at the latest. Storage going beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective.

This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies (see b)
Persistent cookies (see c).
b)
Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or when you log out.
c)
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d)
You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
e)
We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you will have to log in again for each visit.

Status of the data protection declaration

The privacy policy will be updated from time to time to reflect changes in the business process and the legal side. You will always find the latest version on the website.

Status: May 2018