Privacy Policy

Hamburger Kunsthalle, as operator of these Internet pages, takes the protection of your personal data very seriously. Therefore, we treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this privacy policy.

The use of our website is usually possible without providing personal information. Insofar as personal data (such as name, address or e-mail addresses) are collected on our pages, this is always done as far as possible on a voluntary basis. This data will not be disclosed to third parties without your explicit consent.

However, we would like to point out that data transmission via the Internet (e.g., in the case of communication by e-mail) may have security gaps. A complete protection of data from access by third parties is not possible.

Booking of Guided tours

For the contract to book a guided tour, customer data (surname, first name, address, billing address if applicable, e-mail address and telephone number) will be stored and processed by us for the purpose of processing your request.

This customer data is only passed on to necessary third parties, i.e. to the leading art mediator.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via enquiries will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Guides

We work with freelance cultural mediators to organise events. They will guide you through the event and provide you with in-depth and unique cultural knowledge.

We only transfer personal data to the cultural mediators if this is necessary in the context of contract processing.

We have concluded a contract with all cultural mediators to ensure that they only process the personal data of our participants in accordance with our instructions and in compliance with the GDPR.

We only transmit the following data to the freelance guide.

Name of the group leader, size of the group, age group, institution if applicable, name of the institution, telephone number, e-mail address, address, which event has been booked and, in the case of school classes, the class level.

Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Candidate Privacy

The protection of personal data of applicants and all third parties associated with us is particularly important to us.
When processing personal data, the Hamburger Kunsthalle observes the relevant legal provisions on data protection. In the application data prote ction you see how the Hamburger Kunsthalle deals with personal data and explains the handling of your personal data in the course of the application process.

Digital Event via Zoom

Data Protection for Events with ZOOM

Hamburger Kunsthalle APP

General

Thank you for your interest in our museum. As the publisher of this multimedia guide, Hamburger Kunsthalle takes the protection of its personal data very seriously. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, always takes place in accordance with the General Data Protection Regulation (GDPR) and the applicable regional data protection regulation, the Hamburg Data Protection Act (HmbDSG).

We have implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this app. Nevertheless, the transfer of data via the internet may not be fully secure, so absolute protection cannot be guaranteed.

Access rights of the app

In order to provide our services via the app, we require the access rights listed below, which allow us to access certain features of your device. This general data and information is stored in the log files of the server.

1. Localisation within the museum

The app uses GPS data accessible to you and compares the information to the museum’s address to obtain the required location information.

2. Access to the internet

The device needs access to the internet to keep the app content up to date, whereby the operating system used by the accessing system is saved. Other similar data and information used to help prevent attacks on our information technology systems.

3. Capturing the network status and Wi-Fi status

The data is required to control the supply of content from the internet without causing long loading times.

In addition to the app, we also process personal data within the scope of our business relationship. Information about this data processing and your claims and rights under data protection law, which also partly applies to the data processing in our app, is available in our PRIVACY POLICY.[Link https://www.hamburger-kunsthalle.de/en/privacy-policy]

Integration of Third Party

It may be that content from third parties, such as videos from YouTube, maps from Google Maps, or RSS feeds or graphics from other websites are integrated within our websites. This always presupposes that the providers of this content (hereinafter referred to as Third Party Providers) are aware of the IP address of the users. Without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We make every effort to use only content whose respective providers use the IP address solely for the delivery of content. However, we have no influence on this if the Third Party Providers store the IP address, e.g., for statistical purposes. As far as we are aware of this, we will inform users accordingly.

We have created this privacy policy with the help of eRecht24 [link to http://www.e-recht24.de].

Invitation with Sweap

As a data controller, Hamburger Kunsthalle uses the German company SWEAP as its data processor for digital invitation management. The processing of personal data in digital invitation management with SWEAP has an absolute DSGVO compliance. The location of the data center for the Sweap application is Frankfurt/Main.

Furthermore, Sweap maintains an up-to-date list of subcontractors in their privacy policy to allow full transparency regarding transfers and processing. This list explains what data is specifically involved. All other third-party providers are also DSGVO compliant.

Privacy and GDPR at Sweap - Sweap Help Center

Newsletter Data

If you wish to subscribe to the newsletter offered on the website, we require your e-mail address, as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected. The use of the newsletter offer is permitted - if and so far technically possible and reasonable - without specification of any personal data or under specification of anonymized data or a pseudonym. We use this data exclusively for the delivery of the requested information. The addresses are managed by our service provider and Third Party Provider “kulturkurier” (data.kulturlink.ag, Friedrichstr.3, D-95444 Bayreuth Email: info[at]kulturkurier.de) but not transmitted to third parties.

You may revoke your consent to the storage of data, e-mail addresses and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Online Ticket Shop

Hamburger Kunsthalle offers the customer the opportunity to order tickets online, which are sent to him/her immediately after payment via e-mail.

When concluding, processing and/or rescinding from a purchase contract, Hamburger Kunsthalle collects, stores and processes customer data within the scope of the statutory provisions.

When visiting the website of Hamburger Kunsthalle, the IP address currently used by the customer's PC, date and time, the browser type and the operating system of the customer's PC, as well as the pages viewed by the customer are recorded. However, Hamburger Kunsthalle cannot and does not intend to draw conclusions about personal data.

The personal data that the customer provides to Hamburger Kunsthalle, e.g., when placing an order or by e-mail (e.g., customer name and contact details) will only be processed for correspondence with the customer and only for the purpose for which the customer provided the data to Hamburger Kunsthalle. To process payments, Hamburger Kunsthalle passes on the customer's payment data to the bank responsible for the payment. To prevent and track fraud at your expense involving stolen credit card information, we will keep this e-mail address for another three months after your credit card account is debited and the card is used to enter our premises. We will merge the card identification and e-mail address for this purpose only and will only use this information in case of suspected fraud for criminal prosecution. The provisions of the GDPR are complied with.

Personal data communicated to Hamburger Kunsthalle via its website is only stored until the purpose for which they have been entrusted to Hamburger Kunsthalle is fulfilled. As far as commercial and tax retention periods are to be observed, the duration of the storage of certain data can be up to 10 years.

For guest users, the email address is stored, but immediately anonymized (made invisible). If the customer no longer agrees to the storage of his/her personal data or if this data has become incorrect, Hamburger Kunsthalle will initiate the deletion, correction or blocking of the customer data within the scope of the legal provisions following appropriate instructions. To do so, please send an email to the following address info[at]hamburger-kunsthalle.de with the subject Deletion User Account Online Ticket Shop. We will irrevocably delete the account and the data stored with it.

Social Media Channels

Privacy Policy for the Use of Facebook Plugins

You will find plugins of the social network Facebook on our pages (provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA). The Facebook plugins can be recognized on our site by the Facebook logo. An overview of the Facebook plugins can be found here [LINK https://developers.facebook.com/docs/plugins/]

When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives information that you have visited our website with your IP address. If you click on the Facebook "Like button" while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. This allows Facebook to associate the visit of our pages with your Facebook account. We would like to point out that we as the provider of the pages are not aware of the content of the data transmitted and its use by Facebook. For more information, please see the Facebook privacy policy [link: https://www.facebook.com/policy.php]

If you do not wish Facebook to be able to associate your visit to our website to your Facebook account, please log out of your Facebook user account first.

Privacy Policy for the Use of Instagram

Functions of the Instagram service are integrated on our pages. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that we as the provider of the pages are not aware of the content of the data transmitted and its use by Instagram.

For more information, please see the Instagram privacy policy. [link: https://help.instagram.com/155833707900388]

SSL Encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by noticing that the address line of the browser changes from "http://" to "https://" and the lock symbol in your browser line.

If SSL encryption is enabled, the data you submit to us cannot be read by third parties.

Web Forms