Data protection
Data protection information according to Art. 12 ff. GDPR
A) Name and contact details of the controller
Your contact person as the controller within the meaning of the European General Data Protection Regulation ("GDPR") and other national data protection laws of the member states as well as other data protection regulations is
Museum for Franconia
State Museum for Art and Cultural History in Würzburg
Marienberg Fortress, 97082 Würzburg
(hereinafter referred to as "we", "us" or "our")
B) Contact details of the data protection officer
You can reach our data protection officer using the following contact details
Joint Data Protection Officer
Landshuter Allee 8
80637 Munich
Tel: +49 (0)89 23805 136
E-mail: zd.datenschutz@pinakothek.de
C) Data processing in the context of our website
I) Website functionality
1. provision of the website and creation of log files
a) Legal basis
The legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is our public performance of tasks (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
b) Purpose
The temporary storage of your personal data by us is a prerequisite for us to be able to display our website on your computer. For this reason, we store your personal data until the end of the respective session.
We continue to store your personal data in log files in order to technically ensure the correct functioning of our website. Furthermore, we use the log files to check and maintain the proper functioning of the security of our information technology systems. Your data collected for this purpose will not be processed for purposes other than those mentioned above.
c) Storage period
We delete your personal data as soon as we no longer need it for the processing purposes specified by us. In the case of processing in the context of providing our website, this is the case as soon as you have left our website.
If we store your personal data in our log files, we delete them after 30 days at the latest. If we want or need to store your data beyond this period, your data will only be stored or processed in anonymized form. Anonymization means that we can no longer assign your data to you.
d) Right of objection and removal
Since the processing of your personal data for the provision of the website and the further storage of your personal data in so-called log files is essential for the operation of the website, you have no option to object.
2 Technically necessary cookies
a) Legal basis
The legal basis for the processing of your personal data in the context of the use of technically necessary cookies is our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. f GDPR). Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
b) Purpose
The use of technically necessary cookies is a prerequisite for us to make website use easier and more accessible for you. Some of the functionalities would not be possible without the use of these cookies. These functionalities require you to be recognized by our website even after you have switched to another page in the meantime. Your personal data will not be used in any other way in this context.
c) Storage period
We delete your personal data as soon as the actual purpose of the processing has been achieved and its processing is therefore no longer necessary. For many functionalities in particular, this is the case when you leave the website.
d) Possibility of objection and removal
If we use cookies, these will be stored locally on your computer if permission is granted. As information is transmitted from the cookies to our website, you retain complete control over the use of cookies.
Your browser also allows you to restrict or completely deactivate the transmission of cookies in the settings. You can also delete cookies that have already been saved in the past at any time, including automatically. However, if you deactivate cookies with regard to our website, we cannot guarantee that you will be able to use all the functions of our website.
If you are still using Adobe Flash Player, we would like to point out that Flash cookies cannot be prevented or deleted via your browser settings. Instead, a setting in the Adobe Flash Player is required.
3 YouTube
a) Legal basis
The legal basis for the processing of your personal data, which is processed through the integration (not only linking) of YouTube videos, is our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. f GDPR). Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
b)Purpose
YouTube processes your personal data so that video content can be played on our website in an appealing, uniform and device-independent manner.
c) Storage duration
YouTube videos are integrated by us in extended data protection mode. This means that no further information about your visit to our website is stored beyond the fact of integration. As a result, your personal data will be deleted as soon as it is no longer required for the purpose of processing. This is the case at the latest at the end of your visit to our website.
d) Objection and removal options
It is imperative that we process your personal data in the context of the integration of YouTube videos. For this reason, you have no right to object.
II) Marketing
1. newsletter
a) Legal basis
The legal basis for the processing of your personal data in the context of sending the newsletter is your declared consent in accordance with Art. 6 para. 1 lit. a GDPR.
b) Purpose
We process your personal data in order to send you our newsletter. The purpose of sending you our newsletter is to inform you about special exhibitions, programs as part of the special exhibition and general museum events, such as museum festivals, expertise days, arts and crafts market, museum night.
c) Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was processed. In connection with the sending of the newsletter, your personal data will therefore be stored until you have unsubscribed from our newsletter.
d) Right of objection and removal
You can withdraw your consent at any time. To do so, you can either expressly withdraw your consent or click on the unsubscribe link included in each of our newsletters to let us know that you no longer wish to receive the newsletter.
2. direct marketing
a) Legal basis
The legal basis for the processing of your personal data in the context of the direct marketing measures used by us is either your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR or the legal permission of our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. a GDPR). Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 General Data Protection Regulation (GDPR)) or Section 7 para. 3 UWG.
b) Purpose
Our direct marketing measures and the associated processing of your personal data are aimed at sending you information and offers and thus possibly increasing our sales in the area of cultural offers.
c) Storage period
We delete your personal data as soon as it is no longer necessary to achieve the purpose; in this case, this is particularly the case if we have received your revocation or objection to the processing.
3. competitions
a) Legal basis
The legal basis for the processing of your personal data in the context of competitions is Art. 6 para. 1 lit. b GDPR.
b) Purpose
We process your data in connection with your participation in the competition in order to ensure the fulfillment of the competition contract concluded between you and us.
c) Storage period
We delete your personal data when this data is no longer necessary to achieve the purpose. In connection with the competition contract, this is particularly the case when the competition has been fully completed.
d) Right of objection and removal
You have the option at any time to object to the processing of your personal data in relation to participation in the competition for the future. In this case, however, we will unfortunately no longer be able to include you in the competition. In the event of an objection, we will delete all data stored in connection with your participation in the competition.
4. accessibility
a) Eye-Able® Assist
We use Eye-Able® Assist software from Web Inclusion GmbH, which enables all people to access information on the Internet without barriers.
The necessary files such as JavaScript, stylesheets and images are loaded from an external server. When functions are activated, Eye-Able® Assist uses the browser's local storage to save the settings. All settings are only saved locally and are not transmitted further. Eye-Able® Assist uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia) to ward off attacks and provide the service. All transmitted data and servers remain in the EU at all times in order to enable data protection-compliant processing in accordance with the GDPR. Web Inclusion GmbH does not collect or analyze personal user behavior or other personal data at any time.
b) Legal basis
The legal basis for the use of the Matomo analysis tool is our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG i.V.m. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
c) Purpose
As a public institution, the museum is obliged to provide accessible information. With Eye-Able® Assist, we want to make the contents of the Museum für Franken available online to as many people with different needs as possible.
5. comfort improvement, website optimization, user behavior analysis and display of personalized advertising
a) Matomo
We use Matomo (formerly Piwik) for web analysis, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo").
Matomo is configured so that no cookies are stored on the computer. Instead, we use fingerprinting to analyze the behavior of our visitors for the purpose of website optimization and optimization of our offer. The fingerprint records the operating system, browser, device type (computer, laptop, phone), screen resolution, preferred language, etc. in order to understand the use and navigation on our pages. The IP address is anonymized directly when it is recorded. The above measures do not allow us to draw any conclusions about the identity of individual visitors. The information collected is not transmitted to third parties.
b) Legal basis
The legal basis for the use of the Matomo analysis tool is the performance of our public duties (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
c) Purpose
We see this analysis as part of our internet service. We would like to use it to further improve the website and adapt it even more to the needs of users.
d) Storage period
Your personal data in connection with the analysis by the Matomo tool will be deleted if they are no longer required to achieve the stated purposes; this is the case in particular after 365 days.
e) Possibility of objection and removal
If you do not agree with the storage and use of your data, you can deactivate the storage and use here.
You have the option of preventing the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.
In this case, an opt-out cookie is stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.
Matomo adheres to the "Do-Not-Track" function of your browser.
III) Data protection and law
1. data subject input according to Art. 12 ff. GDPR
a) Legal basis
If you ask us for information regarding our processing of your personal data in the context of a so-called data subject request, the legal basis for the processing of personal data carried out on the basis of the request is Art. 6 para. 1 lit. c in conjunction with Art. 12 et seq. Art. 12 ff. GDPR. The legal basis for the documentation of your request to be carried out by us is Art. 6 para. 1 lit. f GDPR.
b) Purpose
In this context, we process your personal data in order to be able to provide you with information about the data protection content requested as part of your data subject input. We must then document both your request and our legally compliant information and processing in order to comply with our legal accountability obligation under Art. 5 para. 2 GDPR.
c) Storage period
We delete your personal data as soon as we no longer need it to respond to your request or to fulfill our legal accountability obligations.
d) Possibility of objection and removal
If you do not want us to process your data in connection with your data subject input, you can object to this at any time for the future. Please note that in this case it will not be possible for us to answer your request and provide you with information.
However, you have no right to object to the documentation of your data subject submission and any objection to data processing in the context of the data subject submission, as this is a legal obligation for us.
2. legal defense and enforcement
a) Legal basis
If we have to process your personal data in the context of legal defense and enforcement, the legal basis is Art. 6 para. 1 lit. f GDPR.
b) Purpose
If we need to process your data for the purposes of legal defense and enforcement, this is for the purpose of defending against unjustified claims and the legal enforcement and assertion of claims and rights to which we are entitled.
c) Storage period
We delete your personal data as soon as it is no longer required for legal defense and enforcement.
d) Right to object and right to erasure
If we have to process your personal data for these purposes, the processing is mandatory. For this reason, you have no right or option to object to the processing.
D) Further data processing in addition to our website
I) Webshop
1. ticket purchase
a) Legal basis
The legal basis for the processing of your personal data in the context of the webshop is Art. 6 para. 1 lit. b GDPR.
b) Purpose
We process your personal data in connection with our web store to fulfill a contract that has been concluded between you and us.
c) Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was processed. With regard to the processing of the aforementioned personal data, this is the case when the contract has been fulfilled and all contractual claims have expired and/or there are no longer any statutory storage and retention periods.
d) Right of objection and removal
We can only process the contract concluded between you and us in connection with the web store using your personal data. As the processing is therefore mandatory, you have no specific option to object.
2. customer account registration
a) Legal basis
The legal basis for the processing of your personal data in the context of customer account registration is Art. 6 para. 1 lit. b EU GDPR.
b) Purpose
If you register on our website, this not only enables us to maintain our customer relationship with you, but also serves to conclude contracts. The processing of your personal data in connection with the registration of your customer account is therefore necessary for the performance of a contract, the implementation of pre-contractual measures and the maintenance of our customer profiles and relationships.
c) Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was processed. This is the case at the latest when you close your customer account with us.
d) Right of objection and removal
If you no longer wish your data to be processed, you can cancel the registration of your customer account on our website at any time. In this case, we will delete your personal data, provided that we are not prevented from doing so by statutory retention periods.
3. contact form and e-mail contact
a) Legal basis
The legal basis for the processing of your personal data transmitted in the course of contacting us is our performance of public duties (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. f GDPR). Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)). However, if you contact us with the aim of concluding a contract with us, Art. 6 para. 1 lit. b GDPR is the relevant legal basis for the processing of your personal data.
b) Purpose
We process your personal data in connection with your contact to process and respond to your request.
c) Storage period
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was processed. Personal data transmitted to us in the course of contacting us will be deleted if your request has been processed by us and no statutory retention periods prevent deletion.
d) Objection and removal options
You can object to the processing of your personal data in connection with your contact at any time for the future. If you do so, however, we cannot and will not process your request any further. Provided there are no legal retention periods to the contrary, all your personal data relating to the contact will be deleted in this case.
II) Facebook Insights (Facebook fan page)
1. joint responsibility
We operate our Facebook fan page(https://www.facebook.com/museumfuerfranken) jointly with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, (hereinafter Facebook) in accordance with the decision of the ECJ, as personal data is processed by Facebook and us in connection with our fan page or its content and we contribute to the decision on the purposes and means of this processing.
For this reason, we have concluded a separate agreement with Facebook and divided up which of us fulfills which obligations under the GDPR.
2. you can read the most important contents of this agreement under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
If you would like to know how Facebook processes your personal data, you can find information on this at
https://www.facebook.com/legal/terms/information_about_page_insights_data
3. legal basis
Our legal basis for processing your personal data in the context of the Facebook fan page is the performance of our public duties (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 para. 1 lit. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
4. purpose
In order to fill our Facebook fan page with content that is of interest to you, we need to get to know your user behavior. The processing of your personal data, which is collected during the use of our Facebook fan page and evaluated by Facebook, supports us in this. For this purpose, Facebook provides us with page statistics that give us information about visitors and their interactions with our page. Furthermore, our Facebook fan page enables you to communicate directly with us and to respond to our posts and content.
5. origin
The data collected from you when you use our Facebook fan page is analyzed by Facebook and subsequently made available to us.
6. storage duration
The page statistics used by us cover a period of 5 years. We do not process or store older statistics. Otherwise, we delete your personal data as soon as we no longer need it for the stated purposes. This is the case at the latest when we delete our Facebook fan page.
7 Possibility of objection and removal
If you do not want Facebook to collect your data, you have the option to object at any time for the future. If you object to the processing of your personal data by Facebook, we will forward this objection request to Facebook.
III) Instagram
1. joint responsibility
We operate our Instagram page(https://www.instagram.com/museum_franken) jointly with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, (hereinafter Facebook) in accordance with the decision of the ECJ, as personal data is processed by Facebook and us in connection with our fan page or its content and we contribute to the decision on the purposes and means of this processing.
For this reason, we have concluded a separate agreement with Facebook and divided up which of us fulfills which obligations under the GDPR.
You can read the most important contents of this agreement at the following link
https://help.instagram.com/519522125107875
If you would like to know how Facebook generally processes your personal data, you can find information on this at
https://www.facebook.com/legal/terms/information_about_page_insights_data
2 Legal basis
Our legal basis for processing your personal data on our Instagram page is the performance of our public duties (Art. 4 (1) Bavarian Data Protection Act - BayDSG in conjunction with Art. 6 (1) lit. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
3. purpose
Our Instagram page allows you to react to our posts, comment on them and send us private messages. The evaluation of this data is essential for us to improve the user experience for the future and to make the content more attractive. In addition, we receive anonymized or pseudonymized statistics from Facebook that provide us with information about the visitors to our Instagram page and their interactions with our Instagram page and its content.
4. origin
The data collected from you when you use our Instagram page is evaluated by Facebook and subsequently made available to us.
5. storage period
Your personal data will be deleted by us if it is no longer necessary to achieve the purpose for which it was collected. As far as possible, your personal data will be deleted at the latest when our Instagram page is closed.
6. possibility of objection and removal
If you do not want Facebook to collect your data, you have the option to object at any time for the future. If you object to the processing of your personal data by Facebook, we will forward this objection request to Facebook.
III) YouTube channel
1. scope of the processing
In order to convey artistic impressions to as many people as possible, we operate our own YouTube channel(https://www.youtube.com/channel/UC0dPOYluAvxmj5m7la-OGLg), which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). YouTube is a video platform on which users can post videos and make them publicly accessible.
We expressly point out that YouTube stores the data of its users (e.g. personal information, IP address, etc.) in accordance with its data usage guidelines and uses it for business purposes. We have no influence on this data collection and the further use of the data by YouTube.
Information about which data is processed by YouTube and for what purposes it is used can be found in the terms of use and privacy policies of YouTube and Google.
https://www.youtube.com/static?gl=DE&template=terms&hl=de and in general
https://support.google.com/youtube/topic/2803240?visit_id=637248885594456664-1434476429&hl=de&rd=1
Our use of YouTube does not constitute an unqualified endorsement of this medium or the company or the privacy policy of Google LLC.
2 Legal basis
The legal basis for the processing of your personal data is our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG i.V.m. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
3. purpose
We process your personal data in order to be able to tailor our YouTube channel to the interests of our users in the best possible way. Your data will therefore only be processed against this background; in particular, your data will not be combined and evaluated with other data sets for other purposes. In addition, we process your data if you contact us via our YouTube channel or comment on our videos.
4. origin
The personal data collected from you when you use our YouTube channel is not collected by us directly, but is provided to us by Google.
5. storage period
We delete your personal data as soon as it is no longer required for our aforementioned purposes. Your data will be deleted at the latest - insofar as we can influence this - when we discontinue our YouTube channel.
6. possibility of objection and removal
If you do not want Google to collect your data, you have the option to object at any time for the future. If you object to the processing of your personal data by Google, we will forward this objection request to Google.
IV) Whatsapp Business
1. use of Whatsapp Messenger
By opening and using the messenger, you consent to the Museum für Franken processing your personal data (e.g. telephone number) for communication regarding your inquiries using the messenger "WhatsApp" from WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin (Ireland). You can find more information on the data protection information of the provider Whatsapp here:
https://www.whatsapp.com/legal/business-app-privacy-policy?lang=de
2 Legal basis
The legal basis for the processing of your personal data is our public task performance (Art. 4 para. 1 Bavarian Data Protection Act - BayDSG i.V.m. Art. 6 para. 1 lit. e in conjunction with. Art. 6 para. 3 sentence 1 of the General Data Protection Regulation (GDPR)).
3. purpose
We process your personal data in order to be able to answer your questions about the museum, the museum's collection or other matters promptly and directly. Your data will therefore only be processed for this purpose; in particular, your data will not be combined and evaluated with other data sets for other purposes.
4 Storage period
We do not store any personal data outside the application and delete all chats as soon as they are no longer required for our aforementioned purposes. Your data will be deleted at the latest - insofar as we can influence this - when we discontinue our Whatsapp communication.
6. possibility of objection and removal
You can object to the processing of your personal data in connection with your contact at any time for the future. However, if you do so, we cannot and will not process your request any further. Provided there are no legal retention periods to the contrary, all your personal data relating to the contact will be deleted in this case.
E) Categories of recipients
Within our authority or the museum, your personal data will only be passed on to the departments that need it to fulfill their tasks. We use reliable and trustworthy service providers for activities that we cannot perform within our organization in terms of personnel or content. Your personal data may therefore also be transferred to these recipients. The following categories of third-party service providers may be considered in particular: parcel and postal service providers, banks, State Office of Finance, Bavarian State Treasury, tax consultants, payment service providers.
F) Transfer to third countries
In principle, we process your data within the Federal Republic of Germany or the territory of the EU/EEA. In exceptional cases, however, we may also transfer your data to trusted service providers and bodies in third countries. The GDPR defines third countries as all countries outside the European Union or the European Economic Area.
We ensure that the service providers in third countries can guarantee us that your personal data will be processed at a level that at least meets the requirements of the GDPR.
Furthermore, data is only transferred to third countries if an adequacy decision has been issued by the European Commission for this third country (cf. the current list of adequacy decisions here) or, in the absence of such a decision, on the basis of standard contractual clauses and if we have provided appropriate safeguards, such as standard contractual clauses, and if you have enforceable rights and effective legal remedies.
Please note: If you activate the embedded YouTube videos, personal data will be transmitted to Google in the USA. According to the Schrems II judgment of the ECJ, there is no data protection in the USA comparable to European standards at this time. Access to your personal data by US authorities cannot be ruled out.
G) Your rights
According to the GDPR, you have the following rights as a data subject
I) Right to information
1. you can request information about your personal data processed by us in accordance with Art. 15 GDPR. In your request for information, you should specify your request in order to make it easier for us to compile the necessary data. Please note that your right to information may be restricted under certain circumstances in accordance with the statutory provisions (in particular Section 34 BDSG and Art. 10 BayDSG).
If there is a right to information, we will inform you about
- the purposes of processing
- the categories of personal data being processed
- the recipients or categories of recipients
- the planned duration for which your personal data will be stored
- the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing and the existence of a right to lodge a complaint with a supervisory authority
- if the personal data is not collected from you, all available information about the origin of the data
- the existence of automated decision-making, including profiling and, where available, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you
II) Right to rectification
If the information concerning you is not (or no longer) accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
III) Right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted if one of the following conditions is met:
- If you contest the accuracy of your data, for a period enabling us to verify the accuracy of the personal data
- the processing of your personal data by us is unlawful
- our purpose no longer applies, but you need the data for the establishment, exercise or defense of legal claims
- you have objected to the processing pursuant to Art. 21 (1) GDPR and we are examining this objection
IV) Right to erasure
You can request the erasure of your personal data under the conditions of Art. 17 GDPR. Your right to erasure depends, among other things, on whether the data concerning you is still required by us to fulfill our legal obligations.
Your right exists in particular if
- your personal data are no longer necessary for the purposes for which they were collected or otherwise processed
- you have withdrawn your consent on which the processing was based and we have no other legal basis for the processing
- you have objected to the processing and there are no overriding legitimate grounds for the processing
- your personal data has been processed unlawfully
- the deletion represents a legal obligation for us
- the data was collected from you as a minor under the age of 16 for the provision of information society services
V) Right to information
If you have exercised one of the aforementioned rights, we will also inform other recipients of your personal data accordingly.
VI) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, provided that the legal requirements of Art. 20 GDPR are met.
VII) Right to object
According to Art. 21 GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation. However, we are not always able to comply with this, e.g. if we are required by law to process data as part of our official duties.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time.
VIII) Right of revocation
You have the right to withdraw any consent you have given us at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
IX) Right to lodge a complaint with a supervisory authority
If you are of the opinion that we have not complied with data protection regulations when processing your data, you can, without prejudice to any other administrative or judicial remedy, lodge a complaint with the supervisory authority responsible for us.
The competent supervisory authority for us is
Bavarian State Commissioner for Data Protection
Wagmüllerstr. 18
80538 Munich
Phone: 089/2126720
E-mail: poststelle@datenschutz-bayern.de
H) Overview of the cookies used
Below we inform you about all cookies used on our website, their purpose and the respective storage period.
I) Technically necessary purposes
Provider: www.museum-franken.de // Name: CookieConsent
Purpose: Saves the user's consent status for cookies on the current domain.
Provider: cdn.eye-able.com // Name: eaIntro
Purpose: Used to save the settings for the website's accessibility widget. This helps people with e.g. visual impairments to find their way around the website.
II) Statistical purposes
Provider: www.museum-franken.de / Name: _pk_id#
Purpose: Collects statistics about the user's visits to the website, such as the number of visits, average time spent on the website and which pages were read.
Provider: www.museum-franken.de / Name: _pk_ses#
Purpose: Used by Piwik Analytics Platform to track the visitor's page views during the session.
If you have any further questions, you can contact our data protection officer at any time.