Privacy

Privacy Notice pursuant to Art. 12 et seq. of the GDPR

A) Name and contact details of the controller

Your contact person as the controller within the meaning of the European General Data Protection Regulation (“GDPR”) and other national data protection laws of the member states, as well as other data protection regulations, is:
Museum of Franconia
State Museum of Art and Cultural History in Würzburg
Marienberg Fortress, 97082 Würzburg
(hereinafter referred to as “we,” “us,” or “our”)

B) Contact details of the Data Protection Officer

You can reach our official data protection officer using the following contact information:

Joint Official Data Protection Officer
Landshuter Allee 8
80637 Munich
Tel: +49 (0)89 23805 136
Email: zd.datenschutz@pinakothek.de

C) Data Processing in Connection with Our Website

I) Website functionality

1. Provision of the website and creation of log files

a) Legal basis
The legal basis for the processing of your personal data in connection with the provision of the website and the creation of log files is our performance of public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

b) Purpose
The temporary storage of your personal data by us is necessary so that we can display our website on your computer. For this reason, we store your personal data until the end of the respective session.

We further store your personal data in so-called log files to technically ensure the proper functioning of our website. Furthermore, the log files serve to verify and maintain the proper functioning of the security of our information technology systems. The data collected for this purpose will not be processed for any purposes other than those mentioned above.

c) Retention Period
We delete your personal data as soon as we no longer need it for the processing purposes we have specified. In the case of processing in connection with the provision of our website, this occurs as soon as you have left our website.

If we store your personal data in our log files, we will delete it after 30 days at the latest. Should we wish to or be required to store your data beyond this period, your data will only be retained or processed in an anonymized form. Anonymization means that we can no longer associate your data with you.

d) Right to Object and Right to Erasure
Since the processing of your personal data for the provision of the website and the further storage of your personal data in so-called log files is essential for the operation of the website, you have no right to object.

2. Technically Necessary Cookies

a) Legal basis
The legal basis for the processing of your personal data in connection with the use of technically necessary cookies is the performance of our public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

b) Purpose
The use of technically necessary cookies is essential for us to make the website easier and more accessible for you. Some of the functionalities would not be possible without the use of these cookies. These functionalities require that you be recognized by our website even after temporarily switching to another page. No other use of your personal data takes place in this context.

c) Storage period
We delete your personal data as soon as the actual purpose of the processing has been achieved and its processing is therefore no longer necessary. For many features, this is typically the case as soon as you leave the website.

d) Right to object and opt-out
If we use cookies, they will be stored locally on your computer with your consent. Since information from the cookies is transmitted to our website, you retain full control over the use of cookies.

Your browser also allows you to restrict or completely disable the transmission of cookies in the settings. You can also delete cookies stored in the past at any time—including automatically. However, if you disable cookies for our website, we cannot guarantee that you will be able to use all of our website’s features.

If you still use Adobe Flash Player, we would like to point out that so-called Flash cookies cannot be prevented or deleted via your browser settings. Instead, a setting in Adobe Flash Player is required.

3. YouTube

a) Legal Basis
The legal basis for the processing of your personal data, which is processed through the embedding (not merely linking) of YouTube videos, is our performance of public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

b) Purpose
YouTube processes your personal data so that video content can be played on our website in an appealing, consistent, and device-independent manner.

c) Retention period
We embed YouTube videos in enhanced privacy mode. This means that, apart from the fact of the embedding, no further information about your visit to our website is stored. As a result, your personal data is deleted as soon as it is no longer necessary for the purpose of processing. This is the case at the latest when you end your visit to our website.

d) Options for objection and removal
It is absolutely necessary for us to process your personal data in connection with the embedding of YouTube videos. For this reason, you do not have the right to object.

II) Marketing

1. Newsletter

a) Legal basis
The legal basis for processing your personal data in connection with the distribution of the newsletter is the consent you have provided pursuant to Art. 6(1)(a) of the GDPR.

b) Purpose
We process your personal data to send you our newsletter. The purpose of our newsletter is to inform you about special exhibitions, programs related to the special exhibitions, and general museum events, such as museum festivals, expert days, the arts and crafts market, and Museum Night.

c) Retention period
We will delete your personal data as soon as it is no longer necessary to achieve the purpose of its processing. In connection with the distribution of the newsletter, your personal data will therefore be stored until you unsubscribe from our newsletter.

d) Right to object and right to erasure
You may withdraw your consent at any time. To do so, you can either expressly withdraw your consent or click the unsubscribe link included in each of our newsletters to let us know that you no longer wish to receive the newsletter.

2. Direct Marketing

a) Legal basis
The legal basis for processing your personal data in connection with the direct marketing measures we implement is either the consent you have explicitly provided pursuant to Art. 6(1)(a) GDPR or the statutory authorization for the performance of our public duties (Art. 4(1) Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)) or § 7(3) UWG.

b) Purpose
Our direct marketing activities and the associated processing of your personal data are intended to send you information and offers and, in doing so, potentially increase our sales in the area of cultural offerings.

c) Retention period
We will delete your personal data as soon as it is no longer necessary to achieve the purpose; in this case, this applies in particular when we have received your revocation or objection to the processing.

3. Sweepstakes

a) Legal basis
The legal basis for the processing of your personal data in the context of sweepstakes is Article 6(1)(b) of the GDPR.

b) Purpose
We process your data in connection with your participation in the contest to ensure the fulfillment of the contest agreement concluded between you and us.

c) Retention period
We will delete your personal data once it is no longer necessary to achieve the purpose. In the context of the contest agreement, this is particularly the case once the contest has been fully concluded.

d) Right to object and right to erasure
You have the option at any time to object to the processing of your personal data in connection with your participation in the contest for the future. In this case, however, we will unfortunately no longer be able to consider you as a participant in the contest. In the event of an objection, we will delete all data stored in connection with your participation in the contest.

4. Accessibility

a) Eye-Able® Assist
We use Eye-Able® Assist, a software product from Web Inclusion GmbH that enables barrier-free access to information on the Internet for everyone.

The necessary files, such as JavaScript, stylesheets, and images, are loaded from an external server for this purpose. When functions are activated, Eye-Able® Assist uses the browser’s local storage to save settings. All settings are stored only locally and are not transmitted further. To defend against attacks and provide the service, Eye-Able® Assist uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). All transmitted data and servers remain within the EU at all times to ensure data processing complies with the GDPR. Web Inclusion GmbH does not collect or analyze any personal user behavior or other personal data at any time.

b) Legal Basis
The legal basis for the use of the Matomo analytics tool is our performance of public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

c) Purpose
As a public institution, the museum is obligated to make information accessible to all. With Eye-Able® Assist, we aim to make the content of the Museum für Franken available online to as many people as possible, regardless of their specific needs.

5. Improving user experience, website optimization, user behavior analysis, and the display of personalized advertising

a) Matomo
We use Matomo (formerly Piwik) for web analytics, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, (“Matomo”).

Matomo is configured so that no cookies are stored on the user’s computer. Instead, we use fingerprinting to analyze our visitors’ behavior for the purpose of website optimization and improving our offerings. The fingerprint captures the operating system, browser, device type (computer, laptop, phone), screen resolution, preferred language, etc., to understand usage and navigation on our site. The IP address is anonymized immediately upon collection. Due to the measures described above, we cannot draw any conclusions regarding the identity of individual visitors. The collected information is not shared with third parties.

c) Purpose
We view this analysis as an integral part of our internet services. We use it to further improve the website and tailor it even more closely to the needs of our users.

d) Retention period
Your personal data collected in connection with the analysis by the Matomo tool will be deleted once it is no longer necessary to achieve the stated purposes; this is typically the case after 365 days.

e) Right to object and opt-out
If you do not consent to the storage and use of your data, you can disable the storage and use here.

You have the option to prevent the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the site owner from learning from your actions and improving the user experience for you and other users.

In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will result in the Matomo opt-out cookie being deleted as well. The opt-out must be reactivated when you visit our site again.

Matomo complies with your browser’s “Do Not Track” feature.

III) Data Protection and Law

1. Data Subject’s Rights under Art. 12 et seq. GDPR

a) Legal basis
If you request information from us regarding our processing of your personal data as part of a so-called data subject request, the legal basis for the processing of personal data resulting from the request is Art. 6(1)(c) in conjunction with Art. 12 et seq. of the GDPR. The legal basis for our documentation of your request is Article 6(1)(f) of the GDPR.

b) Purpose
In this context, we process your personal data in order to provide you with information regarding the data protection-related matters requested in your data subject request. We must then document both your request and our legally compliant response and processing in order to fulfill our legal accountability obligation under Article 5(2) of the GDPR.

c) Retention period
We will delete your personal data as soon as we no longer need it to respond to your data subject request or to fulfill our legal accountability obligations.

d) Right to object and right to erasure
If you do not wish for us to process your data in connection with your data subject request, you may object at any time with effect for the future. Please note that in this case, we will not be able to respond to your request or provide you with information.

However, you do not have the right to object to the documentation of your data subject request or to any objection you may have raised regarding data processing in connection with the data subject request, as this constitutes a legal obligation for us.

2. Legal Defense and Enforcement

a) Legal basis
If we need to process your personal data in the context of legal defense and enforcement, the legal basis is Art. 6(1)(f) GDPR.

b) Purpose
If we must process your data for the purpose of legal defense and enforcement, this is done to defend against unjustified claims and to legally enforce and assert the claims and rights to which we are entitled.

c) Retention Period
We will delete your personal data as soon as it is no longer necessary for the defense and enforcement of legal rights.

d) Right to object and right to erasure
If we must process your personal data for these purposes, such processing is strictly necessary. For this reason, you do not have the right to object to or the option of objecting to the processing.

D) Additional data processing beyond our website

I) Webshop

1. Ticket Purchase

a) Legal basis
The legal basis for the processing of your personal data in connection with the web shop is Article 6(1)(b) of the GDPR.

b) Purpose
We process your personal data in connection with our online store to fulfill a contract concluded between you and us.

c) Retention period
We delete your personal data as soon as it is no longer necessary to achieve the purpose of its processing. With regard to the processing of the aforementioned personal data, this is the case when, on the one hand, the contract has been fulfilled and, on the other hand, all contractual claims have expired and/or no statutory retention and storage periods remain.

d) Right to object and right to erasure
We can only process the contract concluded between you and us in connection with the online store using your personal data. Since processing is therefore strictly necessary, you have no specific right to object.

2. Customer Account Registration

a) Legal basis
The legal basis for the processing of your personal data in connection with customer account registration is Art. 6(1)(b) of the EU GDPR.

b) Purpose
When you register on our website, this not only enables us to maintain our customer relationship with you but also serves to conclude contracts. The processing of your personal data in connection with the registration of your customer account is therefore necessary for the performance of a contract, for the implementation of pre-contractual measures, and for the maintenance of our customer profiles and relationships.

c) Retention period
We delete your personal data as soon as it is no longer necessary to achieve the purpose of its processing. This is the case at the latest when you close your customer account with us.

d) Right to object and right to erasure
If you no longer wish for your data to be processed, you may cancel your customer account registration on our website at any time. In this case, we will delete your personal data unless we are prevented from doing so by statutory retention periods.

3. Contact Form and Email Contact

a) Legal basis
The legal basis for the processing of your personal data transmitted when contacting us is the performance of our public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)). If, however, your contact with us is aimed at concluding a contract with us, Art. 6(1)(b) GDPR applies as an additional legal basis for the processing of your personal data.

b) Purpose
We process your personal data in connection with your contact with us to handle and respond to your inquiry.

c) Retention period
We delete your personal data as soon as it is no longer necessary to achieve the purpose of its processing. Personal data transmitted to us in the context of your contact will be deleted once your request has been processed by us and provided that no statutory retention periods preclude such deletion.

d) Right to object and right to erasure
You may object at any time to the processing of your personal data in connection with your contact request, with effect for the future. However, if you do so, we cannot and will not be able to further process your request. Unless statutory retention periods prevent it, all of your personal data related to your contact will be deleted in this case.

II) Facebook Insights (Facebook Fan Page)

1. Joint controllership
We operate our Facebook fan page (https://www.facebook.com/museumfuerfranken) jointly with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”), as personal data is processed by both Facebook and us in connection with our fan page or its content, and we contribute to determining the purposes and means of this processing.
For this reason, we have entered into a separate agreement with Facebook and divided which of us fulfills which obligations under the GDPR.

2. You can read the key provisions of this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum

If you would like to know how Facebook generally processes your personal data, you can find information on this at:
https://www.facebook.com/legal/terms/information_about_page_insights_data

3. Legal Basis
Our legal basis for processing your personal data in connection with the Facebook fan page is our performance of public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

4. Purpose
In order to populate our Facebook fan page with content that is of interest to you, we need to understand your user behavior. This is facilitated by the processing of your personal data, which is collected during your use of our Facebook fan page and analyzed by Facebook. For this purpose, Facebook provides us with page statistics that give us information about visitors and their interactions with our page. Furthermore, our Facebook fan page allows you to communicate directly with us and respond to our posts and content.

5. Source
The data collected from you when you use our Facebook fan page is analyzed by Facebook and subsequently made available to us.

6. Retention Period
The page statistics we use cover a period of 5 years. We do not further process or store older statistics. Furthermore, we delete your personal data as soon as we no longer need it for the stated purposes. This occurs at the latest when we delete our Facebook fan page.

7. Right to Object and Right to Erasure
If you do not want Facebook to collect your data, you have the option to object at any time for the future. If you object to the processing of your personal data by Facebook, we will forward this objection request to Facebook.

III) Instagram

1. Joint Responsibility
We operate our Instagram page (https://www.instagram.com/museum_franken) jointly with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”), as personal data is processed by both Facebook and us in connection with our fan page or its content, and we contribute to determining the purposes and means of this processing.
For this reason, we have entered into a separate agreement with Facebook and divided up which of us fulfills which obligations under the GDPR.

You can read the key provisions of this agreement at the following link:
https://help.instagram.com/519522125107875

If you would like to know how Facebook generally processes your personal data, you can find information on this at:
https://www.facebook.com/legal/terms/information_about_page_insights_data

2. Legal Basis
Our legal basis for processing your personal data in connection with our Instagram page is the performance of our public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

3. Purpose
Our Instagram page allows you to react to our posts, comment on them, and send us private messages. Analyzing this data is essential for us to improve the user experience in the future and make the content more engaging. In addition, we receive anonymized or pseudonymized statistics from Facebook that provide us with insights into the visitors to our Instagram page and their interactions with our Instagram page and its content.

4. Source
The data collected from you when you use our Instagram page is analyzed by Facebook and subsequently made available to us.

5. Retention Period
We will delete your personal data once it is no longer necessary to achieve the intended purpose. Your personal data will be deleted, to the extent possible, no later than when our Instagram page is deactivated.

6. Right to Object and Right to Erasure
If you do not want Facebook to collect your data, you have the option to object at any time with future effect. If you object to the processing of your personal data by Facebook, we will forward this objection request to Facebook.

III) YouTube Channel

1. Scope of Processing
To share artistic impressions with as many people as possible, we operate our own YouTube channel (https://www.youtube.com/channel/UC0dPOYluAvxmj5m7la-OGLg), which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). YouTube is a video platform where users can upload videos and make them publicly accessible.

We expressly point out that YouTube stores its users’ data (e.g., personal information, IP address, etc.) in accordance with its data usage policies and uses it for business purposes. We have no influence over this data collection or the further use of the data by YouTube.

Information regarding which data is processed by YouTube and for what purposes can be found in the Terms of Service and Privacy Policy of YouTube or Google.
https://www.youtube.com/static?gl=DE&template=terms&hl=de, and generally
https://support.google.com/youtube/topic/2803240?visit_id=637248885594456664-1434476429&hl=de&rd=1

Our use of YouTube does not imply unrestricted endorsement of this medium, the company, or the privacy policy of Google LLC.

2. Legal Basis
The legal basis for the processing of your personal data is our performance of public duties (Art. 4(1) of the Bavarian Data Protection Act – BayDSG in conjunction with Art. 6(1)(e) in conjunction with Art. 6(3) sentence 1 of the General Data Protection Regulation (GDPR)).

3. Purpose
We process your personal data in order to tailor our YouTube channel as closely as possible to the interests of our users. The processing of your data therefore takes place solely for this purpose; in particular, your data will not be combined with other data sets or analyzed for other purposes. Furthermore, we process your data if you contact us or comment on our videos within the context of our YouTube channel.

4. Source
The personal data generated when you use our YouTube channel is not collected directly by us, but is rather made available to us by Google.

5. Retention Period
We delete your personal data as soon as it is no longer needed for the purposes mentioned above. Your data will be deleted at the latest—to the extent we can influence this—when we discontinue our YouTube channel.

6. Right to Object and Right to Erasure
If you do not want Google to collect your data, you have the option to object at any time for the future. If you object to Google’s processing of your personal data, we will forward this objection request to Google.

IV) WhatsApp Business

1. Use of WhatsApp Messenger
By opening and using the messenger, you consent to the Museum of Franconia processing your personal data (e.g., phone number) for communication regarding your inquiries using the “WhatsApp” messenger provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin (Ireland). You can find further information on the privacy policy of the provider WhatsApp here:
https://www.whatsapp.com/legal/business-app-privacy-policy?lang=de

3. Purpose
We process your personal data in order to be able to answer your questions about the museum, the museum’s collection, or other related matters promptly and directly. The processing of your data therefore takes place solely for this purpose; in particular, your data will not be combined with other data sets or analyzed for other purposes.

4. Retention Period
We do not store any personal data outside the application and delete all chats as soon as they are no longer needed for our previously stated purposes. Your data will be deleted at the latest—to the extent we can influence this—when we discontinue our WhatsApp communication.

6. Right to object and right to erasure
You may object at any time to the processing of your personal data in connection with your contact with us, with effect for the future. However, if you do so, we cannot and will not be able to process your request further. Unless required by statutory retention periods, all of your personal data related to your contact will be deleted in this case.

V) iOS/Android Apps

The official app for the permanent exhibition at the Museum für Franken in Würzburg, featuring all audio guide texts and corresponding artwork images, as well as comprehensive information about the museum and your visit.

1. When you download the mobile app, the required information is transferred to the respective app store, in particular your user name, e-mail address and customer account number as well as the date and time of the download, payment information and your individual device code number. We have no influence on the acquisition of this data and are not responsible for it. We process the data only to the extent necessary for downloading the mobile app onto your mobile device.

2. This app itself does not collect or process any further personal data beyond that mentioned in item (1).

3. This app does not use any analysis tools such as Google Analytics. Following its installation and the uploading of the audio guide contents, it can be used without access to the Internet.

4. In a few places in the app, there are links to websites. To follow the link to these pages, an Internet connection is necessary. Personal data is collected on these pages. If you use our website purely for information purposes, i.e. if you do not register or send us any other information, we only automatically collect the personal data that your browser sends to our server. For further information, please read the privacy policy of the respective website.

E) Categories of Recipients

Within our agency or the museum, your personal data is only shared with the departments that require it to fulfill their duties. For activities that we cannot perform in-house due to staffing or content-related limitations, we engage reliable and trustworthy service providers. A transfer of your personal data to these recipients is therefore also possible. The following categories of third-party service providers are particularly relevant: parcel and postal service providers, banks, the State Office of Finance, the Bavarian State Treasury, tax advisors, and payment service providers.

F) Transfer to Third Countries

In general, we process your data within the Federal Republic of Germany or the territory of the EU/EEA. In exceptional cases, however, we may also transfer your data to trusted service providers and entities in third countries. Under the GDPR, “third countries” refers to all countries outside the European Union or the European Economic Area.

We ensure that service providers in third countries can guarantee that your personal data will be processed at a level that meets at least the requirements of the GDPR.

Furthermore, data is only transferred to third countries if an adequacy decision by the European Commission exists for that third country (see the current list of adequacy decisions here) or, if no such decision exists, on the basis of standard contractual clauses and provided that we have put in place appropriate safeguards, such as standard contractual clauses, and you have enforceable rights and effective legal remedies available to you.

Please note: If you activate the embedded YouTube videos, personal data will be transferred to Google in the United States. According to the Schrems II ruling of the European Court of Justice, there is currently no data protection in the United States comparable to European standards. Access to your personal data by U.S. authorities cannot be ruled out.

G) Your Rights

Under the GDPR, you are entitled to the following data subject rights:

I) Right of access

1. You may request information regarding your personal data processed by us in accordance with Art. 15 of the GDPR. In your request for information, please specify your inquiry to help us compile the necessary data. Please note that your right of access may be restricted under certain circumstances in accordance with legal provisions (in particular Section 34 of the Federal Data Protection Act (BDSG) and Article 10 of the Bavarian Data Protection Act (BayDSG)).

If a right to access exists, we will inform you of:

the purposes of processing
the categories of personal data being processed
the recipients or categories of recipients
the planned duration for which your personal data will be stored
the existence of a right to rectification or erasure of your personal data or to restriction of processing by the controller, or a right to object to such processing, as well as the existence of a right to lodge a complaint with a supervisory authority
if the personal data is not collected from you, all available information regarding the origin of the data
the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding the logic involved, as well as the significance and intended consequences of such processing for you

II) Right to Rectification

If the information concerning you is no longer accurate, you may request rectification pursuant to Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.

III) Right to restriction of processing

Under the provisions of Article 18 of the GDPR, you have the right to request a restriction on the processing of your personal data if one of the following conditions is met:

If you contest the accuracy of your data, for a period enabling us to verify the accuracy of the personal data
the processing of your personal data by us is unlawful
Our purpose has ceased to exist, but you require the data to assert, exercise, or defend legal claims
You have objected to the processing pursuant to Art. 21(1) GDPR and we are reviewing this

IV) Right to erasure

You may request the erasure of your personal data under the conditions set forth in Article 17 of the GDPR. Your right to erasure depends, among other things, on whether the data concerning you is still required by us to fulfill our legal obligations.

You have this right in particular if

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed
You have withdrawn your consent on which the processing was based, and we lack any other legal basis for the processing
you have objected to the processing and there are no overriding legitimate grounds for the processing
your personal data has been processed unlawfully
deletion constitutes a legal obligation for us
The data was collected from you as a minor under the age of 16 for the provision of information society services

V) Right to Information

If you have exercised any of the aforementioned rights, we will also notify other recipients of your personal data accordingly.

VI) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the legal requirements of Article 20 of the GDPR are met.

VII) Right to Object

Under Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. However, we may not always be able to comply with this, e.g., if legal provisions require us to process the data as part of our official duties.

If we process your personal data for direct marketing purposes, you have the right to object at any time.

VIII) Right to Withdraw Consent

You have the right to withdraw any consent you have given to us at any time. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

IX) Right to lodge a complaint with a supervisory authority

If you believe that we have not complied with data protection regulations when processing your data, you may, without prejudice to any other administrative or judicial remedy, lodge a complaint with the supervisory authority responsible for us.

The competent supervisory authority for us is:

Bavarian State Commissioner for Data Protection
Wagmüllerstr. 18
80538 Munich
Tel.: 089/2126720
Email: poststelle@datenschutz-bayern.de

H) Overview of the Cookies Used

Below, we provide information about all cookies used on our website, their purpose, and their respective storage duration.

I) Technically Necessary Purposes

Provider: www.museum-franken.de // Name: CookieConsent
Purpose: Stores the user’s consent status for cookies on the current domain.

Provider: cdn.eye-able.com // Name: eaIntro
Purpose: Used to save the settings for the website’s accessibility widget. This helps people with, for example, visual impairments navigate the website.

II) Statistical purposes

Provider: www.museum-franken.de / Name: _pk_id#
Purpose: Collects statistics about the user’s visits to the website, such as the number of visits, average time spent on the website, and which pages were viewed.

Provider: www.museum-franken.de / Name: _pk_ses#
Purpose: Used by the Piwik Analytics Platform to track the visitor’s page views during the session.

If you have any further questions, you can contact our Data Protection Officer at any time.

Guided tours and programs

Plan your visit

Geht Grad° so? Climate in Lower Franconia

Newsletter

Riemenschneider Collection

Our online collection