Privacy policy – Kunstarkaden MünchenKunstarkaden München

Information on the collection of personal data

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

The Department of Culture of the City of Munich is the responsible operator of this website within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR). When you visit the website, the protection of your personal data is of great importance. For this reason, your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this privacy policy. This provides you with information about the type, scope and purpose of the collection and use of your personal data.

Name and contact details of the controller

City of Munich
Department of Culture
Department 1
Burgstrasse 4
80331 Munich

Data protection officer

City of Munich
Data protection officer
Marienplatz 8
80331 Munich
E-mail: datenschutz@muenchen.de

The website can be used without providing personal data such as name, address, email address or other personal data. An exception is made for IP addresses. Since these are seen as part of the personal data, there could be a personal reference at least for the duration of the visit to the website. After the end of use, the IP addresses will not be saved or will be deleted immediately. Registration is not required to access the content of the website.

When you contact us by e-mail, the data you provide (your e-mail address, your name, possibly your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict the processing if there are statutory storage requirements. We will not pass this data on without your consent.

General information on consent

If you have given us consent to process personal data for specific, additional purposes, this data processing is based on this consent. We provide details on the content of a consent when requesting the consent.

If you would like to receive the newsletter linked on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent by agreement. In the course of this, potential recipients can be added to a mailing list. The users then receive a confirmation e-mail with the option of confirming their registration in a legally secure manner. The address will only be actively included in the mailing list if the confirmation is received.

We only use this data to send the requested information and offers.

The newsletter software used is Brevo. Your data will be sent to Brevo OnlineMarketing.de GmbH, the owner of Brevo. Brevo OnlineMarketing.de GmbH is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo is a certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Find out more here.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter or by sending a message to the e-mail address kunst@muenchen.de.

You can find the general information requirements according to Art. 13 et seq. GDPR under information requirements according to GDPR.

Your rights

You have the following rights with regard to the personal data concerning you:

Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of data by us.

IP address and log file logging

Users who access the website (due to technical necessity) transmit data to a web server via their internet browser. The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR for technically necessary cookies and for data that is directly anonymised.

The following data is recorded during an ongoing communication connection between your internet browser and our web server:

date and time of the request
name of the requested file
website from which the file was requested
access status (file transferred, file not found and similar)
web browser and operating system used
full IP address of the requesting computer
amount of data transferred

We process the data in this step in order to enable you to deliver our website and to guarantee the security of our information technology systems. We generally delete the collected data three days after your visit to the website. The data mentioned is usually generated when accessing any other website on the Internet. This is not a specific feature of our website. For the statistical evaluation, the usage information is only collected anonymously by us.

Hosting, Support and Maintenance

Our website is hosted by the service provider Portal München Betriebs-GmbH & Co. KG, Fraunhoferstraße 6, 80469 Munich (“Portal München”). The service provider provides us with infrastructure and platform services, computing capacity, storage space, database services and security services. Together with the service provider hyperstud.io, Portal München is responsible for the technical maintenance services of the website.

In order to fulfill the services, the service providers process, among other things, usage data, meta and communication data of our website visitors within the framework of an order processing agreement in accordance with Art. 28 GDPR.

Your personal data is stored on specially protected servers in the European Union. Technical and organizational security measures are used to protect your personal data from unauthorized access and misuse.

Your personal data is stored on a protected server in Germany. We take all necessary technical and organizational security measures to store your personal data in such a way that it is protected against unauthorized access and misuse.

List of all included services

YouTube Video

Description of Service

This is a video player service. It can be used by user to watch, like, share, comment and upload videos.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Data Purposes

This list represents the purposes of the data collection and processing.

Displaying Videos

Technologies Used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

Cookies (if Privacy-Enhanced Mode is not activated)

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

Device information
IP address
Referrer URL
Videos viewed

Legal Basis

In the following the required legal basis for the processing of data is listed.

Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing

This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries

This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider’s privacy policy or contact the provider directly.

Chile
United States of America
Taiwan
Singapore

Data Recipients

In the following the recipients of the data collected are listed.

Alphabet Inc.
Google LLC
Google Ireland Limited

Storage Information

Maximum age of cookie storage: 8 months

Stored Information

Name: __sak; This is used to store information about the visitor’s video preferences.; Type: web;
Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Type: web;
Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor’s device and network settings.; Type: web;
Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user’s video player preferences using embedded YouTube video.; Type: web;
Name: YEC; This is used to store the user’s video player preferences using embedded YouTube video.; Type: cookie; Duration: 1 year, 1 month;
Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Type: cookie; Duration: 2 years;
Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Type: cookie; Duration: 5 months, 26 days;
Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Type: cookie; Duration: Session;
Name: test_cookie; This is a test for cookie setting permissions in user’s browser.; Type: cookie; Duration: 1 day;
Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Type: cookie; Duration: 6 months;
Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Type: cookie; Duration: Session;
Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Type: cookie; Duration: 8 months;
Name: pm_sess; This is used to maintain your browsing session.; Type: cookie; Duration: 30 minutes;
Name: CGIC; This is used to provide search results by auto-completing search queries based on a user’s initial input.; Type: cookie; Duration: 6 months;
Name: UULE; This is used to determine the users geographic location. ; Type: cookie; Duration: 6 hours;
Name: _Secure-YEC; This is used to store the user’s video player preferences using embedded YouTube videos.; Type: cookie; Duration: 1 year, 1 month;

Social Media

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated in our privacy policy, we process users’ data if they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.

Links to other Websites

Our online offer contains links to other websites. We have no influence on the content of these websites or their compliance with data protection regulations and can therefore accept no responsibility for them. This privacy policy therefore only applies to this website.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Questions about data protection

If you have any questions about data protection, please send us an e-mail or contact the data protection officer directly (see above for contact details).

Changes to the privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Status: 09 / 2024