Data Protection

1. Data protection at a glance

1.1 General information
The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you as an individual. For detailed information on data protection, please refer to our privacy policy, which can be found below this text.

1.2 Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice on this website or in section 2.2 of this policy.
How do we collect your data?
Your data is firstly collected when you share it with us. This may include, for example, data that you enter into a contact form. Other data is collected automatically by our IT systems when you visit the website. This consists primarily of technical data (your internet browser, operating system or the time the page was viewed). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some of the data is collected to ensure the website functions correctly. Other data may be utilised to analyse your user behaviour.
What rights do you have regarding your data?
You have the right, at any time and free of charge, to obtain information about the source, recipients and intended purpose of your stored personal data. You also have the right to request the rectification, restriction or erasure of this data. You may contact us at any time at the address given in the legal notice regarding this matter or with any other questions relating to data protection. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.


1.3 Analytics and third-party tools
When you visit our website, your browsing behaviour may be analysed for statistical purposes. This mainly involves the use of cookies and so-called analytics tools. Your browsing behaviour is generally analysed anonymously and cannot be traced back to you.
You can object to analytics or prevent it by not using certain tools. You will find detailed information on this in the following privacy policy. You can object to this analysis
We will inform you of your options for objecting in this privacy policy.

 

2. General information and mandatory details

2.1 Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various types of personal data are collected. Personal data is any data that can be used to identify you as an individual. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.
Please note that transferring data over the internet (e.g. when communicating by email) may involve security risks. It is not possible to completely protect data from being accessed by third parties.

2.2 Information on the data controller
The data controller responsible for data processing on this website is:
Stiftung Museum Kunstpalast
Ehrenhof 4-5
40479 Düsseldorf
Telephone: +49(0) 211-566 42 100
Email: info(at)kunstpalast.de

Executive Board
Felix Krämer, General Director
Harry Schmitz, Commercial Director
Foundation
Foundation Register No. 21.13.-St.652

2.3 Statutory Data Protection Officer
We have appointed a Data Protection Officer for our company, who can be contacted as follows:
Jens Kränke
LEXDATA Consulting GmbH
Von-Arenberg-Str. 5–7
40668 Meerbusch
Telephone: +49 (0) 21 59 – 922 53 74
Email: post(at)lexdata.de

2.4 Withdrawal of your consent to data processing
Many data processing operations can only take place with your express consent. You may withdraw any consent you have already given at any time. To do so, simply send us an informal email. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal.

2.5 Right to object to data collection in specific cases and direct marketing (Article 21 of the GDPR)
Where data processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right to object at any time to the processing of your personal data for reasons relating to your particular situation; this also applies to profiling based on these regulations. The specific legal basis for processing your data can be found in this privacy policy. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Article 21(1) of the GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for this purpose; this also includes any profiling of data that is related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) of the GDPR).

2.6 Right to lodge a complaint with the relevant supervisory authority
In the event of GDPR infringements, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged infringement occurred. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
The supervisory authority responsible for data protection relating to the Stiftung Museum Kunstpalast is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de

2.7 Right to data portability
You have the right to have the data that we process automatically – either on the basis of your consent or in fulfilment of a contract – provided to you or to a third party in a commonly used, machine-readable format. You may request to have the data directly transmitted to another data controller; however, this will only be done where technically feasible.

2.8 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information, such as orders or enquiries that you send to us as the website operator. You can tell that the connection is encrypted by the fact that the address bar in your browser changes from “http://” to “https://” as well as the padlock icon in your browser’s address bar. When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

2.9 Encrypted payment transactions on this website
If you are required to provide us with your payment details (e.g. account number for direct debit authorisation) following the conclusion of a contract involving payment, this is because these details are required for payment processing. Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can tell that the connection is encrypted by the fact that the address bar in your browser changes from “http://” to “https://” as well as the padlock icon in your browser’s address bar. Encrypted communication ensures that the payment details you send to us cannot be read by third parties.

2.10Access, Restriction, Erasure
In accordance with the applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data, its source and recipients, as well as the purposes of the data processing, and, where applicable, the right to have this data rectified, restricted or erased. You may contact us at any time regarding this matter or with any other questions relating to personal data via the address given in the legal notice.

2.11Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you may contact us at any time via the address given in the legal notice. The right to restriction of processing applies in the following cases:
– If you contest the accuracy of your personal data held by us, we will generally need time to verify this. While we carry out this verification, you have the right to request that the processing of your personal data be restricted.
– If the processing of your personal data has been or is being carried out unlawfully, you may request that the processing be restricted instead of the data being erased.
– If we no longer require your personal data, but you require it to exercise, defend or establish legal claims, you have the right to request that the processing of your personal data be restricted rather than erased.
– If you have lodged an objection under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. Until it has been determined whose interests take precedence, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, then – apart from its storage – this data may only be processed with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

3. Data collection on our website

3.1 Cookies
Some of the pages on this site use cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are what are known as “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our site.
You can configure your browser so that you are notified when cookies are used and can choose to accept cookies on a case-by-case basis, block cookies in specific cases or entirely, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.
Cookies that are necessary for conducting electronic communications or for providing specific functions you have requested (e.g. the shopping basket function) are stored in accordance with Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure that its services are provided in a correct and optimal manner. The use of other cookies (e.g. cookies used to analyse your browsing behaviour) is covered separately in this privacy policy.


3.2 Server log files
The website provider automatically collects and stores information in server log files that are automatically transmitted to us by your browser. This includes:
– Browser type and version
– Operating system used
– Referrer URL
– Hostname of the accessing computer
– Time of the server request
– IP address
This data is not combined with any other data sources.
This data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring that its website is displayed correctly and functions optimally – this requires the collection of server log files.

3.3 Contact form
If you send us enquiries via the contact form, the details you provide in the form – including the contact details you enter there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time. To do so, simply send us an informal email. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal.
The data you enter in the contact form will be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for which the data is stored no longer applies (e.g. once your enquiry has been fully processed). This does not affect mandatory legal provisions, including data retention periods.

3.4 Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including any personal data it contains (name, enquiry details), will be stored and processed by us for the purpose of dealing with your request. We will not pass on this data without your consent.
The processing of this data is carried out on the basis of Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is required for the implementation of measures prior to entering into a contract. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.
The data you send to us via contact enquiries will be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). This does not affect mandatory legal provisions, including data retention periods..

3.5 Registration on this website
You can register on our website to access additional features on the site. We will only use the data you provide for this purpose to enable you to use the specific service or feature for which you have registered. The mandatory details requested during registration must be provided in full. Otherwise, we will reject your registration.
In the event of significant changes, such as to our range of services or necessary technical changes, we will use the email address you provided during registration to inform you of these changes.
The processing of the data entered during registration is carried out on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal. We will store the data collected during registration for as long as you remain registered on our website, after which it will be deleted. Statutory data retention periods remain unaffected.

3.6 Processing of data (customer and contract data)
We collect, process and use personal data only to the extent necessary for the establishment, substance or amendment of the legal relationship (master data). This is carried out on the basis of Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or measures prior to entering into a contract. We collect, process and utilise personal data relating to the use of our website (usage data) only to the extent necessary to enable the user to access and/or pay for the service.
The customer data collected will be deleted upon completion of the order or termination of the business relationship. Statutory data retention periods remain unaffected.

3.7 Data transfer upon conclusion of a contract for online shops, retailers and the dispatch of goods
We only transfer personal data to third parties where this is necessary for the fulfilment of the contract, for example to the companies responsible for delivering the goods or to the financial institution commissioned to process the payment. No further transfer of data takes place, unless you have expressly consented to such a transfer. Your data will not be passed on to third parties – for example, for advertising purposes – without your express consent.
The legal basis for processing this data is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or measures prior to entering into a contract.

4. Social media

4.1 Social media plugins with Shariff
Our website uses social media plugins (e.g. Facebook, Twitter , Google+, Instagram, Pinterest, XING, LinkedIn, Tumblr).
You can usually recognise these plugins by their social media logos. To guarantee data protection on our website, we only use these plugins in conjunction with the “Shariff” privacy solution. Shariff prevents the plugins integrated into our website from sharing data with the relevant social media platforms as soon as you visit the page.
A direct connection to the provider’s server is only established once you have activated the relevant plugin by clicking the corresponding button (consent). As soon as you activate the plugin, the provider is notified that you have visited our site from your IP address. If you are logged into a social media account (e.g. Facebook) at the same time, that provider can link your visit to our website to your user account.
Activating the plugin constitutes consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect.


4.2 Facebook plugins (Like & Share buttons)
Our website incorporates plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/documentation/plugins.
When you click on the Facebook icon, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site from your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link content from our site to your Facebook profile. This allows Facebook to associate your visit to our site with your user account. Please note that, as the website provider, we are not given any information about the transferred data or how it is used by Facebook. Further information on this can be found in Facebook’s privacy policy at: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.
If you do not wish Facebook to be able to link your visit to our site to your Facebook account, please log out of your Facebook account.
The use of Facebook plugins is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring maximum visibility on social media.

4.3 Twitter Plugin
Our website incorporates features from Twitter. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and made visible to other users. This also involves the transfer of data to Twitter. Please note that, as the website provider, we are not given any information about the transferred data or how it is used by Twitter. Further information on this can be found in Twitter’s privacy policy at: https://twitter.com/de/privacy
The use of the Twitter plugin is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring maximum visibility on social media.
You can change your privacy settings on Twitter in your account settings at https://twitter.com/account/settings


4.4 Instagram Plugin
Our website incorporates features from Instagram. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content on our website to your Instagram profile by clicking on the Instagram icon. This enables Instagram to associate your visit to our website with your user account. Please note that, as the website provider, we are not given any information about the transferred data or how it is used by Instagram.
The use of the Instagram plugin is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring maximum visibility on social media.
Further information on this can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

5. Analytics tools and advertising

5.1 Google Analytics
This website uses features from the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies. These are text files that are stored on your computer and enable an analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of these analytics tools are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation
We have enabled the IP anonymisation feature on this website. This means that Google will truncate your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information to analyse your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser via Google Analytics will not be combined with any other data held by Google.

Browser plugin
You can prevent cookies from being stored by adjusting the settings in your browser; however, please note that if you do so you may not be able to make full use of all the features of this website. You can also prevent Google from collecting and processing the cookie-generated data relating to your use of the website (including your IP address) by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be stored to prevent your data from being collected during future visits to this website: Disable Google Analytics
Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.


Data processing on our behalf
We have entered into a data processing agreement with Google and are fully compliant with the strict requirements of the German data protection authorities regarding the use of Google Analytics
Demographic details in Google Analytics
This website uses the “Demographic details” function in Google Analytics. This enables reports to be generated that provide information on the age, gender and interests of website visitors. This data is derived from Google’s personalised advertising and visitor data provided by third parties. This data cannot be linked to any specific individual. You can disable this feature at any time via the Ad Settings in your Google Account, or generally prevent Google Analytics from collecting your data as described in the section “Objecting to data collection”.

Data retention period
User-level and event-level data stored by Google that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android Advertising ID) is anonymised or deleted after 14 months. For further details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=en.

5.2 Hotjar
This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool for analysing your user behaviour on our website. Among other things, Hotjar enables us to record your mouse and scroll movements and clicks. Hotjar can also determine how long you have kept your mouse pointer over a specific area. Hotjar uses this information to generate heatmaps that identify which areas of the website visitors tend to look at most.
In addition to this, we can determine how long you stayed on a page and when you left it. We can also determine at which point you stopped filling out a contact form (so-called “conversion funnels”).
In addition, Hotjar can be used to gather direct feedback from website visitors. This function serves to improve the website operator’s online services.
Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our website more user-friendly, effective and secure. In particular, these cookies enable us to determine whether our website has been visited using a specific device or whether Hotjar’s functions have been disabled for the browser in question. Hotjar cookies remain on your device until you delete them.
You can configure your browser so that you are notified when cookies are used and can choose to accept cookies on a case-by-case basis, block cookies in specific cases or entirely, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.
The use of Hotjar and the storage of Hotjar cookies are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Disabling Hotjar
If you wish to disable data collection by Hotjar, click on the following link and follow the instructions provided there: https://www.hotjar.com/opt-out
Please note that Hotjar must be disabled separately for each browser or device.
For further information about Hotjar and the data collected, please refer to Hotjar’s privacy policy at the following link: https://www.hotjar.com/privacy
Data Processing Agreement
We have entered into a Data Processing Agreement with Hotjar in order to comply with the strict European data protection regulations.

6. Newsletter

6.1 Newsletter data
If you would like to subscribe to the newsletter offered on our website, we require your email address as well as information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, unless purely on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The processing of the data entered in the newsletter subscription form is carried out solely on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent to the storage of your data and email address as well as their use for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal. The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted once you have unsubscribed. Data we store for other purposes (e.g. email addresses for the members’ area) remains unaffected by this.

6.2 Newsletter2Go
This website uses Newsletter2Go to send out newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany. Newsletter2Go is a service that can be used to organise and analyse the sending of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on Newsletter2Go’s servers in Germany. If you do not wish your data to be analysed by Newsletter2Go, you must unsubscribe from the newsletter. We provide a link allowing you to do so in every newsletter. You can also unsubscribe from the newsletter directly on the website.

Data analysis using Newsletter2Go
Newsletter2Go enables us to analyse our newsletter campaigns. This allows us, for example, to see whether a newsletter has been opened and, where applicable, which links have been clicked. In this way, we can identify which links were clicked on particularly frequently. We can also see whether certain pre-defined actions were carried out after the newsletter was opened or a link was clicked (conversion rate). For example, we can see whether you made a purchase after clicking on a link in the newsletter. Newsletter2Go also enables us to segment (“cluster”) newsletter recipients into different categories. For example, recipients can be clustered by age, gender or place of residence. This allows us to tailor the newsletters more effectively to different target groups. For detailed information on the features of Newsletter2Go, please refer to the following link: https://www.newsletter2go.de/features/newsletter-software/

Legal basis
Data processing is carried out on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal.

Data retention period
The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and those of Newsletter2Go once you have unsubscribed. Data we store for other purposes (e.g. email addresses for the members’ area) remains unaffected by this. For further details, please refer to Newsletter2Go’s privacy policy at: https://www.newsletter2go.de/features/datenschutz-2

Contract for data processing on our behalf
We have entered into a contract with Newsletter2Go in which we require Newsletter2Go to protect our customers’ data and not disclose it to third parties. This contract can be viewed via the following link: https://www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf?x48278

7. Contact Form

7.1 Purpose of data processing
The use of reCAPTCHA serves to protect the forms on our website from misuse by automated programmes (“bots”). This ensures that any input on our website is the result of human interaction.

7.2 How reCAPTCHA works
reCAPTCHA analyses various characteristics to distinguish whether a particular input is being made by a human or an automated programme. This analysis begins automatically as soon as you visit the website. The data analysed includes:
– IP address
– The length of time the user spends on the website
– The user’s mouse movements
– Any additional information collected by Google
 
This data is transferred to Google, where it is analysed. The reCAPTCHA analyses take place entirely in the background, and users are not explicitly informed that they are taking place.

Recipients of the data
The data collected through reCAPTCHA is transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on data processing by Google can be found in Google’s Privacy Policy: https://policies.google.com/privacy.
Data transfer to third countries
When using reCAPTCHA, data is transferred to Google’s servers in the USA. Google is certified under the “EU–US Data Privacy Framework” and thus guarantees an adequate level of data protection in accordance with Article 45 of the GDPR.

Data retention period
We do not store any personal data collected through reCAPTCHA. Please refer to Google’s privacy policy for information on the retention period for data collected by Google.

8. Plugins und Tools

8.1 YouTube with enhanced privacy settings
Our website uses plugins from YouTube. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. However, enhanced privacy mode does not necessarily prevent data from being shared with YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network, regardless of whether you watch a video or not.

As soon as you play a YouTube video on our website, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you are allowing YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
 
Furthermore, once a video has started playing, YouTube may store various cookies on your device. These cookies enable YouTube to obtain information about visitors to our website. This information is used to collect video statistics, improve user experience and prevent fraud, among other things. The cookies remain on your device until you delete them.

In some cases, once a YouTube video has started playing, further data processing operations may be triggered over which we have no control.
 
We use YouTube to ensure our online content is presented in an appealing way. This constitutes a legitimate interest in accordance with Article 6(1)(f) of the GDPR.
Further information on data protection at YouTube can be found in their privacy policy at: https://www.youtube.com/howyoutubeworks/

7.2 Google Maps
This website links to the Google Maps service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
 
A direct connection to Google’s servers is only established once you click on the link to Google Maps (consent per Article 6(1)(a) of the GDPR). This prevents your data from being transferred to Google as soon as you visit the site.
 
Once activated, Google Maps will store your IP address. This is then usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer once Google Maps has been activated.
 
Further information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

9. Payment providers

9.1 PayPal
One of the payment options on our website is PayPal. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract). You may withdraw your consent to data processing at any time.
Withdrawal of consent does not affect the lawfulness of any data processing carried out prior to its withdrawal.



9.2 Paydirect
One of the payment options on our website is Paydirekt. This payment service is provided by Paydirekt GmbH, Hamburger Allee 26–28, 60486 Frankfurt am Main, Germany (hereinafter “Paydirekt”).
When you make a payment via Paydirekt, Paydirekt collects various transaction details and forwards them to the bank with which you are registered for Paydirekt. In addition to the details required for the payment, Paydirekt may, as part of the transaction process, collect further details such as your delivery address or individual items in your shopping basket.
Paydirekt then authenticates the transaction using the authentication procedure specified by the bank for this purpose. The payment amount is subsequently transferred from your account to ours. Neither we nor any third parties have access to your account details. For further details on payments via Paydirekt, please refer to Paydirekt’s Terms and Conditions and Privacy Policy at: https://www.paydirekt.de/agb/index.html.

9.3 Cookiebot
This website uses cookies.
We use cookies to personalise content and adverts, provide social media features and analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected through your use of their services.
Mehr Informationen:
Legal Notice
Datapolicy

Cookies are small text files used by websites to make the user experience more efficient.
 
By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your consent.
 
This site uses various types of cookies. Some cookies are used by third parties that appear on our website.

You can change or withdraw your consent from the Cookie Declaration on our website at any time.
 
Find out more in our privacy policy about who we are, how you can contact us and how we process your personal data.
 
Please quote your consent ID and the date when you contact us regarding your consent.
Your consent applies to the following domains: www.kunstpalast.de
Your current status: Allow all.
Your consent ID: kfhK/98T+B9owwXp9317/jBqUKrhcLYmtQdBGZX3KHe2ZVmYWD2GGQ== Consent date: Monday, 9 May 2022 at 08:29:03 CEST
Change consent  |  Withdraw consent