documenta und Museum Fridericianum gGmbH
Friedrichsplatz 18
D-34117 Kassel
Telephone: +49 (0)561 70727-0
Fax: +49 (0)561 70727-39
e-mail: office@documenta.de
Registry court: Amtsgericht Kassel
Register number: HRB 2154
VAT ID: DE 113060585

 

Managing Director:
Prof. Dr. Andreas Hoffmann

 

Chairman of the Supervisory Board:
Dr. Sven Schoeller, Lord Mayor

 

Responsible for content in accordance with Art. 55, paragraph 2 RStV:
Prof. Dr. Andreas Hoffmann

 

The City of Kassel and the State of Hesse are shareholders of documenta und Museum Fridericianum gGmbH.

Concept: Dr. Birgit Jooss with the team of the documenta archiv, Kassel
Art Direction & Design: L2M3 Kommunikationsdesign GmbH, Stuttgart
Realization: Systemantics GmbH, Viersen
Web Manager: Julius Lehmann, documenta archiv
Translation: Alexis Cassel, Berlin, and others

 

In the following, we wish to inform you about the processing of personal data when using our website www.documenta-archiv.de.

Personal data is all data that can be used to identify you personally, e.g. name, address, e-mail addresses, user behavior or IP address.

Controller according to Art. 4(7) of the EU General Data Protection Regulation (GDPR)

documenta und Museum Fridericianum gGmbH
Friedrichsplatz 18
34117 Kassel
T +49 561 707270
F +49 561 7072739 (See imprint).

You can reach our official data protection officer using the following contact details:

Mr. Stephan Blazy or his deputy Mr. Kevin Marschall (GDPC GbR) by post at the above address with the additional detail - Data Protection Officer -, by e-mail at datenschutzbeauftragter[at]documenta.de and by phone: +49 561 83099165.

We are very pleased that you are visiting our website. You can always use our website without providing personal data. However, if a data subject wishes to use one of our company's services via our website, it is likely that personal data will have to be processed. If it is necessary to process personal data and there is no legal basis for such processing, we shall obtain the consent of the data subject.

The processing of personal data, such as the name, IP address, address, e-mail address or phone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and adhering to the country-specific data protection regulations applicable to us, in particular with respect to HDSIG (Hessisches Datenschutz- und Informationsfreiheitsgesetz, Hessian data protection and freedom of information act).

There is always a risk of security vulnerabilities with any data sent over the Internet, meaning that absolute protection cannot be guaranteed. For this reason, every data subject is free to submit personal data to us by alternative means, for example by phone or by post.

 

1. Scope and purpose of the processing of personal data

1.1 Accessing and visiting the website

When this website is accessed, the browser used by the visitor automatically sends data to the server of this website; the data is then kept in a log file with our host and service provider for a limited period of time, and at most two weeks. We also use so-called Content Delivery Networks (CDN), which enable us to significantly reduce the load times of our website. Until automatic deletion, the following data is stored without further input by the visitor:

• IP address of the visitor's device,
• Date and time of access by the visitor,
• Name and URL of the page accessed by the visitor,
• Website from which the visitor arrives at the website (so-called referrer URL),
• Browser and operating system of the visitor's device and the name of the access provider used by the visitor.

This personal data is processed on the basis of our legitimate interests in accordance with Art. 6(1)(1)(f) of the GDPR. We have a legitimate interest in data processing in order to:

• quickly establish a connection to the website,
• make the website user-friendly,
• understand and ensure the safety and stability of the systems and
• facilitate and improve administration of the website.

The processing of data is expressly not for the purpose of gaining knowledge about the identity of the visitors to this website.

 

1.2 Contact via e-mail (e-mail client on your computer)

Visitors can contact us via email messages in particular, sharing any personal data voluntarily. In order to receive a reply, you must provide at least a valid e-mail address and your surname. Any other information is voluntary and the inquirer is not obliged to share it. By sending the e-mail, the visitor consents to the processing of the personal data sent. The data is processed exclusively for the purpose of handling and responding to inquiries. This is done on the basis of voluntary consent according to Art. 6(1)(1)(a) of the GDPR. The data received from you and processed by us through this means of communication will be automatically deleted as soon as the inquiry is dealt with and there are no reasons for continued storage (e.g. subsequent order, donor or similar).

 

1.3 Purchasing publications via e-mail

Visitors can also contact us via our website to order publications (archiv[at]documenta.de). We process the personal data that you voluntarily share with us here for the purpose of establishing, processing and concluding the purchase of the respective publications in accordance with Art. 6(1)(b) of the GDPR, which also includes processing for pre-contractual arrangements. If you would like the purchased items to be sent by post, we also process address data, among other things, in order to guarantee the transaction. Alternatively, you can purchase the items in cash from our reading room.

 

1.4 Newsletter

If you would like to subscribe to the newsletter on the website, we require an e-mail address from you and information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use this data exclusively for the delivery of the requested information and do not pass it on to third parties. The data entered into the newsletter registration form is processed only after your express consent (Art. 6(1)(a) of the GDPR). You can revoke your consent to the storage of the data, the e-mail address or its use for sending the newsletter at any time, for example via the "unsubscribe" link in each newsletter. The legality of the already completed data processing operations remains unaffected by the revocation. The data you share with us when you subscribe to the newsletter will be stored by us until you unsubscribe from the newsletter and is then deleted after you unsubscribe. Data shared with us for other purposes (e.g. e-mail addresses for the members area) remains unaffected by this.

 

1.5. Use of various online libraries and online databases (OPAC, Arcinsys, mediaartbase, image and press data)

You can access and use various online databases via our website (including sub-pages not operated by us). We process the personal data you voluntarily share with us for the purpose of registering with these online services in accordance with Art. 6(1)(b) of the GDPR in order to establish, implement and process the user contract, which also includes processing for pre-contractual arrangements.

We will inform you separately about the data processing when using the various online libraries/databases (insofar as these are operated by us as the controller) as part of the registration/usage process.

If you use our online libraries/databases (e.g. for online research in the library catalogue), which require no prior user registration, your personal data will be processed on the basis of your consent to Article 6(1)(a) of the GDPR (e.g. if you enter your e-mail address to send your search results), and on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR (e.g. the provision of our online research and recording of search/research history).

 

2. Cookies

Cookies are used on the website. These are data packets that are exchanged between the server of our website and the visitor's browser. These are stored by the device used (PC, notebook, tablet, smartphone, etc.) when visiting the website. Cookies cannot cause damage to the device used. In particular, they do not contain viruses or other malicious software. The cookies always store information that is related to the specific device being used. It is not possible for us to use it to obtain direct knowledge of the identity of the visitor to the website.

Cookies are normally accepted by the default browser settings. The browser settings can be changed so that cookies are either not accepted on the devices used or a special message is displayed before a new cookie is created. It should be noted, however, that deactivating cookies may result in some features of the website not functioning optimally.

Cookies help to make the use of our website more comfortable. For example, session cookies can be used to track whether the visitor has already visited individual pages on the website. After leaving the site, these session cookies are automatically deleted.

To improve usability, temporary cookies are used. These are stored on the visitor's device for a limited period of time. When the website is visited again, they automatically detect that the visitor has already accessed the page at an earlier point in time and remember the previous inputs and settings so that they do not have to be reentered.

Cookies are also used to analyze traffic to the website for statistical purposes and to improve the service. These cookies make it possible to automatically detect whether the website has already been accessed by the visitor with every new visit. An automatic deletion of cookies takes place after a specified period of time.

The data processed by cookies is justified for the above-mentioned purposes in order to protect our legitimate interests pursuant to Art. 6(1)(1)(f) of the GDPR.

 

Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses "cookies". These are stored on your computer and allow us to analyze your use of the website. The information generated by the cookies on the use of this website is also stored on our server. The IP address is anonymized before storage. Matomo cookies remain on your device until you delete them. Matomo cookies are stored in accordance with Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. The information generated by the cookies about the use of this website is not passed on to third parties. You can prevent the storage of cookies by selecting the appropriate setting in your browser; however, please note that in doing so you may not be able to use the full functionality of this website. If you do not agree to the storage and use of your data, you can deactivate storage and use here (link). An opt-out cookie is then stored in your browser to prevent Matomo from collecting usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must then be reactivated the next time you visit our website.

 

3. Integration of external service providers

The legal basis for the use of external service providers and so-called social plug-ins is Art. 6(1)(1)(f) of the GDPR. Our legitimate interest and the purpose of this integration is to make our offer known to a wider audience and to give it the opportunity to present the information on our website more appealingly. These external service providers are themselves responsible for handling of their users' data in compliance with data protection requirements.

 

YouTube
Our website uses plugins from Google's YouTube site. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in-enabled sites, you will be connected to the YouTube servers. The YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you will allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an appealing presentation of our online offers and the preparation of visual content for you. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR. For more information on how user data is processed, please see YouTube's privacy policy: https://www.google.de/intl/de/policies/privacy.

 

Vimeo
Our website uses plugins for the video portal Vimeo. The provider is Vimeo Inc. 555 West 18th Street, New York, New York 10011, USA. When you visit one of our Vimeo plug-in-enabled sites, you will be connected to the Vimeo servers. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is sent to the Vimeo server in the USA. If you are logged in to your Vimeo account, you will allow Vimeo to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account. For more information on how user data is processed, please see Vimeo's privacy policy: https://vimeo.com/privacy.

 

Facebook
On our website there is also a link to our fan pages on the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our website and click on the "Facebook" button, a link will take you to the Facebook website. Facebook obtains information from you (e.g. your IP address). We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data sent or of its use by Facebook. For more information, please see Facebook's Privacy Policy at https://de-de.facebook.com/policy.php.

 

Twitter
There is also a link to the microblogging service Twitter on our website. Twitter is operated by Twitter Inc, a US company based in San Francisco, CA 94103, 1355 Market St, Suite 900. The main function of Twitter is the "tweet function". We are not aware of the content of the data sent to Twitter, nor are we informed about its use. Find out more about these questions at http://twitter.com/privacy. There you will find the detailed privacy policy of Twitter. Furthermore, the platform offers you the option to adjust your own privacy settings via http://twitter.com/account/settings.

 

4. Google Maps

We also use Google Maps on our website as an external service. This allows us to display interactive maps directly on the website and lets you conveniently use the map function.

By visiting the website, Google receives notification that you have accessed the corresponding subpage of our site. In addition, the data specified in this declaration under "Collection of personal data when visiting our website" will be sent. This occurs regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, your information will be directly associated with your account. If you do not want it to be associated with your Google profile, you must log out before pressing the button. Google stores your data as usage profiles and processes it for the purposes of advertising, market research and/or customizing the design of its website. In particular, processing takes place (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles; you must contact Google to exercise this right.

For more information about the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find information about your rights in this regard and how you can change the settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the use of Google Maps is Art. 6(1)(1)(f) of the GDPR.

 

5. Google Web Fonts

This site uses so-called web fonts provided by Google to uniformly display fonts. When you access a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.

To do this, your browser must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR.

If your browser does not support web fonts, a default font will be used by your computer.

For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://www.google.com/policies/privacy/."

 

6. Data protection for applications and in the application process

We also collect and process personally identifiable information from applicants for the purpose of conducting and completing the application process. The information may also be processed electronically. This is particularly the case if an applicant submits application documents to us electronically, e.g. by e-mail, or uses the contact form on our homepage. For e-mail applications, we have also set up a special e-mail address [bewerbung@documenta.de].

If we enter into an employment contract with an applicant, the data sent will be stored in compliance with the statutory provisions for the purpose of processing the employment relationship. If no such contract with the applicant is concluded, the application documents will be automatically deleted at the latest 6 months after notification of the refusal, provided no other legitimate interests on our part stand in the way of the deletion. An example of "another legitimate interest" in the aforementioned sense is the burden of proof in proceedings under the Allgemeines Gleichbehandlungsgesetz (AGG, General Act on Equal Treatment).

 

7. Your rights

You have rights with us regarding your personal data. Special statutory provisions may preclude the fulfillment of general data protection rights. If you assert such a right, but special statutory provisions prevent us from complying, we will inform you of this stating the specific reasons.

You are entitled to the data protection rights listed below:

 

7.1 Information

According to Art. 15 of the GDPR, you may request information about your personal data processed by us. In particular, you may request information about the purpose of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the right to rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data if it was not collected by us or the existence of automated decision-making including profiling, as well as any specific significant details if applicable.

 

7.2 Rectification

In accordance with Art. 16 of the GDPR you can immediately demand the correction of incorrect data or the completion of your personal data stored by us.

 

7.3 Deletion

According to Art. 17 of the GDPR, you have the right to request the deletion of your personal data stored with us, unless the data processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

 

7.4 Restriction of processing

According to Art. 18 of the GDPR, you can request a restriction of processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer require the data but you still need it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 of the GDPR.

 

7.5 Data portability

In accordance with Art. 20 of the GDPR, you may receive the personal data you have shared with us in a structured, up to date and machine-readable format or request that it be forwarded to another person with authority.

 

7.6 Revocation

According to Art. 7(3) of the GDPR you have the right to revoke your consent at any time (e.g. in writing or by e-mail). As a result, we are no longer allowed to continue processing data based on such consent in the future.

 

7.7 Complaints

According to Art. 77 of the GDPR, you can lodge a complaint with the competent supervisory authority about our processing of your personal data at any time. Our supervisory authority (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, The Hessian Representative for Data Protection and Freedom of Information) is based in Gustav-Stresemann-Ring, 165189, Wiesbaden.

 

7.8 Objection to the processing of your data

Insofar as we are processing your personal data in our legitimate interest according to Art. 6(1)(1)(f) of the GDPR, you may object to the processing, in particular if it is processed for advertising purposes. This is especially the case if processing is not necessary for the purpose of fulfilling a contract with you; we will always describe the purpose in an accompanying description of the functions.

When exercising such objection, we request that you explain the reasons why we should not process your personal data as we have. If your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue the processing.

Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection using the contact data shown above.

 

Changes to the privacy policy (as of 25.05.2018)

Due to a continuous, iterative development of our web offer and/or legal developments, it may be necessary for us to make adjustments to our data protection declaration from time to time. For this reason, please always note the currently up-to-date version of our privacy policy.

Responsible party as per Article 4(7) of the General Data Protection Regulation:

documenta und Museum Fridericianum gGmbH

Friedrichsplatz 18

34117 Kassel

 

We process the personal data you provide us during the registration process for the purpose of planning and carrying out each respective event as well as for the purpose of capacity planning on the basis of your consent granted in accordance with Article 6(1)(1) of the General Data Protection Regulation. You can revoke your consent at any time with effect for the future. If consent is revoked, we may no longer use your personal data for the event and your participation in the event will therefore no longer be possible.

Where required, we may process your data beyond your consent in accordance with Article 6 (1)(1)(f) GDPR for the protection of legitimate interests of us or third parties, such as defense in legal disputes.

Please note that photos and video recordings will be made at our events and that image and video material may be published on the internet on websites or social media pages maintained by documenta und Museum Fridericianum gGmbH or its cooperating partners, and/or in one of the publications of documenta und Museum Fridericianum gGmbH or its cooperating partners, for the purpose of publicity, and particularly for the creation of a report about the conference.

By participating in the event, you agree to the publication of photographs and video recordings made during the event (§§ 22, 23 KUG). The collection, and therefore the taking and processing of photographic material, is carried out for the purpose of the creation of reports based on Article (1)(1)(f) of the General Data Protection Regulation. We would like to point out that, according to Article 21(1) GDPR, you may object to this process for reasons that may arise from your particular circumstances. We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

Any objection may be directed at the address listed above.

Please note that information could be produced during the documentation of the event that may be valuable for the archive, which would then be transferred to the collection of documenta Archiv. If these records involve personal data of yours, they will be processed on the basis of Article 6(1)(c) GDPR, in conjunction with § 7, 8, and 11 of the Hessian Archival Law (HArchivG). The particular categories of personal data potentially processed in this context will be processed on the basis of § 25 of the Hessian Data Protection and Freedom of Information Act (HDSIG).

If you have questions about this information, or regarding your (privacy) rights, you can also contact our data protection officer at datenschutzbeauftragter[at]documenta.de.

documenta und Museum Fridericianum gGmbH has made every effort to ensure that all the information provided on this website is accurate, up-to-date, available, and complete. Despite all efforts, it is not possible to entirely rule out the existence of errors and inaccuracies. Therefore, documenta und Museum Fridericianum gGmbH assumes no responsibility for the accuracy, completeness, or quality of the information provided. documenta und Museum Fridericianum gGmbH shall not be made liable for any material or immaterial damages resulting from the use or non-use of information provided here or through the use of erroneous or incomplete information.

All content is subject to change and is non-binding. documenta und Museum Fridericianum gGmbH explicitly reserves the right to change, expand, or delete parts of what is provided in the internet or the entire internet site without special notice as well as to temporarily suspend or to permanently terminate the publication of this information.

Responsibility for “external content” made available through direct or indirect connections (e.g. so-called links) to other providers presupposes among other things positive knowledge of any illegal content. documenta und Museum Fridericianum gGmbH will try to indicate “external content” in an appropriate manner.

Despite careful inspection of such content, documenta und Museum Fridericianum gGmbH assumes no liability for the content of external links. The operators of such linked pages are exclusively responsible for the content provided there. documenta und Museum Fridericianum gGmbH declares explicitly that at the time when such links were established no illegal content was evident on the linked pages. documenta und documenta und Museum Fridericianum gGmbH has no influence over the current and future design of linked pages nor over the content or the authorship of the linked/connected pages. Therefore, documenta und Museum Fridericianum gGmbH hereby explicitly disassociates itself from all content of all linked/connected pages that has been changed after such links were established. This pertains for all links and references within our own Internet site as well as for third-party entries in any guest books, discussion forums, or mailing lists provided in our Internet site. The providers of pages with illegal, incorrect, or incomplete content are solely responsible for the information made available there and particularly for any damages that might result from the use or non-use of such information. Those merely providing a link that makes reference to such publications are not liable. No liability is assumed for incorrect links.

documenta und Museum Fridericianum gGmbH makes every effort in all its publications to respect the copyrights of all featured graphics, audio files, video sequences, and texts, to make use of self-produced graphics, audio files, video sequences, and texts or to make use of graphics, audio files, video sequences, and texts that are not subject to license. All of the brand names and trademarks appearing in this internet site as well as those possibly protected by third parties are subject without restriction to the regulations of the current trademark laws and the ownership rights of the respective registered owner. It should in no case be concluded that the simple appearance or mention of a trademark in these pages is indicative of the fact that it is not protected by the rights of third parties.   

The content and objects prepared by documenta und Museum Fridericianum gGmbH on these pages are subject to German copyright law. Any copying, modification, distribution, or any form of use of this material requires the prior written consent of documenta und Museum Fridericianum gGmbH. Insofar as the content on these pages has not been produced by the operator, the copyrights of third parties have been respected. In particular, third-party content has been identified as such. Should you, despite this, become aware of a copyright infringement, please inform us accordingly. Upon being informed of any legal infringement, we will immediately remove the offending content.

The use of our website is generally possible without providing any personal data. Insofar as personal data (e.g. name, address, or e-mail address) are collected, this occurs as far as possible always on a voluntary basis. These data will not be given to any third party without your explicit consent. We advise you that transmitting data over the internet (e.g. by e-mail communication) can involve security risks. Complete protection of data from the access of third parties is not possible.

Legal validity of this liability disclaimer:
This liability disclaimer is to be regarded as part of the internet site from which this page has been referenced. Insofar as parts or individual formulations of this text do not conform or no longer conform or do not completely conform to the current legal situation, the remaining parts of the documents shall not be affected in their content or their validity.