The Staatsgalerie Stuttgart takes data protection seriously and attaches great importance to the protection of your personal rights. We are committed to complying with the statutory data protection regulations and use technical and organisational security measures to protect your personal data (name, address, telephone number, e-mail address, etc.) from unauthorised access, misuse, destruction and loss. We strive to continuously improve our security measures in line with technological developments.
1. legal basis
The subject of data protection is personal data. According to Art. 4 No. 1 of the European General Data Protection Regulation (GDPR), this is information that relates to an identified or identifiable natural person. This includes, for example, information such as name, address, e-mail address, telephone number or IP address.
Your personal data may only be processed, e.g. collected, stored, used or disclosed, if laws and other regulations permit this or if your consent has been given. As a public body, we are subject to the European Data Protection Regulation and the Baden-Württemberg Act on the Adaptation of General Data Protection Law and Other Regulations to Regulation (EU) 2016/679 (LDSG). As a website operator, we are also subject to the Telemedia Act (TMG) and the Telecommunications Telemedia Data Protection Act (TTDSG).
The processing of your personal data is permissible according to Art. 6 para. 1 DSGVO:
- if your consent has been given,
- to fulfil a contract or to carry out pre-contractual measures,
- for the fulfilment of a legal obligation to which we are subject,
- if vital interests of you or those of another natural person make the processing of personal data necessary.
Furthermore, the processing of your personal data is permissible according to § 4 LDSG:
- if it is necessary for the performance of a task within the competence of the Staatsgalerie Stuttgart or in the exercise of official authority vested in the Staatsgalerie Stuttgart.
2. processing of personal data
We process your personal data only for the purpose for which they were collected and communicated to us by you, e.g. enquiries from interested parties, sending of information material, room rental, registration for the newsletter, invoicing, etc.. This data is deleted after the process has been completed and the legal deadlines have expired. The data collected for sending the newsletter and the data for sending press releases/the press distribution list will be stored until revoked.
As a rule, your data will not be passed on to third parties without your express consent. In certain cases, we use the services of a processor. These can be natural or legal persons, authorities, institutions or other bodies that process personal data on our behalf. We have contracts with our service providers so that your personal data may only be processed in accordance with our instructions. The processors will only share your personal data with us and no other bodies or organisations and will also take necessary technical and organisational measures to process your data securely.
All persons working for us are obliged to maintain data secrecy in accordance with § 3 para. 2 LDSG. In addition, data protection training courses are held regularly at the Staatsgalerie Stuttgart.
3. logging of accesses
Every time a user accesses the Staatsgalerie Stuttgart's website and every time a file is retrieved, data about this process is temporarily stored and processed in a log file. The storage serves internal system-related and statistical purposes for the improvement of our information offer. At irregular intervals, the logged data is evaluated internally by employees of the Staatsgalerie (management assistance, press office), e.g. accesses during the duration of an exhibition. The evaluation is not user-related, i.e. the Staatsgalerie Stuttgart does not create any personal user profiles, not even using pseudonyms (e.g. IP address). The data are also not merged with other data sources and therefore do not allow any conclusions to be drawn about specific individuals.
The following data is logged:
- IP address
- Name of the retrieved file
- Date and time of access
- Amount of data transferred
- Access status (file transferred, file not found, command not executed, etc.)
- Referrer (a referrer is the internet address of the website from which the user has reached the website of the Staatsgalerie by clicking on a link, such as search engines or other sites used)
SERVER LOG FILES
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us for the following purposes:
- Operation, use and improvement of the website
- Technical security (defence against attempted attacks)
- Checking in case of suspicion of illegal use
- Elimination of technical faults/errors
- Statistical evaluation
The following data is transmitted to us as information:
- Visited page on our domain
- Date and time of server request
- Browser type and browser version
- Operating system used
- Referrer URL
- IP address
The transmission is encrypted and in accordance with Art. 32 Para. 1 lit. a DSGVO.
This data is not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. e DSGVO in conjunction with § 5 LDSG. Data in log files are deleted every 7 days.
We use so-called cookies for data collection and storage. Cookies are small data packets that your browser stores in your end device at our instigation. Two types of cookies are used. Temporary cookies are automatically deleted when you close your browser (session cookies). Permanent cookies, on the other hand, have a maximum life of up to one month. This type of cookie allows you to be recognised when you return to the website after leaving it. This is used, for example, by the "stay logged in" function. You can refuse to accept cookies in your browser settings.
You can manage your consent for cookies here.
5. web analysis
This website uses Matomo (formerly Piwik), an open source solution for web analysis. Matomo uses so-called "cookies" text files that are stored on your computer and enable a statistical analysis of the use of the website. The data is stored anonymously on a German server of the provider. The IP address is anonymised before it is stored and cannot be used to identify individual persons.
The data stored by Matomo is not linked to other data sources or passed on to third parties.
You can prevent the installation of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Techniques such as Java applets or Active-X controls, which make it possible to track the user's access behaviour, are not used.
If you send an e-mail to the Staatsgalerie Stuttgart, your personal data will only be used for correspondence with you. The Staatsgalerie does not currently use encryption techniques. We therefore draw your attention to the fact that data transmission via the Internet is unencrypted, i.e. unsecured, and the data transmitted can therefore be accessed or even falsified by unauthorised persons during the transmission process.
Please note that threats to confidentiality and unauthorised access by third parties cannot be ruled out when communicating by unencrypted e-mail. The Staatsgalerie Stuttgart accepts no responsibility for this. We recommend sending confidential information exclusively by letter.
7. contact and newsletter
Through the newsletter we inform you regularly about current events and exhibitions in the house as well as interesting projects and topics closely related to our work. To order the newsletter, please use the online contact form. The Staatsgalerie Stuttgart collects and processes the following personal data for sending the newsletter:
- E-mail address
Your e-mail address will only be used internally, treated confidentially and not passed on to third parties. You can cancel your subscription to the newsletter at any time without giving any reason and with effect for the future. To do so, please contact email@example.com or click on the link in the credits of the newsletter.
The homepage of the Staatsgalerie Stuttgart contains links to the websites of other providers, e.g. Cedon Museumsshop, Stuttgarter Galerieverein, various art links. These are checked for their content before the links are set up. However, the Staatsgalerie Stuttgart is not responsible for the content of these external sites, as it does not initiate the transmission of the information, does not select the addressee of the transmitted information and has not selected or changed the transmitted information. We would like to point out that the linked external websites generally contain their own data protection provisions over which the Staatsgalerie has no influence. Any responsibility and liability for the data protection provisions of these websites on the part of the Staatsgalerie Stuttgart is therefore excluded.
9. social media
The Staatsgalerie Stuttgart maintains fan pages on Twitter, Facebook, Instagram and YouTube. The links to these fan pages are indicated on our homepage by the respective logo of the social network. When you call up these fan pages, your browser establishes a direct connection with their servers. Please note that the data processing of Facebook in particular takes place outside the legal area of the European Union. The Staatsgalerie Stuttgart has no influence on the scope of the data collected by Facebook, nor on the way in which the data is processed by Facebook. Even if you are not a member of Facebook, there is still the possibility that Facebook may obtain and store your IP address.
For recommendations on self-data protection on different networks, please visit our self-data protection page.
Netiquette applies to communication on our social networks.
10. applicant portal
If you submit your application via the applicant portal, we will process your personal data solely for the purpose of conducting the application procedure in order to assess whether you have the suitability, qualifications and professional performance for the position for which you are applying. Legal bases for the processing are in particular:
- Art. 6 para. 1 lit b DSGVO (pre-contractual measures, here: employment contract),
- possibly Art. 6 para. 1 lit a and Art. 7 DSGVO (consent) as well as
- § Section 15 (1) and (3) Act on the Adaptation of General Data Protection Law and Other Provisions to Regulation (EU) 2016/679 in conjunction with. §§ Sections 83 to 85 of the State Civil Servants Act.
Recipients of your personal data are the respective responsible personnel officers as well as the staff representatives (staff council, equal opportunity commissioner, representation of severely disabled persons).
In order to be able to provide you with the applicant portal, we work together with the Landesamt für Besoldung und Versorgung in Fellbach (LBV) as a service provider within the framework of data processing on behalf of the LBV in accordance with Art. 28 DSGVO. As the applicant portal is technically managed by the LBV, the LBV may have access to your personal data for maintenance and support purposes.
If you receive a rejection during the application process, your data will be deleted three months after the end of the selection process.
11. registration for an event
Registration for an event takes place via the provider etermin GmbH, which is based in Switzerland. Please inform yourself about the data processing of eTermin at https://www.etermin.net/online-terminbuchung-datenschutz. At events - subject to your consent - image and sound recordings may be made and, if necessary, published in various media and formats.
12. protection of minors
Children and persons under the age of 16 should not submit any personal data to us without the consent of their parents or guardians. We do not request, collect or disclose personal data from children to third parties without parental consent.
The Staatsgalerie Stuttgart reserves the right to adapt the data protection declaration in line with technical developments and changes in the legal framework. You will find the current status of this data protection declaration at the end of the declaration.
14. your rights
Upon request, you will receive information free of charge and without having to give reasons as to whether and, if so, which of your personal data we process. You can have your data processed by us corrected, deleted or the processing restricted. Furthermore, you can object to the processing of the data concerning you at any time. You can also revoke the consent given to us for the collection and use of data at any time without giving reasons.
We will be happy to answer any further questions you may have about our information, data protection and the processing of your personal data. Please contact us at the address given in the imprint.
You can address complaints against the processing of your personal data to the supervisory authority responsible for us:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32
T+49 711 615541-0
F+49 711 615541-15
firstname.lastname@example.org (public key)
Your trust is important to us. If you have any questions about this data protection statement or about data protection at the Staatsgalerie Stuttgart, for example regarding the processing of your personal data, please feel free to contact our data protection officer:
Dr. Marcus Hoinle
Status: June 2023