The protection of personal data is of great importance to the Association for Art in Public gGmbH. With this Privacy Policy, the Association for Art in Public gGmbH informs you about which personal data is collected, processed, and used within the online services of the Association for Art in Public gGmbH, including its associated websites, functions, and content, as well as external online presences such as social media profiles on Facebook, Instagram, and Twitter, and for what purposes this is done.
1. Responsibility for Data Processing
The entity responsible for the lawful collection, processing, and use of users’ personal data is:
Association for Art in Public gGmbH
Heinrich-Heine-Allee 19
D-40213 Düsseldorf
T: +49 (0) 211 178 047 66
F: +49 (0) 211 942 148 17
Email: info@afaip.de
Managing Director: Dirk Geuer
2. Processed Data and Purposes of Processing
2.1 Access Data
When accessing the website of the Association for Art in Public gGmbH, the hosting provider automatically stores various data about the accessing system. This includes the browser type used, the browser version, the operating system, the website from which access to the Association for Art in Public gGmbH website was initiated, the accessed subpages, the date and time of access, the Internet Protocol (IP) address, the Internet service provider, and comparable data.
This data is used to enable access to the website, to identify and remedy technical problems, and to prevent and, if necessary, pursue misuse of the services of the Association for Art in Public gGmbH.
The legal basis for the processing of the data described in this section is Article 6 (1) sentence 1 lit. f) of the General Data Protection Regulation (GDPR). The legitimate interest arises from the aforementioned purposes of data collection.
2.2 Data Provided Through Contact
On the website of the Association for Art in Public gGmbH, you have the option of contacting the Association for Art in Public gGmbH (e.g. via contact form or email) and, for example, submitting inquiries. The specific data collected in the case of a contact form can be seen from the respective form. Data from the contact form is transmitted to the Association for Art in Public gGmbH using SSL or TLS encryption. The personal data transmitted in this context will be used by the Association for Art in Public gGmbH exclusively for processing the respective inquiry.
The legal basis for the processing of the data described in this section is Article 6 (1) lit. f) GDPR. The legitimate interest arises from the aforementioned purposes of data collection.
2.3 Social Media Profiles
The Association for Art in Public gGmbH maintains social media profiles on Facebook, Instagram, and Twitter. Facebook and Instagram are social networks operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Twitter is a social network operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
The Association for Art in Public gGmbH operates these social media profiles to promote its services and products and to interact with visitors and users of the social networks and the website of the Association for Art in Public gGmbH.
The legal basis for operating the social media profiles, including the processing of users’ personal data, is Article 6 (1) lit. f) GDPR. The legitimate interest of the Association for Art in Public gGmbH lies in providing a contemporary and supportive means of information and interaction for and with its users and visitors.
The Association for Art in Public gGmbH, as the operator of its social media profiles, has no interest in collecting or further processing individual users’ personal data for analytics or marketing purposes. However, we would like to point out that social networks collect personal data of users and may also process it for the following purposes: advertising (analysis, creating personalized ads), creating user profiles, and market research.
Social networks use cookies, small text files that are stored on users’ various devices, to store and further process this information. If a user also has a profile with the social network and is logged in, the storage and analysis take place across devices.
Information about which data is processed and used by social networks and for what purposes can be found in the privacy policies of the social networks:
-
Facebook: https://www.facebook.com/about/privacy/
-
Instagram: https://help.instagram.com/519522125107875
-
Twitter: https://twitter.com/privacy
Facebook Inc., the U.S. parent company of Facebook Ireland Ltd., and Twitter Inc. are certified under the EU-U.S. Privacy Shield and thus pledge to comply with European data protection standards. More information on the Privacy Shield status is available here:
-
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
-
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
The transmission and further processing of personal data of users of social media profiles in third countries, such as the USA, as well as any associated risks for users, cannot be excluded by the Association for Art in Public gGmbH as the operator of the social media profiles.
Through “Insights,” statistical data of various categories is available to the Association for Art in Public gGmbH on the social networks. These statistics are generated and provided by the social networks. The Association for Art in Public gGmbH, as the operator of the social media profiles, has no influence on the generation and display of this data. The Association for Art in Public gGmbH cannot disable this function or prevent the generation and processing of the data. For a selectable period and for different categories of users, the social networks provide the Association for Art in Public gGmbH with data such as: total number of page views, “likes,” page activities, post interactions, reach, video views, comments, shared content, responses, gender ratio, origin by country and city, language, shop views and clicks, clicks on route planners, clicks on phone numbers.
Due to the constant development of social networks, the availability and processing of data changes, so the Association for Art in Public gGmbH refers to the already mentioned privacy policies of the social networks for further details. The Association for Art in Public gGmbH uses this data, available in aggregated form, to make its posts and activities on its social media profiles more attractive. According to the terms of use of the social networks, which every user agreed to when creating their own social media profile, the Association for Art in Public gGmbH can identify subscribers and fans of its social media profiles and view their profiles as well as other shared information.
If users no longer wish the above-described data processing in the future, they can, by using functions such as “Unlike this page” and/or “Unfollow this page,” remove the link between their user profile and the social media profile of the Association for Art in Public gGmbH.
3. Transfer of Data to Third Parties
Except in the cases explained in this Privacy Policy, the above-mentioned data will only be passed on to third parties without the explicit consent of the user if there is a legal obligation to do so or if ordered by a governmental or judicial authority.
4. Location of Data Storage
Unless otherwise described in this Privacy Policy, the processing of personal data takes place exclusively in data centers located within the scope of the GDPR.
5. Duration of Storage
Personal data will be deleted when its retention is no longer necessary for the purposes described in this Privacy Policy, unless statutory provisions require longer storage.
6. Rights of Users
The user and all other persons possibly affected by the use of data by the Association for Art in Public gGmbH have the right to obtain information about the personal data stored about them and, if the respective legal requirements are met, the right to rectification, deletion, restriction of processing, objection to processing, and data portability.
Where data processing is based on Article 6 (1) lit. a) GDPR, there is also the right to revoke the underlying consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
Users and all other persons possibly affected by the use of data by the Association for Art in Public gGmbH can also lodge complaints about the use of their data with the competent supervisory authority.
Last updated: July 2018
