THE SCHAUFLER FOUNDATION
Tel +49 (0)70 31 932-49 04
Fax +49 (0)70 31 932-49 20
Board of Trustees:
Dr. Tayfun Belgin
Prof. Dr. Hans Müller-Steinhagen
Ingo Smit (Chairman)
Ingrid Bossert-Spiegelhalder (Vice Chairwoman)
Az 14-0563 Foundation register of the regional council of Stuttgart
VAT ID no. in accordance with para. 27 of German VAT law (UStG): DE265075860
Concept, Design and Production
We, THE SCHAUFLEER FOUNDATION and the museum SCHAUWERK Sindelfingen (hereinafter referred to as “we”), thank you for your interest in our museum, our exhibitions and projects and we appreciate your visit to the website of www.the-schaufler-foundation.de or www.schauwerk-sindelfingen.de (hereinafter referred to as “website”).
The protection of your personal data is a major concern for us. Your personal data is processed exclusively in accordance with the statutory data protection regulations, especially the European General Data Protection Regulation (hereinafter referred to as “GDPR”) and the German Federal Data Protection Act (hereinafter referred to as “BDSG”), both as amended from 25 May 2018.
Below we will inform you about how your personal data is processed and which rights you shall have as a data subject under the data protection law.
Where we link to third-party websites, please note that these websites are not operated by us and we are not responsible for the content on such websites. We have no influence on the data processing operations on third-party websites.
1. CONTROLLER AND DATA PROTECTION OFFICER
The controller is:
THE SCHAUFLER FOUNDATION
Tel.: +49 (0) 70 31 932-49 17
Fax: +49 (0) 70 31 932-5 49 04
Data protection officer:
Tel.: +49 (0) 70 31 932-0
Fax: +49 (0) 70 31 932-147
If you have any questions or suggestions regarding data protection please contact our data protection officer.
2. COLLECTION, PROCESSING AND PROVISION OF PERSONAL DATA
We only collect, process and use your personal data where legally admissible or if you have provided your express consent, e.g. if you subscribe to our newsletter or if you contact us using our contact form, if you book a guided tour using the booking form or if you order mailings using the form on our website.
Personal data means any information relating to an identified or identifiable natural person. The personal data includes for example your name, your phone number and your postal and e-mail address, as these data is an expression of your personal identity.
Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.1. DATA CATEGORIES
We process communication data. Communication data is data such as your name, address, e-mail address and IP address.
The processing of personal data is exclusively for the purposes described below and is limited to the necessary personal data in the legal sense of data economy.
2.2. PURPOSES OF THE PROCESSING AND LEGAL GROUNDS
We and the service providers we engage process your personal data exclusively for the following purposes:
Consent for processing, Article 6 (1) (a) GDPR
If you have given consent to the processing of your personal data, we will process your personal data for the purpose specified.
Compliance with a legal obligations, Article 6 (1) (c) GDPR
Personal data is also collected and processed in order to comply with our legal obligations such as our control and reporting obligations.
Legitimate interests pursued by us or by a third party, Article 6 (1) (f) GDPR
We also process personal data if it is necessary to pursue our legitimate interests or the legitimate interests of third parties.
// enforcement of legal claims and defence in legal disputes
// Prevention and investigation of criminal acts
// Preservation of IT security and IT operations
Processing of your personal data for a different purpose
If we intend to process your personal data for another purpose than the purpose for which the data was collected, you will be provided with all further relevant information before we process your personal data.
2.3. TRANSMISSION OF DATA TO THIRD PARTIES
We can also share your personal data with our service providers within the EU insofar as the service providers support us in accordance with our instructions when processing your request (e.g. IT service providers).
When personal data is transferred to a third country, please note that not all third countries have an adequate level of protection. However, before transferring your personal data to a third country, we ensure that either the recipient of the data maintains an adequate level of protection or you have given consent to the transfer of data.
2.4. DURATION OF STORAGE OF YOUR PERSONAL DATA
Your personal data will only be processed and stored for as long as necessary to comply with our legal and contractual obligations. When processing of the personal data is no longer necessary, we shall have the obligation to erase personal data without undue delay.
In particular, processing of the personal data is necessary for the execution of the contract as well as for the defence and enforcement of civil law claims within the applicable limitation periods. Furthermore, we have to comply with duties to retain under commercial law, tax law or other legal duties to retain which may require the storage of your personal data. For these reasons, we reserve the right to only erase the personal data after expiry of the relevant storage periods.
3.1. COOKIE CATEGORIES
Cookies are split into various categories. There are technically required and technically not required cookies.
Technically required cookies are needed for the operation and functionality of a website, which also entails necessary data storage. Consent to the use of technically necessary cookies is not required.
Technically not required cookies collect other – sometimes personal – data in order to optimise and improve our website. Technically not required cookies include, for example, tracking cookies that analyse the user behaviour or cookies from third-parties such as social networks. The use of technically not required cookies requires your consent.
3.2. MANAGEMENT, SETTINGS AND ERASURE OF COOKIES
You can visit our Website without using cookies. However, in this case please note that you might not be able to make full use of all of the features of this website.
Management of cookies
If cookies were installed when you visited our website and you subsequently decide to deactivate cookies, you can erase the cookies that have already been installed. You can erase cookies in your browser settings. You can also consult the help menu in your browser for more information on how to do so.
3.3. OVERVIEW OF COOKIES
You can find an overview of the cookies we use here.
4. ANALYTICS TOOLS
We use analytics tools. These tools help us to adapt our website optimally to your interests and to improve our internet presence for you. Analytics tools record your user behaviour by collecting and analysing your device specific data using cookies. The device specific data include, for example, information about how you get to our website, which area of our website you visit and how often and how long you view these areas.
Depending on the analytics tool, the information relating to your use of our website might be transmitted to a server located in the USA and processed there. The GDPR imposes strict requirements on transmitting and processing in a third country such as the USA in terms of the adequacy of the level of protection for the processing of personal data. This includes the EU–US Privacy Shield certification which serves as a basis for transmitting personal data from Europe to U.S. companies.
If you do not want your usage behaviour to be analysed, you can object to the use of analytics tools at any time and with future effect by clicking on the specific opt-out link . If you object, we will set an opt-out cookie for your browser you use which will prevent further use of the analytics tools affected by the objection. Please note that if you erase all cookies in your browser settings, the opt-out cookie will be erased as well. In this case, you will have to object again.
The analytics tools we use are described in detail below.
4.1. GOOGLE ANALYTICS
Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (hereinafter referred to as “Google”). Google is certified under the EU–US Privacy Shield.
We only use the services of Google Analytics with the extension ‘_anonymizeIp()’. Only your shortened IP address will be processed, which means that it cannot be associated with you specifically.
Furthermore, please note that Google will not merge the IP address transmitted by the browser you use with any other data by using Google Analytics.
In addition for clicking on this opt-out link , you can deactivate the collection of data by Google Analytics.
4.2. GOOGLE TAG MANAGER
Google Tag Manager is a service provided by Google. Google is certified under the EU–US Privacy Shield. This service enables us the management of website tags with an user interface. As it is a cookie-free domain, Google Tag Manager itself does not collect any personal data. However, other tags are activated which might collect and send data to Google Analytics or Google Ads. Google Tag Manager has no access to such data. If you have deactivated cookies on a domain or cookie level, the deactivation will also apply to the tracking tags implemented with Google Tag Manager.
5. SUBSCRIBING TO OUR NEWSLETTER
If you subscribe to the newsletter offered on our website, the data you provide in your subscription will only be used to send the newsletter unless you have consented to further use.
To subscribe to our newsletter, you will be required to provide us with your e-mail address.
You can unsubscribe from the newsletter at any time by by clicking on the provided link at the end of the newsletter.
6. CONTACT THROUGH THE WEBSITE
If you contact us by e-mail or use our contact form, you provide us your personal data. We will process your data and potentially forward it to third parties if necessary in order to process your request.
The following personal data is required to use the contact form
// First name and surname
// E-mail address
7. Booking of tours
When you book a guided tour using the provisional form, you will provide us with your personal data. We will process your details and, if applicable, forward it to third parties.
For use of the booking form, please provide the following personal data:
// First and last name
// Phone number
// Email address
The following personal data can also be provided voluntarily:
8. ORDERING OF INFORMATION MATERIAL (INFOPOST)
When you order information material via the given form (infopost), you will provide us with your personal data. We will process your details and, if applicable, forward it to third parties.
For use of the infopost form, please provide the following personal data:
// First and Last Name
The following personal data can also be provided voluntarily (when the email newsletter is ordered simultaneously):
// Email address
9. PROVISION OF YOUR PERSONAL DATA
As described in section 2.2, your personal data is also collected in order to comply with statutory obligations. In this context, the provision of your personal data is required by law. In particular, Article 33 (1) GDPR requires infringements of data protection to be reported to the relevant supervisory authority.
The provision of your personal data is required to subscribe to our newsletter or use our contact and booking forms. If you do not provide your personal data, we cannot provide you with these services.
10. SOCIAL MEDIA AND NETWORKS
Below you will find a list of the social media channels and networks on which we are represented.
Facebook is operated by Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA.
Information on data protection at Facebook you can find here:
Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Information on data protection at Instagram you can find here:.
We use YouTube. YouTube is an online video platform that enables to play audio and video files. On our website, you can view or listen to video or audio files relating to our company. In order to play the files, the YouTube player on our website connects to YouTube using plugins, which transmit data to YouTube.
Please note that we have no control over the processing of data by YouTube.
YouTube is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Information on data protection at YouTube you can find here:
12. YOUR RIGHTS AS A DATA SUBJECT
As a data subject, you have various rights with regard to the processing of your personal data. If you would like to exercise these rights, please use the contact details provided in section 1.
As a data subject, you have the following rights:
// You shall have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed by us, and, where that is the case, access to the personal data, Article 15 GDPR;
// You shall have the right to obtain from us the rectification of inaccurate personal data or the completion of incomplete personal data, Article 16 GDPR;
// You shall have the right t obtain from us the erasure (‘right to be forgotten’) of your personal data without undue delay, Article 17 GDPR;
// You shall have the right to obtain the restriction of the processing of your personal data, Article 18 GDPR;
// You shall have the right to data portability, i.e. you shall have the right to receive the personal data concerning you or have the personal data transmitted directly to another controller, Article 20 GDPR.
Furthermore, you shall have the right to object to the processing of your personal data, Article 21 GDPR.
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR.
We shall no longer process the personal data concerning you unless we demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purpose, you shall have the right to object at any time. We shall no longer process the personal data for such purpose.
You shall have the right to withdraw your consent at any time, Article 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you consider that the processing of your personal data infringes the regulations of the GDPR, you shall have the right to lodge a complaint with the supervisory authority that has jurisdiction over us, Article 77 GDPR. The supervisory authority that has jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information for Baden-Wuerttemberg.
13. AUTOMATED DECISION-MAKING AND PROFILING
We consciously refrain from automated decision-making or profiling.
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we and our processors have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, Article 32(1) GDPR.