It is important to the Stiftung Preussischer Kulturbesitz to handle your personal data responsibly and to organise its use transparently. For this reason, the following sections explain
- who is responsible for the website in terms of data protection law
- how personal data is processed, including a description of the respective purpose and the respective legal basis, and
- what rights users of this website have
I. Who is responsible for the content and maintenance of the website and who takes care of data protection?
The Prussian Cultural Heritage Foundation is responsible for this website in terms of data protection, legally represented by the President Prof. Dr hc. mult. Hermann Parzinger.
Stiftung Preußischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin
Germany
Phone: +49 (0)30 266 412884
Email:
Website: www.preussischer-kulturbesitz.de
The Stiftung Preussischer Kulturbesitz has a data protection officer who can be contacted at the above postal address with the addition ‘Data Protection Officer’ or by email:
II. In what form is personal data processed?
- Provision of the website and creation of log files
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.
a) Data categories
The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- the website from which the access was made (referrer URL)
- browser used and, if applicable, the operating system of your computer and the name of your access provider.
b) Processing purpose
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring a comfortable use of our website,
- analysing system security and stability and for other administrative purposes.
The operation of the website serves the public relations work of the foundation.
c) Legal basis
The legal basis for data processing is the protection of legitimate interests in accordance with Art. 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG. The provision of the website is part of our public relations work.
d) Recipient categories
Our website is hosted on a Hetzner server. The operator of our website, the advertising agency HELDISCH, also has access to the above-mentioned data.
The Stiftung Preussischer Kulturbesitz has carefully selected the advertising agency HELDISCH and the server operator Hetzner. HELDISCH and Hetzner are bound by the instructions of the Stiftung Preussischer Kulturbesitz and are regularly monitored.
e) Storage duration
Hetzner stores the data for the following periods:
The anonymised IP addresses are stored for seven weeks.
Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.
Access via FTP is logged in anonymised form and stored for seven weeks.
- Contact, subscriptions
a) Processing purpose
We process your personal data that you provide to us by e-mail (in the course of fast and cost-effective communication) to answer and fulfil your enquiries.
b) Legal basis
If you have given us your express consent to process your data, Art. 6 para. 1 lit. a GDPR is the legal basis for this processing.
If we process your data to carry out pre-contractual measures, Art. 6 para. 1 lit. b GDPR is the legal basis.
In all other cases, Art. 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG is the legal basis. In such cases, data processing is necessary for public relations work.
c) Storage duration
The personal data will be deleted as soon as it is clear that it is no longer needed for the purpose for which it was collected.
- Social Media
We maintain publicly accessible profiles in social networks. The individual networks we use are listed below.
Social networks such as Facebook, X (formerly Twitter), LinkedIn, Bluesky and Mastodon can generally comprehensively analyse how you use the respective platform. The integration of our social media presences triggers numerous processing operations. In detail:
Data processing by social networks
When you visit our social media profiles, your data is used for market research and advertising purposes. For example, user profiles can be created based on your usage behaviour. Cookies and other identifiers are stored on your device for this purpose. The data collected by the respective platforms is also compared with data from other platforms.
Your rights
If you are registered with one or more of the aforementioned social networks, the operators can assign access to our presence to the respective user account. Your personal data is processed on the basis of our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f GDPR. If the respective social networks obtain your consent to data processing, the legal basis is Art. 6 para. 1 lit. a GDPR.
Our social media presence
We are represented on the following social networks:
- Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
- Our profile: https://www.facebook.com/spkberlin/
- Privacy policy: https://www.facebook.com/privacy/policy/
- Opt-out: https://www.facebook.com/settings?tab=ads
X (formerly Twitter)
- Provider: X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
- Our profile: https://x.com/kulturspk
- Privacy policy: https://twitter.com/en/privacy
- Opt-out: https://twitter.com/personalization
Mastodon (social.bund.de)
- Provider: ITZBund – Federal Information Technology Centre
- Our profile: https://social.bund.de/@kulturSPK
- Privacy policy: https://social.bund.de/privacy-policy
Bluesky
- Provider: Bluesky PBC
- Our profile: https://bsky.app/profile/kulturspk.bsky.social
- Privacy Policy: https://www.blueskyweb.xyz/terms
- Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
- Our profile: https://www.linkedin.com/company/stiftung-preußischer-kulturbesitz/
- Privacy policy: https://de.linkedin.com/legal/privacy-policy
- Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
For the use of each of these social networks, we cannot influence the data processing by the respective operators. The operators of the social networks may set additional cookies and also process your data for their own purposes. For details, please refer to the privacy policies of the respective operators linked above.
Note on data transfer to the USA and other third countries
When using Facebook, X, Bluesky and LinkedIn, please note that some of these services are operated by providers in the USA or other third countries that are not secure under data protection law. We would like to point out that in these cases data is transferred to countries that do not have a level of data protection comparable to that in the EU. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this.
- Images and videos of people on the website
People may be recognisable in images or videos on our website. In this case, the processing is carried out on the basis of Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG. If you are affected, you have the right to object to this use.
III. What rights do users of our website have?
You have the following rights in relation to your personal data:
- the right of access (Art. 15 GDPR),
- the right to rectification and erasure (Art. 16 and 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to object to processing (Art. 21 GDPR),
- the right to data portability (Art. 20).
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Prussian Cultural Heritage Foundation.
IV. Changes to the privacy policy
The Stiftung Preussischer Kulturbesitz reserves the right to adapt the privacy policy in line with technical developments and changes in the legal framework. You will find the current status of this data protection declaration at the end of the declaration.
Status: 01 February 2025