Information on collection of personal data
In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
The Department of Arts and Culture of the City of Munich is the responsible operator of this website within the meaning of Art. 4 Para. 7 of the General Data Protection Regulation (GDPR). When you visit the website, the protection of your personal data is given great importance. For this reason, your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this privacy policy. This provides you with information about the type, scope and purpose of collecting and using your personal data.
Name and contact information of the responsible person
City of Munich
Department of Arts and Culture
Section 1
Burgstrasse 4
D-80331 München
Germany
E-Mail: kunst@muenchen.de
data protection officers
State capital Munich
Official Data Protection Officers
Marienplatz 8
80331 München
Germany
Email: datenschutz@muenchen.de
The website can be used without providing personal data such as name, address, email address or other personal data. An exception is made for IP addresses. Since these are seen as part of the personal data, there could be a personal reference at least for the duration of the visit to the website. After the end of use, the IP addresses will not be saved or will be deleted immediately. Registration is not required to access the content of the website.
When you contact us by e-mail, the data you provide (your e-mail address, your name, possibly your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict the processing if there are statutory storage requirements. We will not pass this data on without your consent.
General information about consents
If you have given us consent to process personal data for specific, additional purposes, this data processing is based on this consent. We provide details on the content of a consent when requesting the consent.
Newsletter
If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent by agreement. In the course of this, potential recipients can be added to a mailing list. The users then receive a confirmation e-mail with the option of confirming their registration in a legally secure manner. The address will only be actively included in the mailing list if the confirmation is received.
We only use this data to send the requested information and offers.
The newsletter software used is Brevo. Your data will be sent to Brevo OnlineMarketing.de GmbH, the owner of Brevo. Brevo OnlineMarketing.de GmbH is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo is a certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Find out more here.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter or by sending a message to the e-mail address kunst@muenchen.de.
You can find the general information requirements according to Art. 13 et seq. GDPR under information requirements according to GDPR.
Your rights
You have the following right towards us with regard to your personal data:
- right to information,
- right to rectification or deletion,
- right to restrict processing,
- right to object to processing,
- right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of the data by us.
IP address and log file logging
Users who access publicartmuenchen.de (due to technical necessity) transmit data to a web server via their internet browser. The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR for technically necessary cookies and for data that is directly anonymised.
The following data is recorded during an ongoing communication connection between your internet browser and our web server:
- date and time of the request
- name of the requested file
- website from which the file was requested
- access status (file transferred, file not found and similar)
- web browser and operating system used
- full IP address of the requesting computer
- amount of data transferred
We process the data in this step in order to enable you to deliver our website and to guarantee the security of our information technology systems. We generally delete the collected data three days after your visit to the website. The data mentioned is usually generated when accessing any other website on the Internet. This is not a specific feature of our website. For the statistical evaluation, the usage information is only collected anonymously by us.
Hosting, Support and Maintenance
Our website is hosted by CMS ADMINS, Parkstrasse 19, 80339 München, as a sub-service provider of our service provider Portal München Betriebs-GmbH & Co. KG, Fraunhoferstrasse 6, 80469 Munich (“Portal München”). CMS ADMINS provides us with infrastructure and platform services, computing capacity, storage space, database services and security services. In addition, CMS ADMINS is responsible for the technical maintenance services of the website. In order to fulfill the services, the CMS ADMINS processes, among other things, usage data, meta and communication data of our website visitors within the framework of an order processing agreement in accordance with Art. 28 DSGVO.
Your personal data will be stored by Portal Munich on specially protected servers in the European Union. Portal Munich uses technical and organizational security measures in order to protect your personal data from unauthorized access and misuse.