1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the legal notice (Imprint) of this website.
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This primarily includes technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
For these purposes and for any further questions regarding data protection, you may contact us at any time using the address provided in the legal notice.
Analysis Tools and Third-Party Tools
When visiting this website, your browsing behaviour may be statistically evaluated. This is primarily done using cookies and so-called analysis programs.
Detailed information about these analysis programs can be found in the following Privacy Policy.
2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated via a website.
The use of the host is based on contract fulfilment with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
Our host processes your data only to the extent necessary to fulfil its service obligations and follows our instructions regarding this data.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
When using this website, various personal data are collected. Personal data is data that can be used to personally identify you. This Privacy Policy explains which data we collect and what we use it for, as well as how and for what purpose this occurs.
Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the Responsible Controller
The controller responsible for data processing on this website is:
Völkerkundemuseum (Ethnographic Museum) vPST
Hauptstraße 235
69117 Heidelberg
Germany
Phone: +49 6221 22067
Email: info@vkm-vpst.de
The responsible controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke consent already given at any time. An informal email notification to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format, or to have it transmitted to a third party. Direct transmission to another controller will only occur where technically feasible.
Information, Deletion and Rectification
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as a right to rectification or deletion of this data. For this purpose and for further questions regarding personal data, you may contact us at any time using the address provided in the legal notice.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. This applies in the following cases:
- If you contest the accuracy of your personal data, for the duration of the verification.
- If processing is unlawful and you request restriction instead of deletion.
- If we no longer need your personal data but you require it for legal claims.
- If you have lodged an objection pursuant to Art. 21(1) GDPR pending the balancing of interests.
Where processing has been restricted, such data may only be processed with your consent or for legal claims, protection of rights of others, or important public interest reasons.
4. Data Collection on This Website
Cookies
Our website uses so-called cookies. Cookies are small text files that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies).
Cookies may also be set by third parties (third-party cookies), enabling the use of certain third-party services.
Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies are used to analyse user behaviour or display advertising.
Cookies necessary for electronic communication or website functionality are stored based on Art. 6(1)(f) GDPR. Where consent is requested, cookies are stored exclusively based on Art. 6(1)(a) GDPR and may be revoked at any time.
You can configure your browser to notify you about cookie usage, allow cookies only in individual cases, exclude cookies in general, or enable automatic deletion when closing the browser. Disabling cookies may limit website functionality.
Server Log Files
The website provider automatically collects and stores information in server log files transmitted by your browser, including:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of accessing device
- Time of server request
- IP address
These data are not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR.
Contact Form
Data submitted via the contact form is stored for processing enquiries and follow-up questions. Processing is based on Art. 6(1)(b), (f) or (a) GDPR depending on the nature of the request. Data remains stored until deletion is requested or purpose ceases.
Contact by Email, Telephone or Fax
Enquiries submitted via email, telephone or fax are processed and stored for handling the request. Legal bases and retention periods correspond to those of the contact form.
5. Social Media
Facebook Plugins (Like & Share Button)
This website integrates plugins of Facebook, operated by Facebook Ireland Limited, Dublin, Ireland. Data may be transferred to the USA and other third countries.
Use is based on Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR where consent is given. Further information is available in Facebook’s Privacy Policy.
Twitter Plugin
Functions of Twitter Inc., USA, are integrated. Use is based on Art. 6(1)(f) GDPR or consent. Twitter privacy settings can be adjusted in user accounts.
Instagram Plugin
Instagram functions provided by Instagram Inc., USA, are integrated. Data processing follows Art. 6(1)(f) GDPR or consent.
Tumblr Plugin
Tumblr buttons provided by Tumblr Inc., USA, are integrated. IP address and page URL may be transmitted. Processing follows Art. 6(1)(f) GDPR or consent.
Pinterest Plugin
Pinterest plugins provided by Pinterest Inc., USA, are integrated. Data transmission may include IP address and usage data. Processing follows Art. 6(1)(f) GDPR or consent.
6. Plugins and Tools – Google Web Fonts
This website uses Google Web Fonts for consistent font display.
Further information:
https://developers.google.com/fonts/faq