Privacy policy
I. Controller
The Controller responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) in conjunction with the Federal Data Protection Act (BDSG) and other data protection regulations is:
German Lost Art Foundation
Executive Chair
Humboldtstraße 12
39112 Magdeburg
Tel.: +49 (0) 391 727 763 0
E-mail: kontakt@kulturgutverluste.de
The German Lost Art Foundation takes data privacy very seriously. Within the scope of the online services offered by the Court of Arbitration for Nazi-Looted Cultural Property, it endeavours to protect your personal data, which it uses exclusively for the purposes set out below.
Below you will find information on the type, scope and purpose of the processing of personal data, the legal basis and storage period, and the use of cookies in connection with use of the website https://www.schiedsgerichtsbarkeit-ns-raubgut.de.
II. Data Protection Officer
Data Protection Officer of the German Lost Art Foundation:
German Lost Art Foundation
Data Protection Officer
Humboldtstraße 12
39112 Magdeburg
Tel.: +49 (0) 391 727 763 37
E-mail: datenschutzbeauftragter@kulturgutverluste.de
III. Competent supervisory authority
The competent supervisory authority for the German Lost Art Foundation is:
Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153
D-53117 Bonn
Germany
Main switchboard: +49(0)228-997799-0
Central e-mail: poststelle@bfdi.bund.de
IV. Handling of personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a specific individual. This includes their name, e-mail address and telephone number.
The provision of personal data on your part is neither legally nor contractually required. It is voluntary in all cases, especially in the case of the conclusion of contracts (such as when subscribing to a newsletter).
If you use the services offered on our website, personal data will only be processed if you agree to us doing so. In exceptional cases, personal data is also processed without your consent, if this is permitted by law.
The German Lost Art Foundation only passes on your data to third parties without your written consent if:
this data is required by a subcontractor or vicarious agent that we use exclusively in the context of providing the offerings or services you have requested (unless you are expressly informed otherwise, such vicarious agents are in turn only entitled to use the data insofar as this is necessary for the provision of the offer or services),
if there is a legally binding court order or a legally binding official order to this effect, or
insofar as it is necessary to prevent misuse of our offerings or services in a legally permissible manner.
This website is hosted by an external service provider (Hetzner Online GmbH). Insofar as personal data is processed on this website, it is stored on the servers of Hetzner Online GmbH. The external service provider has access to this personal data exclusively in the context of the technical provision and administration of this website. The external service provider is obliged to comply with the data protection regulations.
All data is located on servers within the Federal Republic of Germany. The data is not used for any other purpose, nor is it stored together with other data (profile creation).
V. Operation of the website
1. Type and scope of data processing
Every time a user accesses online services provided by the German Lost Art Foundation and every time a file is retrieved, data relating to this process is automatically stored and processed temporarily in a log file. Before being stored, each data set is anonymised in that the IP address is changed. For this reason it is not possible to assign the collected data to a specific natural person.
The following specific data is stored for each access/retrieval:
· anonymised IP address,
· date and time of the server request,
· number of visits,
· length of stay on the website,
· previously visited website,
· user agent.
This website uses neither necessary nor optional cookies.
2. Legal basis of the data processing
The processing of your personal data is based on Art. 6 (1) (a) and (e) GDPR.
3. Purpose of the data processing
The processing of personal data serves the provision of this website, including its use and its display on your retrieval device.
The website is provided based on the statutory tasks of the German Lost Art Foundation and serves the public interest.
In addition, the personal data is processed in order to provide you with different usage options on our website such as the download of files.
The commissioning of an external service provider for web hosting serves to ensure the secure and reliable provision of our online offerings by a professional provider.
Beyond this, personal data is only evaluated for statistical purposes and in order to improve our website. This serves to make our offerings more user-friendly, effective and secure.
4. Storage period
Your personal data is deleted immediately after the purpose of its collection has been fulfilled. In the case of files concerning access data (log files), however, this happens no later than after one month. Your personal data is only saved for longer if the German Lost Art Foundation is obliged to do so by legislation at the European, national or state level or by a legally binding court or official order.
VI. Press releases/newsletter
1. Type and scope of data processing
The press releases of the Court of Arbitration for Nazi-Looted Cultural Property provide information on current developments, such as decisions issued by the arbitration panels and events organised by the Court of Arbitration. The newsletter of the Network of European Restitution Committees on Nazi-Looted Art provides information on news and activities within the network.
If you use the registration form for press releases or the newsletter, we will ask you to provide personal data. Provision of this information is always voluntary and the information is used exclusively for the purpose of providing the service in question. If you do not voluntarily provide the required information, however, this may restrict your ability to use the website. This depends in particular on whether the information is optional or absolutely necessary for the respective usage option and the contract conclusion this involves in each case. The information required in order for you to be able to use the website or conclude a contract is shown accordingly on the website. If you do not provide the required information, you will not be able to subscribe to press releases or newsletters.
To subscribe, you must select whether you wish to receive press releases and newsletters or only one of the two options, enter an e-mail address capable of receiving messages in the designated field on the registration page, and confirm your consent to the selected subscription(s) and the associated processing of your personal data by clicking the registration button (“Submit information”).
In addition to your e-mail address as mandatory information, we also process the following data if you choose to provide it:
· date and time of registration/cancellation
· the name of your institution or media outlet, should you provide this information optionally.
If you contact us via the other contact options provided on the website (by e-mail or post) for the purpose of unsubscribing or withdrawing your consent to the processing of your personal data, we will process the personal data you provide to us automatically or manually. This information is usually the following:
· E-mail address
· First and last name
· Address
· Telephone number
If you wish to terminate one or more subscriptions, you may use the unsubscribe link included in every newsletter or send an e-mail to schiedsstelle@schiedsgerichtsbarkeit-ns-raubgut.de. In each case, the e-mail address you use will also be processed.
Personal data is not disclosed to third parties and is processed exclusively within the scope of our “Press releases / newsletter” service.
2. Legal basis of the data processing
The processing of your personal data is based on Art. 6 (1) (a) and (b) GDPR.
3. Purpose of the data processing
Your personal data is processed solely for the purpose of delivering press releases and newsletters to the specified e-mail address, preventing misuse of our “Press releases / newsletter” service (including misuse relating to your e-mail address), and preventing duplicate registrations.
4. Storage period
The data is deleted as soon as we no longer need it to fulfil the above purposes.
Processing of your e-mail address ends in particular if we discontinue the subscription service completely or if you cancel your subscription. You may cancel your newsletter subscription via the unsubscribe link in a newsletter or by sending an e-mail to schiedsstelle@schiedsgerichtsbarkeit-ns-raubgut.de.
VII. Contact
1. Type and scope of data processing
If you contact us via the other channels (e-mail, post, telephone) specified on our website, we process the personal data provided by you automatically or manually. This information is usually the following:
· E-mail address
· First and last name
· Address
· Telephone number
2. Legal basis of the data processing
The processing of your personal data is based on Art. 6 (1) (a) and (e) GDPR.
3. Purpose of the data processing
We process personal data for the purpose of communicating with you, for example to exchange information relating to the Court of Arbitration for Nazi-Looted Cultural Property or to handle your enquiries concerning the reporting of accessibility barriers.
4. Storage period
Your personal data is deleted immediately after the purpose of its collection has been fulfilled. In the case of a telephone number being transmitted during a call, however, this occurs no later than after three months.
VIII. Rights of data subjects
If the German Lost Art Foundation processes your personal data, you as the data subject have the following rights:
according to Art. 7 GDPR, you have the right to revoke any consent you may have given at any time, whereby the lawfulness of the processing of your personal data carried out based on your consent up until revocation is not affected
according to Art. 15 GDPR, you have the right to obtain information about the personal data processed by us and to further information according to the regulatory catalogue
according to Art. 16 GDPR, you have the right to have inaccurate personal data relating to you corrected and/or to have incomplete personal data completed
according to Art. 17 GDPR, you have the right to have the personal data concerning you erased
according to Art. 21 GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation, unless we have compelling legitimate grounds which override your interests, rights and freedoms
according to Art. 18 GDPR, you have the right to restrict the processing of your personal data if
the accuracy of this data is disputed by you
the processing is unlawful, you refuse the erasure of the data and instead request the restriction of the use of the data
we no longer need to process the data for the above purpose but for the assertion, exercise or defence of legal claims
you have objected to the processing of your data pursuant to Art. 21 (1) GDPR, but it has not yet been determined whether our compelling legitimate grounds for continuing to process your personal data outweigh your interests, rights and freedoms
according to Art. 20 GDPR, you have the right to receive the personal data you have provided in a structured, common and machine-readable format and to transfer it to another controller without hindrance on our part, insofar as we process your data automatically and you have consented to the processing
according to Article 77 GDPR, you have the right, without prejudice to other legal remedies, to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement – if you are of the opinion that the processing of your personal data by us violates data protection regulations. The Federal Commissioner for Data Protection is the authority responsible for us (see 3).
If you wish to assert the above rights vis-à-vis the German Lost Art Foundation or have any questions on the subject of data privacy, please contact our Data Protection Officer (see II of this privacy policy).
IX. Changes to our privacy policy
We will continually update this policy to protect your personal data. You should review this policy from time to time to keep informed of how we are protecting your data and continually improving the content of our website.