The following persons are responsible for the personal data of the users collected when visiting this website
ZKM | Center for Art and Media
Tel: +49 (0) 721/8100-0
Fax: +49 (0) 721/8100-1139
Users may also contact our Data Protection Officer with any questions regarding data protection at the ZKM. You can contact us by e-mail at firstname.lastname@example.org or at our postal address with the addition »Data Protection Officer«.
for Website & Newsletter
I. Responsibility, data protection official and scope of this information
Responsible for the personal data collected from users when visiting our website is the
ZKM | Center for Art and Media Karlsruhe
Foundation under public law
Tel: +49 (0) 721/8100-0
Fax: +49 (0) 721/8100-1139
Users (hereinafter also referred to as »you«) may also contact our Data Protection Officer with any questions regarding data protection at the ZKM (hereinafter also referred to as »we«). You can contact us by e-mail at email@example.com or at our postal address with the addition »Data Protection Officer«.
Subject of data protection are personal data. This is all information relating to an identified or identifiable natural person (the so-called data subject) who is the user of our website or the recipient of our newsletter. Such information is, for example, details such as name or e-mail address that the user can provide when registering for our newsletter. However, we also treat information that arises during a normal visit to our website (e.g. pages called up) as personal as long as it can be assigned to the user’s Internet address (IP address) or in any other way to a natural person.
All personal data is processed by the ZKM in accordance with the relevant legal provisions, in particular the General Data Protection Regulation of the EU (also called GDPR for short) and the Baden-Württemberg Data Protection Act (LDSG).
This data protection notice applies only to the websites under the domain www.zkm.de and to other ZKM websites that refer to this notice. In particular, the references do not refer to external websites of other providers to which links are provided on the ZKM website.
If users who are not subject to or supervised by the ZKM post personal data on our website via third parties (e.g. mentioning names in blog articles), the users themselves are also responsible for this content in terms of data protection law. However, at the request of the person concerned, we will immediately delete inadmissible content from our website.
The content of any consent already given remains unaffected by any changes to the data protection information. In this case, amended data protection notices merely inform you about changed technical, organizational or legal framework conditions (such as, for example, about security measures adapted to the state of the art, new contact information or the rights of affected persons, some of which have been extended by the GDPR).
II. Data collected automatically when visiting the website
When you visit our website, the following information is usually automatically transferred from your browser to our server:
We process these data on the basis of our legitimate interests within the meaning of Article 6 paragraph 1 sentence 1 letter f GDPR, namely
When you visit our website, this data is collected automatically. Without this survey, our website cannot be used. We do not use this data for the purpose of drawing conclusions about the identity of the user, unless there are concrete indications of illegal use.
Generally, the collected data will be deleted after 7 days or made completely anonymous by deleting at least parts of the IP address, unless we exceptionally need it longer for the above-mentioned purposes. In such a case, we will delete or make the data completely anonymous immediately after it has been used.
Cookies are used on the website to assign an identification code to your computer. Cookies are small text files (with the identification code) that are stored on the user’s computer when a website is accessed. As plain text files, cookies cannot contain viruses or other malware.
Cookies serve to make websites more comfortable, efficient and secure. We use both transient and persistent cookies:
We process the data in connection with cookies on the basis of our legitimate interests within the meaning of Article 6 paragraph 1 sentence 1 letter f GDPR, namely
Most browsers offer the possibility to display a warning before storing a cookie, to completely refuse the acceptance of cookies and/or to delete existing cookies again. However, the usability of the website may be restricted by such settings.
If you wish to refuse the processing of your data in connection with cookies, please refuse the acceptance of cookies via your browser or proceed with Google Analytics as described in the following section.
In particular, cookies are used at the following places on zkm.de:
If you confirm the active cookie hint with »Ok, understood« when accessing our website, which is displayed to you independently of this data protection hint, we can also set a cookie, which means that this hint will no longer be displayed to you for a period of one year.
IV. Use of Google Analytics
This website also uses Google Analytics for a device-independent analysis of visitor flows, which is carried out via a user ID.
Google will use the collected information on behalf of ZKM to evaluate your use of the website, to compile reports on website activities and to provide ZKM with further services related to website and Internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google.
We use Google Analytics to analyze and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is our legitimate interest in the aforementioned analysis pursuant to Article 6 paragraph 1 sentence 1 letter f GDPR.
For more information about Google Analytics and how we process the information we collect about you, please see the following documents from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001:
Terms and conditions of use: http://www.google.com/analytics/terms/de.html
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
Data protection declaration: http://www.google.de/intl/de/policies/privacy.
V. Google Maps
On our website, we may use Google Maps to display locations and to create directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only called »Google«.
If you use the Google Maps component of our website, Google stores a cookie on your device via your Internet browser. In order to display the locations and create route descriptions, the automatically generated usage data (see Section II above) as well as any additional information you may have voluntarily entered, in particular regarding your location, will be transmitted to Google and processed there. The connection to Google established in this way enables Google to determine in particular from which (namely our) website your enquiry has been sent and to which (namely your) IP address the route description is to be transmitted. We cannot exclude that Google uses servers in the USA.
The legal basis for this data processing is our legitimate interest in accordance with Article 6 paragraph 1 sentence 1 letter f GDPR. The legitimate interest lies in the optimization of the functionality of our Internet presence. Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google also ensures that data processing in the USA also complies with an appropriate level of data protection in accordance with the EU Commission.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You will find details on this in the section »Cookies«.
Furthermore, Google offers at
for further information.
VI. Voluntary declaration of personal data
If you voluntarily provide personal data when visiting our website, for example in the context of an online form or when ordering our newsletter, the ZKM may process this data to respond to the enquiry or to send the newsletter. The legal basis for these purposes is the (pre-)contractual relationship upon your request (Article 6 paragraph 1 sentence 1 letter b GDPR) or your consent to the dispatch of the newsletter (Article 6 paragraph 1 sentence 1 letter a GDPR).
In addition, your form entries, in particular booking requests for guided tours or workshops, can also be used in at least pseudonymized form to improve and design our offer to meet your needs (e.g. by increasing the offer for services frequently requested in a certain period of time). The legal basis for these purposes is the legitimate interests of the CCNM (Article 6(1), first sentence, point (f GDPR).
You may revoke your consent to the processing of personal data, in particular your e-mail address for sending the newsletter, at any time by simple notification (by e-mail, fax or letter), or cancel the newsletter at any time by activating a link in each newsletter sent. In this case, your personal data will be deleted immediately by the ZKM. Further information on the newsletter can be found in the following section VI.
Personal data will not be passed on by us to third parties, unless you have given us your express prior consent or there is a legal permission to pass on data. If you have given your consent to the disclosure of your data, you can revoke this at any time by simple notification (by e-mail, fax or letter).
With your consent you can subscribe to our newsletter, with which we inform you about the program currently offered by or in the ZKM.
After entering your e-mail address and first and last name, you will receive a confirmation link by e-mail. This leads you to a »Confirmation Site«, where you can select your individual interests (from exhibitions to art education to publications) as well as topics of interest to you (from fine arts to music to natural sciences and literature). With a further click on »Save interests« you will receive our newsletter from the next issue, filtered according to your interests. You can change these settings yourself at any time.
In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
After your confirmation, we will save the data you provide for the purpose of sending you the corresponding newsletter. The legal basis is your consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. The easiest way to cancel your subscription is to click on the link provided in each newsletter e-mail.
VIII. Recipients of personal data
We will only pass on your personal data to external third parties if this is necessary for the processing or handling of your request, if we have another legal permission or if we have your consent to do so. External recipients may in particular be service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance of our website. Such contractors are carefully selected and regularly checked by us. You may only use the data for the purposes specified by us and in accordance with our instructions.
If data is transferred to entities whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure that the recipient either has an adequate level of data protection or your consent to the transfer of data prior to the transfer, except in exceptional cases permitted by law.
IX. Storing time
We store your personal data only as long as this is necessary for the fulfillment of the purposes or – in the case of a consent – as long as you do not revoke the consent. In the event of an objection, we will delete your personal data unless further processing is permitted by the relevant statutory provisions or is even mandatory (e.g. within the framework of commercial and tax storage obligations). We delete your personal data even if we are obliged to do so for legal reasons.
X. Rights as data subject
As a person affected by the data processing, you have numerous rights at your disposal. In particular, these are:
You are only entitled to the rights described above on condition that the legal requirements applicable in this respect are fulfilled, even if this is not expressly mentioned in the above description.
If you have any questions regarding the processing of your personal data, your rights as a person concerned or any consent you may contact us free of charge. To exercise all your aforementioned rights, please contact firstname.lastname@example.org or write to the address indicated in Section I above. Please ensure that we can uniquely identify you. You can also contact our data protection officer, also under the contact details mentioned in Section I.
Last updated: 25.05.2018