DATA PROTECTION DECLARATION

Thank you for your interest in our website and our services. The protection of your personal data is very important to us. For this reason, we process your data exclusively on the basis of legal regulations (GDPR - General Data Protection Regulations, TKG - German Telecommunications Act 2003). In this data protection declaration, we inform you about the most important aspects of the processing of personal data in connection with the use of our website www.denkmalstiftung.de, the related sub-pages and related social media sites.

1. Name and contact data of the responsible data processing entity 

This data protection declaration to data processing by:

Responsible data processing entity:
Stiftung Denkmalpflege Hamburg
Dragonerstall 13
20355 Hamburg

Phone: +49 40-344293
Fax: +49 40-354286

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting our website

When you visit our website www.denkmalstiftung.de and its associated sub-pages, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. In particular, the following information is collected without requiring your intervention and stored until it is automatically deleted:

• The IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• The website from which access is made (referrer URL),
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The above-mentioned data is processed by us for the following purposes: 

• Ensuring smooth connection to the website,
• Ensuring convenient use of our website,
• Evaluation of system security and stability
• For further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest arises from the data collection purposes listed above. In no case do we use the collected data for the purpose of making inferences about your person.

In addition, we use cookies and analytics services when you visit our website. Further details can be found under Section 4 and 5 of this data protection declaration.

b) When contacting us via our website

Due to legal regulations, our website contains information that enables quick electronic contact with us and our contact persons, which also includes a general so-called electronic mail address (email address). If you contact us by email or via a contact form, the personal data you provide will be automatically saved. This personal data which is submitted on a voluntary basis will be stored for processing purposes or for the purpose of contacting you.

c) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary that you provide us with a valid email address and your name so that we know who the request came from and are able to answer this request. Further information can be voluntarily provided.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR based on your voluntarily granted consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request made by you.

d) When registering for our newsletter

If you have expressly provided your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, we shall use your email address to send you our newsletter on a regular basis. To receive our newsletter, providing us with your email address is sufficient.
Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your request to cancel your subscription at any time by email to:

e) For job applications and during the job application procedure

We collect and process the personal data of applicants for the purpose of processing applications. This processing can also be done electronically. This is particularly the case when an applicant has sent corresponding application documents to us by electronic means, e.g. via email. If we conclude a contract of employment with an applicant, the data transmitted will be stored for the purpose of the employment in compliance with the legal requirements. If we do not conclude a contract of employment with the applicant, the application documents will be automatically deleted after notification of the decision not to employ the applicant, provided that deletion does not conflict with any other legitimate interests on our part. Another legitimate interest in this sense is, for example, the preservation of the possibility of evidence in a possible legal dispute under the General Equal Treatment Act (Allgemeinen Gleichbehandlungsgesetz).

3. Distribution of data

Distribution of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal information with third parties if: 

• You provide your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR to this purpose
• Distribution of your data pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
• In the event that the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR is a legal obligation, and
• This distribution of data is legally permissible and pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR is required for the settlement of contractual relationships with you.

4. Cookies

We use cookies on our site. These are text files that your browser automatically creates and are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software.

Information is stored in the cookie that arise in association with the specific device used. However, this does not mean that we are directly informed of your identity.

On the one hand, the use of cookies serves to make the use of our services more appealing to you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our website.

In addition, we also deploy temporary cookies that are stored on your device for a specified period of time to improve usability. If you visit our site again to make use of our services, it is automatically recognized that you have already visited us and what inputs and settings you have made, so you do not have to enter this data again.

On the other hand, we use cookies in order to gather statistical information about the use of our website and to evaluate it for the purpose of optimizing our services (see Section 5). These cookies allow us to automatically recognize that you have already visited us when you come to our website again. These cookies are automatically deleted after a defined time period.

The data processed by cookies for the purposes mentioned are required in order to safeguard our legitimate interests as well as those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or that your browser always provides a notification before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website.

5. Analytics and tracking tools

The tracking measures used by us and listed below are pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. We wish to ensure the needs-based design and the continuous optimization of our website with the tracking tools which we deploy. On the other hand, we use the tracking tools to statistically record the use of our website and evaluate it for the purpose of optimizing our services to you. These interests are to be regarded as justified in the sense of the aforementioned regulations.

The respective data processing purposes and data categories can be found from the corresponding tracking tools.

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter referred to as Google) for the purpose of designing and continually optimizing our pages.

In this context, pseudonymized usage profiles are created and cookies (see Section 4) are used. The information generated by the cookie is about your use of this website, and include: 

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

which are sent to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and tailor-made website design. This information may also be transferred to third parties if required by law or if third parties are contracted to process this data. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by using your browser software settings accordingly; however, we wish to point out that in this case not all features of this website may be fully used.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google at the following link by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent detection by Google Analytics by clicking on the following link: Deactivate Google Analytics.

An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must activate the opt-out cookie again.

For more information about privacy related to Google Analytics, see the Google Analytics Help Center.

6. Social Media Plug-ins

On the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, we deploy social plug-ins in social networks on our website to make our company better known. The underlying commercial purpose is to be regarded as a legitimate interest within the sense of the GDPR. Responsibility for the data protection compliant operation is to be guaranteed by the respective service providers. The integration of these plug-ins by us takes place by means of the so-called two-click method, in order to protect visitors of our website in the best possible way.

a) Google Maps

In order to display a site map, we use Google Maps on our website.
This is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter Google). By using our website, you consent to the collection, processing and use by Google, one of its agents, or third parties of the data collected and entered by you.

For more information, please refer to the Terms of Service of Google Maps

b) YouTube

On our site we have integrated videos from YouTube operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereafter YouTube) - a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

When you visit a page on our website that contains a YouTube video, your browser connects directly to YouTube’s servers and is prompted to stream a video from YouTube.
The content of the video is transmitted by YouTube directly to your browser and integrated into the site. Through this integration, YouTube receives the information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube profile or are currently not logged in to YouTube.

This information (including your IP address) will be transmitted from your browser directly to a YouTube server and stored there. If you are logged in to YouTube, YouTube can immediately associate your visit to our website with your YouTube account.

If you do not want YouTube to directly associate the data collected through our website with your YouTube account, you must log out of YouTube prior to visiting our website.

For more information, please refer to YouTube’s Data Protection Declaration.

7. Rights of affected persons

You have the right: 

• Pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or objection, the existence of the right to complain, the origin of your data if not collected by us, and the existence of automated decision-making including profiling and, where appropriate, meaningful detailed information about this;
• Pursuant to Art. 16 GDPR, to immediately demand the correction of incorrect or complete personal data stored by us;
• Pursuant to Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is required for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• To demand the restriction of the processing of your personal data pursuant to Art. 18 GDPR, in the case that the accuracy of the data is disputed by you, the processing is unlawful, yet you reject its deletion and we no longer need the data, but you require this for the assertion, exercise or defense of legal claims or you have objected to the processing of your data pursuant to Art. 21 GDPR;
• Pursuant to Art. 20 GDPR, to receive your personal data provided to us in a structured, commonplace and machine-readable format or to request transmission to another responsible body;
• Pursuant to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent in the future and
• To complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

8. Right of objection

If your personal data are processed based on legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mailing. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation.

If you would like to exercise your right of revocation or objection, please send an email to:

9. Data security

We use the widespread SSL (Secure Socket Layer) process when you visit our website, in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can identify whether an individual page of our website is encrypted as shown by the locked status of the key or lock icon in the lower status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously being improved in line with technological developments. 

10. Actuality and changes to this data protection declaration

This data protection declaration is currently valid and is valid as of May 2018.
As a result of the further development of our website and services thereof or due to changes in legal or official requirements, it may be necessary to change this data protection declaration. The current data protection declaration can be accessed and printed by you at any time from the website at www.denkmalstiftung.de/data-protection.

1. Bezeichnung der Verarbeitungstätigkeit

Datenschutzhinweise im Zusammenhang mit dem Tag des offenen Denkmals^® in Hamburg.

Wenn Sie die erforderlichen Daten nicht angeben, können Sie/Ihre Institution nicht in das Hamburger Programm zum Tag des offenen Denkmals^® aufgenommen werden.

2. Name und Kontaktdaten des Verantwortlichen

Verantwortlich für die Datenerhebung ist die Stiftung Denkmalpflege Hamburg, Dragonerstall 13, 20355 Hamburg, E-Mail: infodenkmalstiftung.de, Tel. 040 – 34 42 93 und das Denkmalschutzamt der Behörde für Kultur und Medien, Große Bleichen 30, 20354 Hamburg, E-Mail: denkmalschutzamtbkm.hamburg.de Tel. 040 428 24-718

3. Kontaktdaten des Datenschutzbeauftragten

Dienstliche Anschrift der/des Datenschutzbeauftragten:

Behörde für Kultur und Medien

Rechtsabteilung

Große Bleichen 30

20354 Hamburg

4. Zwecke und Rechtsgrundlagen der Verarbeitung

4 a Zwecke der Verarbeitung:

Ihre Daten werden dafür erhoben, um

- das Programm für den jeweiligen Tag des offenen Denkmals^® in Hamburg zu erstellen

- um in den Folgejahren zur Informationsveranstaltung bzw. Teilnahme einzuladen

- Presse- und Öffentlichkeitsarbeit zu betreiben (Stiftung Denkmalpflege Hamburg, Denkmalschutzamt)

- zum Empfang einladen zu können (sofern gewünscht)

4 b Rechtsgrundlagen der Verarbeitung:

Ihre Daten werden auf Grundlage von Art. 6 Abs. 1 DS-GVO verarbeitet.

5. Empfänger oder Kategorien von Empfängern der personenbezogenen Daten

Ihre personenbezogenen Daten werden weitergegeben an:

• Auftragsverarbeiter: Mitarbeiter Stiftung Denkmalpflege, Denkmalschutzamt

• Dritte:

  • zur Verteilung des Programmheftes (sofern gewünscht)

  • Medien für die Öffentlichkeitsarbeit zum TdoD

  • DSD als Koordinatorin des bundesweiten Denkmaltags

  • Homepage (Liste Verantwortliche Veranstalter)

6. Dauer der Speicherung der personenbezogenen Daten

Ihre Daten werden nach der Erhebung bei der Stiftung Denkmalpflege Hamburg und dem Denkmalschutzamt der Behörde für Kultur und Medien Hamburg so lange gespeichert, wie dies unter Beachtung der gesetzlichen Aufbewahrungsfristen gemäß den Verwaltungsvorschriften der Freien und Hansestadt Hamburg für die jeweilige Aufgabenerfüllung der Durchführung von Denkmaltagen (insb. für Rückfragen zu kurzfristigen Programmänderungen) erforderlich ist.

7. Betroffenenrechte

Nach der Datenschutz-Grundverordnung stehen Ihnen folgende Rechte zu:

Werden Ihre personenbezogenen Daten verarbeitet, so haben Sie das Recht Auskunft über die zu Ihrer Person gespeicherten Daten zu erhalten (Art. 15 DS-GVO).

Sollten unrichtige personenbezogene Daten verarbeitet werden, steht Ihnen ein Recht auf Berichtigung zu (Art. 16 DS-GVO).

Liegen die gesetzlichen Voraussetzungen vor, so können Sie die Löschung oder Einschränkung der Verarbeitung verlangen sowie Widerspruch gegen die Verarbeitung einlegen (Art. 17, 18 und 21 DS-GVO).

Wenn Sie in die Datenverarbeitung eingewilligt haben oder ein Vertrag zur Datenverarbeitung besteht und die Datenverarbeitung mithilfe automatisierter Verfahren durchgeführt wird, steht Ihnen gegebenenfalls ein Recht auf Datenübertragbarkeit zu (Art. 20 DS-GVO).

Sollten Sie von Ihren oben genannten Rechten Gebrauch machen, wird geprüft, ob die gesetzlichen Voraussetzungen hierfür erfüllt sind.

Weiterhin besteht ein Beschwerderecht beim Hamburgischen Beauftragten für Datenschutz und Informationsfreiheit.

8. Widerrufsrecht bei Einwilligung

Wenn Sie in die Verarbeitung durch die Stiftung Denkmalpflege Hamburg und das Denkmalschutzamt der Behörde für Kultur und Medien Hamburg durch eine entsprechende Erklärung eingewilligt haben, können Sie die Einwilligung jederzeit für die Zukunft widerrufen.

Die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Datenverarbeitung wird durch diesen nicht berührt..