This privacy policy describes the processing of personal data when using the websites of the Richard Wagner Museum, Bayreuth. It also explains the choices you (the “data subject”) have about your personal information (“your rights”) and how you can contact us.
I. Who is responsible and how can I contact the data protection officer?
The person responsible within the meaning of the GDPR is
Richard Wagner Museum with National Archive and Research Centre of the Richard Wagner Foundation Bayreuth (hereinafter: Richard Wagner Museum)
Wahnfriedstraße 2
95444 Bayreuth
Germany
Phone: +49 921 75728-0
E-mail: info@wagnermuseum.de
Museum and Archives Director: Dr. Sven Friedrich
If you have any questions about the processing of your personal data by us or about data protection in general, please contact the data protection officer at the address given above or in the imprint or at the following e-mail address: datenschutz@wagnermuseum.de .
II. Your rights as a data subject
Each data subject shall have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure or “right to be forgotten” (Art. 17 GDPR)
- Right to restriction of processing of personal data (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR).
You can object to the processing of personal data for advertising purposes including an analysis of customer data for advertising purposes at any time without stating reasons. In addition, data subjects have a general right to object (cf. Art. 21 (1) GDPR). In this case, the objection against data processing must be justified. If the data processing is based on a consent, your consent can be revoked at any time with future effect.
In addition, you have the right to lodge a complaint with the data protection supervisory authority responsible for you. The easiest way to exercise your rights is to contact datenschutz@wagnermuseum.de .
III. Processing of personal data when accessing our website
In the following, we would like to give you an overview of how we ensure the protection of your personal data when accessing our website and which types of personal data we process for which purposes and to what extent.
1. processing of log file data when accessing our website
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. The IP address is also transmitted and used to provide the service you have requested. This information is technically necessary for the correct delivery of content requested by you from websites and is mandatory when using the Internet.
According to our IT security concept, the log file data is stored for a period of four weeks in order to recognize and analyze possible attacks against our website. The legal basis for data processing is Art. 6 (1)(f) GDPR.
We also use commissioned, carefully selected and controlled service providers (usually for website hosting). If these are located outside the European Union or the European Economic Area, we have agreed the standard contractual clauses of the EU Commission with these service providers in order to guarantee the adequacy of the level of data protection, unless the Commission has established the equivalence of the level of data protection in the recipient country by decision or the derogations of Art. 49 GDPR are applicable.
2. Data processing when using the website – your queries and requests
If you send us an enquiry by e-mail or via the contact form, we collect the data you provide in order to process and answer your request. We store your request for verification purposes for a period of up to two years. Depending on the nature of your request, the storage period could be longer; we will inform you about this in the respective processing protocol. Legal basis for data processing Art. 6 (1)(f) GDPR.
3. Notes on the guarantee of data security
We take technical and operational security precautions on our pages in order to protect the personal data stored with us against access by third parties, loss or misuse and to enable secure data transfer.
We must point out that due to the structure of the Internet, unwanted data access by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encryption or other means. Without appropriate protective measures, unencrypted data in particular can be read by third parties, even if this is done by e-mail.
4. Subscription to an e-mail newsletter
On the website you can subscribe to our newsletter and enter the data shown in the registration form. The e-mail address is the only mandatory information for receiving the newsletter.
To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that when you send us your e-mail address, we send you a confirmation e-mail to the e-mail address you have provided in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm this within 24 hours, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe. This storage serves the purpose of being able to send you the newsletter. In addition, we save your IP addresses and the dates of your registration when you register and confirm your subscription in order to prevent misuse of your personal data and to be able to provide proof of correct mailing. The legal basis for the processing of your personal data is provided by Art. 6 (1)(a) GDPR.
You have the right to revoke your consent to the sending of the newsletter at any time. Your revocation does not affect the lawfulness of the processing of your personal data until revoked. The easiest way to declare your revocation is by clicking on the link provided in every newsletter e-mail or by sending an e-mail to mail@wagnermuseum.de .
5. Payment via PayPal
In certain cases you can pay online via PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg). If you select this link, you will be redirected to the PayPal website, which processes your personal data independently to process the payment. PayPal is independently responsible for the processing, so to exercise your rights when using PayPal we ask you to contact PayPal directly. The data protection regulations and contact data for the exercise of your rights can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
IV. Integration of external service offers
Integration of a map via OpenStreetMap
On this website we use the integration of an interactive map offered on the basis of the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. This allows us to display interactive maps directly on our website, making it easy for you to find the locations we have listed on the website and to use the map function conveniently.
This application is retrieved directly from OpenStreetMap Foundation servers so that they receive the IP address and location data currently assigned to you. By visiting the website, the OpenStreetMap Foundation receives the information that you have accessed the corresponding subpage of our website. Whether and to what extent or over what period the IP address is stored by the OpenStreetMap Foundation and used internally is beyond our knowledge. However, it can be assumed that OpenStreetMap uses user data exclusively for the purpose of displaying map functions and temporarily storing the selected settings. The legal basis for the integration of this service is Art. 6 (1)(f) GDPR. Further information on data processing by the OpenStreetMap Foundation can be found at https://wiki.osmfoundation.org/wiki/Privacy_Policy.
V. Our Cookie Policy
1. General information on the use of cookies
Our website uses so-called cookies. Cookies are small text files that are stored on your computer and stored by your browser. They serve to make our offers more user-friendly, more effective and safer. We use so-called temporary cookies, which are automatically deleted when you close your browser (“session cookies”), as well as persistent (permanent) cookies.
You have the choice as to whether you want to allow the issuing of cookies or not. You can make changes in your browser settings. You can choose whether you want to accept all cookies, be informed when cookies are issued or reject all cookies. If you choose the last option, it is possible that you will not be able to use our online services in full.
When cookies are used, a distinction must be made between the mandatory cookies and those required for additional purposes (measuring access numbers, advertising purposes).
2. Mandatory cookies when using the website
We use session cookies on our website, which are absolutely essential in order to enable the use of our website pages. This includes cookies that enable us to recognize you while you are visiting the site during a single session. These session cookies contribute to the secure use of our services by enabling the secure processing of orders and payments.
3. Use of cookies with your consent
Below you will find an overview of the cookies that we use with your consent given at the start of your use of the website. You will also find an opt-out option with each explanation of the use of cookies. These may be cookies used to record usage behaviour of our website as well as cookies used for advertising purposes. This may also enable us to recognise users when they return to our website, and thus to assign usage processes to an internally assigned code number (pseudonym). This allows us to record repeated access to our website and analyse it in a coherent manner.
We are currently not using any cookies that require your consent.
4. Use of reach analysis without consent
The use of reach analysis tools enables us to obtain statistical evaluations of user behaviour on the website. Collected data is only stored locally by us and only processed anonymously. Of course, you may also object to this reach analysis.
Specifically, the following tracking cookies are used:
Usage analysis by Matomo
We use the web analysis service Matomo in order to analyse the use of our website and thus regularly improve the website and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 (1)(f) GDPR.
Cookies (as described in the Cookie Directive above) are stored on your computer for this purpose. The information collected in this way is stored exclusively on our server. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies in your browser. If you prevent the storage of cookies, we would like to point out that you may not be able to use this website to its full extent. It is possible to prevent the use of Matomo by removing the following check mark and thus activating the opt-out plug-in:
This website uses Matomo with the extension “AnonymizeIP”. This shortens the processing of IP addresses, thereby excluding direct personal references. The IP address transmitted by your browser via Matomo is not merged with other data collected by us. The Matomo programme is an open source project. Information about the third party provider regarding data protection can be found at https://matomo.org/privacy-policy/ .