Data PROTECTION AGREEMENT
1. Subscription to our newsletter
With our newsletter we regularly inform you about our activities, e.g. about exhibitions in our gallery or exhibitions of the artists of the gallery, fair participations, etc. This newsletter can only be received if the respective person has subscribed to the newsletter and has a valid email address.
You can subscribe to our newsletter on our website. The name and email address of the person who wishes to subscribe to the newsletter will be sent to us via the input mask. Personal data which we receive within the scope of subscribing to the newsletter will only be used by us for sending the newsletter or changing the newsletter offer. We use MailChimp to send our newsletter. Personal data within the scope of newsletter registration is therefore sent to
MailChimp, The Rocket Science Group, LLC
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is prohibited from using this data for purposes other than sending the newsletter and evaluating it. MailChimp is not permitted to pass on or sell this data. MailChimp is certified under the EU/Switzerland US Privacy Shield and has been carefully selected according to the requirements of the DSGVO and the BDSG. No other personal data will be passed on to third parties. This is also ensured within the scope of an order processing contract with MailChimp. The subscription of the newsletter can be cancelled at any time. Consent to the storage of personal data given to us by the respective person for the dispatch of the newsletter can also be revoked at any time. Each newsletter contains a link to this effect.
2. Newsletter Tracking
Our newsletter contains tracking pixels. This is a miniature graphic embedded in the email that is sent in HTML format to record a log file and allow its analysis. This serves the statistical evaluation of the success of the newsletter dispatch, because we can recognize thereby whether and when an email was opened by the receiver and which links were clicked. By subscribing to our newsletter we agree to the measurement of success. The success of the newsletter is stored by MailChimp in the context of the dispatch of the newsletter and under the conditions of the order processing contract, evaluated in order to optimize the dispatch of the newsletter, and made available to us. A passing on or a sales of these data is not permitted MailChimp. The personal data will not be passed on to third parties. The declaration of consent of the respective person for the processing of personal data can be revoked at any time. A deregistration from the dispatch of the newsletter is interpreted by us as a revocation.
3. Contact via our website
Due to legal regulations, our website contains information that enables us to contact you quickly and electronically. If an email is sent to us or contact is established with us via a contact form, the personal data transmitted by the respective person is automatically stored. These voluntarily transmitted personal data will be stored for the purpose of processing or contacting the respective person. We do not pass this personal data on to third parties.
4. Rights of data subjects
Every data subject shall have the right
- to obtain confirmation from us as to whether we process personal data relating to the data subject;
- to request information about the personal data processed by us and the following information in accordance with Art. 15 DSGVO:
- Information on the purposes of the processing,
- the category of personal data to be processed,
- the categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organisations,
- if possible, the planned duration of storage or, if this is not possible, the criteria for determining the duration,
- the existence of a right of rectification, erasure, limitation or opposition to such processing,
- the existence of a right of appeal to a supervisory authority,
- the origin of the data, if these were not raised with us,
- on the existence of automated decision making, including profiling and, where appropriate, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject,
- and the data have been transferred to a third country or to an international organisation and information on appropriate safeguards in connection with the transfer.
- to demand the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 DSGVO;
- to demand the immediate deletion of the personal data stored by us in accordance with Art. 17 DSGVO,
- when the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- where the data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing,
- if the data subject objects to the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing or if the data subject objects pursuant to Art. 21 para. 2 DSGVO,
- if the personal data are processed unlawfully,
- if the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject, or
- if the personal data have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO,
unless the processing of personal information is necessary pursuant to Art. 17 (3) DSGVO to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. If we are obliged to delete the personal data and have made the personal data public, we shall take appropriate measures, including technical measures, to inform those responsible for data processing who process the personal data that an affected person has requested us to delete all links to this personal data or copies or replications of this personal data, taking into account the available technology and implementation costs.
- to request the restriction of the processing of personal data in accordance with Art. 18 DSGVO,
- if the accuracy of the personal data is contested by the person concerned, for a period of time which enables us to verify the accuracy of the personal data,
- if the processing is unlawful and the data subject refuses to erase the personal data and instead requests the restriction of the use of the personal data
- if we no longer need the personal data for the purposes of processing, but the data subject needs it to assert, exercise or defend a legal claim, or,
- if the data subject has lodged an objection against the processing pursuant to Art. 21 (1) DSGVO, as long as it has not yet been established whether justified reasons on our part outweigh those of the data subject.
Where processing is limited, personal data, other than those stored, may not be processed without the consent of the data subject or for the purpose of the institution, exercise or defence of legal rights or of protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
- In accordance with Art. 20 DSGVO, the data subject may obtain the personal data relating to him which he has provided to us in a structured, customary and machine-readable format and he has the right to forward this data to another responsible person without any hindrance on our part, provided that the processing is based on his consent in accordance with Art. 6 Para. 1 lit. a. DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b. DSGVO. DSGVO and processing is carried out using automated procedures. This does not apply to processing that is necessary for the performance of a task that is in the public interest or in the exercise of official authority assigned to us. When exercising the right to data transferability, the person concerned has the right to obtain that the personal data be transferred directly by us to another responsible person, insofar as this is technically possible.
- In accordance with Art. 21 DSGVO, we have the right to object at any time to the processing of personal data relating to him or her on the basis of Art. 6 para. 1 lit. e or f DSGVO for reasons arising from his or her particular situation. This also applies to profiling based on the provisions of the DSGVO. We no longer process the personal data, unless we can prove compelling reasons for the processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defence of legal claims. Where personal data are processed for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him for the purpose of such advertising; this shall also apply to profiling insofar as it is connected with such direct marketing. In the event of an objection, the personal data will no longer be processed by us for direct marketing purposes. The data subject has the right to object to the processing of his/her personal data for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 DSGVO for reasons arising from his/her particular situation, unless such processing is necessary for the performance of a task in the public interest. The data subject may exercise his/her right to object by means of automated procedures using technical specifications.
- Pursuant to Art. 22 DSGVO, the data subject may not be subjected to a decision based exclusively on automated processing - including profiling - which has legal effect on him or her or significantly impairs him or her in a similar manner. This shall not apply if the decision is necessary for the conclusion or performance of a contract between the data subject and us, is permissible by law of the Union or Member States to which we are subject, and such law contains appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, or is taken with the express consent of the data subject. Where a decision is taken to conclude or perform a contract, or with the express consent of the data subject, we shall take reasonable steps to safeguard the rights, freedoms and legitimate interests of the data subject, including, as a minimum, the right to obtain intervention from us, to state our point of view and to challenge the decision.
- to revoke at any time the consent to the processing of personal data given once in accordance with Art. 7 para. 3 DSGVO.
- to complain to a supervisory authority pursuant to Art. 77 DSGVO.
Please contact us with any questions you may have regarding the rights to which you are entitled or the exercise of the above rights.