Privacy Policy

1. Controller

Information on the Controller

The controller responsible for data processing on this website is:

GLEIMHAUS – Museum der deutschen Aufklärung in Trägerschaft des Förderkreises Gleimhaus e.V.
Domplatz 31
38820 Halberstadt

03941 / 6871-0
gleimhaus@halberstadt.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar information).

2. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data comprises any data that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on Our Website

Some of your data is collected when you provide it to us. This may, for example, include data that you enter into a contact form.

Other data is collected automatically by our IT systems, or after you have given your consent, when you visit the website. This primarily includes technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you access this website.

What Do We Use Your Data For?

Some data is collected to ensure that the website is provided and functions correctly. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated via the website, the data provided may also be processed for contractual offers, orders or other enquiries relating to services.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be statistically analysed. This is primarily carried out using analytics software.

3. Hosting and Content Delivery Networks (CDN)

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website access data and other data generated through the use of a website.

External hosting is used for the purpose of fulfilling contractual obligations towards our prospective and existing customers (Art. 6 Abs. 1 lit. b DSGVO) and in our legitimate interest in providing our online services securely, quickly and efficiently through a professional provider (Art. 6 Abs. 1 lit. f DSGVO). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG, insofar as such consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfil their contractual obligations and will follow our instructions with regard to such data.

To ensure data protection-compliant processing, we have concluded a data processing agreement with this service provider.

3. Cookies and Consent Management

This website uses cookies and comparable technologies. Cookies that are not technically necessary – in particular those used for externally embedded fonts – are only set after you have given your consent.

You may withdraw or modify your consent at any time with effect for the future. To do so, please use the cookie settings at the bottom of this page.

4. Server Log Files

When you access this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

This data is not combined with data from other sources.

The collection of this data is based on Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website – for this purpose, server log files must be collected.

5. Enquiries by Email

If you contact us by email, the data you provide (e.g. your name, email address and the content of your message) will be processed for the purpose of handling your enquiry. Processing is carried out on the basis of Art. 6 Abs. 1 lit. b bzw. lit. f DSGVO.

6. External Services and Content

External services may be integrated into individual pages of this website, for example:

• Adobe Fonts (Typekit) — fonts (only after cookie consent has been given)
• OpenStreetMap / Leaflet — map display on the “Orte” page
• Instagram — link to our profile

When accessing such content, data may be transmitted to the respective providers.

7. Your Rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 DSGVO)
• Right to rectification (Art. 16 DSGVO)
• Right to erasure (Art. 17 DSGVO)
• Right to restriction of processing (Art. 18 DSGVO)
• Right to data portability (Art. 20 DSGVO)
• Right to object (Art. 21 DSGVO)
• Right to withdraw consent previously given (Art. 7 Abs. 3 DSGVO)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.