Data protection declaration of
Museum 4 You GmbH
Schönstraße 10
81543 Munich
Phone +49 (0)89 630 205 100
E-Mail: info@museum4you.de
Contact details of the data protection officer
E-Mail: dsb@museum4you.de
Phone +49 (0)89 630 205 100
Thank you for your interest in our company. Data protection has a very special significance for the management of Museum 4 You GmbH. In principle, our Internet pages can be used without providing personal data. If a data subject wishes to make use of certain offers from our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary for us and there is no legal basis for this processing, we will obtain the consent of the data subject.
The processing of personal data, such as a person's first and last name, home address, e-mail address or telephone number, is always carried out in accordance with the European General Data Potection Regulation and the German BDSG. With this data protection declaration, our company would like to inform about the type, purpose and scope of the personal data collected, used and processed by us. We also inform affected persons in this data protection declaration about their rights.
This privacy policy applies only to customers and users of our online services. This privacy policy does not apply if you apply for a job with us.
Explanation of terms
Personal information
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.
Controller
The person responsible is the person who processes, collects or transmits the data of the data subject.
Technical aspects (server log files)
Our web space provider collects data about every access to the offer (so-called server log files). These include: Name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (this is the previously visited page), IP address and the requesting provider. We use the log data only for statistical evaluations for the purpose of operation, security and optimisation of the offer. We reserve the right to check the log data subsequently if there is a justified suspicion of illegal use based on concrete evidence.
Handling of personal data
Who receives your personal data?
Within our company, those areas receive access to the personal data provided by you, which are necessary for the fulfilment of contractual and legal obligations and which are entitled to process this data.
In fulfilment of the contract concluded with you, we receive, for example, shipping service providers, payment service providers, credit card companies and the like. Your data will also be passed on to the authorities that require it for legal reasons, e.g. tax authorities, social insurance carriers, competent authorities and courts.
Within the scope of our services, we commission contractors who contribute to the fulfilment of contractual obligations, e.g. computer centre service providers, EDP partners, document shredders etc. These contractors are contractually bound by us to comply with the requirements of the GDPR and the BDSG.
Will the data you provide be transferred to third countries or international organisations?
Under no circumstances will the data you provide be transferred to a third country or an international organisation. Should you wish to transfer the data you have provided to a third country or an international organisation in individual cases, we will only do so with your written consent.
Duration of processing (criteria for deletion)
The data provided by you will be processed for as long as it is necessary to achieve the contractually agreed purpose, in principle as long as the contractual relationship with you exists. After termination of the contractual relationship, the data provided by you will be processed to comply with legal storage obligations or on the basis of our legitimate interests. After expiry of the legal retention periods and/or the loss of our legitimate interests, the data provided by you will be deleted.
Expected periods of the storage obligations applicable to us and our legitimate interests:
- Fulfilment of commercial and tax storage obligations. The periods for storage and documentation specified there range from two to ten years.
- Preservation of evidence under the statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.
Cookie usage
A cookie is a small file that is stored on your computer or mobile device and retrieved by it at later accesses. We use cookies to optimize your visit to our pages. We never use cookies to store or pass on personal information to third parties.
There are two types of cookies: temporary (session cookies) and permanent cookies. Persistent cookies are stored on your computer or mobile device for up to twelve months. Session cookies are only temporarily stored and are automatically deleted when you close your browser session. We use persistent cookies, for example, to save your selection of the start page and your data if you selected the "Save data" option when logging in. We use session cookies to check whether you are logged in or whether you have placed an item in your shopping cart when using the product filter.
If you wish, you can easily remove cookies from your computer or mobile device using your browser settings. The Help menu of your browser will tell you how to delete cookies. However, you can also deactivate cookies or be notified whenever a new cookie is sent to your computer or mobile device. However, as cookies are sometimes necessary today for the use of Internet pages, we would like to point out that you may not be able to use all the functions of our site if you refuse cookies.
Third-party cookies
We do not use third party cookies for marketing purposes or analytics tools such as Google Analytics.
Contact form integration
When contacting us via contact form or e-mail, the user's details for processing the request and in the event that follow-up questions arise are stored.
Existence of automated decision making
As a responsible company, we do without automatic decision-making or profiling.
Information about your rights
- Right to rectification according to Art. 16 GDPR:
You have the right to request the person responsible to correct your incorrect personal data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
- Right to erasure ("right to be forgotten") according to Art. 17 GDPR:
You have the right to demand that the person responsible delete your data immediately. The person responsible is obliged to delete personal data immediately if one of the following reasons applies:
a) purposes for which the personal data was collected no longer apply
b) You revoke your consent to the processing. There is no other legal basis for the processing.
c) you object to the processing. There is no other legal basis for the processing.
d) The personal data have been processed unlawfully.
e) The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
f) the personal data have been collected in relation to information society services provided in accordance with Article 8(1).
- Right to restrict processing in accordance with Art. 18 GDPR &. § 35 BDSG:
You have the right to request a limitation of the processing if one of the following conditions is met:
a) You doubt the accuracy of the personal data.
b) the processing is unlawful, but you refuse to delete it.
c) Personal data is no longer required for the purposes of processing; however, you will need the data to assert, exercise or defend legal claims.
d) You have filed an objection against the processing pursuant to Art. 21 para. 1 GDPR. As long as it has not yet been determined whether the legitimate reasons of the responsible person outweigh you, the processing will be restricted.
- Right to data portability in accordance with Art. 20 GDPR:
You have the right to receive the data provided by you in a structured, common and machine-readable format from the person responsible. A forwarding to another responsible person may not be hindered by us.
- Right to object according to Art. 21 GDPR:
To do this, please contact the person responsible for processing (see above).
- Right of appeal to the supervisory authority pursuant to Art. 13 para. 2 lit. d, 77 GDPR i. V. m § 19 BDSG:
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the regulatory authority. For this purpose, please contact the responsible supervisory authority.
- Withdrawal of consent pursuant to Art. 7 para. 3 GDPR:
If the processing is based on your consent in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a (processing of special categories of personal data), you are entitled to withdraw the appropriately bound consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
For further information, please contact
Your trust is important to us. Therefore, we would like to be available to answer your questions regarding the dissemination of your personal data at any time. If you have any questions that this data protection declaration could not answer, or if you would like more detailed information on any point, please contact info@museum4you.de.
Our business is constantly changing. This Privacy Policy and our Terms of Use will also change. We reserve the right to send you information about our guidelines within certain periods of time. Nevertheless, you should visit our website regularly and take note of any changes. Unless otherwise agreed, the use of all information we have about you and your customer accounts is subject to this Privacy Policy. We assure you that we will only make significant changes to our data protection declaration, which will lead to a weaker protection of customer data already received, with the consent of the customers concerned.
Data protection declaration of
Museum 4 You GmbH
Stand: Mai 2018