General

Deutsche Börse Photography Foundation gGmbH appreciates the importance of personal data. As with all our business processes, the protection of your privacy when processing personal data is an important concern to which we pay special attention. Personal data are collected, processed and used in accordance with the national data protection regulations of the country in which the responsible company (data controller) is located. However, please note that the website of Deutsche Börse Photography Foundation gGmbH may include links to other third-party websites, which are not covered by this privacy policy.

Privacy Notice

Under this privacy notice (hereinafter the "Notice"), the Deutsche Börse Photography Foundation gGmbH (hereinafter "We" or "Us") informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the "Personal Data"), such as name or contact details. We pay special attention on the processing of Personal Data in accordance with the General Data Protection Regulation EU 2016/679 ("GDPR") and applicable national data protection laws.


1. Controller
1.1. Our identity and contact details
We are:

Deutsche Börse Photography Foundation gGmbH
Börsenplatz 4
60313 Frankfurt/Main

Telefon: +49 (0)69 211 1 40 60
Fax: +49 (0)69 211 1 40 02
foundation@deutsche-boerse.com


1.2. Contact details regarding data protection

Deutsche Börse Photography Foundation gGmbH
Börsenplatz 4
60313 Frankfurt/Main

Telefon: +49 (0)69 211 1 40 60
Fax: +49 (0)69 211 1 40 02
foundation@deutsche-boerse.com

 

2. Purpose, Categories of Personal Data, Legal Basis and Retention
2.1. Categories of your Personal Data and purposes of Our processing
We process the following categories of your Personal Data for the following purposes:


2.1.1. name, address, telephone number or e-mail address if you wish to make direct contact with us, register for a newsletter or a closed user group or a guided tour/event. Which data is collected in the various entry masks depends on the individual entry fields. Mandatory information fields will be marked accordingly. All other information shall be voluntary, and

2.1.2. name and e-mail address to register for one of our events (guided tours, openings, talks, etc.). This information is necessary to participate in our events. Mandatory information fields will be marked accordingly. All other information shall be voluntary, and


2.1.3. our web servers will only store the shortened address of your internet service provider (i.e. the shortened IP address), the name of the website from where you visit us, our websites that you retrieve, the used web browser type and the date and duration of your visit. Any relation to an individual person is not established due to the shortened IP address. The Deutsche Börse Photography Foundation gGmbHs Website doesn`t store cookies.


2.2. Legal basis for Our processing of your Personal Data
Our processing of your Personal Data is allowed by law. The legal basis is:

2.2.1 As to the processing of your Personal Data under Section 2.1.1.: The legal basis for processing of Personal Data for personalized services is Art. 6 para. 1 lit. (a) of the GDPR permitting the processing of your Personal Data for the purposes of providing our personalized services to you.

2.2.2. As to the processing of your Personal Data under Section 2.1.2.: The legal basis for processing of Personal Data for personalized services is Art. 6 para. 1 lit. (b) of the GDPR permitting the processing, which is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2.3. Do you have to provide your Personal Data to Us?
The provision of your Personal Data is necessary to make direct contact with us, or to receive a newsletter. This means that you are obliged to provide your Personal Data to Us as part of a user registration process when making use of these options. The consequences if you do not provide your Personal Data to Us are that the respective service offered may no longer be available.

2.4. Do We make automated decisions on you?
We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

2.5. Retention periods
The period for which your Personal Data will be stored by Us is shown in the table below:
Personal Data Retention Period: Name, address, telephone number or e-mail address As long necessary to carry out Our relationship with you.

Shortened IP address: The shortened IP address will then be deleted without delay as soon as it is no longer required.

3. Transfer of Personal Data to Third Parties
We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

We may transfer your Personal Data to public authorities where this is required by the applicable law. A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers. We will only share your Personal Data with cooperation partners for the distribution of our invitations under the condition that you explicitly and voluntarily agreed to such transfer of your Personal Data.

4. Your Rights
Under applicable data protection laws, you have rights
• of access to, rectification of, and/or erasure of your Personal Data;
• to restrict or object to its processing;
• to tell Us that you do not wish to receive marketing information; and
• (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.

To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal. To exercise your rights, you can contact Us as set out in Section 1.1. above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority.

Data security

The Deutsche Börse Photography Foundation gGmbH uses appropriate technical and organizational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are continually enhanced as new technology becomes available.