General

Deutsche Börse Photography Foundation gGmbH is aware of the importance of personal data. As with all our business processes, the protection of your privacy when processing personal data is an important concern to which we pay special attention. Personal data is collected, processed and used in accordance with the national data protection regulations of the country in which the responsible company (data controller) is located. As of 25 May 2018, this will be done in accordance with the guidelines of the new European General Data Protection Regulation (“DS-GVO” for short).

However, please note that the website of Deutsche Börse Photography Foundation gGmbH may include links to other third-party websites, which are not covered by this privacy policy.

With this privacy notice (hereinafter the "Notice"), the Deutsche Börse Photography Foundation gGmbH (hereinafter "We" or "Us") informs you how we process your personal data. Your personal data means any information relating to you (hereinafter the "Personal Data"), such as name or contact details. We pay special attention on the processing of Personal Data in accordance with the General Data Protection Regulation EU 2016/679 ("GDPR") and applicable national data protection laws.

1. Controller
1.1. Our identity and contact details
We are:

Deutsche Börse Photography Foundation gGmbH
Börsenplatz 4
60313 Frankfurt/Main

Telefon: +49 (0)69 211 1 40 60
Fax: +49 (0)69 211 1 40 02
foundation@deutsche-boerse.com

1.2. Contact details regarding data protection

Deutsche Börse Photography Foundation gGmbH
Börsenplatz 4
60313 Frankfurt/Main

Telefon: +49 (0)69 211 1 40 60
Fax: +49 (0)69 211 1 40 02
foundation@deutsche-boerse.com

 

2. Purpose, Categories of Personal Data, Legal Basis and Retention

2.1. Categories of your Personal Data and purposes of Our processing
We process the following categories of your Personal Data for the following purposes:

2.1.1. name, address, telephone number or e-mail address if you wish to make direct contact with us, register for a newsletter or a closed user group or a guided tour/event. Which data is collected in the various entry masks depends on the individual entry fields. Mandatory information fields will be marked accordingly. All other information shall be voluntary. This data is used by our invitation tool "kajomi".

2.1.2. name and e-mail address to register for one of our events (guided tours, openings, talks, etc.). This information is necessary to participate in our events. Mandatory information fields will be marked accordingly. All other information shall be voluntary. This data is used by our invitation tool "kajomi".

2.1.3 When you visit our website, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our website. This data record consists of:

- the name and address of the requested content,

- the date and time of the request,

- the amount of data transferred,

- the access status (content transferred, content not found),

- the description of the web browser and operating system used,

- the referral link, which indicates the page from which you came to ours,

- the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.

The aforementioned protocol data is only evaluated anonymously.

2.1.3.1 We use Matomo (formerly Piwik) for web analysis, a service of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo") using cookie technology. The protection of your data is important to us, which is why we have additionally configured Matomo in such a way that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw any conclusions about your person. Further information on the Matomo terms of use and data protection regulations can be found at: https://matomo.org/privacy/.

2.1.4 On our website we embed videos via vimeo, which are not stored on our servers. Calling up our pages with embedded videos leads to the content of the third-party provider who provides the videos being reloaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context.

We have no influence on the further data processing by the third-party provider. The embedding is based on Art. 6 para. 1 lit. f DSGVO and in the interest of making our site as appealing and informative as possible.

2.2. Legal basis for Our processing of your Personal Data
Our processing of your Personal Data is allowed by law. The legal basis is:

2.2.1 As to the processing of your Personal Data under Section 2.1.1.: The legal basis for processing of Personal Data for personalized services is Art. 6 para. 1 lit. (a) of the GDPR permitting the processing of your Personal Data for the purposes of providing our personalized services to you.

2.2.2. As to the processing of your Personal Data under Section 2.1.2.: The legal basis for processing of Personal Data for personalized services is Art. 6 para. 1 lit. (b) of the GDPR permitting the processing, which is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2.3. Do you have to provide your Personal Data to us?
The provision of your Personal Data is necessary to make direct contact with us, or to receive a newsletter. This means that you are obliged to provide your Personal Data to Us as part of a user registration process when making use of these options. The consequences if you do not provide your Personal Data to Us are that the respective service offered may no longer be available.

2.4. Do We make automated decisions on you?
We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

2.5. Retention periods
The period for which your Personal Data will be stored by us is shown in the table below:
Personal Data Retention Period: Name, address, telephone number or e-mail address as long necessary to carry out our relationship with you.

Shortened IP address: The shortened IP address will then be deleted without delay as soon as it is no longer required.

3. Transfer of Personal Data to Third Parties
We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

We may transfer your Personal Data to public authorities where this is required by the applicable law. A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers as well as in our newsletter/invite tool. We will only share your Personal Data with cooperation partners for the distribution of our invitations (postal and digital) under the condition that you explicitly and voluntarily agreed to such a transfer of your Personal Data.

4. Your Rights
With the applicable data protection laws, you have the rights
• of access to, rectification of, and/or erasure of your Personal Data;
• to restrict or object to its processing;
• to tell Us that you do not wish to receive marketing information; and
• (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting us at the details set out at the beginning of this Notice.

To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal. To exercise your rights, you can contact us as set out in Section 1.1. above.

You can also lodge a complaint about our processing of your Personal Data with a data protection authority.

The Deutsche Börse Photography Foundation gGmbH uses appropriate technical and organizational security measures in order to protect the data we have under our control against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are continually enhanced as new technology becomes available.

We use cookies on our website. Cookies are small text files that are stored on your terminal device and can be read. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

On our website, we use cookies that are necessary for the operation of our website. These cookies only contain information about certain settings and are not personal. They may also be necessary to facilitate the user experience and to ensure the security of the site. We use these cookies on the basis of Art. 6 (1) lit. f DSGVO in the legitimate interest of ensuring the functionality of our website. In addition, we use cookies to analyse user behaviour; you can agree or object to these cookies at any time.

Cookie settings