Bereichsnavigation
Data privacy
It is important to the Stiftung Preussischer Kulturbesitz to handle your personal data responsibly and to make its use transparent. For this reason, the following sections explain how we use your data:
- who is responsible for the website under data protection law
- the form in which personal data is processed, including a description of the respective purpose and the designation of the respective legal basis and
- what rights users of this website have
I. Who is responsible for the content and maintenance of the website and who takes care of data protection?
The Prussian Cultural Heritage Foundation is responsible for this website in terms of data protection.
Prussian Cultural Heritage Foundation
Von-der-Heydt-Strasse 16-18
10785 Berlin
Berlin, Germany
Phone: +49 (0)30 266 412884
E-Mail: datenschutz(at)hv.spk-berlin(dot)de
Website:
The Stiftung Preussischer Kulturbesitz has a data protection officer who can be contacted at the above postal address with the addition "Data Protection Officer" or by e-mail:
II. In what form is personal data processed?
1. provision of the website and creation of log files
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.
a. Data categories
The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.
b. Purpose of processing
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- To ensure a comfortable use of our website,
- Evaluation of system security and stability and for other administrative purposes.
The operation of the website serves the public relations work of the foundation.
c. Legal basis
The legal basis for data processing is the protection of legitimate interests in accordance with Art. 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG. The provision of the website is part of our public relations work.
d. Categories of recipients
The operator of our website, graphodata AG, has access to the above-mentioned data.
The Prussian Cultural Heritage Foundation has carefully selected the agency graphodata. graphodata AG is bound by the instructions of the Prussian Cultural Heritage Foundation and is regularly monitored.
e. Storage period
The anonymized IP addresses are stored for seven weeks.
Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.
Access via FTP is logged anonymously and stored for seven weeks.
2. cookies
Cookies are used on this website. These are small text packages that can be sent from a website to the browser, which stores them and sends them back.
a. Data categories
The Prussian Cultural Heritage Foundation stores the following information from the data transmitted when you visit this website:
- Browser type / version
- Operating system
- Referrer URL (the forwarding page)
- Date, time and duration of the server request
- Requested page/s and file/s
- Pseudonymized IP address
- Country of origin
- Frequency of visits to the website
b. Purpose of processing
The use of cookies is technically necessary in order to make the use of our website more pleasant for you. For example, we only use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site and are only stored locally on your end device. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
c. Legal basis
The cookies are processed in accordance with Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG.
d. Storage period
The cookies are deleted when the browser is closed.
3. contact, subscriptions
a. Purpose of processing
We process the personal data you provide to us by e-mail, via the press mailing list contact form, when ordering the SPK magazine or by other means (in the course of fast and cost-effective communication) to answer and process your inquiries and your order.
b. Legal bases
If you have given us your express consent to process your data, Art. 6 para. 1 lit. a GDPR is the legal basis for this processing.
If we process your data for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR is the legal basis.
In all other cases, Art. 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG is the legal basis. In such cases, data processing is necessary for public relations work.
c. Storage period
The personal data will be deleted as soon as it is clear that it is no longer needed for the purpose for which it was collected.
You can unsubscribe from the press mailing list using a form on the SPK website.
4. Newsletter
a. Data categories
The following data is collected during registration:
- E-mail address
- Date and time of registration and activation
b. Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes. To enable the Stiftung Preussischer Kulturbesitz to adapt the newsletter to the interests of the readers, the click behavior is logged anonymously. It is not possible for us to recognize which specific person has clicked.
c. Legal basis
The legal basis for this processing is consent pursuant to Art. 6 para. 1 lit. a GDPR. The registration takes place via "double opt-in". As part of the registration process, we have obtained your consent and referred you to our privacy policy. Of course, you can revoke your registration at any time for the future. To unsubscribe, click on the link at the end of the newsletter.
d. Categories of recipients
The Stiftung Preussischer Kulturbesitz uses the services of CleverReach GmbH & Co KG to send the newsletter. The Stiftung Preussischer Kulturbesitz has carefully selected CleverReach GmbH & Co KG. It is bound by the instructions of the Stiftung Preussischer Kulturbesitz and is regularly monitored. Your data is stored in encrypted form on servers in Germany and other EU countries.
e. Storage period
Your e-mail address will only be stored for the newsletter dispatch for the desired registration or until you revoke it.
To unsubscribe, click on the link at the end of the newsletter. Your data will then be deleted. Against this background, it should be noted that CleverReach, as a data processor, is obliged to ensure data security in accordance with the GDPR and must make regular backups for this purpose. These backups are deleted after 30 days.
5. social media
The Stiftung Preussischer Kulturbesitz is active on social networks in order to inform you as a user about the services and information offered by the Stiftung Preussischer Kulturbesitz. If you wish, you can communicate directly with the Stiftung Preussischer Kulturbesitz via the respective platform. The social media channels of the Stiftung Preussischer Kulturbesitz thus complement the Stiftung Preussischer Kulturbesitz's own web presence and, if you prefer these platforms, offer you an alternative means of communication.
As soon as you access the respective social media profile of the Stiftung Preussischer Kulturbesitz in the respective network, the terms and conditions and the data processing guidelines of the respective operators apply. The Stiftung Preussischer Kulturbesitz only processes the data of users on its social media presences if they contact and communicate with it, for example via comments or direct messages.
The following applies in these cases:
Purpose and legal basis
The legal basis for the processing of the data is Art. 6 para. 1 lit. e GDPR, § 3 BDSG. The processing of your personal data is necessary for the purpose of using the social media platform for the exchange with partner institutions and users of the Stiftung Preussischer Kulturbesitz.
Recipients of the personal data
The recipient of the personal data of the comment or direct message on the platforms is the respective social media provider.
Transfer to a third country
When using bluesky, X, Facebook, Instagram, LinkedIn, Vimeo and Google (YouTube), personal data is transferred to the United States of America . This transfer takes place on the basis of Art. 49 para. 1 sentence 1 lit. d GDPR, § 3 BDSG.
Storage duration
Comments that you post under contributions by the Stiftung Preussischer Kulturbesitz on social networks or that address the Stiftung Preussischer Kulturbesitz will be stored by the respective network until you delete them yourself.
The Stiftung Preussische Kulturbesitz has no influence on data processing by the third-party providers of social networks. The Stiftung Preussische Kulturbesitz is not responsible for the data processing of these companies based in the United States of America.
The following applies to the social media channels used by the Stiftung Preussische Kulturbesitz:
Facebook and Instagram
The Stiftung Preussische Kulturbesitz operates a Facebook and Instagram page, for which it is jointly responsible under data protection law together with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) in accordance with Art. 26 GDPR.
Current information, videos and images are posted on the pages and users can comment on them and add emojis. Facebook users can also post so-called visitor contributions on our page. The comments, emojis and posts are publicly visible and therefore it is also publicly recognizable by whom they were left. Users can also send us messages, but these are not publicly visible.
We have the possibility to retrieve certain statistical, anonymized data on user behaviour via the so-called Insights.
These are, for example, the total number of page views, "Like" information, page activities, post interactions, reach, video views, post reach.
Data on the Facebook groups linked to our Facebook page is also provided in this way. The Insights data is generated and provided by Facebook using cookies. We can only change the period for which we wish to view the analysis.
We can also define certain settings for the target group of our posts, which have a corresponding effect on the statistics. We cannot deactivate the Insights function.
Facebook uses the data in particular for advertising purposes (creation of personalized advertising), creation of user profiles and market research purposes. If the visitor to the site has a user account for the network and is logged in with it while accessing the site, the information provided by the cookies is stored across all devices. Facebook passes on data to Meta Platforms, Inc, the US parent company of Meta Platforms Ireland Limited, among others, without us being able to influence this.
Details on data processing by Facebook can be found here: www.facebook.com/policy.php
You can find Instagram's privacy policy at privacycenter.instagram.com/policy/;
We use the Insights data as well as the other visible data to optimize our offer on our pages and to interact with users. For example, we use the information on visiting times to optimize the timing of our posts. Information about the type of end devices used helps us to design our posts etc. in such a way that they are optimally displayed on all types of end devices. Based on the terms of use that each user agreed to when setting up their profile, we can identify subscribers and fans of the site and view their profiles and other information shared by them.
Data processing is carried out on the basis of an agreement between the joint controllers in accordance with Article 26 GDPR; Meta Platforms Ireland Limited is the primary controller within the meaning of the GDPR (Art. 26) with regard to the Insights data: https:
Purpose of data processing: Data processing serves the purpose of effective communication with the users of the Stiftung Preussischer Kulturbesitz as part of its public relations work.
Legal basis: The processing of personal data is carried out to safeguard legitimate interests on the basis of Art. 6 para. 1 lit. e GDPR in conjunction with § 3 BDSG.
Rights of data subjects: You can assert your data subject rights against both us and Meta Platforms Ireland Limited.
The Stiftung Preussische Kulturbesitz uses the technical platform and services of LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (https://www.linkedin.com) for information and advice. The Stiftung Preussische Kulturbesitz has no influence on the content and scope of use of the data collected by LinkedIn. For further information in this regard, the Stiftung Preussische Kulturbesitz refers to LinkedIn's privacy policy: https://de.linkedin.com/legal/privacy/eu .
bluesky
The Stiftung Preussische Kulturbesitz uses the social media service Bluesky, Bluesky PBLLC, 113 Cherry St # 24821 Seattle, WA, USA; bsky.app; support@bsky.app for information and exchange with its users.
Bluesky collects the registration data entered there for use, such as the e-mail address and date of birth. The posts and private messages entered on Bluesky are also stored. In addition, Bluesky collects personal usage information such as your IP address, your personal settings, browser and device information and your activity history. Bluesky shares personal data with third parties and transfers it to other countries. The Stiftung Preussische Kulturbesitz has no influence on the content and scope of use of the data collected by Bluesky. For further information in this regard, the Stiftung Preussische Kulturbesitz refers to Bluesky's privacy policy: https:
X (formerly Twitter)
The Stiftung Preussische Kulturbesitz uses the technical platform and services of X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA ( x.com) for the short message service. Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, is responsible for the data processing of persons living in the European Union. The Stiftung Preussische Kulturbesitz would like to point out that you use the X short messaging service and its functions on your own responsibility. Information on what data is processed by X and for what purposes it is used can be found in X's privacy policy: https://x.com/de/privacy
Youtube
The Stiftung Preussische Kulturbesitz uses the technical platform and services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (https://www.youtube.com) to provide video content. By accessing the YouTube video, the operator Google LLC collects data without the Stiftung Preussische Kulturbesitz being aware of this and without being able to influence it. This includes information about your activities in Google services and technical data. Google also uses cookies to analyze user behavior and for advertising purposes, among other things. Personal data is transferred to third parties and to countries outside the EU, in particular the USA, . Details on the handling of user data can be found in YouTube's privacy policy. By activating the video, you also consent to the use of data.
Vimeo
The Stiftung Preussische Kulturbesitz uses the technical platform and services of Vimeo.com, Inc; 330 West 34th Street, New York, New York 10001, USA (vimeo.com) to provide video content. By accessing the video, the operator Vimeo collects data without the Stiftung Preussische Kulturbesitz being aware of this and without being able to influence it. This includes technical data such as your IP address and device information. In addition, Vimeo uses functionally necessary cookies, for the use of which no consent is required. Personal data is transferred to third parties and to countries outside the EU, in particular the USA.
Details on the handling of user data can be found in Vimeo's privacy policy. By activating the video, you also consent to the use of data
The Stiftung Preußischer Kulturbesitz
The Stiftung Preußischer Kulturbesitz operates a social media account.
Unlike X, Facebook, Instagram, LinkedIn, Vimeo and Google (YouTube), this account does not transfer personal data to the United States of America.
6. OpenMaps
We use the OpenMaps map service on our website to display geographical information visually. OpenMaps is an open source project that provides map data.
By integrating OpenMaps, the following data can be transferred depending on the implementation:
- Your IP address,
- the page you visit on our website,
- Date and time of the request,
- If applicable, further technical data (browser type, operating system).
This data is transmitted to the map service server in order to provide the map function. The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). Of course, you can revoke your registration at any time for the future.
The OpenStreetMap Foundation states that it hosts data in Germany, but other services (e.g. tile servers) may be involved depending on usage.
The transmitted data will only be processed for the duration of the use of the map function and will not be stored for longer, unless there are other purposes (e.g. analysis).
7. pictures and videos of people on the website
People may be recognizable in images or videos on our website. In this case, processing is carried out on the basis of Art. 6 para. 1 lit. e GDPR in conjunction with Section 3 BDSG. If you are affected, you have the right to object to this use.
III. What rights do users of our website have?
You have the following rights in relation to your personal data:
- the right to information (Art. 15 GDPR),
- the right to rectification and erasure (Art. 16 and 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to object to processing (Art. 21 GDPR),
- the right to data portability (Art. 20).
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Stiftung Preussischer Kulturbesitz.
IV. Amendment of the privacy policy
The Stiftung Preussischer Kulturbesitz reserves the right to adapt the privacy policy in line with technical developments and changes in the legal framework. You will find the current version of this data protection declaration at the end of the declaration.
Status: April 08, 2025