Privacy statement

1. Controller

Responsible for collecting, processing and using your personal data as defined by the General Data Protection Regulation (GDPR) in connection with the German Federal Data Protection Act (BDSG) and other requirements of data processing is:

German Lost Art Foundation

represented by Prof. Dr. Gilbert Lupfer —Full Time Executive Board member

Humboldtstraße 12

39112 Magdeburg, Germany

The German Lost Art Foundation takes data protection very seriously. Within its web presence, the foundation strives to protect your personal data, which it uses exclusively for the purposes named here. The following privacy statement contains information about the type, scope and purpose of processing personal data and about the use of cookies in connection with using the website www.proveana.de. As a rule, our website can be used without providing personal data. If personal data are collected on our web pages (such as name, address or e-mail address), this is done on a voluntary basis wherever possible. We would like to point out that data transfer on the internet (e.g. during e-mail communication) can have security gaps. Complete protection of data against third-party access is not possible.

2. Data protection officer

The data protection officer of the German Lost Art Foundation is:

Sebastian Hohmann
Humboldtstraße 12
39112 Magdeburg, Germany
Telephone: +49 391 727 763 37
Fax: +49 391 727 763 6
E-mail: sebastian.hohmann@kulturgutverluste.de

3. Responsible supervisory authority

The responsible supervisory authority for the German Lost Art Foundation is:

Federal Commissioner for Data Protection and Freedom of Information

Husarenstraße 30
53117 Bonn, Germany

or

Friedrichstraße 50
10117 Berlin

Central telephone number: +49 228 997799-0
Central e-mail address: poststelle@bfdi.bund.de

4. Handling of personal data and cookies

The term “personal data” describes all information that can be used to identify a person, i.e. information that can be traced back to a person. This includes, among other things, names, e-mail addresses or telephone numbers. However, data about preferences, hobbies, memberships or what websites a person visited are also considered personal data.

You are not legally or contractually required to provide your personal data, and it is not necessary for establishing a contract. It is entirely voluntary.

Every time a user accesses the web presence of the German Lost Art Foundation (here: www.proveana.de) and opens a file, data about this process is temporarily stored in a report file and processed. Prior to storage, every data record is anonymized by changing the IP address. It is therefore not possible to connect the recorded data with a specific natural person.

The following data are stored for every website access/file access:

• Anonymized IP address
• Date and time
• Accessed web page/name of accessed file
• Amount of data transferred
• Report whether website access/file access was successful

 

When you use our login form for registering a user account or the form for requesting extended access, we ask you for some personal information.

If your purpose is to register a user account, that information is your first and last name, your title, your institution and your e-mail address. Providing this information is always voluntary, but your first and last name and e-mail address are obligatory for setting up a user account.

If your purpose is to request extended access, that information is your first and last name, your e-mail address and your message explaining your legitimate interest. Providing this information is always voluntary, but your first and last name, e-mail address and message about your legitimate interest are obligatory for setting up extended access.

The German Lost Art Foundation uses the aforementioned data exclusively for the login process and correspondence with you. The data are stored on our secure web server, and the password you have assigned to your account is encrypted.

If you request extended access, your first and last name, your e-mail address and your message about your legitimate interest are sent as content of a notification e-mail to an e-mail account of our institution as part of the login process.

If you compose a comment via a registered user account, your first and last name, your e-mail address and your comment are sent as content of a notification e-mail to an e-mail account of our institution as part of the approval process.

If you do not voluntarily provide the required information, your use of the functions of our website may be limited. This mainly depends on whether the information is optional or absolutely necessary for the respective function. If you do not provide the required information, you cannot set up a user account on this website.

Our website uses so-called cookies in several places. “Cookies” are small text files that are placed on your computer and stored in your browser. Cookies do not damage your computer and do not contain viruses. The cookies used by this website do not contain any personal data apart from your anonymized IP address.

You can set your browser to inform you of the installation of cookies and permit cookies only in individual cases, refuse to accept cookies in specific cases or in general, and activate the automatic deletion of cookies upon closing your browser. If you deactivate cookies, the functions of this website will be limited in that you will not be able to log in to your user account.

The German Lost Art Foundation will not pass your data on to third parties without your written permission unless:

• a subcontractor or auxiliary, whom we deploy exclusively for providing the offerings or services you request, requires these data (such auxiliary persons are authorized to use such data only to the extent necessary for providing the offer or service, unless you are explicitly informed otherwise),
• there is a legally binding court order or valid official directive, or
• it is necessary to prevent improper use of our offerings or services in a legally permissible manner.

This website is hosted through an external service provider (Outermedia GmbH) at (Hetzner Online GmbH). If personal data are processed on this website, they are stored on the servers of Hetzner Online GmbH. The external service provider has access to these personal data exclusively as part of the technical provision and administration of this website. The external service provider is obligated to comply with data protection regulations.

All data are located on servers within the Federal Republic of Germany. Your data are not used for other purposes, stored together with other data (profile creation) or passed on to third parties.

5. Legal basis and purpose of the processing of personal data and the use of cookies

We process your personal data based on legitimate interests according to Art. 6.1 letters a, e and f GDPR.

Personal data are processed for the purpose of providing this website including its functions and display it on your end device.

The website is provided based on the statutory mission of the German Lost Art Foundation and serves the public interest as part of public information trade.

Moreover, personal data are processed to give you various functional possibilities on our website. These include for instance the user account.

We contract an external service provider for web hosting in order to ensure the safe and reliable provision of our website by a professional provider.

Beyond this, personal data are evaluated only for statistical purposes and to improve our website. They are used to make our website more user-friendly, more effective and safer.

This applies also to the cookies used on this website. These allow our systems to recognize your browser and offer you services (recognition, storage of your data regarding the “cookie banner”).

6. Storage duration of personal data and cookies

Your personal data are deleted immediately after the purpose has been served. Files referring to access data (log files) are deleted after no more than one week. Your personal data are stored beyond those periods only if the German Lost Art Foundation is obligated to do so by European, national or country-specific legal directives or due to a legally binding or valid official directive.

Cookies remain stored on your end device until you delete them manually or you activate the deletion of cookies upon closing your browser in your browser settings.

7. Use of Matomo (formerly Piwik)

This website uses the open source web analysis service Matomo.

Matomo uses cookies. These are text files that are saved on your computer and allow Matomo to analyze your use of the website (see No. 4). To that end, the information about the use of this website that is generated by the cookie is stored on our server independently of other data. The IP address is anonymized before it is saved. The information about the use of this website that is generated by the cookie is not passed on to third parties.

The information is used in accordance with Art. 6.1 letter f GDPR in order to evaluate the use of the website and aid us in making our website user-friendly. The information is not passed on to third parties.

You can prevent cookies from being saved on your device by choosing the corresponding setting in your browser software. We would like to point out, however, that if you do, you may no longer be able to use all functions of this website. If you do not consent to your data being stored and used, you can deactivate those processes in the following steps. If you choose to do so, an opt-out cookie is stored in your browser that prevents Matomo from storing user data. If you delete your cookies, the Matomo opt-out cookie is deleted as well. The opt-out must then be reactivated when you visit our website again.

Your visit to this website is currently being tracked by Matomo web analysis. Your visit to this website is currently not tracked by Matomo web analysis. Track visit Stop tracking visit

You can access Matomo’s privacy statement at https://matomo.org/privacy/.

8. Rights of data subjects

If the German Lost Art Foundation processes your personal data, you as the data subject have the following rights:

• According to Art. 7 GDPR, you have the right to revoke your given consent at any time, which does not affect the lawfulness of personal data processed based on your consent until your revocation.
• According to Art. 15 GDPR, you have the right to be informed of the personal data we have processed and to receive further information according to the regulations.
• According to Art. 16 GDPR, you have the right to have your personal data corrected or completed if they are incorrect or incomplete.
• According to Art. 17 GDPR, you have the right to have your personal data deleted.
• According to Art. 21 GDPR, you have the right to object to the processing of your personal data for reasons inherent in your particular situation, provided we do not have any urgent legitimate interests that outweigh your interests, rights and liberties.
• According to Art. 18 GDPR, you have the right to limit the processing of your personal data, if
  • you contest the correctness of the data,
  • the processing is unlawful, you refuse to delete the data and demand limitation of the use of the data instead,
  • we no longer need to process the data for the above purpose, but for the establishment, execution or defense of legal claims,
  • you have objected to the processing of your data according to Art. 21.1 GDPR, but it has not yet been determined whether our urgent legitimate interests in continuing to process your personal data outweigh your interests, rights and liberties.
• According to Art. 20 GDPR, you have the right to receive the personal data you provided in a structured, common and machine-readable format from us and to pass them on to another controller without impediment from our side, provided we process your data automatically and you have consented to the processing.
• According to Art. 77 GDPR, you have the right, without prejudice to other legal options, to complain to a supervisory authority—in particular in your state of usual residence, workplace or the location of the alleged violation—if you believe that our processing of your personal data violates data protection regulations. The Federal Commissioner for Data Protection is responsible for our organization (see No. 3).

If you intend to exercise the above rights against the German Lost Art Foundation or have questions regarding privacy issues, please contact our data protection officer by letter, e-mail or fax (see No. 2).

9. Changes of our privacy statement

We will continuously update these guidelines for the protection of your personal data. You should peruse these guidelines occasionally, to keep informed of how we protect your data and continuously improve the content of our website. Should we implement essential changes in the collection, use and/or transfer of the personal data you have provided to us, we will bring this to your attention with an explicit and clearly visible notice on our website. By using the website, you declare your consent to our guidelines for protecting personal data.