Privacy statement

1. Controller

The Controller responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) in conjunction with the Federal Data Protection Act (BDSG) and other data protection regulations is:

German Lost Art Foundation
Prof. Dr. Gilbert Lupfer
Executive Chairman
Humboldtstraße 12
D-39112 Magdeburg
Germany
Tel.: +49 (0) 391 727 763 0
E-mail: kontakt@kulturgutverluste.de

The German Lost Art Foundation takes data privacy very seriously. It endeavours to protect your personal data within the scope of its online services, which it uses exclusively for the purposes stated below.

Below you will find information on the type, scope and purpose of the processing of personal data, its legal basis and storage period as well as on how cookies are used in connection with the use of the website https://www.proveana.de/de/start.

2. Data protection officer

The data protection officer of the German Lost Art Foundation is:

Sebastian Hohmann
Humboldtstraße 12
39112 Magdeburg, Germany
Telephone: +49 391 727 763 37
Fax: +49 391 727 763 6
E-mail: sebastian.hohmann@kulturgutverluste.de

3. Responsible supervisory authority

The responsible supervisory authority for the German Lost Art Foundation is:

The Federal Commissioner for Data Protection and Freedom of Information
Graurheindorfer Str. 153
D-53117 Bonn
Germany

Main switchboard: +49(0)228-997799-0
Central e-mail: poststelle@bfdi.bund.de

4. Handling of personal data and cookies

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a specific individual. This includes their name, e-mail address or telephone number.

The provision of personal data on your part is neither legally nor contractually required. Personal data is provided voluntarily, especially in the event of the conclusion of a contract (such as the opening of a user account).

If you use the services offered on our website, personal data will only be processed if you agree to us doing so. In exceptional cases, personal data is also processed without your consent, if this is permitted by law.

Every time a user accesses online services provided by the German Lost Art Foundation (in this case: www.proveana.de) and every time a file is retrieved, data relating to this process is automatically stored and processed temporarily in a log file.

The following specific data is stored for each access/retrieval:

  • IP address
  • date and time
  • page accessed/name of the file accessed
  • volume of data transferred
  • message whether the access/retrieval was successful

When you use our user account registration form or the extended access request form, we ask you to provide certain personal details.

If you wish to register a user account, these details are your first name, last name, title, institution and e-mail address. Provision of this information is always voluntary, but giving your first name, last name and e-mail address is required in order to be able to register a user account.

If you wish to request extended access, the details required are your first name, last name and e-mail address, as well as a message stating your legitimate interest. Provision of this information is always voluntary, but giving your first name, last name, e-mail address and a message stating your legitimate interest is required in order to be able to register for extended access.

The above data is used by the German Lost Art Foundation exclusively for the registration process and for correspondence with you. The data is stored on our protected web server, whereby the password you assign is stored in encrypted form.

If you request extended access, your first name, last name, e-mail address and declaration of legitimate interest are forwarded as part of the registration process as the content of a notification e-mail to an e-mail box at our institution.

Should you post a comment via an established user account, your first name, last name, e-mail address and comment are forwarded to an e-mail inbox at our institution as part of the activation process as the content of a notification e-mail.

If you do not voluntarily provide the required information, this may restrict your ability to use the website. This depends in particular on whether the information is optional or absolutely necessary for the respective usage option. If you do not provide the required information, you will not be able to create a user account on this website.

Our website uses so-called cookies in several instances. “Cookies” are small text files that are placed on your computer and stored by your browser. Cookies do not cause any damage to your computer and do not contain viruses.

This website uses necessary and optional cookies. Specifically, these are:

Necessary cookies

  • cookie-agreed: Prevents the cookie banner from being displayed again after the privacy settings have been saved
  • cookie-agreed-version: Saves the version of the confirmed privacy settings
  • cookie-agreed-categories: Saves the selected categories of privacy settings
  • SSESS*: Contains the session ID of logged-in users and enables the server to assign the session after reloading the page

Optional cookies for the purpose of web analytics

  • _pk_id*: Storage of an ID to record unique visitors
  • _pk_ref*: Storage of the referrer from which the website was originally visited
  • _pk_ses*: Temporary storage of session data when visiting the website

You can set your browser so that you do not allow cookies or only allow them in individual cases, i.e. you can exclude the acceptance of cookies in certain cases or in general, and you can activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website will be limited in that you will not be able to log in to your user account.

The German Lost Art Foundation only passes on your data to third parties without your written consent if:

  • this data is required by a subcontractor or vicarious agent that we use exclusively in the context of providing the offerings or services you have requested (unless you are expressly informed otherwise, such vicarious agents are in turn only entitled to use the data insofar as this is necessary for the provision of the offer or service)
  • if there is a legally binding court order or a legally binding official order to this effect, or
  • insofar as it is necessary to prevent misuse of our offerings or services in a legally permissible manner.

This website is hosted by an external service provider (Outermedia GmbH) at (Hetzner Online GmbH). Insofar as personal data is processed on this website, it is stored on the servers of Hetzner Online GmbH. The external service provider has access to this personal data exclusively in the context of the technical provision and administration of this website. The external service provider is obliged to comply with the data protection regulations.

All data is located on servers within the Federal Republic of Germany. The data is not used for any other purpose, stored together with other data (profiling) or passed on to third parties.

5. Legal basis and purpose of the processing of personal data and the use of cookies

The processing of your personal data is based on Art. 6 (1) (a), (b) and (e) GDPR.

The processing of personal data serves the provision of this website, including its use and its display on your retrieval device.

The website is provided based on the statutory tasks of the German Lost Art Foundation and serves the public interest as part of the state’s information activities.

In connection with the operation of our website, we offer you various usage options. These include the user account.

The commissioning of an external service provider for web hosting serves to ensure the secure and reliable provision of our online offerings by a professional provider.

Beyond this, personal data is only evaluated for statistical purposes and in order to improve our website. This serves to make our offerings more user-friendly, effective and secure.

This also applies to the cookies used on this website. The cookies therefore enable you to make the best possible use of our website.

6. Storage duration of personal data and cookies

Your personal data is deleted immediately after the purpose of its collection has been fulfilled. In the case of files concerning access data (log files), however, this happens no later than after one week. Your personal data is only saved for longer if the German Lost Art Foundation is obliged to do so by legislation at the European, national or state level or by a legally binding court or official order.

Cookies remain stored on your end device until they are manually deleted or deletion is activated by means of the relevant browser settings when the browser is closed.

7. Privacy settings

The privacy settings are displayed when you first visit this website. In the privacy settings, you can decide which cookies are to be stored and whether external media may be displayed. You can revoke this decision at any time by clicking on this button:

8. Use of Matomo

This website uses the open source web analytics service Matomo.

Matomo makes use of cookies. These are text files that are stored on your computer and enable analysis of your use of the website (see also 4). For this purpose, information about the use of this website is stored on our server independently of other data. IP addresses are anonymised prior to storage. The information generated by your visit to this website about the use of this website is not passed on to third parties.

If you give your consent to the use of Matomo, we collect the following data:

  • 2 bytes of the IP address of the user’s retrieving system
  • The website accessed
  • The website from which the user accessed the website (referrer)
  • The length of stay on the website
  • Country
  • User agent

The information is used in accordance with Art. 6 para. 1 (a) GDPR to evaluate the use of the website and to enable us to design our website in line with requirements. The data is deleted as soon as we no longer need it to fulfil the above purposes.

You can decide in the data privacy settings (see also 7) whether a web analysis cookie may be stored in your browser to enable us to collect and analyse various statistical data anonymously. No analysis is carried out until you have actively consented to the setting of the required cookie in the data privacy settings.

You can revoke your consent to the setting of the web analysis cookie at any time. In order to do this, you can delete the cookie in your browser (see 4 and 6) or change your data privacy setting (see 7).

Alternatively, you can delete cookies that have already been set in your browser or you can set your browser in such a way that it indicates to site operators not to include you in such statistics (“do-not-track”).

For information provided by Matomo on data privacy, see https://matomo.org/privacy/.

9. Use of Mapbox

We provide you with the Mapbox service to visually display geographical information. When Mapbox is used, it also collects, processes and utilises data relating to the use of the map functions by visitors. We use Mapbox API, a service provided by Mapbox Inc, 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005, USA, hereinafter referred to only as “Mapbox”.

The Terms of Service are available through Mapbox at https://www.mapbox.com/tos/#maps and contain further information about the use of Mapbox and the data obtained by Mapbox.

The legal basis for the provision of Mapbox is Art. 6 para. 1 (a) GDPR. The map service serves to expand our range of offerings.

You can decide in the privacy settings whether or not a cookie may be stored in your browser in order to activate Mapbox. This service is not made available until you have actively consented to the setting of the required cookie in the data privacy settings.

You can revoke your consent to the setting of the cookie at any time. In order to do this, you can delete the cookies in your browser (see 4 and 6) or change your data privacy settings (see 7). If you do so, however, it will no longer be possible to use the Mapbox service via our website.

At https://www.mapbox.com/privacy/ Mapbox provides further information on the collection and use of data and on your rights and options for protecting your privacy.

10. Rights of data subjects

If the German Lost Art Foundation processes your personal data, you as the data subject have the following rights:

 

  • according to Art. 7 GDPR, you have the right to revoke any consent you may have given at any time, whereby the lawfulness of the processing of your personal data carried out based on your consent up until revocation is not affected
  • according to Art. 15 GDPR, you have the right to obtain information about the personal data processed by us and to further information according to the regulatory catalogue
  • according to Art. 16 GDPR, you have the right to have inaccurate personal data relating to you corrected and/or to have incomplete personal data completed
  • according to Art. 17 GDPR, you have the right to have the personal data concerning you erased
  • according to Art. 21 GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation, unless we have compelling legitimate grounds which override your interests, rights and freedoms
  • according to Art. 18 GDPR, you have the right to restrict the processing of your personal data if
    • the accuracy of this data is disputed by you
    • the processing is unlawful, you refuse the erasure of the data and instead request the restriction of the use of the data
    • we no longer need to process the data for the above purpose but for the assertion, exercise or defence of legal claims
    • you have objected to the processing of your data pursuant to Art. 21 (1) GDPR, but it has not yet been determined whether our compelling legitimate grounds for continuing to process your personal data outweigh your interests, rights and freedoms
  • according to Art. 20 GDPR, you have the right to receive the personal data you have provided in a structured, common and machine-readable format and to transfer it to another controller without hindrance on our part, insofar as we process your data automatically and you have consented to the processing
  • according to Article 77 GDPR, you have the right, without prejudice to other legal remedies, to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement – if you are of the opinion that the processing of your personal data by us violates data protection regulations. The Federal Commissioner for Data Protection is responsible for us (see 3).

If you wish to assert the above rights vis-à-vis the German Lost Art Foundation or have any questions on the subject of data privacy, please contact our data protection officer (see 2).

11. Changes of our privacy statement

We will continually update this policy to protect your personal data. You should review this policy from time to time to keep informed about how we are protecting your data and continually improving the content of our website.