Das Wichtigste auf einen Blick
-
Das Museum ist heute geöffnet
-
Eintritt 7,50 Euro, 5 Euro ermäßigt
Kreativer Austausch am Piesberg
Unterstützung im Umgang mit Smartphone, Tablet & Co
für elektrische Kleingeräte
MIK Museum Industriekultur
Fürstenauer Weg 171
49090 Osnabrück
Kreativer Austausch am Piesberg
Unterstützung im Umgang mit Smartphone, Tablet & Co
für elektrische Kleingeräte
MIK Museum Industriekultur
Fürstenauer Weg 171
49090 Osnabrück
Below you will find our Privacy Statement:
Contact details of the controller
Museum Industriekultur Osnabrück gGmbH
Süberweg 50a
49090 Osnabrück
Telephone: +49 (0) 541 91 27 845
Fax: +49 (0) 541 91 27 847
Email: info@mik-osnabrueck.de
II. Specific information on the processing of personal data
a) Purpose of data processing
Each time a user accesses a page on our website and each time a file stored on the website is accessed, access data relating to this process is stored in a log file. Each data record consists of:
the page from which the file was requested,
the name of the file,
the date and time of the request,
the amount of data transferred,
the access status (file transferred, file not found, etc.),
a description of the type of operating system and web browser used,
the host name of the accessing computer,
the client IP address.
We use this data to operate our website, in particular to determine the utilisation of the website and any malfunctions of the website, and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it is anonymised after the technical requirement no longer applies by deleting the last digit block (Ipv4) or the last octet (Ipv6).
The personal data is passed on to service providers who perform IT tasks for the benefit of website operation (such as hosting service providers or plugin providers).
b) Duration of storage
The data is stored each time a user accesses a page on our website and each time our website is visited, and is deleted as soon as it is no longer required for the purpose for which it was collected, which is at the latest three months after the end of the month following your visit to the website.
c) Legal basis
The temporary storage and processing of the aforementioned data is based on the legal basis of Art. 6(1) (f) of the EU General Data Protection Regulation (hereinafter “GDPR”). The legitimate interest lies in the provision of our website, ensuring stability and security, and checking for misuse.
d) Right to object and right to erasure
The data subject may object to the processing by refraining from using our website and, subject to the conditions specified in more detail in the “Rights” section below, may request the deletion of data collected from him/her in this way by means of an informal declaration.
a) Purpose of data processing
In order to enable technical access to our website, we transfer so-called cookies to the data subject’s terminal device. Cookies are small text files that can be used to identify the data subject’s terminal device, usually by recording the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the terminal device used – without interfering with the operating system – it is recognised again and enables us to make any default settings immediately available. We use this information to tailor our website and the services we offer to your needs and to speed up access to our website.
Personal data is passed on to third-party providers for the purpose of analysing the use of our website, insofar as this is necessary for the purposes of analysis. Insofar as cookies are used for tracking purposes, we provide separate information about this in this Privacy Statement.
b) Duration of storage
The storage period for the various cookies varies, but is no longer than two years. They are stored on your local device, not on our server, which is why the actual deletion period depends on how your browser software is configured. Please refer to the operating instructions for your browser software to find out how you can delete cookies set by us on an ad hoc or automatic basis.
c) Legal basis
Strictly necessary cookies are based on the legal basis of Art. 6(1) (f) GDPR in order to enable visits to our website; in particular, some functions on our website cannot be used without cookies, as otherwise the user and their settings would not be recognised when changing pages, language settings would be lost and searches could not be performed.
The use of non-essential cookies (such as marketing, statistics or third-party cookies) is based on consent given via the cookie banner on our website and on the legal basis of Section 15(3) TMG and Art. 6(1) (a) GDPR and, for data transfers to third countries, on Art. 49(1) (1) (a) GDPR.
d) Right to object and right to erasure
The data subject can block the use of cookies in the terminal device used or the cookie banner displayed, or delete them after use. However, under certain circumstances, individual functions of our offer may then not be usable. Instructions on how to block cookies and delete cookies that have already been stored can be found in the browser software instructions.
a) Purpose of data processing
Users can contact us by email, contact form, message to our social media accounts, fax or telephone. We store the data transmitted to us and provided by the data subject for the purpose of processing the enquiry. This data regularly includes name, address details, email address, telephone and/or fax number, date and time of the enquiry and a description of the matter.
If personal data is sent by email or contact form, it is passed on to service providers who enable the transmission (involved mail providers, social network providers and plugin providers).
b) Duration of storage
We store personal data that we collect and process for the purpose of establishing contact for a period of three years from the end of the year following the complete fulfilment of the mutual service obligations. Insofar as the data is the subject of documents within the meaning of Sections 147(1) Nos. 2, 3 and 5 of the German Fiscal Code (AO) and Sections 257(1) Nos. 2 and 3 of the German Commercial Code (HGB), the data will be deleted at the end of six years, unless shorter retention periods are permitted under other tax laws. If the data is part of documents within the meaning of Sections 147(1) Nos. 1, 4 and 4a AO, 257(1) Nos. 1 and 4 HGB, the data will be deleted at the end of ten years. The periods begin at the end of the calendar year in which the data was collected.
c) Legal basis
The processing of the aforementioned data is carried out on the legal basis of Art. 6(1) (b) GDPR within the framework of contract initiation or fulfilment or in accordance with Art. 6(1) (f) GDPR. Our legitimate interest lies in being able to process the contact request and prevent misuse of the contact request.
d) Right to object and right to erasure
The data subject has the option to object to storage at any time. The data stored for the transaction will then be deleted.
a) Purpose of data processing
It is possible to subscribe to a newsletter. When the data subject subscribes to the newsletter, the data provided by the data subject in the input mask during registration is transmitted to us. This includes the email address provided, the IP address, the time and date. Furthermore, as part of the double opt-in procedure, the link that was clicked on, as well as the IP address and date, are recorded and stored. The data collected is necessary to send the newsletter and to prove registration.
If the newsletters are sent by e-mail, they are passed on to service providers who enable the dispatch (involved mail providers or providers of plug-ins or e-mail marketing software).
b) Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected and the data subject has unsubscribed from the newsletter. After this, the data will be stored for ten years from the last newsletter dispatch for verification purposes in the event of queries regarding existing consents, taking into account the limitation period.
c) Legal basis
The processing of the aforementioned data is carried out on the legal basis of Art. 6(1) (a) GDPR and Section 15(3) of the German Telemedia Act (TMG) only after prior consent has been given during registration. The legality of the processing of personal data carried out on the basis of consent until revocation is not affected by the revocation of consent, which is possible at any time.
d) Right to object and right to erasure
The use of data for the purpose of receiving the newsletter can be objected to at any time with effect for the future by unsubscribing from the newsletter. This can be done by sending us a statement. If the data subject wishes to unsubscribe from the newsletter, they will find a link marked accordingly in each newsletter, for example, which they only need to click on.
a) Purpose of data processing
We use the YouTube embedding function to display and play videos from the provider YouTube (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)).
When a page containing a YouTube video is accessed, a connection is established to the YouTube servers, which is assigned to the user’s personal profile and informs the visited pages of the website if the user is logged in with their YouTube account. You can prevent this by logging out of your YouTube account beforehand.
There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be truncated before being stored on Google’s servers by activating IP anonymisation. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise specified for the individual technologies, data processing is based on an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR.
Further information about the data protection provisions of YouTube and Google can be found at the following internet addresses: https://policies.google.com/privacy
b) Duration of storage
Information on data protection and the storage of personal data on YouTube can be found in the provider’s privacy statement at https://www.google.de/intl/de/policies/privacy
c) Legal basis
The use of YouTube serves to safeguard our legitimate interest in an appealing presentation of our online offering in accordance with Art. 6(1) (1) (f) GDPR, which prevails in the context of a balancing of interests.
d) Right to object and right to erasure
The data subject has the option to object to storage at any time. The data stored for the process will then be deleted. You will find an opt-out function at https://adssettings.google.com/authenticated.
a) Purpose of data processing
This website uses Google Analytics, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses “cookies”, which are text files placed on the data subject’s terminal device to help the website analyse how it is used. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, the IP address of the data subject will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data unless you are logged into your Google account at the time of the visit.
Further information about Google’s privacy statement is available at the following Internet address
https://policies.google.com/privacy
b) Duration of storage
Once the data is no longer necessary for the purpose for which it was collected, it is deleted, which is the case when anonymisation, which takes place within the European Union, is complete. This takes less than a second.
The data we send and link to cookies, user names (e.g. user ID) or advertising IDs is automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month.
Further information can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.
c) Legal basis
Processing is carried out on the legal basis of Art. 6(1) (a) GDPR and Section 15(3) TMG only with prior consent.
d) Right to object and right to erasure
You can block the use of cookies in the terminal device you are using or the cookie banner displayed, or delete the cookies after use. Instructions on how to block cookies and delete cookies that have already been stored can be found in the browser software instructions; however, we would like to point out that in this case, not all functions of this website may be fully usable. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=de.
a) Purpose of data processing
This website uses Google Tag Manager to manage website tags via an interface, thereby integrating other services into the online offering. The service provider is Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – https://marketingplatform.google.com). The Tag Manager itself, which implements the tags, does not create user profiles or store cookies, for example. Google only learns the user’s IP address, which is necessary to execute the Google Tag Manager.
Further information about Google’s privacy statement is available at the following Internet address: https://policies.google.com/privacy
b) Duration of storage
Once the data is no longer necessary to achieve the purpose, it is deleted, which is the case when anonymisation, which takes place within the European Union, is complete. This takes less than a second.
The data we send and link to cookies, user names (e.g. user ID) or advertising IDs is automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month.
Further information can be found at https://privacy.google.com/businesses/adsservices; data processing terms for Google advertising products and standard contractual clauses for third-country transfers of data: https://business.safety.google/adsprocessorterms.
c) Legal basis
Processing is carried out on the legal basis of Art. 6(1) (a) GDPR and Section 15(3) TMG only with prior consent.
d) Right to object and right to erasure
You can block the use of cookies on the device you are using or in the cookie banner displayed, or delete cookies after they have been used. Instructions on how to block cookies and delete cookies that have already been stored can be found in the browser software manual; however, we would like to point out that in this case, not all functions of this website may be fully usable.
a) Purpose of data processing
The data requested when participating in the competition, such as your name and address, as well as your client IP address at the time of participation in the competition, will be processed solely for the purpose of conducting the competition.
Personal data will only be passed on to third parties if this is necessary for the purpose of conducting the competition, for example when commissioning a shipping company.
b) Duration of storage
We store personal data that we process for the purpose of conducting the competition for a period of six months after the end of the competition in order to be able to provide information about the outcome of the competition and answer any queries in this regard. Insofar as the prizes may be subject to warranty claims, we store the data for two years from the date of delivery of the prize.
c) Legal basis
The processing of the aforementioned data is carried out on the legal basis of Art. 6(1) (b) GDPR in order to fulfil the obligations arising from the implementation of the competition.
d) Right to object and right to erasure
As there are legally standardised retention periods and the data must be stored and processed for the purpose of conducting the competition, objection or deletion is not possible.
If personal data is processed by the user on our website, the data subject has the following rights vis-à-vis the controller in accordance with the GDPR.
1. Right of access pursuant to Art. 15 GDPR
The data subject has the right to the following information:
a) the purposes of the processing;
b) the categories of personal data that are processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing;
f) the existence of a right to lodge a complaint with a supervisory authority;
g) if the personal data is not collected from the data subject, any available information on the source of the data;
h) the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
i) if personal data is transferred to a third country or to an international organisation, the data subject has the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
We provide the data subject with a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs.
2. Right to rectification pursuant to Art. 16 GDPR
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to erasure pursuant to Art. 17 GDPR
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller is obliged to erase personal data without undue delay if one of the following reasons applies:
a) the personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based according to Art. 6(1) (a) or Art. 9(2) (a) GDPR, and there is no other legal ground for the processing;
c) the data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR;
d) the personal data has been processed unlawfully;
e) the erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
f) the personal data has been collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
4. Right to restriction of processing pursuant to Art. 18 GDPR
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
d) the data subject has objected to processing pursuant to Art. 21(1) GDPR, pending verification of whether the legitimate grounds of the controller override those of the data subject.
5. Right to be informed pursuant to Art. 19 GDPR
If the data subject has asserted a right to rectification pursuant to Art. 16 GDPR, a right to erasure pursuant to Art. 17(1) GDPR or restriction of processing pursuant to Art. 18 GDPR, and if the controller has informed all recipients to whom the data subject’s personal data has been disclosed of the data subject’s request (unless this is impossible or involves disproportionate effort), the data subject has the right to be informed by the controller about the recipients.
6. Right to data portability pursuant to Art. 20 GDPR
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit that data to another controller without hindrance from us, provided that
a) the processing is based on consent pursuant to Art. 6(1) (a) or Art. 9(2) (a) or on a contract pursuant to Art. 6(1) (b) GDPR, and
b) the processing is carried out using automated means.
The rights and freedoms of other persons must not be affected by this.
When exercising the right to data portability pursuant to paragraph 1, the data subject has the right to have the personal data transmitted directly from us to another controller, insofar as this is technically feasible.
The exercise of the right to data portability shall not affect the right to erasure under Art. 17 GDPR. The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object pursuant to Art. 21 GDPR
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6(1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Consent given by the data subject may be revoked at any time. However, the collection and processing carried out up to that point remains lawful.
8. Automated individual decision-making, including profiling pursuant to Art. 22 GDPR
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
This does not apply if the decision
a) is necessary for the conclusion or performance of a contract between the data subject and us,
b) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or
c) is made with the explicit consent of the data subject.
These decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2) (a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms and legitimate interests of the data subject.
In the cases referred to in points (a) and (c), we take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on our part, to express their point of view and to contest the decision.
9. Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
10. Right to an effective judicial remedy under Art. 79 GDPR
Without prejudice to any administrative or non-judicial remedy available, including the right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR, every data subject shall have the right to an effective judicial remedy if they consider that their rights under the GDPR have been infringed as a result of the processing of their personal data not in accordance with the GDPR.
The courts of the Member State in which we or a processor have an establishment shall have jurisdiction for actions brought against us or a processor. Alternatively, such legal action may also be brought before the courts of the Member State in which the data subject is resident, unless we or the processor are a public authority of a Member State acting in the exercise of its public powers.