Data privacy

The Staatliche Institut für Musikforschung (SIM) as a legally dependent institution of the Stiftung Reußischer Kulturbesitz (Prussian Cultural Heritage Foundation, SPK) is committed to handling your personal data in a responsible way and to maintaining transparency about its use. The following sections therefore explain 

  • who is responsible for the website under data protection law 
  • what forms personal data are processed in, with a description of the purpose and a statement of the legal basis in each case and 
  • what rights you have as a user of this website. 

Who is responsible for the website and the data privacy protection?

Stiftung Preussischer Kulturbesitz, legally represented by the president, Prof. Dr. hc. mult. Hermann Parzinger, is responsible for this website in terms of data protection. 

Stiftung Preußischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin
Phone: +49 (0)30 266 412889

For questions regarding data protection, the Stiftung Preussischer Kulturbesitz has a data protection officer as a contact person. You can contact him/her at our postal address, addressed to “data protection officer,” or via this e-mail address:


II. What forms are personal data processed in?

1. Provision of the website and creation of log files

When you visit our website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a file called a "log file." 

a. Data categories

The following information is recorded without your active involvement and is stored until it is automatically deleted: 

  • IP address of the computer requesting access,
  • date and time of access,
  • name and URL of the file accessed,
  • web page from which access has taken place (referrer URL),
  • browser used and, if applicable, the operating system of your computer as well as the name of your internet service provider (ISP). 

b. Purpose

The aforementioned data are processed by us for the following purposes:

  • ensuring a smooth connection to the website 
  • ensuring the comfortable use of our website 
  • evaluating system security and stability as well as other administrative purposes. 

The website is operated as part of public relations work of the Foundation.

c. Legal basis

The legal basis for data processing lies in the protection of legitimate interests in accordance with Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The website is provided as part of our public relations work. 

d. Recipient categories

Our website is located on a server owned by the Mittwald company. The operator of our website, graphodata AG, also has access to the aforementioned data. 

The Staatliche Institut für Musikforschung and the Stiftung Preussischer Kulturbesitz has exercised due diligence in selecting graphodata AG as its web agency and Mittwald as its server host. Both graphodata AG and Mittwald are bound by instructions given by the Staatliche Institut für Musikforschung and the Stiftung Preussischer Kulturbesitz and are regularly checked. 

e. Storage period

The Mittwald company stores data for the following periods. 

Anonymized IP addresses are retained for seven weeks. 

Error logs, which record faulty page views, are deleted after seven days. In addition to the respective error message, they list the IP address from which access was attempted and, depending on the error, the web page that was accessed. 

Access via FTP is logged anonymously and the records are kept for seven weeks.

2. Contact, subscriptions

a. Purpose

The personal data that you provide us with by e-mail, on the press distribution contact form or in other ways is processed by us (in the interest of fast and cheap communication) to answer or deal with any inquiries you make or orders you place. 

b. Legal basis

If you have expressly granted your consent for us to process your data, Art. 6 para. 1 (a) GDPR is the legal basis for this processing.

If we process your data in order to carry out pre-contractual measures, Art. 6 para. 1 (b) GDPR is the legal basis. 

In all other cases, Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) is the legal basis. In such cases, data processing is necessary for our public relations work. 

c. Storage period

Personal data are deleted as soon as it is certain that they no longer serve the purpose for which they were collected. 

3. Newsletter

a. Data categories

The following data are collected when you register:

  • e-mail address
  • date and time of registration and activation

b. Purpose

When you register for the newsletter, your e-mail address is used for the purpose of advertising. So that the Stiftung Preussischer Kulturbesitz can adapt the newsletter to reflect the interests of its readers, the links that you click on are recorded in an anonymized form. We cannot find out which links a specific person has clicked on.

c. Legal basis

The legal basis for this processing is the granting of consent in accordance with Art. 6 para. 1 (a) GDPR. Registration takes the form of a double opt-in. As part of the registration process, we obtain your consent and refer to our data privacy notice. You can terminate your registered status at any time afterwards, effective from then onward. To unsubscribe, click on the link at the end of the newsletter.

d. Storage period

Your e-mail address will only be saved for sending the newsletter for the period stated during your registration, or until you cancel it.

4. Facebook & Instagram

The Staatlice Insttut für Musikforschung maintains a Facebook page and an Instagram page, for which it is jointly responsible, in terms of data protection rights, with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; hereinafter Facebook Ireland) according to Art. 26 GDPR.

The material posted on the pages consists of current information, videos and images, which users can comment on and mark with emojis. 

Users of Facebook can also post so-called visitor contributions on our page. The comments, emojis and contributions are publicly visible and thus the identity of the user who has posted them is publicly recognizable. Users can also send us messages that are not publicly visible. 

With Facebook Page Insights, we have the option of calling up certain statistical, anonymized data on user behavior.

These show, for example, the total number of page views, “Likes”, page activity, contribution interactions, reach, video views, and contribution reach. 

This feature also provides data on the Facebook groups linked to our Facebook page. Facebook creates and provides the Insights data using cookies. We can only change the period for which we want to see an evaluation. 

In addition, we can choose certain settings for the target group for our posts, and these have a corresponding effect on the statistical analysis. The Insights function cannot be turned off by us. 

Facebook uses the data in particular for advertising (creating personalized advertising), creating user profiles, and for market research. If a visitor to our page has a user account for the Facebook network and is logged into it when our page is accessed, the information provided by the cookies is saved on all that person’s registered devices. We have no influence over the fact that Facebook shares data with third parties, including Facebook Inc., the U.S. parent company of Facebook Ireland. This procedure is certified under the EU-US Privacy Shield and is therefore considered to be compliant with data protection requirements within the meaning of the GDPR.

Details of data processing by Facebook can be found here:  

Instagram’s data privacy policy can be found at 

We use the Insights data and the other available data to optimize the user experience on our pages and to interact with users. For example, we use the information on visiting times to plan the timing of our posts for the best results. Information about the types of device used by visitors helps us to design our content so that articles and suchlike are optimally displayed on every type of device. On the basis of the Terms of Use, which each user agrees to when setting up his or her profile, we can identify the subscribers and fans of the page and view their profiles as well as other information shared by them. 

Data processing takes place on the basis of an agreement between the jointly responsible parties in accordance with Article 26 GDPR; Facebook Ireland is the primary entity responsible within the meaning of the GDPR (Art. 26) for the Insights data: 

You can assert your rights as a data subject both against us and against Facebook Ireland.

The processing of personal data is undertaken to protect legitimate interests on the basis of Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). 

Data processing is carried out for the purpose of effective communication with users in the context of public relations work. 

5. YouTube & Vimeo

The Staatliche Institut für Muskforschung (SIM) YouTube Channel is run by Google Ireland Limited. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). The SIM-Vimeo-channel wird von der Vimeo Inc. is run by Vimeo Inc. (Vimeo, Inc. 555 West 18th Street, New York, New York 10011).

YouTube and Vimeo collect the data without informing SIM and SIM cannot influence YouTube’s an Vimeo's data collection process. The following user data is collected by YouTube an Vimeo:

  • Profile information
  • Transactions: Payment method
  • Contents: Video, text, image, etc. along with information and metadata; communication, interaction with third party users
  • Technical data Information in the course of Vimeo support: IP address, device information, search history, cookies
  • Third party information: Transaction data, data from analysis tools

For details on how both companies handles user data, see the YouTube's data protection declaration and Vimeo's data protection declaration.

6. Images and videos of people on the website

It might be possible to recognize individual people in the pictures or videos on our website, In this case, the legal basis for data processing is Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). If you are affected in this way, you have the right to object to the use of your image.

III. The rights users of this website have

Regarding your personal data, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right of rectification and erasure (Art. 16+17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to data portability (Art. 20)

You also have the right to complain to a data protection supervisory authority about the way the Foundation processes of your personal data (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Stiftung Preussischer Kulturbesitz.

IV. Changes to the privacy policy

The Staatliche Institut für Musikforschung reserves the right to modify this data privacy policy in line with technical developments and changes in the legal framework. You will find the relevant date of this privacy policy at the end of the policy.

Current: 10.03.2023