The Staatliche Institut für Musikforschung (SIM) as a legally dependent institution of the Stiftung Reußischer Kulturbesitz (Prussian Cultural Heritage Foundation, SPK) is committed to handling your personal data in a responsible way and to maintaining transparency about its use. The following sections therefore explain
- who is responsible for the website under data protection law
- what forms personal data are processed in, with a description of the purpose and a statement of the legal basis in each case and
- what rights you have as a user of this website.
Who is responsible for the website and the data privacy protection?
Stiftung Preussischer Kulturbesitz, legally represented by the president, Prof. Dr. hc. mult. Hermann Parzinger, is responsible for this website in terms of data protection.
Stiftung Preußischer Kulturbesitz
Phone: +49 (0)30 266 412889
For questions regarding data protection, the Stiftung Preussischer Kulturbesitz has a data protection officer as a contact person. You can contact him/her at our postal address, addressed to “data protection officer,” or via this e-mail address:
II. What forms are personal data processed in?
1. Provision of the website and creation of log files
When you visit our website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a file called a "log file."
a. Data categories
The following information is recorded without your active involvement and is stored until it is automatically deleted:
- IP address of the computer requesting access,
- date and time of access,
- name and URL of the file accessed,
- web page from which access has taken place (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your internet service provider (ISP).
The aforementioned data are processed by us for the following purposes:
- ensuring a smooth connection to the website
- ensuring the comfortable use of our website
- evaluating system security and stability as well as other administrative purposes.
The website is operated as part of public relations work of the Foundation.
c. Legal basis
The legal basis for data processing lies in the protection of legitimate interests in accordance with Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The website is provided as part of our public relations work.
d. Recipient categories
Our website is located on a server owned by the Mittwald company. The operator of our website, graphodata AG, also has access to the aforementioned data.
The Staatliche Institut für Musikforschung and the Stiftung Preussischer Kulturbesitz has exercised due diligence in selecting graphodata AG as its web agency and Mittwald as its server host. Both graphodata AG and Mittwald are bound by instructions given by the Staatliche Institut für Musikforschung and the Stiftung Preussischer Kulturbesitz and are regularly checked.
e. Storage period
The Mittwald company stores data for the following periods.
Anonymized IP addresses are retained for seven weeks.
Error logs, which record faulty page views, are deleted after seven days. In addition to the respective error message, they list the IP address from which access was attempted and, depending on the error, the web page that was accessed.
Access via FTP is logged anonymously and the records are kept for seven weeks.
2. Contact, subscriptions
The personal data that you provide us with by e-mail, on the press distribution contact form or in other ways is processed by us (in the interest of fast and cheap communication) to answer or deal with any inquiries you make or orders you place.
b. Legal basis
If you have expressly granted your consent for us to process your data, Art. 6 para. 1 (a) GDPR is the legal basis for this processing.
If we process your data in order to carry out pre-contractual measures, Art. 6 para. 1 (b) GDPR is the legal basis.
In all other cases, Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) is the legal basis. In such cases, data processing is necessary for our public relations work.
c. Storage period
Personal data are deleted as soon as it is certain that they no longer serve the purpose for which they were collected.
a. Data categories
The following data are collected when you register:
- e-mail address
- date and time of registration and activation
When you register for the newsletter, your e-mail address is used for the purpose of advertising. So that the Stiftung Preussischer Kulturbesitz can adapt the newsletter to reflect the interests of its readers, the links that you click on are recorded in an anonymized form. We cannot find out which links a specific person has clicked on.
c. Legal basis
The legal basis for this processing is the granting of consent in accordance with Art. 6 para. 1 (a) GDPR. Registration takes the form of a double opt-in. As part of the registration process, we obtain your consent and refer to our data privacy notice. You can terminate your registered status at any time afterwards, effective from then onward. To unsubscribe, click on the link at the end of the newsletter.
d. Storage period
Your e-mail address will only be saved for sending the newsletter for the period stated during your registration, or until you cancel it.
4. Facebook & Instagram
The Staatlice Insttut für Musikforschung maintains a Facebook page and an Instagram page, for which it is jointly responsible, in terms of data protection rights, with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; hereinafter Facebook Ireland) according to Art. 26 GDPR.
The material posted on the pages consists of current information, videos and images, which users can comment on and mark with emojis.
Users of Facebook can also post so-called visitor contributions on our page. The comments, emojis and contributions are publicly visible and thus the identity of the user who has posted them is publicly recognizable. Users can also send us messages that are not publicly visible.
With Facebook Page Insights, we have the option of calling up certain statistical, anonymized data on user behavior.
These show, for example, the total number of page views, “Likes”, page activity, contribution interactions, reach, video views, and contribution reach.
This feature also provides data on the Facebook groups linked to our Facebook page. Facebook creates and provides the Insights data using cookies. We can only change the period for which we want to see an evaluation.
In addition, we can choose certain settings for the target group for our posts, and these have a corresponding effect on the statistical analysis. The Insights function cannot be turned off by us.
Facebook uses the data in particular for advertising (creating personalized advertising), creating user profiles, and for market research. If a visitor to our page has a user account for the Facebook network and is logged into it when our page is accessed, the information provided by the cookies is saved on all that person’s registered devices. We have no influence over the fact that Facebook shares data with third parties, including Facebook Inc., the U.S. parent company of Facebook Ireland. This procedure is certified under the EU-US Privacy Shield and is therefore considered to be compliant with data protection requirements within the meaning of the GDPR.
Details of data processing by Facebook can be found here: https://www.facebook.com/policy.php
Data processing takes place on the basis of an agreement between the jointly responsible parties in accordance with Article 26 GDPR; Facebook Ireland is the primary entity responsible within the meaning of the GDPR (Art. 26) for the Insights data: https://www.facebook.com/legal/terms/page_controller_addendum
You can assert your rights as a data subject both against us and against Facebook Ireland.
The processing of personal data is undertaken to protect legitimate interests on the basis of Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Data processing is carried out for the purpose of effective communication with users in the context of public relations work.
5. YouTube & Vimeo
The Staatliche Institut für Muskforschung (SIM) YouTube Channel is run by Google Ireland Limited. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). The SIM-Vimeo-channel wird von der Vimeo Inc. is run by Vimeo Inc. (Vimeo, Inc. 555 West 18th Street, New York, New York 10011).
YouTube and Vimeo collect the data without informing SIM and SIM cannot influence YouTube’s an Vimeo's data collection process. The following user data is collected by YouTube an Vimeo:
- Profile information
- Transactions: Payment method
- Contents: Video, text, image, etc. along with information and metadata; communication, interaction with third party users
- Technical data Information in the course of Vimeo support: IP address, device information, search history, cookies
- Third party information: Transaction data, data from analysis tools
For details on how both companies handles user data, see the YouTube's data protection declaration and Vimeo's data protection declaration.
6. Images and videos of people on the website
It might be possible to recognize individual people in the pictures or videos on our website, In this case, the legal basis for data processing is Art. 6 para. 1 (e) GDPR in connection with Section 3 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). If you are affected in this way, you have the right to object to the use of your image.
III. The rights users of this website have
Regarding your personal data, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right of rectification and erasure (Art. 16+17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to object (Art. 21 GDPR)
- Right to data portability (Art. 20)
You also have the right to complain to a data protection supervisory authority about the way the Foundation processes of your personal data (Art. 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information (BfDI) is responsible for the Stiftung Preussischer Kulturbesitz.