Data Privacy Policy
1. Data Privacy Policy at a Glance
General Information
In the following data privacy policy, we inform you about the extent and use of the personal data we collect and process within the framework of our website.
Personal data is any data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.
Data collection on our Website
Who is responsible for the data collection?
This data privacy information applies to the data processing by the controller of this website.
You can find the contact details of the controller in the site credits of this website.
How do we collect your data?
When you access our websites, the browser used on your terminal automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. Without any action on your part, information is collected and stored until it is automatically deleted.
For which purpose do we collect your data?
One part of your data is used to guarantee the trouble-free establishment of the website connection. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to request the correction, blocking or erasure of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the site credits. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and tools of third parties
When visiting our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following privacy policy.
You can object to this analysis. We will inform you about the objection options in this privacy policy.
2. General Notes and Mandatory Information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Note on the responsible party
Responsible for the data collection on this website is
Stiftung Gedenkstätten Buchenwald und Mittelbau-Dora
99427 Weimar
Phone: +49 (0)3643-430-0
e-mail: sekretariat@buchenwald.de
Authorised representative:
The Buchenwald and Mittelbau-Dora Memorials Foundation is legally represented by its director, Prof. Dr. Jens-Christian Wagner.
Right of objection
Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct marketing (Art. 21 DSGVO)
Insofar as your personal data is processed on the basis of justified interests in accordance with Art. 6 (1), sentence 1, lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data if there are reasons arising from your particular situation or the objection is against direct marketing. In the latter case, you have a general right of objection that we will implement without reference to a particular situation.
If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) DSGVO).
Right of complaint to the competent supervisory authority
In the event of violations of the GDPR, data subjects shall have a right of complaint to a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right of appeal is without prejudice to other administrative or judicial remedies.
Right to data transfer
You have the right to have data, that we process automatically on the basis of your consent or in fulfillment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, blocking, erasure and correction
Within the framework of the applicable legal provisions, you have the right at any time to obtain information about your stored personal data, its origin and recipient, and the purpose of data processing and, if necessary, a right to correction, blocking or erasure of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the site credits.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the site credits. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has happened / is happening unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
3. Data Collection on our Website
Cookies
We use cookies on our website. These are small files automatically created by your browser and stored on your terminal (laptop, tablet, smartphone, etc.) when you visit our website. Cookies will not cause any damage to your device, and contain no viruses, Trojans or other malware.
The cookie stores information that arises in connection with the specifically used device. This does not mean, however, that we receive direct knowledge of your identity.
We use cookies, on the one hand, to make the use of our website more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically erased when you leave the website.
In addition, to optimize the user-friendliness of our website, we also use temporary cookies. These are stored for a specifically determined time on your device. If you visit our website again to use our services, it is automatically recognized that you were here before, and which entries and settings you made so that you do not have to make them again.
On the other hand, we also use cookies in order to analyze the use of our website statistically and to evaluate it for the purpose of optimizing our services for you (see section 5). When you visit our website again, these cookies allow us to recognize automatically that you have already visited the site. These cookies are automatically erased after a specifically defined time.
The data processed by cookies are necessary for the stated purposes to protect our legitimate interests and those of third parties for the technically flawless and optimized provision of services in accordance with Art. 6 (1), sentence 1, lit. f GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are stored on your computer or that you always receive a notice before a new cookie is stored. The complete deactivation of cookies can, however, mean that you will not be able to use all of the functions of our website.
Server-log file
When you access our websites www.buchenwald.de or www.dora.de or any other URLs associated with this domain (hereinafter: the website), the browser used on your terminal automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. Without any action on your part, information is collected and stored until it is automatically deleted:
IP address of the requesting computer
date and time of the access
name and URL of the accessed file
website from which the access is made (referrer URL)
browser used and, as applicable, the operating system of your computer and the name of your access provider
The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
4. Analysis Tools and Advertising
Our website uses the open-source software Matomo (formerly Piwik). Matomo is a web analysis tool for the statistical evaluation of the use of the website. For the analysis, the usage information (including the abbreviated IP address) generated by a Matomo cookie (see subsection 2.1.1. for the definition of “cookie”) is transferred to our server, where it is summarized and stored in pseudonymized usage profiles for usage analysis purposes. The information is used to evaluate the use of our website and to allow a user-friendly design of our website. The information will not be passed on to third parties.
Under no circumstances is the IP address connected with any other data concerning the user. The IP addresses are anonymized so that identification is not possible (IP masking).
Your visit to this website is recorded by the Matomo web analysis tool. Go to https://matomo.org/docs/privacy/) to stop the recording of your visit.
This measure is carried out on the basis of Art. 6 (1), sentence 1, lit. f GDPR. With the tracking measures used, we want to ensure the user-friendly design and continuous optimization of our website. We also use tracking measures to analyze the use of our website statistically and to evaluate it for the purpose of optimization. These interests can be regarded as legitimate within the meaning of the aforementioned regulation.
Copyright
We reserve the right, in the event of serious violations of our terms of use and in the event of unauthorized access or attempted access to our servers with the aid of individual data records, to initiate a derivation to personal data.
Jena, 24 February 2022.