Data protection

Data protection declaration in accordance with article 13 GDPR

1. Introduction

This internet offer is made available by “The Tansey Miniatures Foundation”. In the following we will inform you in accordance with article 13 of the EU General Data Protection Regulation (GDPR) about how your personal data is processed when you access and use our website.

2. Responsibilities

You can find the names and contact details of the responsible persons in our imprint.

3. Processing of Personal Data

3.1. Operation of the website

3.1.1 Type and scope of the personal data that is collected

The following information that your browser automatically transfers to us is processed and collected when you visit our website:

- Information about the type of browser and the version used
- The user’s operating system
- The user’s internet-service-provider
- The user’s IP-address
- Date and time the website was accessed
- Websites from which the user’s system accesses out internet page
- Websites which are accessed by the user via our website

3.1.2 Purpose and legal basis for the collection and processing of personal data

Your personal data is processed, making it possible for you to use the website and for the website to operate smoothly (justifiable interests: presentation of the service profile of the responsible persons and the possibility to easily make contact due to members and interested people) in accordance with article 6 clause 1 letter f GDPR.

The data is also stored in the logfiles of our system. This data is not stored together with other personal data of the user.

3.1.3 Recipients or categories of recipients

Our website is hosted at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. The personal data is forwarded if this action is necessary to defend against criminal offences and/or if we are otherwise legally required to do so.

3.1.4 Duration of storage

The personal data is automatically deleted 2 weeks after the connection, as long as legal storage periods do not require otherwise.

3.1.5 Right to erasure, objection and correction

It is necessary to collect data in order to make the website available and also to store data in logfiles to operate the website. Therefore, the user has no right to have the possibility to delete, object to or have a correction carried out.

3.2.Use of Cookies

3.2.1 Type and scope of the processing of personal data

Our website uses cookies to provide you with a convenient and feature-rich online service and to verify your rights to use the services provided. Cookies are text files that contain information to identify repeat visitors solely for the duration of their visit to the website. Cookies are stored on the hard drive of your computer and do not cause any harm there.
The cookies of the website contain personal data. Cookies save you the trouble of entering the data many times, facilitate the transfer of specific content and help us to identify which areas of our website are particularly popular. You help us to constantly improve the structure and content of our website.
Following cookies are stored on your end device:

Typ: Session Cookies

Name: PHPSESSID
Function: We use “session cookies” to improve our services for our visitors and to facilitate surfing on our website. Deleting or blocking these cookies does not impair the use of the site and its functions.
Duration of storage: one hour.

It is also possible to use our online services without cookies. Most browsers are configured so that they automatically accept cookies. The storage of cookies can be deactivated, or the browser can be configured to notify you as soon as cookies are sent.

3.2.2. Purpose and legal grounds for the processing of personal data

The legal grounds for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR. (Justified interest: analysis of your surfing behaviour for the optimization of our website). The legal grounds for the processing of personal data using cookies for analytical purposes is the presence of the user’s consent in this regard Art. 6 Abs. 1 lit. a GDPR. In this case, we ask for your consent before placing cookies on the website.

3.2.3. Duration of storage, possibility to object and eliminate

Cookies are stored on the user’s computer and are transmitted from this device to our website. Therefore, you, as the user, also have complete control over the use of cookies. By adjusting the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, all of the functions of the website might not be able to be used fully.

3.3. Measuring scope with Google Tag Manager in connection with Google Analytics

3.3.1. Type and scope of the processing of personal data

On this website we use the components of Google Analytics (with anonymizing function). Google Analytics is a web-analysis-service. This is integrated via the Google Tag Manager. Web analysis is the collection and evaluation of data about the behaviour of visitors of websites. A web analysis service captures, amongst others, data about the website from which an affected person came to a website (so-called referrer), which subsites of the website were accessed or how often and for how long a subsite was looked at. A web analysis is used predominantly to optimize a website and for the cost-benefit analysis of internet advertising.

The person responsible for the processing uses the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. By using this addition, the IP-address of the internet connection of the person affected is shortened by Google and anonymized, if the access to our website takes place from a member state of the European Union or from another signatory state to the European Economic Area Treaty.

Google Analytics places a cookie on your computer. By placing the cookie, Google is able to carry out an analysis of the use of our website. Every visit to an individual page of the website that is operated by the persons responsible for processing and onto which a Google-Analytics-Component was integrated, triggers the internet browser on the IT system of the affected person to transmit data for the purpose of the online analysis to Google. This is automatically triggered by the respective Google Analytics Components. Within the scope of this technical process, Google receives knowledge of personal data such as the IP-address of the affected person, which Google uses to comprehend the origin of the visitors and clicks and to enable commission settlements as a result.

By means of the cookies, personal data such as the time the website was accessed, the location from where the access took place and the frequency of visits to our website by the person affected, is stored. With every visit to our website, this personal data, including the IP address of the internet connection used by person affected, is transmitted to Google in the USA. In certain circumstances, Google may pass on the personal data collected in this technical process to third parties.

3.3.2. Purpose and legal basis of the processing

The processing of personal data of the user enables us to analyse the surfing behaviour of the users on our website. We are able to compile information about the use of the individual components of our website as a result of evaluating the acquired data. This helps us to constantly improve our website and its user-friendliness. Our justified interest lies in these purposes in the processing of data according to Art. 6 Para 1 lit. f GDPR. By anonymizing the IP address, the user’s interests in regard to the protection of their personal data are sufficiently taken into account.

3.3.3. Recipient or categories of recipients

The operating company of the Google-Analytics-Components is the “Google LLC”, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

3.3.4. Duration of storage and – if applicable - criteria for the determination of the duration of storage

The data is deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this applies after 14 months.

3.3.5. Transfers to a third country and the presence of the adequacy resolution

The personal data is transmitted to a third country. The European Commission decided, in their adequacy resolution (EU) 2016/1250 of 12^thJuly 2016 (EU-US-data protection sign) that there is an adequate data protection level in the USA. You can find the appropriate certificate here.

3.3.6. Right to erasure, objection and correction

The person affected can prevent cookies from being placed by our website at any time by configuring the internet browser used and thus permanently objecting to the placement of cookies. Such a configuration of the used internet browser would also prevent Google from placing a cookie on the IT system of the person affected. Additionally, a cookie already placed by Google Analytics can be erased via the internet browser or another software program at any time.

Furthermore, there is the possibility for those persons affected to object to data that is captured by Google Analytics and that relates to a use of this website being processed by Google. Thus, this capture and processing can be prevented.

To do this, the person affected must download a browser add-on using the link and install it. This browser add-on tells Google Analytics via JavaScript that no information on the website visits may be transmitted to Google Analytics. The installation of the browser add-on is classified as an objection by Google. If the IT system of the affected person is deleted, formatted or reinstalled at a later point in time, the person affected must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the person affected or another person ascribed to the sphere of influence, then there is the possibility of reinstallation or reactivation of the browser add-on.

Further information and Google’s applicable data protection regulations can be requested under https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html.Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/ genauer erläutert.

3.4. Displaying videos

3.4.1. Type and scope of processing personal data

The data is used to play the videos. YouTube videos are only activated when you have given us your consent to the activation by opening the website. In this case, the legal grounds for the processing of the data corresponds to Art. 6 Paragraph 1 letter a GDPR.

3.4.2. Purposes and methods of processing

3.4.3.Transmission of your data to a recipient in a third country

By clicking the YouTube button (“Watch on YouTube now”), the video is downloaded from the YouTube platform, thereby transmitting your personal data to the company “YouTube LLC”, 901 Cherry Avenue, San Bruno, CA 94066, USA,represented by “Google LLC”, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Hereby, the information regarding which of our websites you have visited is transmitted. If you are logged-in as a member of YouTube, YouTube will assign this information to your personal user account. By using this service, such as clicking the start button of a video, this information is also assigned to your user account. With their adequacy resolution (EU) 2016/1250 of 12 July 2016 (EU-US Privacy Shield), the European Commission decided that the US data protection level is appropriate. See here for the appropriate certificate.

3.4.4. Storage time and – if applicable – criteria for determination of storage time

We are not aware of how long the data mentioned above is stored by Google.

3.4.5. Right of erasure, objection and correction

You may also prevent data from being assigned to your account by signing out of your YouTube user account and all other user accounts of the companies “YouTube LLC” and “Google LLC” and by deleting the relevant cookies of these companies. You may also prevent videos being played by deactivating the functionality of “JavaScript” in your browser.

3.4.6. Consequences of not providing data

Please be advised that by deactivating JavaScript you will not be able to watch the videos.

3.4.7. Further information

For further information with regard to the processing of data and information about data protection by YouTube, see www.google.de/intl/de/policies/privacy/.

3.5. Display of geographical maps

In order to show you where our exhibitions take place and to help you find the way, our website uses Google Maps at various places.

3.5.1. Type and scope of processing personal data

By opening this website, personal data is automatically transmitted to the service provider, in accordance with point 2.1.a.

3.5.2. Purposes and legal basis of processing data

Your personal data is processed to display the position of our exhibitions (justified interest in accordance with Art. 6 Paragraph 1 letter f GDPR) – implementation is in progress.

3.5.3. Recipient or categories of recipients

By clicking the appropriate website, “Google LLC”, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, receives the data mentioned above and, thereby, the information on which of our websites you have visited. If you are logged in as a member of Google LLC, Google Maps will assign this information to your personal user account. With their adequacy resolution (EU) 2016/1250 of 12 July 2016 (EU-US Privacy Shield), the European Commission has decided that the US data protection level is appropriate. See here for the corresponding certificate. It is technically possible for Google to be able to identify at least individual users on the basis of the data received. We have no control over the fact that Google processes personal data and personal profiles of the users of the website for other purposes.

3.5.4. Storage time and – if applicable – criteria for determination of storage time

We are unaware how long the data mentioned above is stored by Google.

3.5.5. Transmission to a third country and the existence of the adequacy resolution

The personal data is transmitted to a third country. With their adequacy resolution (EU) 2016/1250 of 12 July 2016 (EU-US Privacy Shield), the European Commission decided that the US data protection level is appropriate. You may apply for further information by approaching our data protection supervisor in writing.

3.5.6. Miscellaneous

If you do not consent to the transmission of data to Google, you may not visit the subpages that are connected to Google Maps on our website. You have the option to easily deactivate Google Maps and thus to prevent the data transfer to Google. Deactivate JavaScript in your browser. However, please be advised that by deactivating JavaScript, you may not use the display of the map. You can find further information on this matter in Google Map's terms of use and Google’s data protection statement.

4. Rights of the persons affected

You have various rights with regard to the handling of your personal data, such as the right to information about the stored data, or the right of correction, the right to restrict the processing of data, the data transferability right, the right of objection or of erasure of your data. If you have questions concerning the assertion of your rights, please approach our data protection supervisor in writing.

5. Right of complaint to the supervisory authority

You have the right to file a complaint to the following supervisory authority, if you think that the processing of your personal data violates the applicable data protection laws:
Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

6. Links to other websites

Our website contains links to other websites. We have no control over whether the operators of these websites observe the data protection regulations. Although the content is carefully checked beforehand, we cannot assume no liability for the third-party content of external links.

7. Validitiy and update of data protection declaration

Changes to our website or the implementation of new technology may require future amendments to this declaration. We recommend reading the respective current data protection declaration.

Celle, 25 May 2018