Privacy Policy - BEYOND MATTER

This page is located on the server of the ZKM. Sections II – X of the Privacy Policy on the website of the ZKM apply.

I. Responsibility, data protection official and scope of this information

Responsible for the personal data collected from users when visiting our website is the

ZKM | Center for Art and Media Karlsruhe
Foundation under public law

Lorenzstraße 19
76135 Karlsruhe
Germany

Tel: +49 (0) 721/8100-0
Fax: +49 (0) 721/8100-1139
E-mail: info@zkm.de

Users (hereinafter also referred to as »you«) may also contact our Data Protection Officer with any questions regarding data protection at the ZKM (hereinafter also referred to as »we«). You can contact us by e-mail at datenschutz@zkm.de or via:

Datenschutzbeauftragte/r des ZKM
c/o V-Formation GmbH
Stephanienstr. 18
76133 Karlsruhe
Telefon: +49 (0) 721/17029034

Subject of data protection are personal data. This is all information relating to an identified or identifiable natural person (the so-called data subject) who is the user of our website or the recipient of our newsletter. Such information is, for example, details such as name or e-mail address that the user can provide when registering for our newsletter. However, we also treat information that arises during a normal visit to our website (e.g. pages called up) as personal as long as it can be assigned to the user's Internet address (IP address) or in any other way to a natural person.

All personal data is processed by the ZKM in accordance with the relevant legal provisions, in particular the General Data Protection Regulation of the EU (also called GDPR for short) and the Baden-Württemberg Data Protection Act (LDSG).

This data protection notice applies only to the websites under the domain www.zkm.de and to other ZKM websites that refer to this notice. In particular, the references do not refer to external websites of other providers to which links are provided on the ZKM website.

This privacy policy also does not apply to ZKM profiles on third party platforms such as social networks (e.g. Facebook, Twitter, Google+ or Instagram). For the profiles on these platforms, the data protection information of the respective platform operator as well as any special data protection information provided by the ZKM apply there.

If users who are not subject to or supervised by the ZKM post personal data on our website via third parties (e.g. mentioning names in blog articles), the users themselves are also responsible for this content in terms of data protection law. However, at the request of the person concerned, we will immediately delete inadmissible content from our website.

The ZKM's privacy policy is subject to regular changes, due, among other things, to the possible changing use of web technologies such as social media plug-ins. The data protection information available, when you visit the website, is authoritative in each case.

The content of any consent already given remains unaffected by any changes to the data protection information. In this case, amended data protection notices merely inform you about changed technical, organizational or legal framework conditions (such as, for example, about security measures adapted to the state of the art, new contact information or the rights of affected persons, some of which have been extended by the GDPR).

II. Data collected automatically when visiting the website

When you visit our website, the following information is usually automatically transferred from your browser to our server:

• internet address (IP address) of the requesting computer at the time of the request
• date and time of request
• accessed web pages or files
• transferred data volume
• notification as to whether the request was successful or why it may have failed (error code)
• operating system and browser software of the accessing computer, each including version
• screen resolution and color depth of the accessing computer
• browser settings like the set language
• browser plugins (JavaScript, Flash Player, Java, Silverlight, Adobe Acrobat Reader etc.)
• the previously visited website (referrer URL)
• keyword with which the website was found, for example via Google.

We process these data on the basis of our legitimate interests within the meaning of Article 6 paragraph 1 sentence 1 letter f GDPR, namely

• to provide our website,
• to maintain the technical stability and security of our website, including the detection and resolution of malfunctions (e.g. by blocking a denial of service attack originating from a particular IP address),
• for statistical evaluation of the use of the website with the aim of its demand-oriented design and improvement, and
• to check for concrete indications of illegal use (e.g. suspicion of slander in the context of a blog provided or fraud in the context of the online shop).

When you visit our website, this data is collected automatically. Without this survey, our website cannot be used. We do not use this data for the purpose of drawing conclusions about the identity of the user, unless there are concrete indications of illegal use.

Generally, the collected data will be deleted after 7 days or made completely anonymous by deleting at least parts of the IP address, unless we exceptionally need it longer for the above-mentioned purposes. In such a case, we will delete or make the data completely anonymous immediately after it has been used.

III. Cookies

Cookies are used on the website to assign an identification code to your computer. Cookies are small text files (with the identification code) that are stored on the user's computer when a website is accessed. As plain text files, cookies cannot contain viruses or other malware.

Cookies serve to make websites more comfortable, efficient and secure. We use both transient and persistent cookies:

• Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. A session cookie can be used, for example, to manage your shopping cart in our online shop.
• Persistent cookies are stored after a browser session, but automatically deleted after a specified period, which may vary depending on the cookie. You can also delete cookies at any time in the security settings of your browser.

We generally do not use cookies to draw conclusions about the identity of the user, but only to identify his computer for the purposes described above. Exceptionally, the user can also be identified if he has entered his contact data during his visit to our website during which our cookie was set (e.g. in the online shop or during the press download).

We process the data in connection with cookies on the basis of our legitimate interests within the meaning of Article 6 paragraph 1 sentence 1 letter f GDPR, namely

• to provide certain functionalities of our website and
• for the statistical evaluation of the use of the website with the aim of its demand-oriented design and improvement.

Most browsers offer the possibility to display a warning before storing a cookie, to completely refuse the acceptance of cookies and/or to delete existing cookies again. However, the usability of the website may be restricted by such settings.

If you wish to refuse the processing of your data in connection with cookies, please refuse the acceptance of cookies via your browser or proceed with Google Analytics as described in the following section.

In particular, cookies are used at the following places on beyondmatter.eu:

Matomo: The use of cookies for Matomo is described in the next session. If you confirm the active cookie hint with »OK, understood« when accessing our website, which is displayed to you independently of this data protection hint, we can also set a cookie, which means that this hint will no longer be displayed to you for a period of one year.

IV. Use of Matomo

1. scope of the processing of personal data

We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. Matomo is an open source tool for web analysis. Matomo does not collect session data without your consent.

Matomo uses cookies. These text files are stored on your computer and makes it possible to analyze the use of the website. For this purpose, the information about usage obtained by the cookie is transferred to the Matomo server of the ZKM and stored so that usage behavior can be evaluated. Your IP address is an anonymous identifier for us; we have no technical way of identifying you as a registered user with it. You remain anonymous as a user.

If you agree to web analysis using Matomo, the following data is collected when you call up individual pages of our website:

• 2 bytes of the IP address of the user's calling system.
• The web page called up
• The website from which the user accessed the accessed website (referrer)
• The subpages that are called up from the called-up website
• The time spent on the website
• The frequency with which the web page is accessed

The software runs exclusively on the servers of the ZKM. Personal data of the users is only stored there. The data is not passed on to third parties.

You can decide here whether a web analysis cookie may be stored in your browser to enable ZKM to collect and analyze statistical data.

2. legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a DSGVO.

3 Purpose of the data processing

The processing of the users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

4. duration of storage

The data is deleted as soon as it is no longer required for our recording purposes. The statistics generated and underlying data are not deleted.

5. possibility of objection and removal

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

More information on the privacy settings of the Matomo software can be found at the following link: https://matomo.org/docs/privacy/.

V. Newsletter

With your consent you can subscribe to our newsletter, with which we inform you about the program currently offered by Beyond Matter.

After entering your e-mail address and first and last name, you will receive a confirmation link by e-mail. This leads you to a »Confirmation Site«, where you can select your individual interests (from exhibitions to art education to publications) as well as topics of interest to you (from fine arts to music to natural sciences and literature). You can change these settings yourself at any time.

In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

After your confirmation, we will save the data you provide for the purpose of sending you the corresponding newsletter. The legal basis is your consent in accordance with Article 6 paragraph 1 sentence 1 letter a GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. The easiest way to cancel your subscription is to click on the link provided in each newsletter e-mail.

VI. Recipients of personal data

We will only pass on your personal data to external third parties if this is necessary for the processing or handling of your request, if we have another legal permission or if we have your consent to do so. External recipients may in particular be service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance of our website. Such contractors are carefully selected and regularly checked by us. You may only use the data for the purposes specified by us and in accordance with our instructions.

If data is transferred to entities whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure that the recipient either has an adequate level of data protection or your consent to the transfer of data prior to the transfer, except in exceptional cases permitted by law.

VII. Storing time

We store your personal data only as long as this is necessary for the fulfillment of the purposes or – in the case of a consent – as long as you do not revoke the consent. In the event of an objection, we will delete your personal data unless further processing is permitted by the relevant statutory provisions or is even mandatory (e.g. within the framework of commercial and tax storage obligations). We delete your personal data even if we are obliged to do so for legal reasons.

VIII. Rights as data subject

As a person affected by the data processing, you have numerous rights at your disposal. In particular, these are:

• Right of information (Article 15 GDPR): You have the right to obtain information about your personal data stored by us.
• Right of rectification (Article 16 GDPR): You can ask us to rectify incorrect data.
• Right of deletion (Article 17 GDPR): You may request us to delete data that has been processed illegally in particular.
• Restriction of processing (Article 18 GDPR): You may require us to restrict the processing of your data, in particular to »block« data whose processing is controversial.
• Data transferability (Article 20 GDPR): If you have provided us with data on the basis of a contract or consent, you may request that you receive the data you have provided in a structured, current and machine-readable format or that we transmit it to another person responsible.
• Objection to data processing on the legal basis of »legitimate interest« (Article 21 GDPR): You have the right to refuse data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of »legitimate interest«. If you exercise your right of objection, we will stop processing your data unless we can prove compelling reasons worthy of protection for further processing, which outweigh your rights. In the case of direct advertising or the use of cookies due to justified interests, we will generally observe your objection and stop the corresponding processing of your data. If you object to cookies, please note that you must take certain precautions in your browser as described above.
• Revocation of consent (Article 7(3) GDPR): If you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.
• Right of appeal to the supervisory authority (Article 77 GDPR): You may also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

You are only entitled to the rights described above on condition that the legal requirements applicable in this respect are fulfilled, even if this is not expressly mentioned in the above description.

If you have any questions regarding the processing of your personal data, your rights as a person concerned or any consent you may contact us free of charge. To exercise all your aforementioned rights, please contact community@zkm.de or write to the address indicated in Section I above. Please ensure that we can uniquely identify you. You can also contact our data protection officer, also under the contact details mentioned in Section I.