Data privacy statement

1. Data protection at a glance

General information

The following information provides a general overview of what happens to your personal data when you visit our website. Personal data are all data that can be used to identify you personally. For more detailed information about data protection, please see our Data privacy statement listed below this text.

We have appointed as external data protection officer

c/o activeMind AG
Potsdamer Street 3
80802 Munich
Technology Consulting: 089 / 919294-900
E-mail: datenschutz@stbg.bayern.de

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is performed by the website operator. The website operator’s contact data is available in the imprint of this website.

How do we collect your data?

Your data will be collected when you provide it to us. This can include, for example, information provided in a contact form.

Other data are automatically collected when you visit the website via our IT systems. In particular, these include technical data (e.g. Internet browser, operating system or time of site visit). The collection of this data takes place automatically as soon as you access our website.

How do we use your data?

Some of the data are collected to ensure error-free functionality of the website. Other data can be used for the analysis of your user behaviour.

What rights do you have regarding your data?

You have the right at any time to demand from us free information about the origin, recipients and purpose of your collected personal data. You also have the right to demand the correction, blockage or deletion of this data. If you have any questions regarding this or other questions regarding data protection, you can contact us at any time via the address provided in the imprint. You also have the right to legal remedy with the responsible regulatory authority.

In addition, you also have the right to demand the restricted processing of your personal data in certain circumstances. For more details, see “Right to the restriction of processing” in the data privacy statement.

Analysis tools and tools from third party providers

When you visit our website, your surfing behaviour can be statistically evaluated. In particular, this takes place using cookies and so-called analysis programs. The analysis of your surfing behaviour generally takes place anonymously; the surfing behaviour cannot be traced back to you.

You can object to this analysis or you can prevent it through the non-use of certain tools. You can find detailed information about these tools and your objection options in the following data privacy statement.

2. General information and obligatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and according to legal data protection regulations as well as in accord with this data protection statement.

Different kinds of personal data are collected when you use this website. Personal data are data that can be used to identify you personally. This data protection statement explains which data we collect and how we use it. It also explains how and for what purpose this takes place.

We must point out that data transmission via the Internet (e.g. communicating via email) can have security gaps. The complete protection of data against access by third parties is not possible.

Information about the responsible body

The responsible body for data processing on this website is:

Dachau Concentration Camp Memorial Site
Alte Römerstrasse 75
85221 Dachau

Telephone: +49 (0)8131 669 970
Email: info@kz-gedenkstaette-dachau.de

The responsible body is the natural or legal person who decides on his own or jointly with others regarding the purpose and means of the processing of personal data (e.g. names, email addresses, etc.).

Revoking your consent to data processing

Many data processing processes are only possible with your explicit consent. You can revoke consent to this at any time. This merely requires an informal notification to us via email. The legality of the data processing that took place up to the revocation remains unaffected.

Right to legal remedy with the responsible regulatory authority

In case of violation of GDPR, the affected party has the right to legal remedy with a regulatory authority, in particular, in the member state of the habitual residence, place of work or location of the suspected violation. The right to legal remedy stays in effect regardless of other administrative or judicial remedies.

Here you will find a list of supervisory authorities for the non-public sector.

Right to data portability

You have the right to have the data that we process automatically based on your consent or for the fulfilment of a contract handed over to you or a third party in a structured, accessible and machine-readable format. If you demand that your data be transmitted directly to another controller, then this is carried out insofar as technically feasible.

SSL and/or TLS encryption

This site uses SSL and/or TLS encryption for security reasons and to protect the transmission of confidential contents such as orders or queries that you send to us as site operator. You can recognise an encrypted connection by looking at the address line in your browser. It changes from “http://” to “https://” and there is a lock symbol in your browser line.

When the SSL and/or TLS encryption is activated, the data that you send to us cannot be read by third parties.

Information, blockage, deletion and correction

Within the scope of legal provisions, you have the right at any time to free information about the personal data saved about you, its origins and recipients and the purpose of the data processing and, if necessary, the right to correction, blockage or deletion of this data. If you have any questions regarding the subject of personal data, you can contact us at any time via the address provided in the imprint.

Right to the restriction of processing

You have the right to demand the restricted processing of your personal data. You can contact us for this purpose at any time via the address provided in the imprint. You have the right to the restriction of processing in the following cases:

• If you contest the accuracy of the personal data stored by us, we will then take time to check this. You then have the right to demand the restricted processing of your personal data during this period.
• If the processing of your personal data is/was unlawful, you can demand the restriction of data processing instead of its deletion.
• When we no longer need your personal data, but you still need this data for the establishment, exercise or defence of legal claims, you have the right to demand the restricted processing of your personal data instead of deletion.
• If you make an objection as per Art. 21 Sec. 1 GDPR, then a balance between your interests and our interests must be made. As long as it has not yet been determined whose interests prevail, you have the right to demand the restricted processing of your personal data.

Where you have restricted the processing of your personal data, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3. Data collection on our website

Cookies

Internet sites sometimes use so-called cookies. Cookies will not harm your computer nor do they contain any viruses. Cookies are used to help make our website more user-friendly, effective and secure. Cookies are small text files saved to your computer by your browser.

The most often used cookies are so-called ”session cookies”. They are deleted automatically at the end of your visit. Other cookies remain saved on your end device until you delete them. These cookies enable us to recognise your browser the next time you visit.

Your browser contains settings regarding the use of cookies: you can receive a notification as to whether or not to allow cookies to be saved, allow cookies only for specific cases or generally exclude them as well as delete cookies when closing the browser. If you deactivate cookies, the functionality of this website can be impaired.

Cookies that are required to implement the electronic communication process or provide specific functions desired by you (e.g. shopping basket function) are saved based on Art. 6 Sec. 1 (f) GDPR. The website operator has a legitimate interest in the saving of cookies to ensure trouble-free and optimised provisioning of his services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are saved, this will be handled separately in this data privacy statement.

Server log files

The site provider automatically collects and saves information in so-called server log files, which are provided to us automatically by your browser. This includes:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address

This data will not be combined with other data sources.

This data is collected based on Art. 6 Sec. 1 (f) GDPR. The website operator has a legitimate interest in the trouble-free representation and optimisation of his website – server log files must be collected for this purpose.

Contact form

When you use the contact form to contact us with queries, your information from the query form, including the contact data entered by you there, will be saved by us for the purpose of processing the query and for any follow-up questions that may arise. We will not forward this data without your consent.

The processing of the data entered in the contact form is carried out exclusively based on your consent (Art. 6 Sec. 1 (a) GDPR). You can revoke your consent at any time. This merely requires an informal notification to us via email. The legality of the data processing processes that took place up to the revocation remains unaffected.

The data entered by you in the contact form remain with us until you demand its deletion, revoke your consent to storage or there is no longer any reason to store the data (e.g. after the completed processing of your query). Mandatory legal provisions – especially retention periods – remain unaffected.

Newsletter

Your data will only be used to send you the subscribed newsletter by e-mail.

In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure (DOI procedure) for online registration. This means that following your newsletter registration, you will receive an e-mail in which you must confirm your newsletter registration again.

The legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.

We may use service providers who act as our processors to send the newsletter. All service providers are contractually obliged to treat your data confidentially.

Data will only be processed in this context as long as the corresponding consent has been obtained.

The provision of your personal data is voluntary, solely on the basis of your consent. You will not suffer any disadvantages. Unfortunately, we cannot send you our newsletter without your consent.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also revoke your consent using the other contact options provided on the website.

Queries via email, telephone or fax

When you contact us via email, telephone or fax, your query is saved and processed by us, including all personal data collected from it (name, query) for the purpose of processing your request. We will not forward this data without your consent.

The processing of this data is carried out based on Art. 6 Sec. 1 (b) GDPR provided that your query relates to the fulfilment of a contract or is required for performing pre-contractual measures. In all other cases, the processing of your data is based on your consent (Art. 6 Sec. 1 (a) GDPR) and/or our legitimate interests (Art. 6 Sec. 1 (f) GDPR) because we have a legitimate interest in the effective processing of queries made to us.

The data sent by you to us via contact queries remain with us until you demand its deletion, you revoke your consent to storage or the purpose for the data storage has lapsed (e.g. once the processing of your concern has been completed). Mandatory legal provisions – especially legal retention periods – remain unaffected.

4. Analysis tools and advertising

Matomo (formerly Piwik)

This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies”. These are text files that are saved to your computer and enable the analysis of the website’s use. The information generated by the cookie about the use of this website is saved to our server. The IP address is anonymised before saving.

Matomo cookies remain saved on your end device until you delete them.

The saving of Matomo cookies and the use of this analysis tool is based on Art. 6 Sec. 1 (f) GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise his website as well as his advertising.

The information generated by the cookie about the use of this website is not forwarded to third parties. You can prevent the saving of cookies via the respective setting in your browser software; however, we must advise you that some of the functions of this website may not be fully accessible in this case.

If you do not agree to the saving and use of your data, you can deactivate the saving and use here.

In this case, an opt-out cookie will be saved to your browser that prevents Matomo from saving usage data. When you delete your cookies, this will also delete the Matomo opt-out cookie. The opt-out cookie must then be reactivated the next time you visit our site.