Banality of Evil

This privacy policy is valid for the website boeart.org (hereinafter referred to as “website”), operated by
+Art e.V., Neue Kreisstrasse 23, D 14109 Berlin
(hereinafter referred to as “+Art”), and does not cover any linked third-party websites.

The website is operated in accordance with the applicable laws on data protection and data security, in particular the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and the data-protection regulations of the Telecommunications Act (TKG).

In the following we explain what information is collected, what happens to personal data, how the latter is collected, processed and used, and the extent to which users can influence the use of this data.

‍

The controller according to Article 4 (7) of the GDPR is +Art e.V., Neue Kreisstrasse 23, D14109 Berlin [email protected] (see our Imprint).

You can contact the Data Protection Officer at [email protected] or at +Art e.V.’s postal address by marking correspondence for the attention of “the Data Protection Officer”.

When using the website for information purposes only – that is, if users do not register or otherwise transmit information to +Art. +Art only collects personal data that the users’ browsers transmit to +Art’s server. If users wish to view the website, +Art collects the following data that is technically necessary in order to display the website and to guarantee its stability and security (the legal basis in this regard is Article 6 (1) sentence 1 lit. f of the GDPR):
IP address in anonymised form that cannot provide information on a specific user,
date and time of the request,
time zone difference to Greenwich Mean Time (GMT),
content of the request (specific page),
access status / HTTP status code,
amount of data transferred in each case,
website from which access was requested,
browser,
operating system and its interface,
language and version of the browser software.
‍
The legal basis for data processing is Article 6 (1) sentence 1 lit. f of the GDPR. +Art’s legitimate interest follows from the purposes for data collection as listed above. Under no circumstances will +Art use the collected data for the purpose of drawing conclusions about the user’s identity.

Personal data that users transmit to +Art, in particular their names, addresses, phone numbers, email addresses, and information on age or profession, is only collected, stored, processed and used if this is necessary for concluding, defining or changing the contractual relationship with +Art concerning the use of services, as well as to enable the use of services, and also where there is a legal duty of disclosure (Article 6 (1) sentence 1 lit. b and c of the GDPR).
‍

+Art does not disclose the personal data of users to third parties, unless users have previously given their express consent, for instance for advertising campaigns (Article 6 (1) sentence 1 lit. a of the GDPR), or there is a legal obligation to disclose this data (Article 6 (1) sentence 1 lit. c of the GDPR).

By giving their consent, users can subscribe to the +Art newsletter, which informs them about events and provides background information and news on this centre for shaping the future.
+Art applies the so-called double-opt-in procedure for subscriptions to the newsletter. This means that +Art sends users an email to the email address they provided as part of their registration, asking them to confirm their request to receive the newsletter. In the event that users fail to confirm their registration within one month, any information concerning them will be frozen and automatically deleted after one month. Furthermore, +Art stores the IP address, date/time and the URL of the registration as well as the IP address and time of confirmation. The purpose of the procedure is to be able to provide evidence of users’ registration and, if necessary, to clarify possible misuse of their personal data.
The mandatory details that need to be provided to enable the sending of the newsletter are the email address together with whatever further user details are requested in the form. Following confirmation on the part of users, +Art stores users’ email addresses, and whatever other data has been provided, for the purpose of sending them the newsletter. The legal basis in this regard is Article 6 (1) sentence 1 lit. a of the GDPR.
Users may at any time revoke their consent to receiving the newsletter and unsubscribe from the latter. This revocation can be made by clicking on the link provided in every newsletter email, by sending an email to [email protected] / [email protected] or by notifying +Art via the contact details given in the imprint.

By providing their consent, and by means of the contact forms provided on the website, users can sign up for an email distribution list (such as the press distribution list) to receive further information and to keep themselves up to date with selected news regarding the +Art.
The mandatory details that need to be provided to enable the transmission of such news and information are the user’s email address and whatever further details are requested in the contact form and which are specifically highlighted therein as mandatory. Following confirmation on the part of users, +Art stores users’ email addresses, and whatever other data has been provided, for the purpose of sending them the requested information. The legal basis in this regard is Article 6 (1) sentence 1 lit. a of the GDPR. Furthermore, +Art stores the IP address, date/time and URL of the registration as well as the IP address and time of confirmation. The purpose of the procedure is to be able to provide evidence of users’ registration and, if necessary, to clarify possible misuse of their personal data.
At any time, users may revoke their consent to being included in a mailing list and being sent information by unsubscribing from the email service. This revocation can be made by clicking on the link provided in every email, by sending an email to [email protected] or by notifying +Art via the contact details given in the imprint.

‍

+Art uses cookies on its website. These are small files, automatically created by the users’ browsers, that are stored on the terminal devices (laptop, tablet, smart phone, etc.) of users when they visit the website. Cookies do not damage terminal devices, nor do they contain viruses, Trojans or other malware.
The information stored in the cookies is provided by the terminal device used in each specific case. However, this does not mean that +Art would thereby obtain instant knowledge about users’ identities. For one thing, the use of cookies serves the purpose of providing users with a more pleasant experience when using +Art’s services. For example, +Art uses so-called session cookies to determine whether users have already visited individual pages of the website. These session cookies are automatically deleted after users have left the website.
In order to optimise user-friendliness, +Art also uses temporary cookies that are stored on users’ terminal devices for a specified period of time. If users revisit the website in order to use services, it will be automatically recognised that they have already been to the website; in addition, users’ previous entries and settings will be restored so that they do not need to be entered again.
Beyond this, +Art uses cookies to capture a statistical picture of use of the website and to evaluate the latter for the purpose of optimising its services. When users revisit the website, these cookies enable +Art to recognise automatically that they have already visited the website at some point. These cookies are automatically deleted after a defined period of time.
The data processed by cookies is required for the purposes mentioned to protect the legitimate interests of +Art and third parties pursuant to Article 6 (1) sentence 1 lit. f of the GDPR.
Most browsers accept cookies by default. However, users can configure their browsers in such a way that no cookies are stored on their terminal devices or that a message appears any time a new cookie is about to be created. The complete disablement of cookies, however, may result in users not being able to use all the functions of the website.
‍

For the purpose of adequately designing and continuously optimising its website, +Art also uses Google Analytics, a web analysis service by Google Inc. (hereinafter referred to as “Google”).
Google Analytics uses so-called “cookies”, which allow an analysis of users’ use of the website. The information generated by the cookies with regard to the use of the website (including users’ IP addresses, which, however, are shortened using the “_anonymizeIp()” method so that they can no longer provide information about users’ locations) is transferred to a Google server in the USA and stored there. Google will use this information to evaluate the use of the website by users, to compile reports on website activities for the website operator +Art, and to provide further services associated with the use of the website and the Internet. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate users’ IP addresses with other Google data. By using this website, users agree to the processing of the data collected about them by Google in the manner and for the purpose described above.
Users may prevent the storage of cookies by selecting the appropriate settings on their browsers; however, +Art advises its users that in this case they may not be able to use the website in all its functions. Users may also prevent Google from collecting and processing the data generated by the cookie and relating to their use of the website (including their IP addresses) by means of downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
+Art uses Google Analytics to analyse and regularly improve the usability of the website. The statistics obtained enable +Art to improve its services and to make them more interesting to users. With regard to the exceptional cases in which personal data is transferred to the USA, Google has submitted itself to the EU-US Privacy Shield, https://www.privacy-shield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6 (1) sentence 1 lit. f of the GDPR.
As an alternative to the browser add-on, or within browsers on mobile devices, users may click on this link to prevent Google Analytics from collecting data within this website in the future. In doing so, an opt-out cookie will be stored on the user device. In the event that users delete their cookies, they must click on this link again.
Information provided by the third-party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de, overview of information on data privacy: http://www.google.com/intl/de/analytics/learn/privacy, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
Google Analytics Tracking
Your visit to this website is currently registered from Google Analytics. Click here if you do not want your visit to be tracked anymore.

+Art uses Google Maps on the website. With this, +Art can provide users with an interactive map on the website itself that enables them to use the map function conveniently.
With each visit to the website, the information that a user has called up the corresponding subpage of the website is sent to Google. In addition, the data mentioned under Section 5 of this declaration is transmitted. This happens regardless of whether Google has provided the user account which the user is signed into, or whether a user account exists in the first place. If users are logged into their Google accounts, the collected data will be directly connected to their accounts. Users who do not wish to have data connected to their Google profiles must log out before activating the button. Google stores data in the form of user profiles and uses the latter for the purposes of advertising, market research and/or the demand-oriented designing of its website. In particular (even in the event that users are not logged-in), such evaluation takes place to provide users with demand-oriented advertising and to inform other users in the social network about user activities on the website. Users have the right to object to the creation of their user profiles, but must contact Google to exercise this right.
Further information on the purpose and scope of the collection and processing of data by the plug-in provider can be found in the provider’s privacy policies. There, users can also inform themselves on the rights and choices they have with regard to their privacy settings: https://policies.google.com/privacy?hl=en&gl=de. Google also processes personal user data in the USA and has submitted itself to the EU-US Privacy Shield, http://www.privacyshield.gov/EU-US-Framework.

‍

+Art currently uses social media plug-ins from Facebook, Twitter, YouTube and Instagram. In this context, +Art applies the so-called two-click solution. This means that no personal data of users visiting the website is initially passed on to the providers of the plug-ins. Users can recognise the provider of the plug-in either by its name as displayed in the box, by its initial letter or by its logo. Via buttons, +Art gives users the opportunity to communicate directly with the plug-in providers. Only if users click on the highlighted button, and thereby activate it, will the plug-in provider receive the information that users called up the corresponding webpage of +Art’s online offerings. Apart from this, the data mentioned under Section 2 of this declaration will be transmitted. In the case of Facebook, IP addresses collected in Germany are anonymised immediately after their collection according to the relevant providers. Therefore, by activating the plug-in, personal user data is transmitted to, and stored with, the respective plug-in provider (in the case of US providers, in the USA). Since the plug-in provider collects data, in particular, by means of cookies, +Art recommends that users delete all cookies, using the security settings of their browsers, before clicking on the button.
+Art has no influence on the collection and processing of data, nor is +Art aware of the full extent of the data collection, the purposes of the data processing, and the storage periods. +Art also has no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores collected user data in the form of user profiles and uses the latter for the purposes of advertising, market research and/or the demand-oriented designing of its website. In particular (even in the event that users are not logged-in), such evaluation takes place to provide users with demand-oriented advertising and to inform other users in the social network about user activities on the website. Users have the right to object to the creation of such user profiles, but must contact the respective plug-in provider to exercise this right.By means of using plug-ins, +Art provides users with the opportunity to interact with social networks and other users, thereby improving its own service and making it more interesting for users. The legal basis for the use of plug-ins is Article 6 (1) sentence 1 lit. f of the GDPR.Data transfer takes place regardless of whether users have an account with the plug-in provider and whether they are logged into their accounts. If users are logged into their accounts with the plug-in provider, their data collected while using the +Art website is directly connected to their accounts existing with the plug-in provider. If users click the activate button, and thereby link, for instance, the webpage, then the plug-in provider will store this information in their user accounts and communicate it publicly to their contacts. +Art recommends that users regularly log out from their accounts after using a social network, especially, however, before activating the button, since in this way they can avoid having their data connected to their profiles with the plug-in provider.Further information on the purpose and scope of the collection and processing of data by the plug-in provider can be found in the following privacy policies of these providers. There, users can also inform themselves on the rights and choices they have with regard to their privacy settings.Addresses of the respective plug-in providers and URL with their information regarding data protection:a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on the collection of data: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/... and http://vvvvw.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.b) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.c) YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA; subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.d) Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA; https://help.instagram.com/155833707900388.

+Art does not disclose the personal data of users to third parties, unless users have previously given their express consent, for instance for advertising campaigns (Article 6 (1) sentence 1 lit. With regard to personal data concerning themselves, users have the following rights in relation to +Art:
right to information,
right to correction or deletion,
right to limitation of processing,
right to objection to the processing,
right to data portability.
Users can at any time assert their rights by sending an email, a fax or a letter using the following contact details:

+Art e.V.
FAO Data Protection Officer Yves E. Gerstmaier
+Art e.V., Neue Kreisstrasse 23, D14109 Berlin
Email: [email protected]
‍
Furthermore, users have the right to complain to a data protection supervisory authority about the processing of their personal data on the part of +Art.a of the GDPR), or there is a legal obligation to disclose this data (Article 6 (1) sentence 1 lit. c of the GDPR).
‍

In the event that users have consented to the processing of their data, they may revoke this consent at any time. Once a user has declared such a revocation to +Art, this will influence the permissibility of the processing of the user’s personal data.
Insofar as +Art bases the processing of personal user data on the weighing of interests, users may object to such processing. This is the case, in particular, if such processing is not necessary to fulfil a contract between the user and +Art, the contract being constituted by +Art in each case in the specification of functions. In the event that users exercise their right to objection, +Art asks them for an explanation as to the reasons why +Art should not process their personal data in the way that +Art customarily does. In the event that users’ objections are justified, +Art will examine the situation and either discontinue the data processing, adapt it, or demonstrate to users the compelling reasons, deserving of protection, on the basis of which +Art will continue such processing.
As a matter of course, users may at any time object to the processing of their personal data for purposes of advertising and data analysis. Users can inform us about their objection to the use of their personal data for advertising purposes by writing to us via the following contact details:
‍
+Art e.V.
FAO Data Protection
Neue Kreisstrasse 23, 14109 Berlin Email: [email protected]

This privacy policy was last amended in September 2019.
‍

Any changes to this privacy policy will be published on the website. In addition, +Art will inform users by email using the last known user information.
‍
+Art will not use the collected personal data of users in any other manner than described above without first having informed users of this and having obtained their consent as required.