Privacy Policy

Privacy Policy

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Party” in this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us, for example by filling out a contact form.
Other data is collected automatically or with your consent when you visit the website. This mainly includes technical data (e.g., browser type, operating system, time of access). This data is collected automatically once you enter the website.

What do we use your data for?

Part of the data is used to ensure error-free operation of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to request information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request correction or deletion of your data. If you have given consent to data processing, you may revoke it at any time. Furthermore, you have the right to request restriction of processing under certain circumstances and to file a complaint with the competent supervisory authority.
For these purposes and other questions regarding data protection, you can contact us at any time.

2. Hosting

We host the content of our website with the following provider:

IONOS

We host our website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, IONOS collects various log files including your IP address. Details can be found in the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.
The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

Data Processing Agreement

We have entered into a data processing agreement (DPA) with the provider named above. This legally required contract ensures that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data seriously. We treat your data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, personal data will be collected. This privacy policy explains what data we collect, how and why we use it.
Please note that data transmission on the internet (e.g., via email) can have security gaps. Complete protection of data from access by third parties is not possible.

Information on the Responsible Party

The responsible entity for data processing on this website is:
Schulmuseum Dresden e. V.
Seminarstraße 11
01067 Dresden, Germany

Represented by:
Francis Neugebauer (Chairperson)
Robert Nocke (Deputy Chairperson)
Klara Fritzsche (Treasurer)

Contact:
Phone: +49 351 2130156
Email: info@schulmuseum-dresden.de

The responsible party is the individual or legal entity that decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you request deletion or revoke your consent, your data will be deleted unless legal obligations (e.g., tax or commercial retention periods) require otherwise.

Legal Basis for Data Processing

If you have given consent, data is processed based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special data categories. Data transfers to third countries are based on Art. 49(1)(a) GDPR. If cookies or similar technologies are used, § 25(1) TTDSG applies. Consent can be revoked at any time. For contract fulfillment, processing occurs under Art. 6(1)(b) GDPR; for legal obligations under Art. 6(1)(c) GDPR; and for legitimate interests under Art. 6(1)(f) GDPR.

Recipients of Personal Data

We cooperate with various external parties. Personal data is shared only when legally permissible—e.g., contract fulfillment, legal obligations, legitimate interest, or valid processing agreements.

Revocation of Consent

You can revoke consent at any time. The legality of data processing before revocation remains unaffected.

Right to Object (Art. 21 GDPR)

If your data is processed based on Art. 6(1)(e) or (f) GDPR, you may object at any time for reasons related to your specific situation. If data is used for direct marketing, you may object at any time; in that case, your data will no longer be used for marketing.

Right to Lodge a Complaint

In case of GDPR violations, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Data Portability

You have the right to receive or transfer data you provided in a structured, machine-readable format.

Access, Rectification, Deletion

You may request access to, correction of, or deletion of your personal data at any time.

Right to Restrict Processing

You may request restriction of processing in certain cases, e.g.:

  • if you dispute data accuracy
  • if processing is unlawful
  • if data is needed for legal claims
  • if an objection under Art. 21(1) GDPR is pending

Once processing is restricted, data will only be used with your consent or for legal purposes.

SSL/TLS Encryption

For security reasons and to protect transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser bar.

4. Data Collection on This Website

Cookies

This website uses cookies—small data files stored on your device. Session cookies are deleted after your visit; persistent cookies remain until deleted manually or automatically.
Cookies may be set by us (first-party) or third parties. They serve various purposes, including technical functionality, analytics, and advertising.
Necessary cookies are stored under Art. 6(1)(f) GDPR unless consent is required under Art. 6(1)(a) GDPR and § 25(1) TTDSG. You can configure your browser to block or delete cookies, but doing so may affect website functionality.

Contact / Booking Form

When you submit a form, the information you provide (including contact details) is stored to process your request and potential follow-up questions. Data is not shared without consent.
Processing is based on Art. 6(1)(b) GDPR (contractual/pre-contractual measures), or on our legitimate interest (Art. 6(1)(f) GDPR), or on consent (Art. 6(1)(a) GDPR).

Contact by Email or Phone

If you contact us by email or phone, your message and personal data (name, inquiry) are stored for processing. Data is not shared without consent. The same legal bases as above apply.

5. Plugins and Tools

Google Fonts (Local Hosting)

This site uses Google Fonts for consistent typography. The fonts are locally hosted—no connection to Google servers occurs.
For details: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=en.

Google Maps

This site uses Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Use of Google Maps requires storing your IP address, which may be transmitted to the USA. The operator has no control over this transfer.
Use is based on Art. 6(1)(f) GDPR (legitimate interest in a clear presentation and easy location search). If consent was requested, processing occurs under Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Transfers to the USA rely on EU Standard Contractual Clauses. Details:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Google is certified under the EU–US Data Privacy Framework (DPF):
DPF Certification.
More on Google’s data handling: https://policies.google.com/privacy?hl=en.

Source: [https://www.e-recht24.de](https://www.e-recht24.de)