Privacy police
1. Controller
Controller responsible for collecting, processing and using your personal data as defined by the General Data Protection Regulation (GDPR) in connection with the new German Federal Data Protection Act (BDSG-neu) and other data processing requirements:
German Lost Art Foundation
Prof. Dr. Gilbert Lupfer
Executive Board
Humboldtstraße 12
39112 Magdeburg
Telephone: +49 (0) 391 727 763 0
Telefax: +49 (0)391 727 763 6
email: kontakt@kulturgutverluste.de
The German Lost Art Foundation takes data protection very seriously. It is committed to protecting your personal data as you visit our website and using it exclusively for the purposes mentioned below. In the following, we disclose information about how, to what extent and why we process personal data, and how cookies are used in connection with the website www.beratende-kommission.de. It is possible to use most of our website without having to provide any personal data. If personal data are collected on our website (such as name, address or e-mail address), this is done on a voluntary basis wherever possible. Please note that data transfer via Internet (e.g. e-mail communication) is subject to security breaches. It is not possible to provide complete protection against unauthorized access by third parties.
2. Data Protection Officer
The Data Protection Officer of the German Lost Art Foundation is:
German Lost Art Foundation
Sebastian Hohmann
Data Protection Officer
Humboldtstraße 12
39112 Magdeburg
Telephone: +49 (0) 391 727 763 37
Telefax: +49 (0)391 727 763 6
email: sebastian.hohmann@kulturgutverluste.de
3. Competent supervisory authority
The competent supervisory authority for the German Lost Art Foundation is:
Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (German Federal Commissioner for Data Protection and Freedom of Information)
Graurheindorfer Str. 153
53117 Bonn, Germany
Central telephone number: +49(0)228 997799 0
Central e-mail address: poststelle@bfdi.bund.de
4. Handling of personal data and cookies
The term “personal data” describes all information that can be used to identify a person, i.e. information that can be traced back to a person. This includes a person’s name, e-mail address and telephone number.
You are not legally or contractually required to provide your personal data, and it is not necessary for the purposes of contractual conclusion. Sharing of personal data is voluntary.
Whenever a user accesses the website of the German Lost Art Foundation and opens a file, data about this process are temporarily stored in a log file and processed. Prior to storage, each data record is anonymized by changing the IP address. It is therefore not possible to associate recorded data with a specific natural person.
The following data are stored whenever the website or a file is accessed:
Anonymized IP address
Date and time
Accessed web page/name of accessed file
Amount of data transmitted
Report if access/retrieval was successful.
When you use the registration form for our mailing list, we ask you to provide a number of personal details. These include your title, first name, last name, residential or business address, telephone number, fax number, e-mail address and/or your message. These details are always voluntary and are used entirely for the purpose of correspondence with you.
The information is encrypted by our web server and electronically forwarded to an email account at our Foundation.
Unless you voluntarily provide the required details, you may only be able to use the functions on our website to a limited extent. This depends, in particular, on whether the details are optional or whether they are essential to the use of a given function. If you do not provide the required details, you cannot contact us via the contact form and/or receive press invitations or information by e-mail via the mailing list.
Our website uses so-called cookies in several places. “Cookies” are small text files that are placed on your computer and stored by your browser. Cookies do not damage your computer and do not contain viruses. The cookies used on this website do not routinely contain any personal data.
You can set your browser to inform you when a website wishes to place a cookie on your computer. You can also grant or deny permission on a general or case-by-case basis, as well as activate the option to automatically delete cookies when closing your browser. The functionality of this website is not limited through the disabling of cookies, but this leads to the permanent display of a so-called cookie banner on the home page of the website.
The German Lost Art Foundation will not pass your data on to third parties without your written permission unless:
a subcontractor or vicarious agent, whom we deploy exclusively to provide the facilities or services requested by you, requires these data (unless you have been expressly informed otherwise, such auxiliaries are authorized to use the data only to the extent that is necessary in order to provide the relevant facility or service),
there is a legally binding court order or valid official directive, or
the data are required in order to prevent improper use of our facilities or services in a legally permitted manner.
This website is hosted by an external contractor (University Data Center of the Otto von Guericke University in Magdeburg). If personal data are processed on this website, they are stored on the servers of the University Data Center of the Otto von Guericke University in Magdeburg. The external contractor has access to these personal data exclusively as part of the technical provision and administration of this website. The external contractor is obligated to comply with data protection regulations.
All data are located on servers within the Federal Republic of Germany. Your data are not used for other purposes, stored together with other data (profile creation) or disclosed to third parties.
5. Legal basis and purpose of the processing of personal data and the use of cookies
We process your personal data primarily on the basis of legitimate interests according to GDPR, Art. 6 (1) points a, e and f.
Personal data are processed for the purpose of providing this website and its functions, and displaying the same on your end device.
Provision of the website is based on the statutory tasks of the German Lost Art Foundation and the tasks of the Advisory Commission on the return of cultural property seized as a result of Nazi persecution, especially Jewish property, and serves public interest under the German government’s duty of information.
Moreover, personal data are processed in order to allow you to use various functions on our website. They include the contact form, the mailing list and the restitution notification function, among others.
Beyond this, personal data are analyzed only for statistical purposes and to improve our website. They are used to make our website more user-friendly, more effective and more secure.
This also applies to cookies used on this website. These allow our systems to recognize your browser and offer you services (recognition, storage of your preferences concerning the cookie banner).
6. Retention period for personal data and cookies
Your personal data are erased as soon as they have served their purpose. Files referring to access data (log files) are erased after no more than one week. Your personal data are only stored beyond those periods if the German Lost Art Foundation is obligated to do so by European, national or state legislation, or due to a legally binding court order or enforceable official directive.
Cookies remain stored on your end device until they are manually deleted or you enable the deletion of cookies upon closing your browser in your browser settings.
7. Rights of data subjects
If the German Lost Art Foundation processes your personal data, you as the data subject have the following rights:
According to
GDPR Art. 7, the data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal,
GDPR Art. 15, the data subject shall have the right to obtain information from the controller regarding their personal data being processed, and further information as permitted by the regulations,
GDPR Art. 16, the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her, and the right to have incomplete personal data completed,
GDPR Art. 17, the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her,
GDPR Art. 21, the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her unless the controller demonstrates compelling legitimate grounds for the processing which override the data subject’s interests, rights and freedoms,
GDPR Art. 18, the data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
the accuracy of the personal data is contested by the data subject,
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
the controller no longer needs the personal data for the aforementioned purposes, but they are required for the establishment, exercise or defense of legal claims,
the data subject has objected to processing pursuant to Art. 21 (1), but it has not yet been determined whether the controller’s compelling legitimate grounds for continuing to process the
personal data override the data subject’s interests, rights and freedoms,
GDPR Art. 20, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance, provided that the processing is carried out by the controller by automated means and is based on consent,
GDPR Art. 77, the data subject shall, without prejudice to any other administrative or judicial remedy, have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes data protection regulations. The German Federal Commissioner for Data Protection is responsible for our organization (see clause 3).
Should you wish to exercise the above rights against the German Lost Art Foundation or if you have any questions regarding privacy issues, please contact our Data Protection Officer by letter, e-mail or fax (see clause 2).
8. Amendments to our privacy policy
To ensure the protection of your personal data, we will continuously update this privacy policy. We recommend that you reread this privacy policy from time to time to keep informed about how we protect your data and continually improve the content of our website. Should we make major changes in the way we collect, use and/or transfer the personal data you provide to us, we will bring this to your attention in the form of a clear and visible notice on our website. By using our website, you declare your consent to the provisions laid out in this privacy policy