Data protection

1. General principles
FLUX collects, processes and uses personal data in accordance with the guidelines of the EU-wide General Data Protection Regulation (GDPR) and the applicable Federal Data Protection Act (BDSG).

2. Name and contact details of the controller within the meaning of data protection law
The controller within the meaning of Article 13 (1) (a) of the GDPR is the

Stiftung Pinakothek der Moderne in Munich,
represented by the Foundation Council: Dr. Markus Michalke (Chairman of the Foundation Council)
Georgenstraße 42
80799 München
Telephone: 089 33 51 50
E-Mail: info@stipimo.de

3. Collection of general information when you visit our website
Type and purpose of processing: When you access our website, i.e. if you do not register or otherwise provide information, information of a general nature is automatically collected. This information is stored temporarily (in so-called server log files) and includes your IP address, the date and time of access, the name and URL of the accessed file, the website from which access is made (referrer URL) and the type of web browser and, if applicable, the operating system used by your computer and the name of your account provider until it is automatically deleted.

The data mentioned is processed in particular for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring smooth use of our website,
  • Evaluating system security and stability, and
  • Optimising our website.

We do not use your data to draw any conclusions about you as a person. We may statistically evaluate information of this kind in anonymised form in order to optimise our website and the technology behind it.

Legal basis and legitimate interest: The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.Disclosure of data: Your personal data will not be passed on to third parties except for the purposes listed below: Data will only be passed on if you have given your express consent in accordance with Art. 6 (1) sentence 1 a GDPR, if the disclosure is necessary in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, if a case should arise that a legal obligation under Art. 6 para. 1 sentence 1 lit. C DSGVO exists for disclosure, as well as if this is legally permissible and under Art. 6 para. 1 sentence 1 lit. b GDPR is required for the execution of contractual relationships with you.

Storage period: The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case for data used to provide the website when the respective session has ended. If the data is stored in log files, this is the case after 14 days at the latest. Further storage is possible. In this case, the IP addresses of the users are anonymised so that an assignment of the accessing client is no longer possible.

4. Cookies
The FLUX website uses cookies. Cookies are text files that are stored and saved on a computer system via an internet browser.Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified by means of the unique cookie ID.

By using cookies, the Stiftung Pinakothek der Moderne can provide users of this website with more user-friendly services that would not be possible without the setting of cookies and that serve to improve and ensure operation. The legal basis for this is Art. 6 (1) (1) (f) GDPR.
The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be fully usable.

Storage duration and cookies used: If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our website: __cf_bm, storage duration: 1 day; CONSENT, storage duration: 5950 days.

5. Embedded YouTube videos
We embed YouTube videos on our website. The corresponding plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter referred to as ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter referred to as ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s data protection declaration, where you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy).

6. Newsletter
We use Mailchimp, a service of Intuit Inc., 2700 Coast Ave, Mountain View, CA 94043, USA, to send our newsletter. When you register for our newsletter, we store your email address and, if applicable, your name. This data is used exclusively for sending the newsletter. The data you enter is forwarded to Mailchimp and stored on their servers. Mailchimp uses this information to send and analyse the newsletter on our behalf. Data processing by Mailchimp takes place in the United States. Mailchimp relies on the standard contractual clauses of the EU Commission to ensure an adequate level of data protection.
You can unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter or by sending us a message. After unsubscribing, your data will be deleted from our mailing list.
Further information on data processing by Mailchimp can be found in Mailchimp’s privacy policy: https://www.intuit.com/privacy/statement/

7. SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

8. Rights of data subjects and right of appeal to a supervisory authority
Data subjects whose data we process have the following rights under Art. 15 to 21 GDPR. These rights can be asserted without observing any formal requirements. With the exception of possible transmission or connection fees, the data subjects will not incur any costs.
‍

  • Right of access to information about your personal data processed by us in accordance with Art. 15 GDPR.
  • Right to rectification under Article 16 of the GDPR in the event of inaccurate or incomplete data.
  • Right to erasure (‘right to be forgotten’) in accordance with Art. 17 GDPR of the personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
  • Right to restriction of the processing of your personal data in accordance with Art. 18 GDPR
  • Right to notification in accordance with Art. 19 GDPR
  • Right to transfer personal data in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. In addition, you have the right to file a complaint with the competent supervisory authority at any time in accordance with Art. 77 GDPR. The supervisory authority for the submission of complaints by data subjects regarding data protection is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, and online at poststelle@Ida.bayern.de.
  • Right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for doing so that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of revocation, which we will implement without you having to specify a particular situation. You can inform us of your objection by telephone, email, fax or by writing to us at the address listed at the beginning of this data protection declaration.

9. Changes to our data protection provisions
We reserve the right to amend this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.
Questions for the data protection officer: If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly: Stiftung Pinakothek der Moderne, e-mail: info@stipimo.de

FLUX is a project by the four museums of the Pinakothek der Moderne and the Pinakothek der Moderne Foundation. FLUX is supported by the Thomas Kirch Foundation and the Kirch Foundation in memory of Munich media entrepreneur Leo Kirch and his wife Ruth. The collective „This Is Really Happening“ helps with planning and execution.