Please note the changed opening hours from 16 April 2024. More

Privacy Policy

The Staatliche Museen zu Berlin (Berlin State Museums) – Preussischer Kulturbesitz (Prussian Cultural Heritage Foundation) – is committed to handling your personal data in a responsible manner and to providing transparency about its use. To this end, the following information will outline:

  • why the Staatliche Museen zu Berlin collects and stores data,
  • what rights users of the webpages of the Staatliche Museen zu Berlin (the website www.smb.museum, the ticket shop shop.smb.museum – in the following “ticket shop” – and of the annual pass shop – in the following “annual pass shop” jahreskarte.smb.museum) have,
  • how the Staatliche Museen zu Berlin collects data and which data it retains,
  • which kinds of cookies are used on the webpages of the Staatliche Museen zu Berlin,
  • how you can object to or avoid the collection of your personal data, and
  • who is responsible for these webpages and their data privacy policies

1. Why does the Staatliche Museen zu Berlin collect data and utilize user analysis software?

As a general rule, we collect and use personal data related to our users only to the extent that this is necessary for us to ensure the functionality of the webpages and to deliver our content and services. For example, it is necessary for our system to temporarily save a user’s IP address in order to facilitate a stable and secure delivery of the webpages to the computer of the user. To this end, it is necessary to save the anonymised IP address of the user for the duration of 60 days. This data will be erased as soon as it is no longer necessary

The Staatliche Museen zu Berlin carry out analysis of the ways users interact with these webpages. This provides us with information to improve our online presence. This includes, for example, knowing how often particular aspects on a website are clicked on, or which browsers are used to view the pages. The data that is saved for this is anonymised or pseudo-anonymised, and is used by the Staatliche Museen zu Berlin exclusively for the purposes of statistical analysis. The data are not used for any other purpose, nor are the passed on to third parties. 

2. What rights do users of our webpages have?

In relation to personal data and our website, you have the following rights, as defined by the EU’s General Data Protection Regulation:

  • the right of access by the data subject (art. 15 GDPR),
  • right to rectification and erasure (art. 16&17 GDPR), ,
  • the right to restriction of processing (art. 18 GDPR),
  • the right to object to processing (art. 21 GDPR),
  • the right to data portability (art. 20)

Additionally, you have the right to make a complaint to a data privacy regulating body about the way we have processed your personal data (art. 77 GDPR). For the Staatliche Museen zu Berlin, the Federal Commissioner for Data Protection and Freedom of Information (BfDI) is the relevant body.

3. What data are collected?

a) Functionality of the webpages and creation of log files

With every visit to our webpages, our system automatically collects data and information from the computer system of the computer producing the traffic. The Staatliche Museen zu Berlin has a legitimate interest in processing this personal information as enshrined in art. 6 para. 1f of the GDPR. Out legitimate interest is the functionality and user-friendliness of the website.

The following data are collected:

  • IP addresses
  • Log files
  • Inventory data, traffic data and content data of the website
  • Error protocols

Log files allow website operators to monitor activities on their websites. The access logs of the web server keep a record of when each particular page was visited. This includes the following data: IP address, directory protection users, date, time, pages visited, protocols, status codes, data size, referrer, user agent, host name used.

Hosting, operation and development: website and ticket shop

The website of the Staatliche Museen zu Berlin is hosted on a server belonging to the company Mittwald. The ticket shop of the Staatliche Museen zu Berlin is hosted on a server belonging to the company Hetzner. Mittwald and Hetzner save data for the following periods of time:

  • The IP addresses are saved in anonymised form. For this, the final three digits are removed, that is, 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are likewise made anonymous. These anonymised IP addresses are saved for 60 days. Information about the directory protection user will be made anonymous after one day. 
  • Error logs that monitor failed site visits are deleted after seven days. Along with the error notice, these include the IP address accessing the site and, depending on the kind of error, the website being accessed.
  • Visits via FTPs are anonymised and saved for 60 days.

The agency xmental has access to this data in TYPO3 for the purposes of website maintenance and programming. Giant Monkey GmbH also has access to this data for the purpose of maintenance and programming work in go~mus.

The Staatliche Museen zu Berlin has carefully selected the service provider Mittwald and Hetzner, the agency xmental and Giant Monkey Software Engineering GmbH. A contract was signed with these service providers to regulate data processing. Mittwald, Hetzner, xmental and Giant Monkey GmbH are obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated.

b) Which cookies do the webpages of the Staatliche Museen zu Berlin use?

Cookies are small text files which are saved on your computer when you visit a website and are accessed by the browser you use. Cookies allow information to be exchanged between computer programmes or to be saved for a limited time. Specific information is transmitted to our systems from the saved cookies. However they are unable to operate a programme or transfer viruses to your computer.

Cookies can only be saved if you have authorized this in your browser settings. Therefore, as a user, you also have full control over the use of cookies. By changing your settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can be done automatically.

With every visit to a website, and every time you access a file online, it is typical for browsers to transmit data.

Cookies that are necessary for the functioning of the website are regulated under art. 6, para. 1e of the GDPR. All other cookies are processed only with user consent, in accordance with art. 6, para. 1a of the GDPR.

Of the data that is transmitted when you visit these webpages, the Staatliche Museen zu Berlin saves the following information:

  • Browser type/version
  • Operating system
  • Referrer URL
  • Date and time of the server inquiry
  • Page(s) visited and file(s) accessed
  • Amount of data transmitted
  • Anonymised/pseudo-anonymised IP address
  • Country of origin
  • Notification of whether the attempt at access was successful.

The webpages of the Staatliche Museen zu Berlin uses cookies very sparingly. This means that you can generally also view these webpages without cookies. The cookies used on our webpages have two different functions:

  • Part of the cookies we use (so-called transient cookies) guarantee that the webpages function seamlessly. The validity of these cookies is limited to the individual web session. As soon as you shut down your browser, these so-called “session cookies” are deleted.
  • For website analysis, the Staatliche Museen zu Berlin employs the user analysis software Matomo (previously known as Piwik), which is recommended by data privacy advocates. The processing of the personal data of users allows us to analyse the interaction of our users with the site. Through evaluating this data, we are able to piece together information about the use of individual components on our webpages. This helps us to continually improve our webpages and make them more user-friendly. Through anonymised IP addresses, the data collected can no longer be  ascribed to particular individuals. This makes it impossible to connect usage data or usage profiles with personal data. The software for this runs exclusively on the servers of our webpages. It is only there that personal data about users is saved. This data will not be forwarded on to third parties. Depending on whether you have consented to or rejected the collection of data, there will either be two website analysis cookies or a Matomo deactivation cookie saved on your computer. These are known as “persistent cookies”, which are automatically deleted after two years. You can also delete these cookies yourself in your browser security settings at any time.

Cookie settings regulating data collection by the website analysis software Matomo

When you first visit our website, you are given the opportunity to expressly give your consent to the Staatliche Museen zu Berlin collecting and analysing the statistical data described above. If you do not do this, no website analysis cookies will be activated, meaning that for your use of the website, no data will be processed by the website analysis software Matomo.

Please note: If you have activated automatic deletion of cookies in your browser, when you shut down your programme, the deactivation cookie will also be deleted. In this case, the next time you visit this website, you will be shown the cookie setting options again, providing you with another opportunity to give your express consent to the processing of your data for the purposes of analysis or to use the website without web analysis cookies. Additionally, if you use another computer or another web browser, you will have another opportunity to give your express consent to the processing of your data for the purposes of analyses or to use the website without web analysis cookies.

At any time while you are using our website, you are able to check and change your cookie settings on data collection by the website analysis software Matomo. Click on this link to see your options again.

More detailed information on the privacy settings in Matomo software can be found at the following link: https://matomo.org/docs/privacy/.

c) Which data are saved in the event of digital inquiries by email or using a contact form?

For email inquiries or contact via an online form, you are required to enter specific information so that the Staatliche Museen zu Berlin can contact you or send you the documents you have requested. Your personal data will be processed with your consent and in accordance with art. 6 para. 1a of the GDPR for email inquiries and bookings for Fotowalk. For email inquiries, the legal basis for the processing of data is our legitimate interest as outlined in art. 6 para. 1f of the GDPR. The legitimate interest here is our capacity to quickly and easily communicate with users of our website.

Registering for the press mailing list:
Obligatory fields: Surname, first name, street, house number, postcode, city, email address, telephone number
Optional: Publication, position, medium/institution, mobile number, fax, website
The form data and date are sent by the backend of the website to the recipient via email.

Downloading press images:
Obligatory fields: Surname, first name, medium, email address
The form data and date are saved in the backend of the website.

Permission request to use photos or film or video recordings for current reporting:
Obligatory fields: First name, surname, email address, telephone number
Optional: Channel/publisher/institution, publication, fax
The form data and date are sent by the backend of the website to the recipient via email.

Permission request outside of the confines of current reporting:
Obligatory fields: First name, surname, medium, publication/channel/production company, email address, telephone number (with prefix), mobile
Optional: Fax (with prefix)
The form data and date are sent by the backend of the website to the recipient via email.

Contact form for visitors: questions, bookings, feedback
Obligatory fields: first name, surname, email address
Optional: title
The data of the contact form for visitors is sent via the network protocol HTTPS to Zammad and saved there. Zammad is the case management system of the Staatliche Museen zu Berlin and is hosted on servers in the Staatsbibliothek zu Berlin of the Stiftung Pressischer Kulturbesitz. All form inquiries are processed in Zammad. Booking data are processed in the booking management system go~mus like purchases through the ticket shop, and saved (see the section “Purchases through the ticket shop of the Staatliche Museen zu Berlin”). Go~mus is the booking management system of the Staatliche Museen zu Berlin and is operated by Giant Monkey GmbH on servers in Germany that are owned by the company Hetzner. As the operator of the Staatliche Museen zu Berlin’s infoline, the x:hibit projects UG has access to all data pertaining to inquiries and bookings. The Staatliche Museen zu Berlin carefully selected x:hibit projects UG and has entered into an order processing agreement with the company pursuant to Article 28 of the GDPR.

Registration for events

Obligatory fields: first name, surname, email address, telephone, postal address

Optional: Details about who will be attending (name, age and potentially other information)

The data from the registration form are transmitted to the booking system go~mus. The registration data will be processed in go~mus like purchases through the ticket shop, and saved (see the section “Purchases through the ticket shop of the Staatliche Museen zu Berlin”).

Registration for the Fotowalk

Obligatory fields: surname, first name, account name, email address
The form data and date are sent from the backend of the website to the recipient by email.

The engineering bureau of Dr Jürgen Freundel also has access to some of this data in SMart for maintenance and programming tasks.

The Staatliche Museen zu Berlin have carefully chosen this service provider and signed a contract with them to regulate data processing. The engineering bureau of Dr Jürgen Freundel is obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated.

If you transmit personal data to the Staatliche Museen zu Berlin through an inquiry, this information will only be used for that specific instance of correspondence or for the purpose named in the form. The data will be saved for as long as is required by the purpose for which you have given your consent. You have the right to rescind your consent for future instances.

hCaptcha

In order to protect our contact forms from automated misuse by bots, we use the service hCaptcha to distinguish between humans and machines, provided by our data processors Intuition Machines, Inc. (Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA).

When a user clicks the button “I am a human”, their IP address is transmitted to the provider of hCpatcha. The IP address is not used by our data processors for any other purposes, and is deleted within 90 days.

hCaptcha is used to ensure the security of our online services. This represents a legitimate interest as outlined in art. 6 para. 1 (f) of the GDPR.

Details on the handling of user data can be found in Intuition Machines, Inc.’s Privacy Policy at: https://www.hcaptcha.com/.

d) Newsletter

For sending the free newsletter, the Staatliche Museen zu Berlin uses the service Newsletter2Go from the service provider Sendinblue.

The Staatliche Museen zu Berlin have carefully selected this service provider and signed a contract with them.

Your information is stored in an encrypted form exclusively on servers in the European Union. When you register, the following information is collected:

  • Email address
  • Date and time of the registration and activation

The processing of this data is regulated by art 6 para. 1a of the GDPR. Registration occurs by way of a “double opt-in” model. In the registration process, we secure your consent and alert you to our data protection policy. If you register for our newsletter, this information will only be used for this purpose.

You can cancel your registration at any point in the future. To unsubscribe, click on the link at the end of the newsletter, or use the following links.

To unsubscribe from:

  • the general newsletter,
  • the research newsletter (in English),
  • the newsletter for children and families, as well as
  • the school newsletter

of the Staatliche Museen zu Berlin, go to: https://www.smb.museum/newsletter/abmelden/

To unsubscribe from the B2B Newsletter of the Staatliche Museen zu Berlin: https://www.smb.museum/newsletter/b2b-abmelden/

To unsubscribe from the newsletter of the Hamburger Bahnhof – Nationalgalerie der Gegenwart: https://www.smb.museum/museen-einrichtungen/hamburger-bahnhof/newsletter/abmelden/

To unsubscribe from the newsletter of the Museum Europäischer Kulturen: https://www.smb.museum/museen-einrichtungen/museum-europaeischer-kulturen/newsletter/abmelden

Your details will then be deleted.

e) Images and videos of individuals on the website

The General Data Protection Regulation (GDPR) has strengthened the rights of affected individuals. It is possible that there are older images or videos on our website that show people who did not give their consent to be photographed or recorded. If this affects you, then you have the right to object to the use of the photos.

f) Presence on online channels and incorporated content

Online channels of the Staatliche Museen zu Berlin

We are active on social media and platforms with our own profiles, in order to communicate with visitors, interested individuals and users, and to inform them about our services. This activity is regarded as serving a legitimate interest as regulated by art. 6 para. 1f of the GDPR. The legitimate interest is the quick and uncomplicated communication required for our work in the field of public relations.

When accessing the respective networks and platforms, the terms and conditions and data processing policies of the respective operators apply.

We also integrate content from a number of online channels into our webpages to enhance user experience by providing multimedia content. The Staatliche Museen zu Berlin, together with the respective service providers, are responsible for the collection and transmission of personal data in connection with this embedded content. It is the responsibility of the respective service provider to ensure that the applicable data processing guidelines are observed when processing the data.

Facebook

The Staatliche Museen zu Berlin and its various branches operate multiple Facebook pages. The Stiftung Preussischer Kulturbesitz and Facebook are responsible for protecting the personal data processed on these pages.

The operating company of Facebook is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If an affected person lives outside of the USA or Canada, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the processing of personal data.

Regarding this, Facebook invokes the EU’s standard contractual clauses as the legal basis for transmitting data to the USA via Meta Platforms Ireland Limited .

Facebook processes user data for advertising purposes (analysis and creation of personalised advertising), for the creation of user profiles and for market research.

Facebook uses cookies to store and process this information.

The privacy policy of Facebook along with other information on data processing can be found at: https://www.facebook.com/about/privacy/.

Via the “Insights” of our Facebook page, the operator of the page has access to different categories of statistical data. These statistics are generated and provided by Facebook; the operator of the page has no influence on their generation and presentation. The following data are provided by Facebook:

Total page visits, number of “likes”, page activities, post interactions, reach statistics, video views, reach of individual posts, comments, shared content, answers, gender percentages, location data (country and city), language, visits and clicks in the shop, clicks on the trip planner, clicks on telephone numbers.

Facebook also provides data on the Facebook groups linked to our page. You can find more details on this in the Facebook privacy policy.

Since only Facebook has full access to the user data, the rights of affected persons (e.g. the right to erasure) must be followed up directly with Facebook. If you have any questions in this regard, you can contact our data protection officer.

Instagram

The Instagram account of the Staatliche Museen zu Berlin is operated by Instagram Inc. (1601 Willow Road, Menlo Park, CA, 94025, USA).

Details about how user data is managed on Instagram are available in their data policy, at: https://instagram.com/about/legal/privacy/.

Sketchfab

The Sketchfab account of the Staatlichen Museen zu Berlin is operated by Sketchfab (Sketchfab Inc., 1123 Broadway, Ste 501, New York, NY 10010, USA).

For the integration and display of interactive 3D models, our website uses the platform sketchfab.com offered by the provider Sketchfab.

Sketchfab is used in the interest of providing an appealing presentation of our online content. This represents a legitimate interest as outlined in art. 6 para. 1f of the GDPR.

Details about how user data are managed on Sketchfab are available in their data policy at: https://sketchfab.com/privacy.

Vimeo

For the integration and display of video content, our website uses the platform “Vimeo” offered by the provider Vimeo Inc. (Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA).

Vimeo is used in the interest of a providing an appealing presentation of our online content. This represents a legitimate interest as outlined in art. 6 para. 1f of the GDPR.

Details about how user data is managed on Vimeo are available in their data policy at: https://vimeo.com/privacy.

YouTube

The YouTube channel of the Staatliche Museen zu Berlin is operated by YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

For the integration and display of video content, our website uses  the platform “YouTube” offered by the provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

YouTube is used in the interest of providing an appealing presentation of our online content. This represents a legitimate interest as outlined in art. 6 para. 1f of the GDPR.

Details about how user data are managed on YouTube are available in their data policy at: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.

Spotify

For the integration and display of audio content, our website uses the platform “Spotify” offered by the provider Spotify (Spotify headquarters: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden).

Spotify is used in the interest of a providing an appealing presentation of our online content. This represents a legitimate interest as outlined in art. 6 para. 1f of the GDPR.

Details about how user data is managed on Spotify are available in their data policy at: https://www.spotify.com/us/legal/privacy-policy/.

Yumpu

For the integration and presentation of the Staatliche Museen zu Berlin’s magazine MUSEUM as a flipbook, our website uses the services of the platform Yumpu, which belongs to the company i-magazine AG (“i-mag” – Gewerbestrasse 3, 9444 Diepoldsau, Switzerland).

Switzerland is recognised by the European Commission as a state with a satisfactory level of data protection in accordance with art. 45 of the GDPR. You can find further information on this here.

Yumpu is used in the interest of a providing an appealing presentation of our online content. This represents a legitimate interest as outlined in art. 6 para. 1f of the GDPR.

Details about how user data are managed on Yumpu are available in their data policy at: https://www.yumpu.com/de/info/privacy_policy.

Yumpu uses cookies to ensure basic functions of the service. Additionally, Yumpu uses Google Analytics, a website analysis service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). These elements are regulated by art. 6 para. 1f of the GDPR. Google Analytics uses cookies that enable an analysis of your use of Yumpu.

The information generated by the cookies about your use of the website, such as browser type/version, operating system used, referrer URL, host name of the computer (IP address), time of the server inquiry, is usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser to Google Analytics is not cross-referenced with other data from Google. Yumpu has also added the code “anonymizeIP” to its Google Analytics. This masks your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA, where it is shortened. You can prevent Google from recording further visits to this website. Please note: deleting cookies, using the incognito/private mode of your browser, or using another browser will result in data being collected again. By clicking on the following link you can download a browser plug-in to deactivate Google Analytics.

You can find more detailed information on this at: https://tools.google.com/dlpage/gaoptout?hl=de or at: https://www.google.com/intl/de/analytics/privacyoverview.html (for general information on Google Analytics and privacy).

g) Purchases through the ticket shop of the Staatliche Museen zu Berlin

Purpose and data

You can purchase or make bookings for admission tickets, annual passes, tickets and registrations for events and as well as bookings for guided tours via the ticket shop. If you use the ticket shop frequently or wish to make bookings via telephone and e-mail at a later date, you can create a user account.

Go~mus is the Staatliche Museen zu Berlin’s booking management system and is operated by Giant Monkey on servers of the company Hetzner in Germany. When making a booking, in addition to the general data that is collected when visiting the website (see above), the following data is processed in go~mus:

  • title,
  • first and last name,
  • email address,
  • postal address,
  • the products you have selected for purchase and their cost,
  • any comments that you add to your purchase,
  • your chosen payment method for the purchase and details about how the payment was made.
  • When registering, a password of your choosing will also be saved, although the password itself is not saved permanently but what’s known as a hash value. Bookings made as a guest on the other hand only produce a purchase.   

The data may also be used for reasonable marketing purposes.

Legal Framework

The aforementioned categories of data are collected and processed in the context of entering into and processing a contract, as outlined in art. 6 para. 1b of the GDPR.

In addition, if a purchase contract is sealed, the resulting accounting records are stored as regulated by § 147, para. 1, no. 4 of the German Fiscal Code.

The use of this data for marketing purposes represents a legitimate interest to make our offerings more attractive and to promote these, as outlined in art. 6 para. 1b of the GDPR.

Data transmission and access rights

To process the purchase, the data collected are transmitted to our service provider Giant Monkey.

The Staatliche Museen zu Berlin has carefully selected its service providers, and signed contracts with them. Giant Monkey is obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated.

Duration of data storage

If a sales contract is completed in our ticket shop, we are legally obliged to keep the booking receipts for a period of 10 years. After this period, the receipts will be deleted.

If you register for a user account for the online shop, the account will be deleted when the account is closed or when we discontinue the corresponding offer.

In all other cases, the account is deleted once the statutory warranty and other similar obligations have expired; the necessity of keeping the data is reviewed every three years.

Payment

We do not save any credit card information or bank account details ourselves, but work with the payment service provider Adyen N.V. to process the payment . You can find further information on payment processing via Adyen here: https://www.adyen.com/de_DE/.

You can find more information about data protection at Adyen here: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy.

h) Purchases for vouchers and annual passes through the Ticket Shop of the Staatliche Museen zu Berlin

Purpose and data

The following pass-holder data will be stored and used for the duration of the contractual relationship in order to issue the personalised annual passes and to create the contract: name and address and optionally, e-mail address, telephone number and date of birth. 

Legal framework

The aforementioned categories of data are collected and processed in the context of entering into and processing a contract, as outlined in art. 6 para. 1b of the GDPR.

Data transmission

The employees of the Staatliche Museen zu Berlin – Preussischer Kulturbesitz involved in creating these contracts and the employees of the service providers of the x:hibit projects UG, who have been contracted to handle this data with the utmost care, have access to this data exclusively for the purposes of contract processing. The pass-holders are to immediately inform the Staatliche Museen zu Berlin – Preussischer Kulturbesitz of any changes to this information.

The Staatliche Museen zu Berlin has carefully selected its service providers, and signed contracts with them. The x:hibit projects UG is obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated.

Standard periods for the deletion of personal data in managing annual passes

The inventory data for the physical annual passes are deleted at the end of the calendar year following the termination of the contract. The data is only stored in an accessible and readable form for up to six months after the termination of the contract. After the six months have expired, the data is blocked – that is, it is only accessible to a very small group of employees.

Due to a number of German tax and commerce laws, some customer information must be stored beyond the conclusion of the year (as outlined in § 147 para. 1 no. 4 of the German Fiscal Code). The standard time periods for deleting these data is:

  • Booking documentation for annual passes and vouchers – including names, addresses, telephone numbers and email addresses – is deleted six years after they are issued.
  •  Invoices issued with names, addresses and payment methods are deleted 10 years after being issued.

At the request of the customer, blocked data can be unblocked to be reused.

Payment

We do not save any credit card information or bank account details ourselves, but work with the payment service provider Adyen N.V. to process the payment. You can find further information on payment processing via Adyen here: https://www.adyen.com/de_DE/.

You can find more information about data protection at Adyen here: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy.

i) Scanning the Berlin Museum Pass

Every time you enter one of our exhibitions, your digital Berlin Museum Pass will be scanned for validation. In this instance, the following personal data will be processed: the customer’s title, first and last name, optional postcode and home country; technical ticket data: date of purchase, period of validity, product name. We pass these data on to our data processor, visitBerlin Berlin Tourismus & Kongress GmbH, which validates the ticket for us and then supplies us and the other SMB museums with anonymised statistical data. We have carefully selected visitBerlin Berlin Tourismus & Kongress GmbH and have entered into an order processing agreement with the company pursuant to Article 28 of the GDPR.

j) Use of Google Analytics

We use Google Analytics to analyse the use of our website. Our use of Google Analytics is regulated by art. 6 para. 1f of the GDPR. The website operator has a legitimate interest in carrying out effective promotional activities. The data obtained from this is used to optimise our website and promotional activities.

Google Analytics is a web analytics service operated and provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually obliged to take measures to ensure the confidentiality of the data processed.

During your visit to our website, the data collected includes, but is not limited to, the following:

  • Pages viewed
  • Orders made, including sales and products ordered
  • The achievement of “website goals” such as making a contact request or signing up to a newsletter)
  • Your activity on the pages (e.g. length of stay, clicks, scrolling)
  • Your approximate location (country and city)
  • Your IP address (in shortened form, so that no definitive identification can be made)
  • Technical information such as browser type, internet provider, device type and screen resolution
  • Visit referral source (i.e. via which website or advertisement you came to us).

We also use the extended feature “Google Signals”, which enables cross-device tracking. This enables us to connect an individual visitor with multiple devices. However, this only happens if the visitor is logged into a Google service when visiting the website, and has also activated the “personalised advertising” option in their Google account settings.

If you do not wish to use “Google Signals”, you can deactivate the “personalised advertising” option in your Google account settings.

This data is transferred to Google servers in the USA. Please note that the USA does not guarantee the same level of data protection as the EU.

Google Analytics caches cookies in your web browser for a period of two years after your last visit. These cookies contain a randomly generated user ID with which you can be recognised on future visits.

The data recorded is stored together with the randomly generated user ID, which enables the evaluation of anonymised user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregate form indefinitely.

If you do not agree with your data being collected, you can prevent this by installing the Google Analytics opt-out browser add-on, or by rejecting cookies in our cookie settings window.

The company Seyffert mit Himmelspach GmbH also has access to our Google Analytics system for the purposes of optimising our online marketing activity. The Staatliche Museen zu Berlin has carefully selected this service provider. A contract was signed with this service provider to regulate their processing of user data. They are obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated. Beyond this, the data is not passed on to third parties.

We also use the ads functions of Google Analytics for ads reports.

These demographics and interest reports contain information on age, gender and user interests. This allows us to get a better understanding of our users – but without being able to connect this data with specific individuals. You can find out more about the advertising features at: https://support.google.com/analytics/answer/3450482?hl=en

You can stop the activities and information connected with your Google account from being used by switching off ad personalisation in Google’s “Ad Settings” at: https://adssettings.google.com/authenticated.

k) Use of Google Ads and Campaign Manager

This website uses the Google Remarkteing technology provided by Google Ireland Limited. This technology allows us to reapproach users who have already visited our webpages and used our online services and who are interested in what we have to offer through targeted ads on the websites in the Google Partner Network. The ads are displayed with the use of cookies, which are small text files that are stored on the user’s computer. With the help of these text files, user behaviour while visiting the website can be analysed and then used for targeted product recommendations and online advertising. If you do not wish to receive interest-based advertising, you can deactivate Google’s use of cookies for these purposes by going to: https://www.google.de/settings/ads

Alternatively, users can disable the use of cookies by third parties by visiting the opt-out page of the Network Advertising Initiative. By using our services, you consent to your data being processed by Google in the manner and for the purposes outlined above. Please note that Google has its own, independent data protection guidelines. We do not accept any responsibility or liability for these policies and procedures. Please read Google’s privacy policy before using our website.

You can find the relevant Google Inc. privacy policy here: https://www.google.com/intl/de/policies/privacy/. In addition, we allow you to adjust your settings regarding the use of cookies and personalised ads.

l) Use of Facebook Ads

To measure visitor conversions, our website uses the Facebook pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The use of the Facebook pixel is regulated by art. 6 para. 1f of the GDPR. The website operator has a legitimate interest in carrying out effective promotional activities, including on social media.

By using this feature provided by Facebook, the behaviour of visitors can be tracked after they have been redirected to our website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes, and in order to optimise future advertising activity. For us, as the operator of this website, the data provided by Facebook is anonymous, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, meaning that the data can be connected with the person’s Facebook profile, and Facebook is allowed to use the data for its own advertising purposes in accordance with the Facebook’s data policy. This allows Facebook to place ads on Facebook pages, but also on pages that are not on Facebook. As the operators of this website, we have no influence over this use of user data.

You can find further information on protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/. You can also disable the “Custom Audiences” remarketing feature in the Ad Settings section. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can disable Facebook’s usage-based ads on the European Interactive Digital Advertising Alliance website.

The company Seyffert mit Himmelspach GmbH also has access to our Facebook Ads system for the purposes of optimising our online marketing activity. The Staatliche Museen zu Berlin has carefully selected this service provider. A contract was signed with this service provider to regulate their processing of user data. They are obliged to follow the instructions of the Staatliche Museen zu Berlin, and their activities are regularly evaluated. Beyond this, the data is not passed on to third parties.

4. Who is responsible for content and maintenance, and who looks after data protection?

The Stiftung Preussischer Kulturbesitz, legally represented by the president, Prof. Dr. hc. mult. Hermann Parzinger, is responsible for data protection on these webpages.

Stiftung Preussischer Kulturbesitz
Von-der-Heydt-Straße 16-18
10785 Berlin
Germany

Phone: +49 (0)30 266 412889
E-Mail: info[at]hv.spk-berlin.de
Website: www.preussischer-kulturbesitz.de

For questions regarding data protection, the Stiftung Preussischer Kulturbesitz has a data protection officer whom you can contact at our postal address (addressed to the “data protection officer”) or at datenschutzbeauftragte[at]hv.spk-berlin.de

5. Changes to the Privacy Policy

The Staatliche Museen zu Berlin reserves the right to adapt this policy to meet technological developments and changes to legal frameworks.  The date of the most recent version of this data protection policy can be found at the end of this document.

Date: February 2023