General Information
The following information provides a simple overview of what happens with your personal information when you visit this website. Personal information is any data by which you can be personally identified. Detailed information about data protection can be found in our data privacy statement included below.
Data Collection on this Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. See the "Responsible Entity" section in this data privacy statement for contact information.
How do we collect your data?
Firstly, your information is collected, because you provide it to us. This could, for example, information that you enter on a contact form. Other information is collected automatically or with your consent by our IT systems when you visit the website. This mainly comprises technical data (such as your Internet browser, operating system, or time of page view). This data is collected automatically when you access this website.
How do we use your data?
A portion of the information collected is used to ensure the correct functioning of the website. Other data may be used to analyse your user behaviour.
What rights do you have in terms of your data?
You have the right to receive information free of charge and at any time about the origin, recipients, and purpose of your stored personal information. You also have the right to request the correction or deletion of this information. If you have given your consent to the processing of your information, you may withdraw this consent at any time for the future. In addition, you have the right to request a restriction of the processing of your personal information under certain circumstances. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority. For this purpose or for any other questions, you may contact us at any time.
Analytics and Third-party Tools
When you visit this website, your surfing behaviour can be statistically analysed. This is mainly done through so-called analysis programmes. Detailed information on these analysis programmes can be found in the applicable section of the following data privacy statement.
Hosting
We host the contents of our website on our own servers.
The personal information collected on this website is stored on our servers This may include IP addresses, contact requests, meta and communication data, contract information, contact information, names, website accesses, and other data generated by a website.
Internal hosting serves the purpose of fulfilling contractual obligations towards our potential and existing visitors and customers (art. 6 para. 1b of the GDPR and in the interest of the secure, fast, and efficient provision of our online offerings.
Provided that consent has been requested, processing takes place exclusively on the basis of art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (such as device fingerprinting) as outlined in the TTDSG. Consent can be withdrawn at any time.
General and Required Information
Data Privacy
As the operator of these pages, we take the protection of your personal information very seriously. We treat your personal information confidentially and in accordance with the applicable data protection regulations and this data privacy statement. When you use this website, various kinds of personal information are collected. Personal information is data by which you can be personally identified. This data privacy statement explains what kinds of data we collect and for which purposes it is used. The statement also explains how and for what purpose this occurs.
We would like to emphasize that data transmission over the Internet (such as communication by email) can be subject to security breaches. A seamless protection of data from third-party access is not possible.
Responsible Entity
The entity responsible for data processing on this website is:
Buchenwald and Mittelbau-Dora Memorials Foundation
99427 Weimar
Phone: +49 (0)3643-430-0
Email: sekretariat@buchenwald.de
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means for processing personal information (names, email addresses, etc.).
Data Retention
Provided that a more specific data storage period has not been specified in this data privacy statement, your personal information will be stored with us until the purpose for the data processing is no longer applicable. If you make a legitimate request for deletion, or if you withdraw your consent for data processing, your data will be deleted, unless we have other legal grounds for storing your personal information (such as retention periods mandated by tax or commercial law); in the latter case, data is deleted once these grounds are no longer applicable.
General Information on the Legal Basis for Data Processing on this Website
Provided you have consented to the processing of your data, we process your personal information on the basis of art. 6 para. 1a of the GDPR or art. 9 para. 2a of the GDPR, insofar as special data categories pursuant to art. 9 para. 1 of the GDPR are processed. If consent is expressly granted for the transfer of personal information to third countries, data processing is also carried out on the basis of art. 49 para. 1a of the GDPR. If you have consented to the storage of cookies or access to information on your terminal device (for example, via device fingerprinting), data processing is also carried out on the grounds of § 25 para. 1 of the TTDSG. Consent can be withdrawn at any time. If your data is required to fulfil contractual obligation or to carry out pre-contractual measures, we process your data on the basis of art. 6 para. 1b of the GDPR. Furthermore, we process your data on the basis of Art. 6 para. 1c of the GDPR, insofar this necessary for fulfilling a legal obligation. Data processing may also be carried out on the basis of our legitimate interest pursuant to art. 6 para. 1f of the GDPR. Information about the relevant legal basis applicable in each individual case is provided in the following paragraphs of this data privacy statement.
Data Transfer to the USA and Other Third Countries
Some of the tools we use are provided by companies based in the USA or other third countries which do not guarantee data privacy by law. If these tools are active, your personal information may be transferred to and processed in these third countries. We would like to emphasize that the level of data privacy provided in the European Union cannot be guaranteed in these countries. For example, US companies are required to hand over personal information to security authorities without you, the data subject, having any recourse to legal action against this. Therefore, it cannot be ruled out that US authorities (such as intelligence services) might process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.
Revocation of Consent to Data Processing.
Many data processing operations are only possible with your express consent. You can withdraw your provided consent at any time. The legality of the data processing carried out until the point of revocation is not affected by the revocation.
Right to Object to Data Collection in Special Cases and to Direct Advertising (art. 21 of the GDPR)
If data processing is carried out in accordance with art. 6 para. 1e or 1f of the GDPR, you have the right to object to the processing of your personal information at any time on grounds relating to your personal situation; this also applies to profiling based on these provisions. The respective legal provisions upon which this processing is based are found in this data privacy statement. If you object, we will no longer process your relevant personal information, unless we can demonstrate compelling legitimate grounds for this processing, which override your interests, rights, and freedoms, or unless the processing serves to establish, exercise, or defend legal claims (Objection pursuant to art. 21 para. 1 of the GDPR).
If your data is processed for the purposes of direct marketing, you have the right at any time to object to the processing of your relevant data for such advertising; this also applies to profiling to the extent directly related to such direct marketing. If you object, your personal information will subsequently no longer be used for the purposes of direct marketing (objection pursuant to art. 21. para. 2 of the GDPR)
Right of Appeal to a Relevant Regulatory Authority
In the event of an infringement of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their customary residence, their workplace, or the place of the alleged breach. The right to lodge a complaint is without prejudice to any other legal administrative or judicial remedy.
Right to Data Portability
You have the right to have data which we process automatically by your consent or in fulfilment of a contract provided to you or to a third party in a commonly used and machine-readable format. Requests to have your personal information directly transferred to another responsibly entity will be honoured to the extent technically feasible.
Information, Deletion, and Correction
Within the framework of valid legal provisions, you have the right at any time to free information about your stored personal information, its origin and recipients, and the purpose of the data processing and, if necessary, a right to the correction or deletion of this data. You can contact us at any time, if you have any questions about this topic or other questions regarding your personal information.
Right to the Restriction of Processing
You have the right to request the restriction of the processing of your personal information. You can contact us at any time for this purpose. The right to the restriction of processing is granted in the following cases:
-If you contest the accuracy of your personal information stored by us, we generally need time to verify your information. You have the right to request the restriction of the processing of your personal information for the duration of the verification.
-If the processing of your personal information was/is unlawful, you can request a restriction of data processing instead of deletion.
-If we no longer need your personal information, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal information instead of deletion.
-If you have an objection pursuant to art. 21 para. 1 of the GDPR, an evaluation must be made as to the precedence of your interests or ours. As long as it remains undecided whose interests prevail, you have the right to demand a restriction of the processing of your personal information.
-If you have restricted the processing of your personal information, this data may only be used with your consent – apart from its storage – or for the establishment, exercise, or defence of legal claims; or for the protection of the rights of another natural or legal person; or for reasons of important public interest of the European Union or a Member State.
Objection to Promotional Emails
It is hereby not permitted to use the contact data published in the imprint as required by law for sending unsolicited advertising and information materials. The operators of the websites expressly reserve the right to take legal action in the event of receiving unsolicited advertising, such as spam emails.
Data Collection on this Website
Cookies
Our Internet pages use so-called "cookies." Cookies are small data packets and do not cause any hard to your terminal device. They are saved either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies are saved on your terminal device until you delete them yourself or they are automatically deleted by your web browser. In some cases, cookies from third-party companies may also be saved on your device when you enter our site (third-party cookies). These enable us or you to use certain Third-party Services (such as Cookies for Payment Processing Services)
Cookies have different functions. Many cookies are technically necessary, because certain website functions would not work without them (for example, the shopping cart function or the display of videos). Other cookies serve the purpose of evaluating user behaviour or showing advertising. Cookies that are necessary (necessary cookies) for carrying out the electronic communication process, for providing certain functions desired by you (such as the shopping cart function), or for optimizing the website (for example, cookies used to measure web audiences) are stored on the basis of art. 6 para. 1f of the GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in the storage of necessary cookies for the provision of its services in a technically sound and optimized manner. Provided that consent to the storage of cookies and comparable recognition technologies has been requested, the processing takes place exclusively on the basis of this consent (art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG); consent can be withdrawn at any time.
You can set your browser, so that you are notified about added cookies and permit cookies only in individual cases; so that you can block cookies in certain cases or across the board; and so that you can activate the automatic deletion of cookies when the browser is closed. Deactivating cookies may limit the function of this website.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately within the scope of this data privacy statement and, if necessary, request consent.
Contact Form
If you send us a request via the contact form, we will store the information on the contact form, including the contact details you provided there, for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.
You can always view our website without cookies. However, if you want to contact us through a contact form, then our websites use cookies. These are text files that are placed and stored on a computer system through an Internet browser. Cookies allow us to recognize the users of our website. For example, the online shop uses a cookie to remember items that a customer has placed in the virtual shopping cart.
You can deactivate the use of cookies at any time in your browser settings. Please use the help functions of your Internet browser to learn how to change these settings. Please note that the contact forms on our website will not work if you have deactivated the use of cookies.
The processing of this data takes place on the basis of art. 6 para. 1b of the GDPR, to the extent your request is related to the fulfilment of a contractual obligation or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (art. 6 para. 1f of the GDPR) or on your consent (art. 6 para. 1a of the GDPR) if requested; consent can be withdrawn at any time.
The information you enter on the contact form will be stored with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (for example, once your request has been processed). Mandatory statutory provisions – retention periods, in particular – remain unaffected.
Requests by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your request, including all related personal information (name, request), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data takes place on the basis of art. 6 para. 1b of the GDPR, if your request is related to the fulfilment of a contractual obligation or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (art. 6 para. 1f of the GDPR) or on your consent (art. 6 para. 1a of the GDPR) if requested; consent can be withdrawn at any time.
The data you send to us through information requests will be stored with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (for example, once your request has been processed). Mandatory legal provisions – statutory retention periods, in particular – remain unaffected.
Data Protection for Job Applications and in Application Processes
In application processes, application documents may also be transmitted by email.
We collect and process applicants' associated personal information exclusively for the purpose of carrying out the application process.
If the Buchenwald and Mittelbau-Dora Memorials Foundation concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of managing employment in compliance with legal requirements. If no employment contract is concluded with the applicant, the application documents will be automatically deleted four months after notification of rejection, provided that deletion does not conflict with any other legitimate interests of the responsible entity. In this sense, other legitimate interests are, for example, a burden of proof in proceedings subject to the General Equal Treatment Act (AGG).
Analysis Tools and Advertising
Matomo
This website uses the open-source web analysis service Matomo.
With the help of Matomo, we can collect and analyse data about the use of our website by visitors to the site. This allows us, among other things, know when and which page impressions are registered and from which region they originate. In addition, we collect various log files (such as IP address, referrers, browsers, and operating systems used) and can measure whether our website visitors perform certain actions (such as clicks, purchases, etc.).
When individual pages of our websites are accessed, the following specified information is stored:
- two bytes of the IP address of the user's calling system
- the website accessed
- the website from which the user reached the accessed website (referrer)
- the subpages accessed from the accessed website
- the length of stay on the website
- the frequency in which the website is accessed.
The software exclusively runs on our website servers, which are located in Germany. Data is not shared with third parties. Due to our automatic anonymization of IP addresses, this data cannot be identified with specific persons.
The use of this analysis tool is based on art. 6 para. 1f of the GDPR. The website operator has a legitimate interest in analysing user behaviour to optimize its website and advertising. Providing the corresponding consent has been requested, processing takes place exclusively on the basis of art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (such as device fingerprinting) in accordance with TTDSG. Consent can be withdrawn at any time.
Further information and the applicable data protection provisions of Matomo can be found at https://matomo.org/privacy/.
Hosting
We host Matomo exclusively on our own servers, so that all analysis data is stored with us and is not shared.
Newsletter, Newsletter Data
If you would like to receive the newsletter offered on the website, we require that you provide an email address as well as information enabling us to verify that you are the owner of the email address provided and that you agree to receiving the newsletter. Further data is not collected, or is only collected on a voluntary basis.
Basis of your Consent (art. 6 para. 1a of the GDPR).
Consent to the storage of your data and email address and to their use for sending the newsletter can be revoked at any time, for example by using the "unsubscribe" link in the newsletter. The legality of the data processing carried out up until that point remains unaffected by the revocation.
Our newsletters use the service: SendinBlue (SendinBlue Email, SendinBlue SAS)
SendinBlue is a service provided by SendinBlue SAS for managing email addresses and sending messages.
This service facilitates the management of a database with email addresses, telephone numbers, and any other contact information used to communicate with the user.
Data is collected about the date and time when a message was read by the user and about when the user interacts with incoming messages, for example by clicking on links contained therein.
The personal information collected: cookie; email, and usage data.
Place of processing: France
Data Privacy Statement:
https://de.sendinblue.com/legal/privacypolicy/
The information provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider, until you unsubscribe from the newsletter. It is deleted from the newsletter mailing list once you unsubscribe from the newsletter or once the mailing list is no longer needed. We reserve the right to delete or block email addresses in our newsletter mailing list at our own discretion within the scope of our legitimate interest and pursuant to art. 6 para. 1f of the GDPR.
Information stored by us for other purposes remains unaffected. After you unsubscribe from the newsletter mailing list, your email address may be stored by us or the newsletter service provider on a blacklist, if this is necessary to prevent future mailings. Information on the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interests and our interest in complying with legal requirements applicable to sending newsletters (legitimate interest in accordance with art. 6 para. 1f of the GDPR). There is no time limitation in terms of blacklist storage. You can object to this storage if your interests outweigh our legitimate interest.
Plugins and Tools
YouTube
This website embeds videos from the YouTube website. The website is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our websites into which YouTube is integrated, a connection to YouTube servers is established. YouTube servers receive information about which of our pages you visited.
Furthermore, YouTube may store various cookies on your device or use comparable recognition technologies (such as device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud.
If you are logged into your YouTube account, you are enabling YouTube to link your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offerings.
This constitutes a legitimate interest in accordance with art. 6 para. 1f of the GDPR. If corresponding consent has been requested, processing takes place exclusively on the basis of art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (such as device fingerprinting) in accordance with the TTDSG. Consent can be withdrawn at any time.
Further information on the handling of user information can be found in YouTube's privacy policy
Under: https://policies.google.com/privacy?hl=de.
Vimeo
This website uses plugins of the Vimeo video platform. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages that includes a Vimeo video, a connection to the Vimeo servers is established. Vimeo servers receive information about which of our pages you visited. Vimeo also obtains your IP address. This also applies even if you are not logged in to Vimeo and do not have an account with Vimeo. The information collected by Vimeo is transmitted to Vimeo servers in the USA.
If you are logged into your Vimeo account, you enable Vimeo to directly link your surfing behaviour with your personal profile. You can prevent this by logging out of your Vimeo account.
To recognize website visitors, Vimeo uses cookies or comparable recognition technologies (such as device fingerprinting).
The use of Vimeo is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest in accordance with art. 6 para. 1f of the GDPR. Provided that corresponding consent has been requested, processing takes place exclusively on the basis of art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (such as device fingerprinting) in accordance with the TTDSG. Consent can be withdrawn at any time.
The transfer of information to the USA is based on the standard contractual clauses of the European Commission and, according to Vimeo, on "legitimate business interests." For details, see:
https://vimeo.com/privacy.
See Vimeo's privacy policy for further information on the handling of user information:
https://vimeo.com/privacy.
Google Maps
This site uses the map service Google Maps. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this transfer of information. If Google Maps is activated, Google may use Google Fonts for the purpose of a uniform font display. When you access Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and of facilitating the location of places that we name on our website. This constitutes a legitimate interest in accordance with art. 6 para. 1f of the GDPR. Provided that corresponding consent has been requested, processing takes place exclusively on the basis of art. 6 para. 1a of the GDPR and § 25 para. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (such as device fingerprinting) in accordance with the TTDSG. Consent can be withdrawn at any time.
The transfer of data to the USA is based on standard contractual clauses of the European Commission.
For details, see:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information how user information is handled, see Google's privacy policy:
https://policies.google.com/privacy?hl=de.
The operating company of, Facebook is Meta, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller responsible for the processing of personal information is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The privacy policy published by Facebook, available under https://de-de.facebook.com/about/privacy/, provides information about the collection, processing, and use of personal information by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook.
External Links
Our online offerings contain links to other websites. We have no influence on whether their operators comply with data privacy laws or other regulations.
Encryption
SSL Encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us. If SSL encryption is activated, the information that you transmit to us cannot, according to current technology, be read by third parties.
Disclaimer
The Buchenwald and Mittelbau-Dora Memorials Foundation makes every effort to ensure that all information and data contained on its website are correct and up to date. However, we assume no liability for, nor do we guarantee the timeliness, correctness, and completeness of the information and data provided. Under no circumstances do we assume liability for damages resulting from the use of the retrieved information.
Changes to Our Data Privacy Statement
We reserve the right to occasionally adapt this data privacy statement, so that it always complies with current legal requirements, or to adapt the data privacy statement when implementing changes to our services, for example when introducing new services. The new data privacy statement will then apply to your next visit.
Questions for the Data Protection Officer
If you have any questions, comments, or requests for information associated with this data privacy statement, please contact our data protection officer: datenschutz@buchenwald.de
