DATA PROTECTION RULES AND CONSENTS

Goethe-Institut Tokyo, 7-5-56 Akasaka, Minato-ku, Tokyo 107-0052
(“Goethe Institute” or “we”), as the operator of the website www.beuysonoff.com (the “Website”), is the controller of the personally identifiable data of the users (“You”) of the Website within the meaning of the EU General Data Protection Regulation (GDPR) and the German data protection laws, in particular the Federal Data Protection Act (BDSG).

CONTENTS

  1. Use of the website for information purposes
  2. Data collection and use for the execution of the contract
  3. Google Maps
  4. Cookies
  5. Web Analysis
    a) Google(Universal) Analytics
  6. Social Networks
    a) Use of Spotify and Soundcloud widgets
    b) Embedding and display of social media content
    c) YouTube and Vimeo video plugins
    d) Our online presence on social media
  7. Data security
  8. Your rights and how to contact us
  9. Right of objection

The Goethe-Institut takes the protection of your data very seriously. With this privacy notice, we would like to inform you in a transparent manner which personally identifiable data (“your data”) we collect, process and use about you when you visit our online presence and/or use the Goethe Institute’s Website.  

1. USE OF THE WEBSITE FOR INFORMATION PURPOSES

You can visit our Website and use some of our Internet offerings without providing any personal information. Whenever you access a website, the web server merely automatically stores access data in server log files, which are automatically communicated by your browser, such as the name of the requested file, the last website visited, the date and time of the access, the browser used, the amount of data transferred, the IP address, the requesting provider, etc. Within the scope of processing on our behalf, a third party provider renders the services for hosting and displaying the Website for us. 

2. DATA COLLECTION AND USE FOR THE EXECUTION OF THE CONTRACT

We collect personally identifiable data if you provide us with this information when contacting us (e.g. via contact form or email) or in the course of a registration, for example for a Zoom event. Which data is collected in detail and which information is mandatory and which is voluntary can be seen from the respective input forms.

Your data will be blocked for further use and deleted after the expiry of the mandatory retention periods under tax and commercial law. Should tax or commercial law retention obligations not apply to individual data, this will be deleted immediately after the respective contract has been executed. The only exception to this is if you have expressly consented to further use of your data or if we reserve the right to use your data for any other purpose that is permitted by law and about which we inform you below.

3. GOOGLE MAPS

On our website we use the integration of Google Maps to visually display geographical information. In accordance with Art. 6 (1) sentence 1 lit. f GDPR, this serves to safeguard our overriding legitimate interests in an optimised presentation of our offering at individual locations when weighing up the interests involved.

According to the Google Terms of Use (Version of 31.03.2020), the Google Maps service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) if you have your habitual residence in the European Economic Area or Switzerland. If you have your habitual residence in another country, the Google Maps service will be provided to you by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When using Google Maps, your personal data may be transferred to Google companies in countries outside the European Economic Area where an adequate level of data protection is not ensured and your rights under European data protection law may not be enforceable.

In order to ensure an adequate level of data protection when transferring users’ data from the United Kingdom to the United States, we have agreed with Google LLC on standard data protection clauses issued by the European Commission for this purpose. You can obtain a copy of this agreement from us upon request. To do so, please contact us using the contact details below.

When you access a website on which Google Maps is integrated, Google’s web server also automatically collects access data in server log files, which are automatically communicated by your browser, such as the name of the requested file, the last website visited, the date and time of the access, the browser used, the amount of data transferred, the IP address, the requesting provider, etc. When using Google Maps, Google also processes data on the use of the Maps functions by visitors to the website.

Further information about Google’s privacy policy and settings options can be found at https://policies.google.com/privacy.

4. COOKIES

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. This serves to safeguard our overriding legitimate interests in an optimised presentation of our offering in accordance with Art. 6 (1) sentence 1 (f) GDPR. These are small text files that are stored on your end device.

Some of the cookies used by us are deleted again after the end of the browser session, i.e. after closing your browser (session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit and, if necessary, to enable you to log in automatically (persistent cookies). 

You can view the duration of the persistent cookies via your browser. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser is different in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

If cookies are not accepted, the functionality of our website may be limited.

5. WEB ANALYSIS 

a) Google (Universal) Analytics

For website analysis, this website uses Google (Universal) Analytics, a web analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). This serves to safeguard our overriding legitimate interests in an optimised presentation of our offering in accordance with Art. 6 (1) sentence 1 (f) GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other Member States that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The anonymised IP address provided by your browser in the context of Google Analytics will in principle not be merged with other Google data. After discontinuation of the purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

6. SOCIAL NETWORKS

a) Use of Spotify, Soundcloud, Vimeo and YouTube widgets

On our website, we use widgets from the Spotify, Soundcloud, Vimeo and YouTube networks for the purpose of making our content interactive. This serves to protect our overriding legitimate interest in a multimedia presentation of our offering and our activities in accordance with Art. 6 (1) sentence 1 (f) GDPR.

When you visit a page on our site that contains such a widget, your browser will connect directly to the Spotify, Soundcloud, Vimeo or Soundcloud servers. The content of the widget is transmitted by the respective provider directly to your browser and integrated into the page. By integrating the widgets, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not logged in at the moment. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider and stored there.

If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile in the respective social network. When you interact with the widgets, for example when you play content, the corresponding information is also transmitted directly to a server of the providers and stored there.

The information can also be published in the social network and displayed to your contacts.

The purpose and scope of data collection and the further processing and use of data by the providers, as well as a contact option and your rights and settings options for the protection of your privacy, can be found in the privacy policy of the providers.

Spotify AB: https://www.spotify.com/de/legal/privacy-policy/
SoundCloud Limited: https://soundcloud.com/pages/privacy

If you do not want the social networks to associate the data collected via our website directly with your profile in the respective service, you can also completely prevent the widgets from loading with add-ons for your browser, e.g. with the script blocker “NoScript” (https://noscript.net/).”   

b) Embedding and display of social media content

Twitter, Instagram und Facebook

On our websitecontent (posts, comments and/or channels) from Twitter, Instagram and Facebook can be displayed using social plugins.

This ensures that there is no direct communication between the client and the respective social media service. Only when you interact with content (e.g. commenting, liking), you immediately log in to the social media service and a data transfer takes place. This may include the following data:

  • Visited website
  • Browser informationen
  • Informationen about the operating system
  • IP address

Content from other social networks

In addition, content from other social networks (e.g. Spotify and Soundcloud) can be displayed using social plugins. Via the social plugins, a direct connection can be established to the servers of the respective network, whereupon data is transmitted to the provider. This may include the following data:

  • Visited Website
  • Browser informationen
  • Information about the operating system
  • IP address

This serves to protect our overriding legitimate interest in a multimedia presentation of our offering and our activities in accordance with Art. 6 (1) sentence 1 (f) GDPR.

  c) YouTube and Vimeo video plugins

On this website, content from third parties is integrated via YouTube and Vimeo for the purpose of interactive design of our content.

YouTube is operated by Google Ireland Limited, a company incorporated and regulated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”).

Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA.

For videos from YouTube that are embedded on our site, the advanced privacy setting is enabled. This means that no information is collected and stored from website visitors to YouTube unless they are playing the video.

Videos from Vimeo that are embedded on our site have the tracking tool Google Analytics automatically integrated. We have no influence on the results of the analysis and cannot view them. In addition, by embedding Vimeo videos, web beacons are set for website visitors when they activate them. To prevent the Google Analytics tracking cookies from being set, you can take the usual precautions to deactivate Google Analytics. For more information, see the section on web analysis.

This serves to protect our overriding legitimate interest in a multimedia presentation of our offering and our activities in accordance with Art. 6 (1) sentence 1 (f) GDPR. The purpose and scope of data collection and the further processing and use of data by the providers and your rights and settings options for the protection of your privacy, can be found in the privacy policy of the providers:

YouTube / Google: https://www.google.de/intl/de/policies/privacy/ 
Vimeo: https://vimeo.com/privacy

 d) Our online presence on social media

Our presence in social networks and platforms serves the purposes of better, active communication with our customers and interested parties. We provide information there about our products.

When you visit these online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, usage profiles are created using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your end device. These cookies store the visitor behaviour and interests of the users. In accordance with Art. 6 (1) sentence 1 lit. f GDPR, this serves to safeguard our overriding legitimate interests in an optimised presentation of our offering and effective communication with customers and interested parties when weighing up the interests involved. If you are asked by the respective social media platform operators for consent (permission) to data processing, e.g. by means of a checkbox, the legal basis for data processing is Art. 6 (1) sentence 1 (a) GDPR.

Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: Data processing is carried out on the basis of the standard contractual clauses.

For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights and settings options for the protection of your privacy, in particular opt-out options, please refer to the providers’ privacy policies linked below. If you still need help in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/     
Possibility of appeal (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads  

7. DATA SECURITY

We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons, such as a subsequent login through SSL encryption.

8. YOUR RIGHTS AND HOW TO CONTACT US

As a data subject, you have the following rights:

  • in accordance with Art. 15 GDPR, the right to request information about your personally identifiable data processed by us to the extent described therein;
  • in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personally identifiable data stored by us;
  • in accordance with Art. 17 GDPR, the right to demand the deletion of your personally identifiable data stored with us, unless further processing is necessary
    • to ensure the exercising of the right to freedom of expression and information;
    • to fulfil a legal obligation;
    • for reasons of public interest, or
    • to assert, exercise or defend legal claims
  • in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personally identifiable data, provided that
    • the correctness of the data is disputed by you;
    • the processing is unlawful, but you refuse to delete it;
    • we no longer need the data, but you need it to assert, exercise or defend legal claims, or
    • you have lodged an objection to the processing pursuant to Art. 21 GDPR;
  • in accordance with Article 20 GDPR, the right to receive your personally identifiable data provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • in accordance with Article 77 GDPR, the right to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company’s registered office.

If you have any questions about the collection, processing or use of your personally identifiable data, about information, correction, restriction of processing or deletion of data as well as revocation of any consents granted or objection to a specific use of data as well as the right to data transferability, please contact the Goethe-Institut:

Goethe-Institut Tokyo
7-5-56 Akasaka, Minato-ku
Tokyo 107-0052
info-tokyo@goethe.de

9. RIGHT OF OBJECTION

Insofar as we process personally identifiable data as explained above in order to safeguard our overriding legitimate interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are reasons arising from your particular situation.

After exercising your right of objection, we will not process your personally identifiable data further for these purposes, unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not process your personally identifiable data further for this purpose.