de en

Data protection statement

Contact

The individual holding responsibility as defined by the General Data Protection Regulation, other national data protection legislation of the EU Member States and other data protection provisions:

Prof. Martin Köttering, President of the HFBK Hamburg
Hochschule für bildende Künste Hamburg
Lerchenfeld 2
22081 Hamburg

Contact

The external Data Protection Officer for the Hochschule für bildende Künste Hamburg (HFBK):

Bernd Uderstadt
Universität Hamburg
Mittelweg 177
20148 Hamburg
e-mail: datenschutz@hfbk-hamburg.de

A. Data processing

1. When visiting our website

Data and information is collected every time this website is accessed or used. This data and information is stored in log files on the server. This can include:

  • IP address
  • Browser type / version
  • Date and time the website was accessed
  • User internet service provider
  • User operating system
  • Referring website
  • Websites accessed by the user’s system via our website

We save data and log files temporarily on the basis of art. 6 section 1 lit. f GDPR.

The IP address is temporarily stored on the system as it is necessary to provide website access to the user’s computer. The IP address must be saved while the website is being accessed.

Data is saved in log files to ensure the functionality of the website, to optimize the content of our website and ensure the security of our IT system.

The data concerned shall be deleted when it is no longer required for the purposes for which it was stored. Data collected to provide access to the website will be deleted at the end of every session.

Any data saved in log files will be deleted after seven days at the latest. Some data may be saved for a longer period of time. In this case, user IP addresses will be deleted or altered in such a way as to prevent them being linked to the client accessing the website.

2. Our newsletter

You can subscribe to a free-of-charge newsletter on the HFBK website.

When you register, you will be asked to give your consent to our processing of your data and referred to our Privacy Statement. The process of registering for the newsletter will transmit the information you have entered into the online data entry form.

All data entered within this registration process is processed on the basis of art. 6 section 1 lit. a GDPR.

The data provided to register for the newsletter will only be used to deliver the newsletter to you and will not be given to third parties. You can unsubscribe from the newsletter at any time. Your data will then be immediately deleted from our system.

3. Online forms

The HFBK website holds a number of temporary online forms used for electronic communication. These online forms are used for applications for grants and funding programmes. The data entered in the entry mask will be communicated. Those entering data will be asked for their permission for data processing within the scope of the transmission procedure. The user will be referred to our data protection statement.

Given the permission by those entering their data, the data is processed on the basis of art. 6 section 1 lit. a GDPR.

The data will only be used to serve the purposes indicated. The data concerned shall be deleted when it is no longer required for the purposes for which it was stored.

 

B. Web analysis

The HFBK homepage uses Matomo, an open source software for the analysis and statistical evaluation of visitor accesses.

Matomo uses “cookies”, text files saved on your computer, to enable analysis of your use of the website. The IP address is anonymized immediately after processing and before the data is stored.

This information is used to evaluate the use of our website, and to enable us to adapt our website to your needs. We process personal data on the basis of art. 6 section 1 lit. f GDPR.

You may prevent the installation of the cookies by selecting the appropriate settings on your browser. Please note however that this may mean that you will not be able to use the full functionality of this website.

 

C. Data transfer to third parties

1. Social media

We use social media plug-ins to link the HFBK website with the following social networks. The operator of these services is responsible for ensuring operation in accordance with the data protection regulations.

We use Social Media channels and external content to make an attractive online presence. This represents a legitimate interest as defined by art. 6 section 1 lit. f GDPR.

When accessing a page on our website which contains these social plugins, a direct connection with the server of the social network will be established from where the image of the plugin and the functions behind it will be transmitted directly to your browser which will incorporate it in the presentation of our website. If you are registered on this social network with user name and password, the information that you have logged in to our website will be transmitted to the social network in question and will be assigned to your user account. When interacting with the social plugins, e.g. If you share one of our web pages or use the Facebook "Like” or Twitter "Tweet This” functions, the contents of our page will be linked with your profile in the respective social network. If you are not a member of these social networks or have logged out of your accounts before visiting our website, it is still possible that your IP address will be transmitted to these networks, which will save them.

Facebook

We use Facebook social plugins on our website provided by Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA (“Facebook”).

The purpose and scope of Facebook’s data collection, its further processing and use of your data as well as your rights and the settings with which to protect your private information are explained in the Facebook privacy policy.

Facebook also processes your personal data in the USA, and is subject to the EU-US Privacy Shield.

Twitter

We use the social plugins provided by the micro-blogging service Twitter, operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”).

The purpose and scope of Twitter’s data collection, its further processing and use of your data as well as your rights and the settings with which to protect your private information are explained in the Twitter privacy policy.

Twitter also processes your personal data in the USA, and is subject to the EU-USPrivacy Shield.

Instagram

Our website uses social plugins from Instagram, a service from Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

The purpose and scope of Instagram’s data collection, its further processing and use of your data as well as your rights and the settings with which to protect your private information are explained in the Instagram privacy policy.

Rhizome

The Rhizome network is embedded in our website. Rhizome is a service of the Diaspora Foundation.

The scope of the data collected by Rhizome, the purposes which it serves and the use and processing of the data by this service are outlined in the data protection statement issued by Rhizome.

YouTube

We use the services of YouTube to embed videos in our website. YouTube is operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC. in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Further information pertaining to data processing and information about the YouTube (Google) data protection policy is available here: https://policies.google.com/privacy?hl=de&gl=de.

Google also processes your personal data in the USA, and is subject to the EU-USPrivacy Shield.

PodCampus

We use PodCampus to embed videos in our website. PodCampus is a service provided by MMKH GmbH, Saarlandstraße 30, 22303 Hamburg.

Further information pertaining to data processing and information about the PodCampus data protection policy is available here: https://www.podcampus.de/pages/datenschutzerklaerung.
 

2. Online-Tools

Google Maps

We use Google Maps API, the Google LLC map service provider ("Google") for the display of interactive maps and to generate route plans. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In using Google Maps, information pertaining to the use of this website (including your IP address) is transmitted to and stored by Google on servers in the United States. Google may also transmit this information to third parties, as far as this is required by law or if third parties process this data on behalf of Google.

You can deactivate the Google Maps service by deactivating JavaScript in your browser. This prevents data transfer to Google. Please note however that this may mean that you will not be able to use the map display function of our website.

The Google data protection statement and additional terms of use are available here: https://policies.google.com/privacy?hl=de&gl=de.

Google also processes your personal data in the USA, and is subject to the EU-USPrivacy Shield.

 

D. The rights of the persons affected

You have the following rights:

  • To information about the data which we store related to your person (art. 15 GDPR).
  • To correct incorrect or incomplete personal data (art. 16 GDPR).
  • To delete personal data which we have saved as far as we do not require it in order to exercise the right to freedom of expression and information; to comply with legal requirements; for reasons of public interest; or to exert, exercise or defend legal claims (art. 17 GDPR).
  • To restrict the processing of personal data (art. 18 GDPR).
  • The right to object to this processing for the purposes of serving our valid interests, a public interest or profiling, unless we can assert compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms; or if the processing serves to assert, exercise or defend legal claims (art. 21 GDPR).
  • To revoke the permission granted to collect, process and use your personal data at any time with effect for the future (art. 7 section 3 GDPR). This means that we are no longer permitted to process the data for which you provided your assent.
  • The right to lodge a complaint with a regulatory agency if you are of the opinion that the processing of your personal data infringes the provisions of GDPR (art. 77 GDPR).