Data Privacy Statement
1. Data Processor
The Data Processor, or party responsible for the recording, processing and use of your personal data within the meaning of Art. 4, no. 7 GDPR is
Akademie Schloss Solitude, Solitude 3, 70197 Stuttgart, Germany
Tel. +49 (0)711-99619-0, fax +49 (0)711-99619-50
(hereinafter referred to as: Akademie Schloss Solitude)
In the event that you wish to raise objections to the recording, processing and use of your personal data by us in accordance with these data privacy regulations, either in whole or in part, you are kindly invited to address your objections to the Data Processor.
2. Collection and Storage of Personal Data and Nature and Purpose of Usage
a) When visiting the website
When visiting our website https://www.akademie-solitude.de/, information will automatically be sent to our website server by the browser used by your terminal device. This information is stored temporarily in a so-called logfile. In the process, the following information is recorded without any action on your part, and stored until its automatic deletion:
the IP address of the requesting computer,
the date and time of access,
the name and URL of the retrieved file,
the website from which access is made (referrer URL),
the browser used by you and possibly your computer’s operating system as well as the name of your internet access provider.
The aforementioned data is processed by us for the purposes listed as follows:
in order to enable a smooth connection establishment as regards the use of the website,
in order to guarantee the convenient use of our website,
in order to evaluate system security and stability and for other administrative purposes.
The legal basis of the aforementioned data processing is Art. 6, para. 1, p.1, lit. f GDPR. The data collection purposes listed above constitute our legitimate interest in said data. Under no circumstances is the data collected used in order to draw conclusions about you as an individual.
In addition, the use of our website involves both cookies and analytics services. For further information about these, you are referred to sections 4 and 5 of the present Data Privacy Statement.
b) When subscribing to our newsletter
In the event that you have given your express consent in accordance with Art. 6, para. 1, p. 1, lit. a GDPR, we will use your email address in order to send you our newsletter on a regular basis. The provision of an e-mail address is sufficient in order to receive the newsletter.
Sending of the Newsletter
We use the MailChimp service in order to send our newsletter, an American mailing solutions provider and member of The Rocket Science Group, LLC, headquartered in Atlanta, Georgia, USA. (Postal address: MailChimp Privacy Department, 512 Means St., Suite 404, Atlanta, Georgia 30318).
By subscribing to our newsletter, you agree to the SSL-protected transfer of your data (email address) to the USA and its storage and processing on servers operated by The Rocket Science Group, LLC. In the event that you refrain from subscribing to the newsletter, it follows that no data will be transmitted to MailChimp. MailChimp facilitates the analysis of opening and usage data connected with newsletters. We use this information solely in a group-related context and not on an individual basis. In addition to email addresses, MailChimp also stores users’ IP addresses in order to be able to defend itself against possible accusations of unsolicited emails.
MailChimp conforms to the principles set forth in the EU Safe Harbor Framework, which regulates the collection, use and storage of data from the European Union in accordance with the Data Protection Directive issued by the European Commission in 1998. Further details can be found in the entry regarding The Rocket Science Group, LLC in the Department of Commerce’s »Safe Harbor List« (this information is only available in English). The Data Protection Directive issued by the European Commission prohibits the transfer of personal data to non-EU countries without compliance with one of the European Union- (EU)-appropriate norms regulating the protection of privacy. Other regulations, laws and norms regarding the protection of privacy apply in the USA. In order to enable US firms to fulfill the European Data Protection Directive, the US Department of Commerce developed the EU Safe Harbor Framework in consultation with the European Commission. In addition, compliance with the legal provisions surrounding the protection of personal data is evaluated and certified by TRUSTe on a regular basis.
It is possible to unsubscribe from the newsletter at any time, e.g. via a link printed at the bottom of each newsletter. Alternatively, you are welcome to send your de-registration request to email@example.com email at any time.
c) When registering for our application portal application.akademie-solitude.de
In the first instance, visits to the web page http://www.application.akademie-solitude.de are subject to the same Data Privacy Statement as set forth in section 2. a)., above.
In addition to the purposes stipulated therein, visits to the page http://www.application.akademie-solitude.de are also subject to data collection for the purpose of conducting Akademie Schloss Solitude’s application round.
Nature of Data Collected: First name, surname, title, place of birth, permanent address, nationality, gender, artistic or professional career, previous career dates (year specification), prizes and fellowships with dates (year specification), project outline, personal references, language skills.
Those Involved: Applicants registering on the web portal http://www.application.akademie-solitude.de.
Nature of Processing: Your personal data and possible image acquisition will be stored indefinitely for purposes associated with the application process, this subject to a revocation of consent issued by yourself. In the event that the application is rejected, all personal data relating to the respective application will be deleted in accordance with the GDPR’s security regulations. In the event that the application is accepted, all personal data, including image acquisition, will be subject to indefinite electronic storage for purposes associated with the application process, and will only be transferred to third parties with the express consent of the individual involved.
3. Data Transfer
Your personal data will not be transferred to third parties for purposes other than those listed in the following.
We shall only pass your personal data to third parties in the event that:
you have given us your express consent to do so in accordance with Art. 6, para. 1, p.1, lit. a GDPR,
a transfer is necessary in accordance with Art. 6, para. 1, p.1, lit. f GDPR for the purposes of the assertion, exercise or defense of legal claims and there are no grounds to assume that you maintain an overriding, legitimate interest in the non-disclosure of your data,
a transfer is necessary for compliance with a legal obligation in accordance with Art. 6, para. 1, p.1, lit. c GDPR,
any such transfer is legally permissible and necessary for the processing of contractual relations with you in accordance with Art. 6, para. 1, p.1, lit. b GDPR.
Cookies store information produced in conjunction with the specific terminal device. However, this does not mean that we receive direct information from these files which discloses your identity.
Moreover, we also use temporary cookies designed to optimize usability, which are stored on your terminal device for a specific length of time. In the event that you revisit our website in order to take advantage of the services we offer, the cookies automatically recognize that you previously retrieved our web pages and recall the information and settings you used, saving you from having to re-enter them.
The data processed via cookies is required for the purposes described above, namely to protect our legitimate interests and those of third parties in accordance with Art. 6, para. 1, p.1, lit. f GDPR.
The majority of browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that you are always asked for consent before a new cookie is stored. In the event that you choose to deactivate all cookies, please be aware that you may not be able to use all functions of our website in consequence.
Please refer to the following links for more information about how you can manage (and also deactivate) cookies via the following, most popular browsers:
Chrome browser: https://support.google.com/accounts/answer/61416?hl=de
5. Analytics Tools
a) Tracking tools
The tracking technologies used by us, described below, are performed on the basis of Art. 6, para. 1, p. 1, lit. f GDPR. We use so-called tracking technologies in order to guarantee the needs-based design and continual optimization of our website. We also use tracking technologies in order to collect statistical data relating to the use of our website and to evaluate this for the purposes of optimizing our online offering for you. These interests should be viewed as legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories must be derived from the tracking technology in question.
b) Google Analytics
For the purposes of the needs-based design and continual optimization of our web pages, we use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as »Google«). In this regard, pseudonymized user profiles are created and cookies used (see section 4). The information generated by the cookie regarding your use of this website, such as
operating system used,
referrer URL (previously visited page),
host name of the accessing computer (IP address),
time of server inquiry,
will be passed on to a Google server in the USA and saved there. The information will be used in order to evaluate the use of the website, to compile reports on website activities and to perform further services associated with website and internet usage, these for purposes of market research and the needs-based design of these internet pages. The aforesaid information may also be passed to third parties in the event that this is required by law, or to the extent that third parties are tasked with processing said data on our behalf. In no event will your IP address be associated with any other Google data. The IP addresses are anonymized, ensuring that their classification is not possible (IP masking).
You may prevent the installation of cookies via a corresponding browser software setting; we would, however, like to draw your attention to the fact that you may be unable to use all functions of this website in their entirety in this case.
Furthermore, you can prevent the recording of the data generated by the cookie which is related to your use of the website (incl. your IP address), as well as the processing of said data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on option, particularly in the case of browsers installed on mobile devices, you can also prevent the recording of data by Google Analytics by clicking on this link. This creates a so-called opt-out cookie which prevents the future collection of your data when you visit this website. The opt-out cookie is valid only for this browser and for our website, and is stored on your device. In the event that you delete the cookies in this browser, you will be required to regenerate the opt-out cookie.
Further information regarding data privacy in connection with Google Analytics can be obtained via the Google Analytics support pages (https://support.google.com/analytics/answer/6004245?hl=de), among other sources.
c) Google AdWords Conversion Tracking
We also use Google Conversion Tracking in order to collect statistical data relating to the use of our website and to evaluate this for the purposes of optimizing our online offering for you. In the process, Google AdWords creates a cookie (see section 4) on your computer in the event that you have accessed our website via a Google advertisement.
These cookies lose their validity after 30 days, and do not serve purposes of personal identification. If this cookie has not yet expired when the user visits certain pages of the AdWords client’s (advertiser’s) website, Google and the advertiser will be able to tell that the user clicked the advertisement and proceeded to that page.
Each advertiser receives a different cookie. It follows that cookies cannot be tracked via the websites of advertisers. The information obtained with the aid of the conversion cookies serves to create conversion statistics for advertisers who have opted for conversion tracking. The advertisers find out the total number of users who have clicked on their advertisements and were forwarded to a conversion tracking tag page. However, they do not receive any information which would enable users to be personally identified.
You shall be entitled to object to the processing of any personal data relating to you on grounds arising from your specific situation at any time, this in accordance with Art. 6 (1) f GDPR.
Our website includes social plugins linked to the social networks Facebook, Twitter and Instagram for publicity purposes, this on the basis of Art. 6, para. 1, p. 1, lit. f GDPR. The use of these for promotional purposes is made on the basis of a legitimate interest within the meaning of the GDPR. Responsibility for operations conforming to data privacy guidelines lies with the respective provider. The integration of these plugins within our online offering is made on the basis of the so-called two-click method, in order to provide users of our website with optimal protection.
Our website uses social media plugins provided by the social network Facebook, in order to increase the personal aspect when accessing our online offering. We use the »LIKE« or »SHARE« buttons for this purpose. These are offers provided by Facebook.
In the event that you retrieve one of the pages on our online offering which contains a plugin of this nature, your browser will create a direct connection with Facebook’s servers. Facebook will transmit the content of the plugin directly to your browser, which, in turn, embeds it in the web page.
Via the integration of the plugin, Facebook receives the information that your browser has retrieved the corresponding page on our online offering, even if you have no Facebook account or are not currently logged onto Facebook. This information (including your IP address) is transmitted directly by your browser to a Facebook server in the USA, where it is saved.
In the event that you are logged onto Facebook at the time, Facebook is able to directly associate your visit to our website with your Facebook account. If you interact with the plugins, by pressing the »LIKE« or »SHARE« buttons, for example, the relevant information will also be sent directly to a Facebook server, where it is saved. This information is also published on Facebook and displayed to your Facebook contacts.
Facebook is entitled to use this information for promotional and market research purposes, as well as for the needs-based design of its online offering. For this purpose, Facebook creates profiles regarding usage, interests and relationships, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide further services related to the use of Facebook.
In the event that you do not want Facebook to associate the data concerning your visit to our website with your Facebook account data, please log off Facebook before visiting our website.
Our web pages include plugins operated by the text messaging network operated by Twitter Inc. (hereinafter referred to as »Twitter«). The Twitter plugins (»tweet« button) can be identified via the Twitter logo on our web pages. An overview of tweet buttons is available here (https://about.twitter.com/resources/buttons).
If you retrieve a specific page on our online offering which features one of these plugins, your browser will create a direct connection with the Twitter server. As a result, Twitter will receive the information that you have visited our web page, this in the form of your IP address. If you click on the Twitter »tweet« button when you are logged onto your Twitter account, you can link the contents of our web pages on your Twitter profile. This enables Twitter to associate your visit to our website with your user account. We would like to draw your attention to the fact that we, as the site’s providers, remain unaware of the precise contents of the transmitted data and its use by Twitter.
In the event that you do not want Twitter to associate the data concerning your visit to our website directly with your Twitter account data, please log off Twitter before visiting our website.
Our website also uses so-called social media plugins »plugins«) provided by Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (hereinafter referred to as »Instagram«). The plugins can be identified via an Instagram logo, which may take the form of an »Instagram camera«, for example.
In the event that you retrieve one of the pages on our online offering which contains a plugin of this nature, your browser will create a direct connection with Instagram’s servers. Instagram will transmit the content of the plugin directly to your browser and embed it in the web page. Via the integration of the plugin, Instagram receives the information that your browser has retrieved the corresponding page on our online offering, even if you have no Instagram profile or are not currently logged onto Instagram.
This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA, where it is saved. In the event that you are logged onto Instagram at the time, Instagram is able to directly associate your visit to our website with your Instagram account. If you interact with the plugins, by pressing the »Instagram« button, for example, the relevant information will also be sent directly to an Instagram server, where it is saved.
The information will also be published on your Instagram account and displayed to your contacts.
In the event that you do not want Instagram to associate the data concerning your visit to our website directly with your Instagram account data, please log off Instagram before visiting our website.
7. Rights of the Individuals Affected
You have the right to the following:
in accordance with Art. 15 GDPR, to demand information regarding your personal data processed by us. You may, in particular, demand information regarding processing purposes, the nature of the recipients to whom your data was or is disclosed, the planned storage period of the same, the existence of a right of rectification, erasure, restriction of processing or objection to the same, the existence of a right to appeal, the origins of your data in the event that it was not collected by us, and the existence of automatic decision-making, including profiling and possibly conclusive information about specific details;
to demand the rectification of incorrect or incomplete personal data stored by us, this in accordance with Art. 16 GDPR;
to demand the erasure of personal data stored by us unless the processing is necessary in order to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims, this in accordance with Art. 17 GDPR;
to demand the right to restriction of processing of your personal data, this in the event that the accuracy of said data is contested by you, its processing is unlawful but you oppose the erasure of the personal data and we no longer need it, but you require it yourself for the establishment, exercise or defense of legal claims, this in accordance with Art. 18 GDPR, or you have objected to processing pursuant to Art. 21 GDPR;
to demand the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format, or to transmit such data to another controller, this in accordance with Art. 20 GDPR;
to withdraw your consent to the aforementioned processing at any time, this in accordance with Art. 7, para. GDPR. This will result in our being unable to continue with any data processing based on the aforementioned consent, in the future and
to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a general rule, you may approach the supervisory authority at your habitual place of residence, place of work or place of alleged infringement (our headquarters).
8. Right to Object
In the event that your personal data is processed on the grounds of legitimate interests in accordance with Art. 6, para. 1, p. 1 lit. f GDPR, you shall be entitled to object to the processing of the same in accordance with Art. 21 GDPR on grounds arising from your specific situation or if you object to direct marketing. In the latter case, you have a general right to object, with which we will comply without the need to provide details of any specific situation.
In the event that you would like to avail yourself of your rights of revocation or objection, please do not hesitate to send an email to firstname.lastname@example.org.
9. Data Security
Visits to our website are subject to the widespread SSL method (Secure Socket Layer), this in conjunction with the highest level of encryption supported by your browser.
As a rule, this is a 256-bit encryption. In the event that your browser does not support 256-bit encryption, we will select 128-bit v3 technology as a default option. An individual page uses encrypted data transmission if the closed key or padlock symbol on the bottom status bar of your browser is displayed.
Furthermore, we apply appropriate technical and organizational security measures in order to protect your personal data against accidental or intentional manipulation, partial or full loss and destruction and against unauthorized access by third parties. Our security procedures are continually enhanced as new technology becomes available.
10. Validity of and Modifications to this Data Privacy Statement
This Data Privacy Statement is currently valid and was last updated in May 2018.
The further development of our website and offering made via the same, or modifications to legal or official regulations may necessitate a change in this Data Privacy Statement. You can view and print out the currently valid Data Privacy Statement on our website at http://www.akademie-solitude.de/de/institution/impressum_datenschutz/ at any time.
© Akademie Schloss Solitude 2019