Vitra Design Stiftung gGmbH takes the protection of your personal data very seriously. The purpose of this Privacy Statement is to inform you about the type of personal data that will be collected when you use our website,, and how we will process, use, and protect such data


1. Scope


Use of the website is subject to the Privacy Policy set out below. This website is a service provided by Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland (hereinafter „Vitra Design Stiftung“). Where relevant, Vitra Design Stiftung is the controller.


Protecting your personal data is important to us, in particular, with regard to respecting your personal rights in connection with the processing and use of such data. The term “personal data” refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person. This includes, for example, the person’s name, postal address, email address and/or telephone number, as well as user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws


2. Automated Data Collection and Processing by Your Browser

2.1 General

As with every website, our server automatically collects the following information and temporarily saves it in server log files, which are transmitted by your browser – unless you have deactivated such function:

- the IP address of the computer transmitting the request 
- the client’s file request 
- the http response code 
- the volume of data transmitted 
- the website from which you access our website (referrer URL) 
- the date and time of the server request 
- the type, version and language of your browser
- the operating system on the computer transmitting the request

Our server log files are not evaluated based on personal use. At no time can the provider allocate this data to specific persons. This data is not combined with other data sources. 

2.2 Use of Cookies

In order to learn about your individual preferences and adjust our offerings optimally to best meet your needs, we use so-called “cookies” on our website Cookies are small text files that are saved on your computer or mobile device and that your computer or mobile device can retrieve at a later time. We use the consent management service provided by Usercentrics GmbH, which helps you to understand the functionality and characteristics of cookies and to select or deactivate various tags, trackers and analytic tool used on this website. You can access all cookie information and settings by clicking the “Cookie Settings” on the bottom on this page.


3. Collection and Processing of Data Provided Voluntarily

3.1 Contact form

When you provide us with personal data by email, in our online shop or via the contact form available on our website, this is voluntary. This data is used to fulfil our contractual relationship, to process your inquiries and orders, for our own market or opinion research and for our own advertising by postal mail. Your data will be used for our own advertising by email only if you have given us consent to do so. We delete the data that arises in this context after its storage is no longer required, or we limit processing if there are statutory retention requirements. Legal basis for processing is  Art. 6 Abs. 1 lit. b) GDPR or Art. 6 Abs. 1 lit. f) GDPR.

3.2 Newsletter

If you would like to subscribe to our newsletter, please provide your valid e-mail address, your first and last name, and confirm that you are in agreement with the following (therefore, legal basis for such processing is your consent):

I agree that the Vitra Design Stiftung gGmbH may process and use the data you have provided for the purpose of sending you e-mail newsletters to inform you about the cultural activities of the Vitra Design Stiftung gGmbH, as well as the latest news, promotions and offers of the Vitra Design Museum GmbH.

I can can revoke this agreement at any time via the unsubscribe link in the newsletter, by sending written notice to Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or to In the event that I revoke consent, the data I have entered will be deleted at all the companies in question and will no longer be used for sending the newsletter.

(Legal basis: Art. 6 Abs. 1 S. 1 lit a GDPR)

3.3 Storage time

Personal data provided to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Once the contract has been fully processed, your data will be blocked and deleted after expiry of the tax and commercial law regulations, unless you have expressly consented to any further use of your data. Insofar as mandatory retention periods under commercial and tax law must be observed, certain data may be stored for up to ten years.


4. Transmission to Third Parties

4.1 General

If you have given us personal data, this will not be passed on to third parties. Any transfer that takes place will only be
- with your consent 
- as part of processing your inquiries, your orders and the use of our services to commissioned subcontractors, who only receive the necessary data for the execution of this order and use it for a specific purpose 
- as part of order data processing in accordance with the statutory provisions to service providers bound by instructions
- as part of the fulfilment of legal obligations to entities entitled to receive information.

4.2 Newsletter

Newsletter2Go is used as the newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider that has been selected in accordance with the requirements of the GDPR

Further information can be found here:


4.3 Questionnaires

We use the service of MANOVA GmbH Wipplingerstraße 23/23, 1010 Vienna, Austria, to conduct surveys. The legal basis for this is an agreement on order processing in accordance with Art. 28 GDPR. MANOVA is bound by our instructions and does not process the data collected for its own purposes.

4.4 Sale of tickets

For online ticket sales for our museum, we use the Reservix ticket platform of Reservix GmbH, Humboldtstraße 2, 79098 Freiburg im Breisgau, Germany. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in offering our visitors a simple, secure and user-friendly way to purchase tickets online. Detailed information on the handling of your data can be found in the Reservix privacy policy at:

4.5 Social Media

On our website you will find links to the social networks Facebook, Twitter, Instagram and YouTube. These are merely links, not social plugins. There is no data transfer.


5. Your Rights


You may receive information about the data we have stored about you and about its origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage – free of charge, at any time without giving reasons.


In addition, you have the right to correct, block and delete your personal data in accordance with the statutory provisions. If you have given your consent to the use of data, you can revoke this at any time and without giving reasons. If your data is processed on the basis of legitimate interests in accordance, you have the right to object in accordance. You also have the right to data portability. You furthermore have the right to complain to a data protection supervisory authority about our processing of your personal data.


Please send your requests for information, objections to data processing and other inquiries to Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or by e-mail at


For any questions in connection with data protection, you can also contact our data protection officer who can be reached at


6. Video Surveillance, Vitra Campus Weil am Rhein

6.1 General

Controller: Vitra Services GmbH, Charles-Eames-Strasse 2, 79576 Weil am Rhein. The Data Protection Officer can be contacted at:
Purposes and legal bases of the data processing: prevention of vandalism and theft, the right to allow or deny access to premises, processing is done on the basis of our legitimate interest
The legitimate interests pursued are: protection of property
Duration of storage: 72 h

6.2 Information about the rights of data subjects

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the verification by the controller.
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement.


Last update: 18.08.2023