Privacy

Vitra Design Stiftung gGmbH takes the protection of your personal data very seriously. The purpose of this Privacy Statement is to inform you about the type of personal data that will be collected when you use our website, design-museum.de, and how we will process, use, and protect such data

1. Scope

1.1

Use of the design-museum.de website is subject to the Privacy Statement set out below. The design-museum.de website is a service provided by Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland (hereinafter, “Vitra Design Stiftung”). Where relevant, Vitra Design Stiftung is the controller pursuant to Article 4 of the EU General Data Protection Regulation (hereinafter, “GDPR”).

1.2

Protecting your personal data is important to us, in particular, where respecting your personal rights in connection with the processing and use of such data is concerned. The term personal data refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person including the person’s name, postal address, e-mail address and/or telephone number and user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.

2. Automated Data Collection and Processing by Your Browser

2.1

As with every website, our server automatically collects the following information and temporarily saves it in server log files which are transmitted by your browser unless you have deactivated such function:

- the IP address of the computer transmitting the request
- the client’s file request
- the http response code
- the volume of data transmitted
- the website from which you access our website (referrer URL)
- the date and time of the server request
- the type, version and language of your browser
- the operating system on the computer transmitting the request

Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources.

2.2

Our website uses Google Analytics, a web analytics service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Analytics uses text files called cookies which are saved on your computer to facilitate analysis of your website use. The information collected relates to your operating system, browser and IP address, the website you accessed previously (referrer URL), and the date and time of your visit to our website. The information generated by cookies regarding your use of our website typically is transmitted to and saved on a Google server in the United States. If and when IP anonymization is activated on this website, Google will truncate your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then truncated. At the request of the operator of this website, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services relating to website activity and Internet use. The IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that in this case you may not be able to use the full functionality of our website. In addition, you can object to Google’s collection of data generated by cookies relating to your use of our website (including your IP address) as well as to its dissemination of the data. To do so, download and install the browser plug-in available at http://tools.google.com.

We use Google Analytics to analyze and enhance the use of our website regularly. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. If we ask you for your consent, the legal basis for processing is Article 6 (1) a) of the GDPR. Otherwise, the legal basis for the use of Google Analytics is Article 6 (1) p. 1 f) of the GDPR.

Information regarding the third-party provider is as follows: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001; terms of use; overview of data protection; privacy statement.

2.3

We use Adobe Typekit from Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA, to display fonts on our website. Adobe Typekit is a service that provides access to a font library. When you access a website, your browser loads the fonts you need into your browser cache to display text and fonts correctly. The legal basis for the use of Adobe Typekit is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the appealing design and presentation of our website. In the course of providing the Typekit service, cookies (section 5) are placed.

In order to provide the service, Adobe may collect information about the fonts that are provided for our website. This information will be used by Adobe for billing and compliance purposes and may include, but is not limited to, the following:

- The time it takes your web browser to download the fonts
- The time from downloading the fonts with the web browser to application of the fonts
- Whether an Ad Blocker is installed to determine whether the Ad Blocker interferes with the proper tracking of page views
- Your IP address, operating system and browser version

For more information, please visit the Adobe Fonts privacy page and the Adobe Privacy Statement.

3. Collection and Processing of Data Provided Voluntarily

3.1

Your provision of personal data to us by e-mail, in our online shop or via the contact form available on our website is voluntary. We use this data to process our contractual relationship with you and/or your inquiries or orders. We only use your data for e-mail advertising purposes with your consent. We will erase the data so generated as soon as it no longer needs to be saved; if statutory retention periods apply, we will restrict the processing of such data. The legal basis is Article 6 (1) b) of the GDPR or Article 6 (1) f) of the GDPR.

3.2

If you register in our online shop and create a customer profile, we will store the account information you enter (in particular name, billing and delivery address, telephone number, payment information and e-mail address) so that you do not have to enter your data each time you place an order. You can update or delete your profile at any time. The legal basis for Art. 6 Para. 1 S. 1 lit. b of the GDPR.

3.3

If you want to subscribe to our newsletter, please provide your valid e-mail address, your first and last name and confirm that you agree to receive our newsletter.

You thereby agree that the Vitra Design Stiftung gGmbH may process and use the data you have provided for the purpose of sending you e-mail newsletters to inform you about the cultural activities of the Vitra Design Stiftung gGmbH, as well as the latest news, promotions and offers of the Vitra Design Museum GmbH.

You can revoke this agreement at any time via the unsubscribe link in the newsletter, by sending written notice to Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or to privacy@design-museum.de. As soon as you revoke such agreement, the data you provided will be deleted and no longer will be used to send you the newsletter.

(The legal basis is Art. 6 (1) p. 1 a) of the GDPR)

3.4

Personal data provided to us via our website will be saved only for the time it takes us to meet the purpose for which you provided such data. When your contract has been fulfilled completely, your data will be blocked and then deleted in accordance with the relevant tax and trade regulations unless you have given your express consent to such data being used for other purposes. To the extent mandatory trade and tax retention periods need to be observed, the retention period for some types of data can be up to ten years.

4. Transmission to Third Parties

4.1

We will not transmit any personal data you provide to us to any third parties. Personal data will be transmitted only

- if you have given prior consent
- to sub-contractors who need to receive and use such data for the purpose of fulfilling specific orders if required to process your inquiries, orders and use of our services
- to service providers bound by instructions if required to process your order data in accordance with the law
- to parties entitled to obtain such data if required to comply with statutory obligations

4.2

The software used for newsletter mailings is Newsletter2Go. Your data will therefore be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited to sell your data or to use it for other purposes than newsletter mailings. Newsletter2Go is a certified provider from Germany chosen according to the requirements of the EU General Data Protection Regulation and the German Federal Data Protection Law.

You may find further information here: https://www.newsletter2go.com/information-for-newsletter-recipients/

4.3

We use the services of MANOVA GmbH Wipplingerstraße 23/23, 1010 Vienna, Austria, to conduct surveys. The legal basis for this is an agreement on processing pursuant to Art. 28 GDPR. MANOVA is bound to our instructions and does not process the collected data for its own purposes.

4.4

We use the ticket platform Reservix of Reservix GmbH, Humboldtstraße 2, 79098 Freiburg im Breisgau, Germany for online ticket sales to our museum. The legal basis for this is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in offering our visitors a simple, secure and user-friendly way to purchase tickets online. You will find detailed information on the handling of your data in Reservix's data protection declaration at https://www.reservix.net/files/data/docs/Datenschutzerklaerung_Reservix.pdf.

4.5

On our website you will find links to the social networks Facebook, Twitter, Instagram and YouTube. These are references only, not social plugins. There is no data transfer involved.

5. Cookies

5.1

To learn about your individual preferences and adjust our offerings optimally to best meet your needs, our website uses cookies – small text files saved on your computer or mobile device that your computer or mobile device can retrieve when you access our website at a later time. Cookies do not contain any personal data and we do not merge the data in cookies with data from other sources.

5.2

Cookies do not harm your computer or mobile device and do not contain any viruses. If you do not want cookies saved on your computer, please adjust your browser settings so saving cookies is impossible or you are asked for express consent before any cookies are saved. Please note that you may have to change the settings in each browser you use to access this website and that not all functions of this website may be available to you if you object to the use of cookies.

6. Your Rights

6.1

At any time, at no cost to you and without providing any reason you can request information regarding the data relating to you which is saved in our systems as well as information regarding the origin, recipients or categories of recipients to whom such data has been transmitted and why such data has been saved.

6.2

In addition, legally you are entitled to have your personal data rectified, blocked or erased. Also, you can withdraw your consent to the use of your data at any time and without having to provide a reason.

If we process your personal data to pursue our legitimate interests pursuant to Article 6 (1) f) of the GDPR, pursuant to Article 21 of the GDPR you have the right to object. In addition, you have the right to portability of your data and the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.

6.3

Please address any requests for information, inquiries, objections to the processing of your data, and any questions you may have to Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or to privacy@design-museum.de.

6.4

If you have any questions concerning data protection, please feel free to contact our Data Protection Officer Simon Brandmeier, Kirschmatt 37, 79576 Weil am Rhein, Deutschland, or via e-mail to info@sbmconsulting.de.

7. Video Surveillance, Vitra Campus Weil am Rhein

Controller: Vitra Services GmbH, Charles-Eames-Strasse 2, 79576 Weil am Rhein. The Data Protection Officer can be contacted at dsb@vitra.com.
Purposes and legal bases of the data processing: Prevention of vandalism and theft, domiciliary right, Art. 6 (1)(f) GDPR
The legitimate interests pursued are: Protection of property, Art. 13 (1)(d) GDPR
Duration of storage: 72 h

Information about the rights of data subjects

The data subject has the right to demand a confirmation from the controller about whether it will process the personal data concerned; if this is the case, he or she has the right to access this personal data and to the information listed in detail in Art. 15 GDPR.

The data subject has the right to demand from the controller that incorrect personal data concerning him or her be rectified immediately and, where applicable, that incomplete personal data be completed (Art. 16 GDPR).

The data subject has the right to demand from the controller that the personal data concerning him or her shall be erased immediately if one of the reasons listed in detail in Art. 17 GDPR are met, e.g. if the data are no longer required for the purposes pursued (right to erasure).

The data subject has the right to demand from the controller that the processing be restricted if one of the conditions listed in Art. 18 GDPR are met, e.g. if the data subject has lodged an objection to the processing for the duration of the review by the controller.

The data subject has the right to object to the processing of the personal data concerning him or her at any time for reasons which result from his or her particular situation. The controller shall then no longer process the personal data, unless it can prove compelling and legitimate reasons for the processing, which outweigh the interests, rights and freedoms of the data subject, or the processing serves to claim, exercise or defend legal claims (Art. 21 GDPR).

Irrespective of any other legal remedy under administrative law or judicially, each data subject has the right to lodge a complaint to a supervisory authority if the data subject believes that the processing of personal data concerning him or her violates the GDPR (Art. 77 GDPR). The data subject can assert his or her right with a supervisory authority in the Member State in where he or she is resident, where he or she has his or her workplace or the place of the suspected violation.