Memory Loops

Privacy

The following text intends to inform you about the nature, scope and purpose of recording and using personal data on the online site at https://www.memoryloops.net.

You can visit this online site without giving details of your person. We solely save the access data without reference to a person, such as the name of your internet service provider, the page from which you visited us or the name of the requested file. These data are evaluated solely to improve our site, but do not allow your person to be traced. We process a user’s personal data only in compliance with the pertinent data protection regulations. This means that users’ personal data are processed on visiting this online site as follows:

Types of personal data processed:

  • Inventory data (e.g. name, address only in case of electronic contact)
  • Contact data (e.g. e-Mail, telephone number – only in case of electronic contact)
  • Content data (e.g. text inputs, image files, video files – only in case of electronic contact)
  • Usage data (e.g. web pages visited, interest in content, access times)
  • Meta/communication data (e.g. device information, IP addresses)

Categories of people affected

Visitors and users of the online site (referred to together below as “users”).

Purpose of processing

  • Provision of the online site, its functions and contents
  • Responding to inquiries and communicating with users
  • Sicherheitsmaßnahmen
  • Reach measurement/marketing

As a responsible provider, we do not deploy automatic decision-making or profiling.

1. Name / address of the officer responsible for processing

City of Munich
Represented by the Director of the Department of Arts and Culture Anton Biebl

Department of Arts and Culture
Department 1
Burgstraße 4
D-80331 Munich

Tel: +49-(0)89-233-26087
Fax: +49-(0)89-233-21269
Email: kultur.foerderung@muenchen.de

Value-added tax ID number pursuant to §27a Value-added Tax Act: DE129524000
Statutory corporation under public law
Competent supervisory authority: government of Upper Bavaria
Link to imprint: https://memoryloops.net/imprint

2. Official Data Protection Officer

City of Munich
Official Data Protection Officer
Sendlinger Str. 1
D-80331 Munich
Email: datenschutz@muenchen.de

3. Determination of terms

Among others, this declaration of data protection uses the following legal terms, which are used by European issuers of directives and lawmakers in the General Data Protection Regulation (GDPR) and determined there in Art. 4 (Determination of terms) as follows:

“Personal data” refers to all information relating to an identified or identifiable, natural person (referred to below as the “affected person” or “data subject”); identifiable is regarded as being a natural person, who can be identified directly or indirectly, in particular by means of assignment to an identifier, such as a name, to a code number, to locational data, to an online identifier or to one or more special features, which are an expression of the physical, physiological, genetic, psychical, financial, cultural or social identity of this natural person.

“Processing” refers to each procedure executed or each series of such procedures, which are connected to personal data, either with or without the help of automated processes. Examples of these are recording, capturing, organising, arranging, saving, adapting or changing, reading out, polling, using, disclosure through transmission, distribution or another form of provision, comparing or linking, restricting, deleting or destruction.

“Responsible officer” refers to the natural person, legal entity, authority, institution or other office, which decides alone or together with others on the purposes and means of the processing of personal data. If the purpose and means of this processing are stipulated by the law of the Union or the law of the Member States, the responsible officer or certain criteria for his or her nomination can be drawn from the law of the Union or the law of the Member States.

“Consent” from the affected person refers to every voluntary notice of intention issued for the determined case, in an informed and unmistakeable manner, in the form of a declaration or some other clearly confirming act, with which the affected person lets it be known that they agree with the processing of personal data affecting them.

4. Purposes and legal basis for processing personal data

The purpose of processing is to fulfil the public duties assigned to us by lawmakers.

Unless stated otherwise, the legal basis for processing your data results from Art. 4 Para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 Para. 1 Letter e of the General Data Protection Regulation (GDPR). This legislation entitles us to process the data necessary to fulfil a remit to which we are subject.

If you have given your consent to processing, data processing is based on Art. 6 Para. 1 Letter a GDPR.

The legal basis for data processing to safeguard our legitimate interests is Art. 6 Para. 1 Letter f) GDPR.

5. Collaboration with order processors and third parties

Insofar as we disclose data to other persons and enterprises (order processors or third parties) in the course of our data processing, transmit data to them or otherwise grant them access to data, this is done on the basis of legal permission, on the basis of your consent, because this is foreseen by a legal obligation or on the basis of our legitimate interests (e.g. when deploying a hosting provider, etc.). If we commission third parties to process personal data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

6. Transmissions to third countries

Insofar as we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of commissioning third-party services by disclosing or transmitting data to third parties, this only happens if it is to fulfil our (pre)contractual duties, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. On the proviso of legal or contractual permission, we process or have the data processed in a third country only if the particular prerequisites of Art. 44 ff. GDPR are fulfilled. In other words, processing is done on the basis of special guarantees, such as the officially recognised establishment of a level of data protection corresponding to that in the EU (e.g. for the USA through the “Privacy Shield”) or in observance of officially recognised, special contractual obligations (so-called “standard contractual clauses”).

7. Rights of affected persons

The prevailing legislation concerning data protection provides you with comprehensive rights as the data subject (rights of information and intervention) vis-à-vis the responsible officer with regard to the processing of your personal data. We inform you of these rights below:

Right of information in accordance with Art. 15 GDPR:
the affected person or data subject has the right to demand confirmation from the responsible officer of whether personal data affecting them have been processed. If this is the case, there is a right to find out about these personal data and to the following information:

  • a) the purposes of processing
  • b) the categories of personal data that have been processed
  • c) the recipients or categories of recipients to whom personal data were or will be disclosed, in particular in the case of recipients in third countries or in the case of international organisations
  • d) if possible, the duration planned for storing personal data or, if this is not possible, the criteria for determining this duration
  • e) the existence of a right to correction or deletion of personal data affecting them, to restrict processing by the responsible officer or a right of objection to this processing
  • f) the existence of a right of complaint to a supervisory authority
  • g) if personal data have not been recorded from the affected person, all information available on the origin of the data
  • h) the existence of automated decision-making, including profiling, in accordance with Article 22 Paragraphs 1 and 4 GDPR and — at least in these cases — meaningful information on the logic involved, on the extent and on the intended effects of such processing for the affected person.

Right to correction in accordance with Art. 16 GDPR:
you have a right to immediate correction of incorrect data affecting you and/or completion of your incomplete data saved by us;

Right to deletion in accordance with Art. 17 GDPR:
you have the right to demand the deletion of your personal data if the prerequisites of Art. 17 Para. 1 GDPR are fulfilled. However, this right does not exist if processing is necessary to exercise the right of free expression and information, to fulfil a legal obligation, for reasons of the public interest or to pursue, exercise or defend against legal claims

Right to restrict processing in accordance with Art. 18 GDPR:
you have the right to demand a restriction to the processing of your personal data, for as long as the correctness of the data you have disputed is being verified, if you reject a deletion of your data due to inadmissible data processing and instead demand the restriction of the processing of your data, if you require your data to pursue, exercise or defend against legal claims, after we no longer require these data once the purpose has been achieved or if you have lodged an objection because of your particular situation, as long as it has not been established whether these grounds are outweighed by our legitimate reasons

Right to information in accordance with Art. 19 GDPR:
if you have pursued the right to correction, deletion or restriction to processing against the responsible officer, the latter is obliged to notify all recipients, to whom the personal data affecting you have been disclosed, of this correction or deletion of the data or restriction of the processing, unless this proves to be impossible or is associated with an unreasonable amount of effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Art. 20 GDPR:
you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, or to demand that they be transmitted to another responsible office, insofar as this is technically feasible

Right to revoke consent issued in accordance with Art. 7 Para. 3 GDPR:
you have the right to revoke consent issued to process data at any time, with affect for the future. In case of revocation, we will delete the data concerned without delay, unless further processing can be supported by a legal basis for processing without consent. A revocation of consent does not affect the legitimacy of the processing performed up to the date of the revocation of consent

Right to complaint in accordance with Art. 77 GDPR:
if you believe that the processing of personal data affecting you violates the GDPR, you have the right – without prejudice to any other legal remedy under administrative law or the law of court – to complain to a supervisory authority, in particular in the Member State of your residence, your workplace or the place of the alleged violation.

Right of objection in accordance with Art. 21 GDPR:
you can object to the processing of personal data affecting you in future at any time pursuant to Art. 21 GDPR. You can object, in particular, to the processing of your personal data for purposes of direct advertising.

8. Right of complaint to the supervisory authority

You furthermore have a right to complain to the Bavarian State Authority for Data Protection. This can be reached under the following contact data:

Postal address: P. O. Box 22 12 19, D-80502 Munich
Address: Wagmuellerstrasse 18, D-80538 Munich

Phone: +49-(0)89 212672-0
Fax: +49-(0)89-212672-50

Email: poststelle@datenschutz-bayern.de
Internet: https://www.datenschutz-bayern.de

9. Cookies

We use cookies to make visits to our online site as attractive as possible and to enable the use of certain functions. Cookies are text files, which are deposited and stored by an internet browser on a user’s computer system. Various details can be saved in the cookies. A cookie primarily serves to store the details of users (or the device on which the cookie is stored) during or even after their visits to an online site. Temporary cookies, session cookies or transient cookies refer to cookies, which are deleted after a user leaves an online site and closes his or her browser. Such a cookie can store, for example, the content of a goods trolley in an online shop or a login status. Permanent or persistent cookies refer to cookies, which remain stored even after the browser has been closed. For example, a login status can be stored if a user searches for this several days later. The interests of a user can likewise be stored in such a cookie, which are then used for reach measurement or marketing purposes. Third-party cookies refer to cookies offered by providers other than the officer responsible for operating the online site (otherwise – if it is only the officer’s cookies– one speaks of first-party cookies).

We can deploy temporary and permanent cookies and inform you of this in our declaration of data protection as follows:

If users do not want cookies to be saved on their computers, they need to deactivate the appropriate option in the system settings of their browser. Cookies already saved can be deleted in the browser’s system settings. The exclusion of cookies can lead to a restriction of functions on this online site.

10. Making contact

Information that you send to us unencoded by electronic post (e-Mail) can possibly be read by third parties along the transmission path. As a rule, we are not able to verify your identity and therefore do not know who is hiding behind an e-Mail address. Legally secure communication through a simple e-Mail can therefore not be guaranteed. We – like many other e-Mail providers – deploy filters to counter unwanted advertising (“SPAM filters”). In rare cases, these filters can falsely categorise normal e-Mails as undesired advertising and automatically delete these. E-Mails containing damaging programs (“viruses”) are automatically deleted by us in all circumstances.

If you want to send us messages that are worthy of protection, we recommend that you encode and sign these. This prevents unauthorised reading and falsification along the transmission path. Alternatively, send us the message by conventional post. Please also tell us whether we can send you encoded e-Mails in response to your messages and by what means. If you are unable to receive encoded e-Mails, please tell us your postal address so that we can answer your messages worthy of protection.

Personal data are recorded if you contact us (e.g. e-Mail). Such data are saved and used exclusively for the purpose of answering your inquiry and/or for making contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your inquiry in accordance with Art. 6 Para. 1 Letter f GDPR. If the aim of your contact is to conclude a contract, an additional legal basis for processing is then Art. 6 Para. 1 Letter b GDPR. After subsequently processing your inquiry, your data are deleted, provided that it is apparent from the circumstances that the matter concerned has been definitively clarified and insofar as this is not contradicted by any legal duties of retention.

11. Deletion of data / restriction of processing

Personal data processed by us are deleted pursuant to Art. 17 and 18 GDPR or their processing is restricted. Insofar as not specifically stated otherwise in this declaration of data protection, data saved by us are deleted as soon as they are no longer required for their intended purpose and their deletion is not contradicted by any legal duties of retention. For example, the latter applies to data, which need to be retained for reasons of commercial or fiscal legislation (e.g. § 257 HGB, § 147 Para. 1 AO – period of retention of up to 10 years). If data are not deleted because they are required for other, legally admissible purposes, their processing is then restricted. In other words, the data are blocked and not processed for other purposes.

12. Hosting / recording access data and logfiles

The hosting services that we order from our hosting provider serve the provision of the following services for our online site: infrastructure and platform services, computing capacity, storage place and database services, security services and technical maintenance, which we use for the purpose of operating this online site. We and/or our hosting provider hereby process contact data (in case of e-Mail contact: e-Mail address), usage data, meta and communication data from users of this online site on the basis of our legitimate interests in providing this online site efficiently and securely in accordance with Art. 6 Para. 1 Letter f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).

We and/or our hosting provider record a series of general data and information each time our online site is called-up by an affected person or by an automated system. These general data and information are saved in the server’s logfiles. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system reaches our internet site (so-called “referrer”), (4) the sub-web pages controlled through a system accessing our internet site, (5) the date and time of access to the internet site, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other, similar data and information that serve to defend against danger if our information technology systems are attacked.

In using this general data and information, we and/or our hosting provider do not draw any conclusions about the affected person. This information is rather required for the following purposes: (1) to correctly deliver the contents of our internet pages, (2) to optimise the contents of our internet pages and the advertising for this, (3) to ensure that our information technology systems and the engineering of our internet site function properly at all times and (4) to provide the necessary information to the criminal investigation authorities in case of a cyber attack. Data from the server logfiles are stored separately from any personal data stated by an affected person.

This logfile information is saved for a maximum of 60 days and subsequently deleted.

13. Security measures

We take organisational, contractual and technical action to warrant security in line with the state-of-the-art, to ensure that the provisions of data protection laws are complied with and to thereby protect the data processed by us from chance or malicious manipulation, loss, destruction or against the access of unauthorised parties.

If you have any questions regarding the recording, processing or use of your personal data, if you require information, correction, blockage or deletion of data and to revoke any consent issued, please contact the e-Mail address stated in the Impressum.