Privacy Statement for Website Users
Für die deutsche Fassung der Datenschutz-Erklärung klicken Sie hier.
This statement refers to data that is obtained because the user accesses the website of the Deutsches Auswandererhaus gemeinnützige GmbH (hereinafter referred to as German Emigration Center), www.dah-bremerhaven.de, and all subpages. The information below will inform you about what data is obtained and what happens to it.
If the German Emigration Center website contains links to other websites, this statement does not apply to the data collection and use on the linked pages.
I. Access Data without Personal Reference Logging
The German Emigration Center website is operated by the Deutsches Auswandererhaus gemeinnützige GmbH, Columbusstr. 65, 27568 Bremerhaven, Germany. When the German Emigration Center website is accessed, the following data are recorded:
If you use the website solely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. When you view our website, we collect the following data, which is required for the display, stability and security of our website (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):
- IP address
- Date and time of the request
- Time zone/difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Operating system and its interface
- Language and version of the browser software
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Further information on this can be found under “Cookies” in this data protection policy.
These data are used exclusively for technical or statistical purposes and are used to evaluate our online offerings; a comparison with other databases does not occur. Only German Emigration Center employees and companies commissioned by them have access to the data collected. No further passing on of data to third parties, even in excerpts, takes place.
After evaluation of the annual access information, the data logged in this way are deleted. The evaluation takes place monthly and annually, and the deletion takes place in January of the following year. Evaluation and deletion are carried out by German Emigration Center employees.
II. Personal Data Collection and Use
The German Emigration Center always processes your personal data for a specific purpose.
In summary, we process your personal data for the following purposes:
- In order to process your contact form request (e.g. e-mail address, first name, surname)
- In order to send you an offer after you request one
- In order to process the rental of our premises to you
- For completion and analysis of recurring online surveys
- For the technical realization of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information)
- To receive and process your application for one of our job vacancies.
- To participate in family histories or historical reports
The precise purposes are outlined for the processes described above (e.g., web analysis, etc.).
Regarding the legal basis for the processing of your personal data:
We process personal data required for the establishment, execution or processing of our services (contract settlement) on the legal basis of Art. 6 Para. 1 lit. b GDPR. If we obtain your consent to process your personal data, your consent pursuant to Art. 6 para. 1 lit. a GDPR forms the legal basis for data processing. Data processing is also permissible if we process your data to safeguard our legitimate interests and do not outweigh your interests or fundamental rights and freedoms with regard to the processing of personal data. If we use external services in the context of order data processing, the processing is carried out on the legal basis of Art. 28 GDPR.
The German Emigration Center stores this data in its database and uses it exclusively for individual communication with the customer or for the execution of the contract. This includes the initiation, acquisition, execution, warranties and rescission. The data is collected exclusively for the purpose of executing the contract.
The data will only be stored until the contract has been executed. In so far as there are retention periods under commercial and tax law, the duration of storage can be up to 10 years.
General contact information:
– Last name, first name
– Email address
– Message content
– Last name, first name
– Street, house number
– Postal code
– Email address
– Application documents
III. Other Collection and Use of Personal Information
Except when ordering, personal data must be entered in the case of feedback, to subscribe to newsletters and to use communication portals (surveys, entry of family histories). The use of these services by the user is expressly voluntary. The data is collected in the case of the newsletter in order to send it to subscribers. In the case of communication portals, data is collected for scientific purposes. The collection of personal data in the communication portals is necessary because the family histories collected here can only be classified scientifically correctly in connection with the associated personal data (e.g. life data, date of departure, etc.).
IV. Data Transmission
Customer data will only be passed on if this is necessary for the execution of the contract. The data will be forwarded in particular in the following cases:
1) Address data for combined offers with our gastronomy (welcome home GmbH)
2) Payment data to credit institutions or payment intermediaries for processing payments
3) Above-mentioned data to collection agencies at assignment of the claim
Furthermore, German Emigration Center only transmits customer data to third parties if this is necessary to avert threats to public safety and order, in particular if it is obliged to transmit such data to law enforcement or supervisory authorities.
V. Use of data requiring consent
German Emigration Center only uses personal data for the purpose of advertising, market and opinion research if the user has consented. The user is asked separately for his consent in the respective case. He gives his declaration of consent by ticking a box next to the corresponding consent text. This declaration of consent can be revoked at any time.
VI. Right of information and revocation
The user has a right to written information free of charge about the extent and use of his/her stored personal data. Furthermore, s/he has the right to correct, block or delete this data. In this respect, s/he must turn to:
Deutsches Auswandererhaus gemeinnützige GmbH
Cookies are used in the information provided by German Emigration Center. Cookies are small data packets that the user’s browser stores on the user’s terminal device at our request. They won’t cause any damage there. German Emigration Center uses two types of cookies. Temporary cookies are automatically deleted when the user’s browser is closed (session cookies). Permanent cookies, on the other hand, have a maximum lifetime of up to 12 months (permanent cookies). The permanent cookies make it possible for the user to be recognized when leaving the website. Cookies enable us to track the user’s usage behavior for the above-mentioned purposes and to the appropriate extent. They should also enable the user to surf our website in an optimized way. We also collect these data only in anonymized or pseudonymised form. The user can set his/her Internet browser in such a way that our cookies cannot be stored on his/her end device or that cookies that have already been stored are deleted.
VIII. General information on social network presence
In order to present our company in the best possible way, to communicate with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence on social networks.
You will find us on the following platforms and social networks:
When social networks are used, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU.
In this context, it can lead to risks for you as a user if the transferred data is processed in these “third countries” with an inadequate level of data protection. This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the third country provider.
If providers from the USA have certified themselves under the Privacy Shield Agreement (an agreement on data protection between the USA and the EU) they are obligated to comply with the data protection standards of the EU. The processing purposes of the social networks generally differ from ours. For example, the data collected from you by social networks (e.g. Facebook, Google, Instagram, etc.) is usually processed for the purposes of market research, advertising and the creation of user profiles for personalized advertising.
A concrete list of the processing purposes of the user data can be found in the data protection notices of the respective providers. By selecting the appropriate settings in your user account, you can, to an extent, restrict the creation of your profile. For the exact procedure, please read the corresponding data protection information of the respective provider.
IX. Facebook Fan Page
When you visit our Facebook page, Facebook collects information such as your IP address and other information, which is stored on your PC in the form of cookies. This information is used to provide us, as operators of Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information about this under the following link: https://www.facebook.com/help/pages/insights.
It is not possible for us to draw conclusions about individual users by means of the transmitted statistical information. We use these only to respond to the interests of our users, to continuously improve our online presence and to ensure the quality of these.
We only collect your data via our fan page in order to provide you with the opportunity to communicate and interact with us. This collection usually includes your name, news content, commentary content and the profile information you mark as public.
The processing of your personal data for the purposes mentioned above is based on our legitimate interest in providing users with effective information and communicating with users in accordance with Art. 6 Para. 1 lit. f GDPR. If you as a user have given your data processing consent to the respective provider of the social network, the legal basis for processing shall extend to Art. 6 Para. 1 lit. a, Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). Therefore, the assertion of such rights is most effective with the respective provider.
Nevertheless, should you require help in this matter, please do not hesitate to contact us.
Below you will find a detailed description of the respective data processing by the providers and their objection possibilities (opt-out) via the corresponding links to the provider websites:
– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Statement: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
– Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Statement: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
X. Integration of services from other providers
Our website uses content, services and outputs from other providers. These are, for example, services for the statistical evaluation of the use and visitation of our website and the integration of videos from video platforms, such as YouTube. In order for this data to be called up and displayed in the user’s browser, it is absolutely necessary for the user’s IP address to be transmitted to this third-party provider.
Even though we make every effort to only use third-party providers who only need the IP address to deliver content or even work with anonymous IP addresses, we have no influence on whether the IP address is stored. You will find information on the third party providers we use in the following section of this data protection policy.
XI. Use of YouTube videos
We use YouTube for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The legal basis for the use of data within the scope of the services offered by YouTube is Art. 6 para. 1 lit. f GDPR.
YouTube videos are embedded on some of our websites. When you play these videos, a connection to the YouTube servers is established. This will transmit a record of the German Emigration Center website pages you have visited to the YouTube servers. If you are logged in as a YouTube member, YouTube assigns this information to your personal user account. Use of the video, such as clicking the start button, also assigns this information to your user account. You can prevent this assignment by logging out of your YouTube account, other YouTube LLC accounts and Google Inc. and deleting the corresponding cookies of the companies before using our website.
Further information on data processing and privacy protection by YouTube (Google) can be found at https://policies.google.com/privacy?hl=en&gl=de.
XII. Use of Web Fonts
We use external fonts from Google Fonts. Google Fonts is a service of Google Inc. (“Google”). These web fonts are integrated via a server call, usually a Google server in the USA. This will tell the server which of our web pages you have visited. The website visitor’s terminal device browser’s IP address is also stored by Google. You can find more detailed information in Google’s data protection information, which can be found here:
XIII. Application Procedure
We publish job offers on our website for which you can apply by e-mail. If you decide to apply for an open position, we process the personal data you provide to us exclusively for the purpose of carrying out the application process. In the event of a rejection, we will delete your data as soon as the legally-required six-month retention period has expired. The period begins when the rejection notice is sent. If you have expressly consented to the further use of your data for future contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent. We will not pass your personal data on to third parties outside of the specific application procedure without your express consent or a legal basis.
During the application process, we do not require any information that falls under the “special categories of personal data.” This includes data revealing racial or ethnic origin (including your photograph), political opinions, religious or ideological beliefs, trade union membership, genetic data, biometric data for the unambiguous identification of a person, health data or data on the sexual life or sexual orientation of a person. We strongly recommend that you do not include any of the aforementioned information in your personal data. If the data provided by you contains such information, we can only process your application if you give us explicit consent to store these special categories of personal data. We would have to obtain this consent separately from you; which would lead to a delay in the application process.
Please note that applications that you send to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons may intercept and use this data.
The legal basis for the processing of your personal data as part of the application process is § 26 Para. 1 in conjunction with Para. 2 GDPR.
XIV. Participation in Family History Portals
We regularly offer opportunities to contribute material for our current exhibitions. The participation and transmission of your data takes place voluntarily and only with your consent. The data will not be passed on to third parties. If photos or video recordings are sent, you transfer your rights to the picture/video material to us for publication on our premises. With the submission of the material you confirm that you are the sole owner and rights holder of the photo and video recordings. You further confirm that this does not infringe on the rights of third parties and that materials are not being transmitted without the knowledge of the person concerned.
We will only use the data and recordings within the scope of the corresponding exhibition. Any alternative use requires us to obtain your additional consent.
Your rights to information, modification or deletion remain unaffected.
XV. Rights of the Data Subject Person
If you are a “data subject” within the meaning of Art. 4 No. 1 GDPR, you have the following rights with regard to the processing of your personal data in accordance with the GDPR. The legal text of the rights listed below can be found at: https://www.bfdi.bund.de/SharedDocs/Publikationen/Infobroschueren/INFO1.pdf
a. Right to confirmation and information
Under the conditions of Art. 15 GDPR, you have the right to request confirmation as to whether personal data relating to you are processed and to obtain, at any time and free of charge, information from the controller about the stored personal data relating to you and a copy of this information.
b. Right to correction
Under the conditions of Art. 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, also by means of a supplementary declaration.
c. Right to deletion
Under the conditions of Art. 17 GDPR, you have the right to demand that the personal data concerning you be deleted immediately, provided that one of the reasons stated in Art. 17 GDPR applies and insofar as processing is not necessary.
d. Right to limitation of processing
Under the conditions of Art. 18 GDPR, you have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR applies.
e. Right to data transferability
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person without our interference, provided that the other conditions of Art. 20 GDPR are met.
f. Right to revoke consent
You have the right to revoke your consent to the processing of personal data given to us at any time, effective from that moment forward. Please address the revocation to the contact data listed above.
g. Right of objection
Under the conditions of Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. If the conditions for an effective objection are met, processing by us will no longer take place.
h. Right to appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you is contrary to the provisions of the GDPR.
XVI. Data Protection Officer
The German Emigration Centre Bremerhaven has appointed Mr. Philipp Herold – Mein Datenschutzbeauftragter.de – as its data protection officer.
Philipp Herold – Mein Datenschutzbeauftragter.de