The Flossenbürg Concentration Camp Memorial takes the protection of personal data very seriously. We want you to know if and when we store which data and how we use it. We have taken technical and organizational measures to ensure that we comply with the privacy policy.
Below we explain how we handle your personal data.
Details of the controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is
KZ-Gedenkstätte Flossenbürg
Gedächtnisallee 5
92696 Flossenbürg
Phone: 09603 903900
email:
Details of the data protection officer
We have appointed an external data protection officer:
c/o activeMind AG
Potsdamer Straße 3
80802 München
email:
1. Rights of Data Subjects
You can exercise the following rights at any time using the contact details provided
- Information about your data stored by us and its processing (Art. 15 GDPR)
- Correction of incorrect personal data (Art. 16 GDPR)
- Erasure of your data stored by us (Art. 17 GDPR)
- Restriction of data processing if we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR)
- Objection to the processing of your data by us (Art. 21 GDPR) and data portability if you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR)
If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state of your residence or with the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
2. Processing Activities
Server log files
Collection of general information when visiting our website.
Type and purpose of processing
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.
They are processed for the following purposes in particular:
- Ensuring a smooth connection to the website
- Ensuring the smooth use of our website
- Ensuring and evaluating system security and stability, in particular to detect misuse
- Ensuring the technically error-free presentation and optimization of our website
We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
Legal basis and legitimate interest
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website
Storage duration
Data is stored in server log files in a form that enables the identification of data subjects for a maximum period of 14 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of such an incident, server log files are stored until the security-relevant incident has been eliminated and fully clarified.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Making contact
Type and purpose of processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. The following data is also stored at the time the message is sent
- Date and time of the request
It is also possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information on the servers involved in the e-mail communication. You can also contact us via the telephone number provided. In this case, we collect log data that includes your telephone number and the duration of the call. Regardless of the type of communication selected, we collect the content of your request. Your data is stored for the purpose of individual communication with you.
Legal basis
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). Our legitimate interest in processing your data is to make it easy for you to contact us. If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage duration
Data will be deleted no later than 6 months after processing the request. If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.
Provision prescribed or required
The provision of your personal data is voluntary. However, we can only process your request if you provide us with the required data and the reason for the request.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Cookies
A cookie is a small data record that is created when a website is visited and stored temporarily on the website user's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.
Deleting cookies
You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
- Mozilla Firefox: support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: support.google.com/accounts/answer/61416?hl=de
- Opera: www.opera.com/de/help
- Safari: support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: addons.mozilla.org/en/firefox/addon/noscript/).
Technically necessary cookies | Cookiebot by Usercentrics
Type and purpose of processing
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
We require cookies for the following applications:
- Consent management
- Language setting
An overview of the cookies used can be found below.
Legal basis and legitimate interest
In this respect, data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with a consideration in accordance with § 25 para. 2 TTDSG.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
We use the consent management platform Cookiebot (by Usercentrics) to obtain, manage and legally document your consent. Further information on the processing of data by Cookiebot (by Usercentrics) can be found here: www.cookiebot.com/de/privacy-policy/.
Storage period
The data will be deleted after 365 days.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Technically not necessary cookies
Type and purpose of processing
We also use cookies that enable an analysis of the user's surfing behavior. These cookies are used to make the use of the website more efficient and attractive. Detailed information on the subject of cookies and which cookies are used on this website (after consent) and information can be found in the cookie settings.
Legal basis
The storage of information on your end device or access to information that is already stored on the end device is voluntary, solely on the basis of your consent in accordance with Section 25 (1) of the German Data Protection Act (TTDSG). If personal data is also processed, the provision of your data is also voluntary, solely on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. Further recipients can be found in the cookie settings.
Third country transfer
Information on this can be found in the cookie settings.
Storage duration
Information on this can be found in the cookie settings.
Provision prescribed or required
The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Objection
You can revoke your consent for the future in the cookie settings.
Profiling
Web analysis tools can be used to evaluate the behavior of visitors to the website and analyze their interests. We create a pseudonymous user profile for this purpose.
Comment function
Type and purpose of processing
When users leave comments on our website, the time of their creation is stored in addition to the data in the input form. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.
Legal basis and legitimate interest
The data entered as a comment is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage duration
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when communication with the user has been concluded and the company can infer from the circumstances that the matter in question has been conclusively clarified. We reserve the right to delete comments without giving reasons and without prior or subsequent notification.
You can also have your comment deleted by us at any time. To do so, please write an e-mail to the contact information listed in this privacy policy and send the link to your comment and, for identification purposes, the e-mail address used when the comment was created.
Provision prescribed or required
The provision of your personal data is voluntary. However, we can only publish your comment if you provide us with the information marked as mandatory.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Newsletter
Type and purpose of processing
For the delivery
of our newsletter or comparable information, we collect personal data
that is transmitted to us via an input mask. We require a valid e-mail
address for effective registration. We use the "double opt-in" procedure
to verify that a registration is actually made by the owner of an
e-mail address. For this purpose, we log the registration for the
newsletter, the sending of a confirmation email and the receipt of the
requested reply. No further data is collected.
The following data is also stored at the time of DOI confirmation
- Date and time
- Country and language
Legal basis
On
the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will
regularly send you our newsletter or comparable information by e-mail
to the e-mail address you have provided.
Recipient
We use a service provider who acts as our processor to send the newsletter.
Storage duration
The data will only be processed in this context as long as the corresponding consent has been given.
Provision prescribed or required
The
provision of your personal data is voluntary, solely on the basis of
your consent. We cannot send you our newsletter without your consent.
Revocation of consent
You
can revoke your consent to the storage of your personal data and its
use for sending the newsletter at any time with effect for the future.
You can unsubscribe using the link contained in every email or the
contact information listed in this privacy policy.
Range measurement
Type and purpose of processing
Reach measurement is used to evaluate the flow of visitors to our online offering and may include behavior, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, recognize at what time our online offer or its functions or content are most frequently used or invite reuse. We can also understand which areas require adjustment.
We use the following tools to measure reach:
- Matomo
Further information on the tools used can also be found in the information below on the analysis tools used.
Legal basis
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest. The measurement of reach and the resulting information are suitable for adapting the website.
Recipients
We use technical service providers for the operation and maintenance of our website, who act as our processors.
Storage duration
Information on the storage period can be found in the information below on the analysis tools used.
Provision prescribed or required
The provision of data is not required by law or contract.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Tracking and analysis tools
Use of Matomo on the basis of cookies
Type and purpose of processing
We use Matomo (formerly Piwik) on this website, an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. If you have given your consent, Matomo uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is stored on a server in Germany. We have configured Matomo in such a way that no profiling takes place. Matomo is used for the purpose of improving the quality of our website and its content. This enables us to find out how the website is used and to constantly optimize our offering. The IP address is anonymized immediately after processing and before it is stored by truncating the last 2 bytes. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website. You can find more information on the privacy settings of the Matomo software at the following link: matomo.org/wp-content/uploads/2022/07/privacy.png.
Legal basis
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Recipients
We use technical service providers for the operation and maintenance of our website, who act as our processors.
Storage duration
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is done automatically after 6 months.
Objection
You can object to the processing of data by Matomo in various ways:
You can revoke your consent for the future at any time in the cookie settings. You can also completely prevent the storage of cookies in your browser. However, this may mean that you will no longer be able to use some functions of our website that require identification. You can also activate the "Do-not-track" setting in your browser. We have configured Matomo to respect this setting. You can also click below to create an opt-out cookie that is valid for two years. As a result, Matomo will not register your further visits. Please note, however, that the opt-out cookie will be deleted if you delete all cookies.
You can find more information on the privacy settings of the Matomo software at the following link: matomo.org/docs/privacy/.
You can also prevent the use of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Our website is also maintained by service providers who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Our website is also maintained by service providers who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Storage duration
The data will be deleted as soon as it is no longer required for our recording purposes or you withdraw your consent.
Objection
You can withdraw your consent at any time. You will not suffer any disadvantages. To do so, click on the icon at the bottom left of the screen and make the desired settings in the cookie consent banner that opens.
Use of Google Maps
Nature and purpose of processing
On this website, we use the offer of Google Maps, an Internet map service operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). By integrating Google Maps, we can provide you with the most important information about our locations.
If you give your consent, information about your use of our website (such as your IP address) will be transmitted to Google's servers and stored there when you access the subpages on which Google Maps is integrated. In addition, at least one cookie (Nama: NID) is set in your browser by Google. When this data is collected and stored, it may also be transmitted to the servers of Google LLC. in the USA.
When you visit the website, Google receives information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles (even for users who are not logged in) and uses them for the purposes of advertising, market research and/or the needs-based design of its websites. In particular, you have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. You can find more information about data processing by Google in the Google data protection information: policies.google.com/privacy. You can also change your personal data protection settings there in the data protection center.
You can view Google's terms of use at www.google.de/intl/de/policies/terms/regional.html
and the additional terms of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps/
Legal basis
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Recipients
We use technical service providers for the operation and maintenance of our website and for the evaluation of cookies, who act as our processors. Other recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Third country transfer
As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. An adequacy decision by the European Commission exists for the USA, under which all companies certified under the Privacy Shield Framework do not have to provide any additional guarantees. Google LLC is a certified service provider.
Storage duration
You can find information on the storage duration of the cookies set in the cookie settings. In some cases, Google anonymizes information (e.g. advertising data) in server logs. For this purpose, part of the IP address and cookie information is deleted after 9 or 18 months.
Objection
You can revoke your consent for the future at any time in the cookie settings.
Social Media
We use the technical platform and services of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. The use of the Facebook page and its functions is your own responsibility. This applies in particular to the interactive functions (e.g. commenting, sharing, liking). Facebook processes personal data relating to your account, your IP address and the end devices you use; cookies are used for data collection. These are small files that are stored on your end devices. What information Facebook receives and how it is used is described by Facebook in general terms in its data usage guidelines. There you will also find information on how to contact Facebook, how to object and the settings options for advertisements. You can find Facebook's complete data policy here: https://de-de.facebook.com/privacy/policy/.
The information may be used by Facebook to provide us, as the operator of the Facebook pages, with statistical information such as gender and age distribution regarding the use of the Facebook page. In addition, Facebook can show you further information or advertisements according to your preferences. Facebook provides more information on this at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook.According to Facebook, the IP address is stored anonymously and deleted after 90 days.Facebook also stores information about the end devices of its users (for example, as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users.
If you are currently logged in to Facebook as a user, a cookie is set with your Facebook ID.In this way, Facebook can track that you have visited this page and how you have used it.This also applies to all other Facebook pages.Facebook buttons integrated into websites enable Facebook to record your visits to these websites and assign them to your Facebook profile.This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser.This will delete Facebook information that can be used to identify you directly.This allows you to use our Facebook page without revealing your Facebook ID. If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. In this way, Facebook information that can be used to directly identify you will be deleted.This allows you to use our Facebook page without revealing your Facebook ID. If you access interactive functions on the page (like, comment, share, message, etc.), a Facebook login screen will appear.After logging in, you will once again be recognizable to Facebook as a specific user.Alternatively, you can use a different browser than usual to visit our Facebook page. How Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.
We would like to point out that you use our Instagram page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting or rating). When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is stored on your device in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. How Instagram uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Instagram and is not known to us.
When you access an Instagram page, the IP address assigned to your end device is transmitted to Instagram. According to Instagram, the IP address is stored anonymously and deleted after 90 days. Instagram also stores information about the end devices of its users (for example, as part of the "login notification" function); Instagram may thus be able to assign IP addresses to individual users.
If you are currently logged in to Instagram as a user, a cookie is set with your Instagram ID. This enables Instagram to understand that you have visited this page and how you have used it. This also applies to all other Instagram pages. Instagram buttons integrated into websites enable Instagram to record your visits to these websites and assign them to your Instagram profile. This data can be used to offer content or advertising tailored to you. If you want to avoid this, you should log out of Instagram or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. This will delete Instagram information that can be used to identify you directly. This allows you to use our Instagram page without revealing your Instagram ID. If you access interactive functions on the page (like, comment, message and others), an Instagram login screen will appear. After logging in, you will once again be recognizable to Instagram as a specific user.
Instagram describes what information Instagram receives and how it is used in its data usage guidelines. There you will also find information about contact options for Facebook and the settings options for advertisements
You can find the complete data policy of the Instagram service here: https://help.instagram.com/519522125107875
Embedded YouTube videos
Type and purpose of processing
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page on our website that has a YouTube video embedded, a connection to the YouTube or Google servers is automatically established. Depending on the settings, various data is transmitted (e.g. your IP address). If a YouTube video is started, the provider sets cookies that store your IP address and URL, for example.
If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy (policies.google.com/privacy).
Legal basis
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Recipients
We use technical service providers for the operation and maintenance of our website and for the evaluation of cookies, who act as our processors. Other recipients of the data are YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Third country transfer
As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. An adequacy decision by the European Commission exists for the USA, under which all companies certified under the Privacy Shield Framework do not have to provide any additional guarantees. Google LLC is a certified service provider.
Objection
You can revoke your consent for the future at any time in the cookie settings.
Information for applicants
Please note that by submitting your application, you also consent to the processing of your personal data until the selection procedure has been completed. Application documents can only be returned if you enclose a sufficiently stamped and addressed envelope. Otherwise, your documents will be destroyed no later than six months after completion of the application process.
3. Information about your right to object according to Art. 21 GDPR
Right to object on a case-by-case basis
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an objection
The objection can be made informally with the subject "Objection", stating your name, address or other identifying features to:
KZ-Gedenkstätte Flossenbürg / Prof. Dr. Jörg Skriebeleit
E-Mail: information@gedenkstaette-flossenbuerg.de
4. Amendment of our data protection provisions
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have any questions about data protection, please send us an e-mail to
datenschutz@stbg.bayern.de
The data protection declaration was created with the data protection declaration generator of activeMind AG on November 3, 2023 (www.activemind.de/datenschutz/generatoren/datenschutzerklaerung/)