STUDIO MARGRET WIBMER / PRIVACY POLICY

Our Data Protection Policy

The following statement will provide you with an overview of the ways in which your data will be processed by Studio Margret Wibmer.
Our privacy policy is structured as follows:

  1. Information about us as controllers of your data
  2. Your data
  3. Your rights
  4. Information about the data processing

Information about us as controllers of your data

In accordance with data security laws, the responsible authority, Studio Margret Wibmer, is contactable at

KNSM laan 153, 1019 LC Amsterdam, Netherlands. Phone +31 6242 77754
info@margretwibmer.eu, www.margretwibmer.eu

Please direct all questions and concerns to Ms Margret Wibmer, KNSM laan 153, 1019 LC Amsterdam, Netherlans. info@margretwibmer.eu

We take the protection of your data very seriously and would like you to feel safe while visiting our website. We assure you that your data will be handled in accordance with the applicable data protection regulations and that the necessary technical and organizational measures in compliance with data protection are in place. The protection of your data is a key priority for us.

• Your data
Personal data (usually referred to just as “data” below) will only be processed by us to the extent

necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

• Your rights

With regard to the data processing to be described in more detail below, users and data subjects have the right to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);

1. to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);

  1. to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3GDPR, to restrict said processing per Art. 18 GDPR;
  2. to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  3. to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients. Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

• Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site. The data thus collected will be temporarily stored, but not in association with any other of your data.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

• Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address. This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website. Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Order processing

The data you submit when ordering goods and/or services from us will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data.
The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.

In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment. The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.

Newsletter

Our newsletter helps us keep you informed about upcoming events and activities. If you register for our free newsletter, the first step will entail providing personal data to initiate your registration, i.e. your e-mail address and – optionally – your name and address. This data will be transferred to us. We will also save the IP address of the internet connection from which you accessed our website, as well as the date and time of your registration. In the next step of the registration process, we will send you an email describing the newsletter’s content as well as providing you with our data protection declaration. This email will also serve as a means of obtaining your consent to send you the newsletter. We use the data collected during the registration process for the exclusive purpose of sending the newsletter – data is not passed on to third parties. If you choose to voluntarily provide your first and last names, we will use these, with your consent, as a means of addressing you in the newsletter.

Following, Art. 6 Para. 1 S. 1 lit. f DSGVO, in all cases, this kind of data storage is based on our legitimate interest in the statistical evaluation of the newsletter campaigns, and in order to optimize marketing and improve our focus on the interests of our subscribers.
We use the provider Mailchimp for the dispatch of our newsletters, which is part of The Rocket Science Group, LLC with headquarters in the USA. In legal terms, the use of Mailchimp means data processing in a third country. We would like to point out that e-mail addresses and other data collected in the context of the newsletter – including information about browser and system, IP address and time of access – are also stored on the servers of Mailchimp. We have chosen Mailchimp because The Rocket Science Group, LLC has a valid EU-Privacy-Shield-Certification and thus meets the measures and standards set by the EU for the protection of personal data stored in the USA. We have entered a newsletter dispatch contract with Mailchimp to ensure the protection of your data. This means that Mailchimp will use the information given to us in order to send and evaluate the newsletter on our behalf. In some cases, we may also use this data to optimize and improve our own offers, however, our contract partner, Mailchimp, will never contact you directly. We trust in the reliability and the IT– and data security of the provider.
We would like to point out that, as we continue to send you the newsletter, we also evaluate your user behavior through Mailchimp’s built-in tracking. We would like to expressly point out that your consent also covers this data use/data storage. In order to evaluate your user behavior, the e-mails sent contain so-called web beacons, or tracking pixels, which are one-pixel image files stored on our website. We link the above-mentioned data and the web beacons to your e-mail address and an individually- generated ID. Links received in the newsletter may also contain this ID. With the data

thus obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters and which links you click on, and can thereby determine your personal user interests. We also link this data to actions you take on our website.
You can object to this tracking by unsubscribing from our newsletter. You will find more information on this at the end of this section. User information is stored as long as you are subscribed to the newsletter. After you unsubscribe, we store the data anonymously for purely statistical purposes. You can also circumvent this tracking by deactivating image display in your emails. However, in this case, the newsletter will not be displayed in its entirety and you may not be able to use it fully. If you manually activate display the images, the above-mentioned tracking will take place.

The Certificate for The Rocket Science Group, LLC can be found here: www.privacyshield.org. Mailchimp’s privacy policy can be found at: https://mailchimp.com/legal/privacy/.
This declaration is based on Art. 6 para. 1 sentence 1 lit. a DSGVO. You can revoke your consent to the storage of your data and e-mail address, as well as its use for newsletter dispatch, at any point. Please send a short e-mail to datenschutzbeauftragter@galeriethomasschulte.de. Each newsletter also contains an unsubscribe link.

Contact

If you contact us via email, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Vimeo

We use videos through Vimeo. The provider, Vimeo LLC is based in the US. By integrating the videos into our content, we connect to the Vimeo server. This server does have access to information on the pages you visit. Vimeo also obtain your IP address. This applies even if you are not logged in to Vimeo or do not have a Vimeo account of your own. This information is usually transferred to a Vimeo server in the United States and is subsequently processed there. If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. This can, however, be prevented by logging out of your Vimeo account. We would like to point out that we have no influence on the data transfer and data processing at Vimeo. We use this service because we have a legitimate interest in optimizing our website and services for your use. More information about the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

25 March 2021