In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

The Department of Arts and Culture of the City of Munich is the responsible operator of this website within the meaning of Art. 4 Para. 7 of the General Data Protection Regulation (GDPR). When you visit the website, the protection of your personal data is given great importance. For this reason, your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this privacy policy. This provides you with information about the type, scope and purpose of collecting and using your personal data.

City of Munich
Department of Arts and Culture
Section 1
Burgstrasse 4
D-80331 Munich
Germany
Email: rathausgalerie@muenchen.de

City of Munich
Official Data Protection Officers
Marienplatz 8
80331 Munich
Germany
Email: datenschutz@muenchen.de
The website can be used without providing personal data such as name, address, email address or other personal data. An exception is made for IP addresses. Since these are seen as part of the personal data, there could be a personal reference at least for the duration of the visit to the website. After the end of use, the IP addresses will not be saved or will be deleted immediately. Registration is not required to access the content of the website.
When you contact us by e-mail, the data you provide (your e-mail address, your name, possibly your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict the processing if there are statutory storage requirements. We will not pass this data on without your consent.
General information about consents
If you have given us consent to process personal data for specific, additional purposes, this data processing is based on this consent. We provide details on the content of a consent when requesting the consent.

If you would like to receive the newsletter linked on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent by agreement. In the course of this, potential recipients can be added to a mailing list. The users then receive a confirmation e-mail with the option of confirming their registration in a legally secure manner. The address will only be actively included in the mailing list if the confirmation is received.
We only use this data to send the requested information and offers.
The newsletter software used is Brevo. Your data will be sent to Brevo OnlineMarketing.de GmbH, the owner of Brevo. Brevo OnlineMarketing.de GmbH is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo is a certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Find out more here.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter or by sending a message to the e-mail address kunst@muenchen.de.
You can find the general information requirements according to Art. 13 et seq. GDPR under information requirements according to GDPR.

You have the following right towards us with regard to your personal data:

• right to information,

• right to rectification or deletion,

• right to restrict processing,

• right to object to processing,

• right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of the data by us.

Bayerischer Landesbeauftragte für den Datenschutz
Wagmüllerstraße 18
80538 München
E-Mail: poststelle@datenschutz-bayern.de

Users who access the website (due to technical necessity) transmit data to a web server via their internet browser. The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR for technically necessary cookies and for data that is directly anonymised.
The following data is recorded during an ongoing communication connection between your internet browser and our web server:
• date and time of the request
• name of the requested file
• website from which the file was requested
• access status (file transferred, file not found and similar)
• web browser and operating system used
• full IP address of the requesting computer
• amount of data transferred
We process the data in this step in order to enable you to deliver our website and to guarantee the security of our information technology systems. We generally delete the collected data three days after your visit to the website. The data mentioned is usually generated when accessing any other website on the Internet. This is not a specific feature of our website. For the statistical evaluation, the usage information is only collected anonymously by us.

Our website is hosted by Portal München Betriebs-GmbH & Co. KG, Fraunhoferstraße 6, 80469 Munich („Portal München“). Portal München provides us with infrastructure and platform services, computing capacity, storage space, database services and security services. Together with the service provider hyperstud.io, Portal München is responsible for the technical maintenance of the website.
In order to fulfill the services, the service provider processes, among other things, usage data, meta and communication data of our website visitors within the framework of an order processing agreement in accordance with Art. 28 DSGVO.
Your personal data will be stored by Portal München on specially protected servers in the European Union. Portal München uses technical and organizational security measures in order to protect your personal data from unauthorized access and misus

YouTube Video
Description of Service
This is a video player service. It can be used by user to watch, like, share, comment and upload videos.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Data Purposes
This list represents the purposes of the data collection and processing.
• Displaying Videos
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
• Cookies (if Privacy-Enhanced Mode is not activated)
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
• Device information
• IP address
• Referrer URL
• Videos viewed
Legal Basis
In the following the required legal basis for the processing of data is listed.
• Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
• Chile
• United States of America
• Taiwan
• Singapore
Data Recipients
In the following the recipients of the data collected are listed.
• Alphabet Inc.
• Google LLC
• Google Ireland Limited
Click here to read the privacy policy of the data processor
https://business.safety.google/privacy/?hl=en
Click here to read the cookie policy of the data processor
https://policies.google.com/technologies/cookies?hl=en
Click here to opt out from this processor across all domains
https://safety.google/privacy/privacy-controls/
Storage Information
• Maximum age of cookie storage: 8 months
Stored Information
• Name: __sak; This is used to store information about the visitor's video preferences.; Type: web;
• Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Type: web;
• Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor's device and network settings.; Type: web;
• Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user's video player preferences using embedded YouTube video.; Type: web;
• Name: YEC; This is used to store the user's video player preferences using embedded YouTube video.; Type: cookie; Duration: 1 year, 1 month;
• Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Type: cookie; Duration: 2 years;
• Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Type: cookie; Duration: 5 months, 26 days;
• Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Type: cookie; Duration: Session;
• Name: test_cookie; This is a test for cookie setting permissions in user's browser.; Type: cookie; Duration: 1 day;
• Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Type: cookie; Duration: 6 months;
• Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Type: cookie; Duration: Session;
• Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Type: cookie; Duration: 8 months;
• Name: pm_sess; This is used to maintain your browsing session.; Type: cookie; Duration: 30 minutes;
• Name: CGIC; This is used to provide search results by auto-completing search queries based on a user's initial input.; Type: cookie; Duration: 6 months;
• Name: UULE; This is used to determine the users geographic location. ; Type: cookie; Duration: 6 hours;
• Name: _Secure-YEC; This is used to store the user's video player preferences using embedded YouTube videos.; Type: cookie; Duration: 1 year, 1 month;

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated in our privacy policy, we process users' data if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

Our online offer contains links to other websites. We have no influence on the content there or compliance with data protection regulations and can therefore not assume any responsibility for them. This data protection declaration therefore only applies to this website.

We hereby object to the use of contact data published as part of the imprint obligation to send advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam e-mails.

If you have any questions about data protection, please send us an e-mail or contact the data protection officer directly (see contact details above).

We reserve the right to adjust this data protection declaration from time to time so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. B. when introducing new services. The new data protection declaration will then apply to your next visit.

Status: August 2024