Data Privacy Policy

The Buchenwald and Mittelbau-Dora Memorials Foundation takes the protection of your personal data very seriously and respects your private sphere. Therefore, we pursue all of our internet activities exclusively subject to the respectively applicable data protection regulations.

In the following data privacy policy, we inform you about the extent and use of the personal data we collect and process within the framework of our website. In addition, we inform you about the purposes for which we collect and process the data, and about which rights you have in terms of data privacy in accordance with the EU General Data Protection Regulation (GDPR).

Responsible
Stiftung Gedenkstätten Buchenwald und Mittelbau-Dora
99427 Weimar
Phone:  +49 (0)3643-430-0
e-mail: sekretariat@buchenwald.de

Authorised representative:
The Buchenwald and Mittelbau-Dora Memorials Foundation is legally represented by its director, Prof. Dr. Jens-Christian Wagner.

Name and contact data of the controller and the company data protection officer
This data privacy information applies to the data processing by the controller:

Buchenwald and Mittelbau-Dora Memorials Foundation, 99427 Weimar-Buchenwald

The company data protection officer can be reached at this address or directly at the following e-mail address: datenschutz@buchenwald.de.

Collection and storage of personal data as well as the type and purpose of its use
When you access our websites www.buchenwald.de or www.dora.de or any other URLs associated with this domain (hereinafter: the website), the browser used on your terminal automatically sends information to our website's server. This information is temporarily stored in a so-called log file. Without any action on your part, information is collected and stored until it is automatically deleted: IP address of the requesting computer, date and time of the access, name and URL of the accessed file, website from which the access is made (referrer URL), browser used and, as applicable, the operating system of your computer and the name of your access provider.

The above data is processed by us for the following purposes: to guarantee the trouble-free establishment of the website connection, to guarantee convenient use of our website, evaluation of the system security and stability and for further administrative purposes.

The legal basis for the data processing is Art. 6 (1), sentence 1, lit. f GDPR. Our legitimate interest is based on the purposes of the data collection listed above. Under no circumstances will we use the collected data for the purpose of drawing any conclusions about your person.

In addition to this, when you visit our website, we use cookies and analysis tools.

Cookies
We use cookies on our website. These are small files automatically created by your browser and stored on your terminal (laptop, tablet, smartphone, etc.) when you visit our website. Cookies will not cause any damage to your device, and contain no viruses, Trojans or other malware.

The cookie stores information that arises in connection with the specifically used device. This does not mean, however, that we receive direct knowledge of your identity.

We use cookies, on the one hand, to make the use of our website more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically erased when you leave the website.

In addition, to optimize the user-friendliness of our website, we also use temporary cookies. These are stored for a specifically determined time on your device. If you visit our website again to use our services, it is automatically recognized that you were here before, and which entries and settings you made so that you do not have to make them again.

On the other hand, we also use cookies in order to analyse the use of our website statistically and to evaluate it for the purpose of optimizing our services for you (see section 5). When you visit our website again, these cookies allow us to recognize automatically that you have already visited the site. These cookies are automatically erased after a specifically defined time.

The data processed by cookies are necessary for the stated purposes to protect our legitimate interests and those of third parties for the technically flawless and optimized provision of services in accordance with Art. 6 (1), sentence 1, lit. f GDPR.

Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are stored on your computer or that you always receive a notice before a new cookie is stored. The complete deactivation of cookies can, however, mean that you will not be able to use all of the functions of our website.

Facebook
A link to our subpages in the social network Facebook is integrated in our website.

Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside of the USA or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the processing of personal data.

The data privacy regulations published by Facebook, which can be accessed at www.facebook.com/about/privacy/, provide information about the collection, processing and usage of personal data by Facebook. They also explain which setting options Facebook offers to protect the private sphere of the data subject. In addition, various applications are available to allow the suppression of the data transfer to Facebook.

Twitter
A link to our subpages in the social network Twitter is integrated in our website. Additionally, we provide the content of the #otd1945 section on Twitter. In the standard configuration, usage of Twitter is free of charge.

Twitter is operated by Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

The data privacy policy published by Twitter, which can be accessed at twitter.com/en/privacy, provides information about the collection, processing and usage of personal data by Facebook.

Vimeo
On our website, we make use of Vimeo to host livestreams and video content. The embedded videos on this website are linked to the Vimeo account of Buchenwald Memorial.

Vimeo is operated by Vimeo, Inc. 555 West 18th Street New York, NY 10011, United States.

For further information on the treatment of user data, please refer to the data privacy policy of Vimeo at vimeo.com/privacy. There you may find all available information about the collection, processing and use of personal data by the platform.

YouTube
A link to our YouTube channel is integrated on our website. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view them, also free of charge.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

For further information on the treatment of user data, go to the data privacy policy of YouTube at https://policies.google.com/privacy?hl=en.

Using our contact form or contacting us by e-mail
If you have questions of any kind, you can contact us using the form supplied on the website or contact the controller directly by e-mail. For this purpose, you must state your first and last name, your telephone number and a valid e-mail address so that we know from whom the enquiry comes, and so that we can respond to it by either telephone or e-mail. You do not have to provide any other personal data.

The processing of data for the purpose of your contacting us or our contacting you is carried out in accordance with Art. 6 (1), sentence 1, lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically erased after your enquiry has been dealt with.

Transfer of data
Your personal data will not be transferred to third parties for any purposes other than those set out in the following. We pass your personal data on to third parties only if: you have given your express consent to this pursuant to Art. 6 (1), sentence 1, lit. a GDPR, in the case that there is a legal obligation to transfer the data pursuant to Art. 6 (1), sentence 1, lit. c GDPR or the transfer is necessary pursuant to Art. 6 (1), sentence 1, lit. f GDPR for the establishment, exercise or defence of legal claims, including those against contractual partners, or the continuous analysis and improvement of our services as well as maintenance of the attractiveness of our services (e.g. updating of customer lists, analysis of databases, advertising measures, provision of modern technical solutions) and there is no reason to assume that you have an overriding, legitimate interest in the non-disclosure of your personal data.

Insofar as we use the services of third parties as processor within the meaning of the GDPR for our data processing, we shall maintain the necessary contractual relationships with such third parties within the meaning of Art. 28 GDPR.

Personal data will be transferred to third parties in countries outside of the EU (third countries) only if and to the extent that you have granted your consent, or if we have an overriding legitimate interest in doing so. If such a data transfer is made, we shall ensure contractually that the third-party processors maintain a standard of data protection corresponding to that of the European Union.

Rights of the data subject
You have the right

- pursuant to Art. 15 GDPR, to demand information about your personal data processed by us. In particular, you have the right to demand information about the purposes of processing, the category of the personal data, the categories of recipients to which your data was or is disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of the data insofar as it was not collected by us, as well as about the existence of automated decision-making, including profiling and, as applicable, meaningful information on the respective details

- pursuant to Art. 16 GDPR, to demand the immediate rectification of incorrect or incomplete personal data stored by us

- pursuant to Art. 17 GDPR, to demand the erasure of your personal data stored by us if the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

- pursuant to Art. 18 GDPR, to demand the restriction of processing of your personal data insofar as you dispute the correctness of the data, the processing is unlawful but you object to its erasure and we no longer require the data, but you need it for the establishment, exercise or defence of legal claims, or you have lodged an appeal against the processing pursuant to Art. 21 GDPR

- pursuant to Art. 20 GDPR, to receive the personal data that you have made available to us in a structured, commonly used and machine-readable format, or to demand the transfer of the data to another controller

- pursuant to Art. 7 (3) GDPR, to revoke at any time your previously granted consent. The consequence of this is that we are no longer permitted to continue the data processing that was based on this consent.

- pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. For this purpose, you can generally contact the supervisory authority at your normal place of residence or work or at the domicile of our offices.

Right of objection
Insofar as your personal data is processed on the basis of justified interests in accordance with Art. 6 (1), sentence 1, lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data if there are reasons arising from your particular situation or the objection is against direct marketing. In the latter case, you have a general right of objection that we will implement without reference to a particular situation. If you want to exercise your right of revocation or of objection, an e-mail to the following address is sufficient: datenschutz(at)buchenwald(dot)de.

Data security
During the website visit, we support the standard SSL (Secure Socket Layer) protocol. We also use appropriate technical and organizational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss or destruction, and against unauthorized access by third parties (e.g. firewall system). Our security measures are continuously improved in accordance with technological developments.

Up-to-dateness and changes to this data privacy policy
This data privacy policy is currently valid as of January 1st, 2021.

Due to the further development of our website and the related services, or due to changes in legal stipulations or official regulations, it may be necessary to make changes to this data privacy policy.