1.1 Use of the design-museum.de website is subject to the Privacy Statement set out below. The design-museum.de website is a service provided by Vitra Design Museum GmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland (hereinafter, “Vitra Design Museum”). Where relevant, Vitra Design Museum is the controller pursuant to Article 4 of the EU General Data Protection Regulation (hereinafter, “GDPR”).
1.2 Protecting your personal data is important to us, in particular, where respecting your personal rights in connection with the processing and use of such data is concerned. The term personal data refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person including the person’s name, postal address, e-mail address and/or telephone number and user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.
2. Automated Data Collection and Processing by Your Browser
2.1 As with every website, our server automatically collects the following information and temporarily saves it in server log files which are transmitted by your browser unless you have deactivated such function: - the IP address of the computer transmitting the request - the client’s file request - the http response code - the volume of data transmitted - the website from which you access our website (referrer URL) - the date and time of the server request - the type, version and language of your browser - the operating system on the computer transmitting the request
Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources.
We use Google Analytics to analyze and enhance the use of our website regularly. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. If we ask you for your consent, the legal basis for processing is Article 6 (1) a) of the GDPR. Otherwise, the legal basis for the use of Google Analytics is Article 6 (1) p. 1 f) of the GDPR.
3. Collection and Processing of Data Provided Voluntarily
3.1 Your provision of personal data to us by e-mail, in our online shop or via the contact form available on our website is voluntary. We use this data to process our contractual relationship with you and/or your inquiries or orders. We only use your data for e-mail advertising purposes with your consent. We will erase the data so generated as soon as it no longer needs to be saved; if statutory retention periods apply, we will restrict the processing of such data. The legal basis is Article 6 (1) b) of the GDPR or Article 6 (1) f) of the GDPR.
3.2 When you have created an account in our online shop, we will collect the indicated information (especially name, billing address, shipping address, phone number, payment information and e-mail address), so you will not have to indicate your data for each new order. You can update or delete your profile at any time. The legal basis is Article 6 (1) p. 1 b) of the GDPR.
3.3 If you want to subscribe to our newsletter, please provide your valid e-mail address, your first and last name and confirm that you agree to receive our newsletter. You thereby agree that the Vitra Design Museum GmbH may process and use the data you have provided for the purpose of sending you e-mail newsletters to inform you about the cultural activities of the Vitra Design MuseumGmbH, as well as the latest news, promotions and offers of the Vitra Design Museum GmbH. You can revoke this agreement at any time via the unsubscribe link in the newsletter, by sending written notice to Vitra Design Musuem GmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or to firstname.lastname@example.org. . As soon as you revoke such agreement, the data you provided will be deleted and no longer will be used to send you the newsletter. The legal basis is Art. 6 (1) p. 1 a) of the GDPR.
3.4 Personal data provided to us via our website will be saved only for the time it takes us to meet the purpose for which you provided such data. When your contract has been fulfilled completely, your data will be blocked and then deleted in accordance with the relevant tax and trade regulations unless you have given your express consent to such data being used for other purposes. To the extent mandatory trade and tax retention periods need to be observed, the retention period for some types of data can be up to ten years.
4. Transmission to Third Parties
4.1 We will not transmit any personal data you provide to us to any third parties. Personal data will be transmitted only - if you have given prior consent - to sub-contractors who need to receive and use such data for the purpose of fulfilling specific orders if required to process your inquiries, orders and use of our services - to service providers bound by instructions if required to process your order data in accordance with the law - to parties entitled to obtain such data if required to comply with statutory obligations
4.2 As part of the handling of the payment method you selected in our online shop, your data will be transmitted to third parties as follows: To process payments via credit card (VISA or Mastercard), we will transmit your data to our partner PAYONE GmbH, Fraunhoferstraße 2-4, 24118 Kiel,, Deutschland. In addition to the data regarding your order and the shipment and payment methods you have requested, we will forward the following categories of personal data to the payment services provider: - name - gender - company name - payment and shipment address - e-mail-address - IP address - client ID
Responsibility regarding your data lies with the payment services provider. The legal basis for such transmission is the fulfillment of the contract (Article 6 (1) p. 1 b) of the GDPR). Please know that this provider will transmit your personal data to other parties as required to process payments including, but not limited to, the credit institutions, banks, and credit card providers involved. These parties also will process your personal data to handle your payments. For customers based in Germany, the payment services provider will request additional information from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany (hereinafter, “SCHUFA”) and to this end will provide SCHUFA with information regarding the customer’s name, billing address, and gender. The legal basis is Article 6 (1) f) of the GDPR.
6. Your Rights
6.1 At any time, at no cost to you and without providing any reason you can request information regarding the data relating to you which is saved in our systems as well as information regarding the origin, recipients or categories of recipients to whom such data has been transmitted and why such data has been saved.
6.2 In addition, legally you are entitled to have your personal data rectified, blocked or erased. Also, you can withdraw your consent to the use of your data at any time and without having to provide a reason. If we process your personal data to pursue our legitimate interests pursuant to Article 6 (1) f) of the GDPR, pursuant to Article 21 of the GDPR you have the right to object. In addition, you have the right to portability of your data and the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.
6.3 Please address any requests for information, inquiries, objections to the processing of your data, and any questions you may have to Vitra Design Museum GmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland or to email@example.com.
6.4 If you have any questions concerning data protection, please feel free to contact our Data Protection Officer Simon Brandmeier, Kirschmatt 37, 79576 Weil am Rhein, Deutschland, or via e-mail to firstname.lastname@example.org.
Last update: 03.02.2021