The protection of your privacy is very important to us. If and to the extent that you voluntarily provide us with personal data, this will be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR) in the version applicable as of May 25, 2018, as well as other statutory data protection provisions, in particular in accordance with the Bundesdatenschutzgesetz (BDSG – German Federal Data Protection Act). All data will, of course, be treated confidentially.

You can download this privacy notice here.

Privacy policy & cookies

The protection of your privacy is important to us. If and to the extent that you voluntarily provide us with personal data, this will be processed in accordance with the provisions of the EU General Data Protection Regulation ( GDPR ) in the version applicable as of May 25, 2018, as well as other statutory data protection provisions, in particular in accordance with the German Federal Data Protection Act ( BDSG ). Of course, all data will be treated confidentially. With the following data protection information, we would like to explain to you in more detail how data is handled.

1. General and mandatory information

1.1 In principle, the collection, processing and use of personal data for the use of our website is limited to the necessary extent and the necessary data. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses ore usage behavior.

1.2 The responsible party for the collection, processing and use of your personal data pursuant to Art. 4 (7) GDPR (date processing controller) is the

Stiftung jüdisches Kulturmuseum Augsburg-Schwaben (Foundation for Jewish Culture Museum Augsburg-Swabia)
Chair of the board Prof. Dr.-Ing. Dr. h.c. Hans-Eberhard Schurk
Halderstrasse 6-8
86150 Augsburg

Phone: 0049 821 51 36 58
Fax: 0049 821 51 36 26

E-mail: stiftungsvorstand@gmx.de

You can reach our data protection officer at the following contact details:

Jüdisches Museum Augsburg Schwaben
Director Dr. Barbara Staudinger
Halderstrasse 6-8
86150 Augsburg

Phone: 0049 821 51 36 58
Fax: 0049 821 51 36 26

E-mail: datenschutz@jmaugsburg.de

1.3 If you contact us by e-mail or via contact form, the data you provide voluntarily (e-mail address, name, address, etc.) will be stored by us in order to answer your questions or process your other requests. We delete the data accruing in this context after the storage is no longer necessary, or restrict the processing if there are legal obligations to retain data.

2. Procession of personal data when visiting our website

2.1 In the case of merely informative use of our website www.jmaugsburg.de, i.e. if you do not register or otherwise transmit information to us, we only process the personal data that your browser transmits to our server. If you wish to view our website, we record the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

The aforementioned data is processed by us for the following purposes:

Ensuring a smooth connection setup of the website,
Ensuring a comfortable use of our website,
evaluation of system security and stability as well as
for other administrative purposes.

2.2 The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

2.3 In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in sections 6. to 7. of this privacy notice.

3. Further features of our website and other services

3.1 In addition to the purely informational use of our website or our other advertising media, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply. Legal bases are Art. 6 para. 1 p. 1 lit. a, b and f GDPR.

3.2 In particular, for questions of any kind, we offer you the opportunity to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know from whom the inquiry originates and in order to be able to answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

3.3 Insofar as you directly enter into a contractual relationship with us, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of the contract. Mandatory data required for the processing of contracts are marked separately, other data are voluntary. We process the data you provide for the purpose of processing the contract. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.

We process the personal data, insofar as necessary, for the duration of the relevant business relationship (from the initiation, processing to the termination of a contract) and beyond that in accordance with the statutory retention and documentation obligations, which arise, for example, due to commercial and tax law requirements and, if necessary, until the end of any legal dispute, ongoing warranty and guarantee periods. We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

3.4 In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

3.5 Furthermore, we may pass on your personal data to third parties if contract conclusions or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer used in each case.Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only pass on your personal data to third parties if:

you have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a GDPR,

the disclosure is necessary in accordance with Art. 6 (1) p. 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, as well as

this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you.

3.6 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer used.

3.7 Within our website, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

3.8 We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

4. Your rights

You have the right to:

in accordance with Art. 15 GDPR, request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or completion of your personal data stored by us;

pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;

in accordance with Art. 7 (3) GDPR, to revoke your consent once given to us at any time (see also section 7.1). This has the consequence that we may no longer continue the data processing based on this consent for the future; and

to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

5. Objection or revocation against the processing of your data

5.1 If you have given your consent to the processing of your data, you may revoke this consent at any time in accordance with Article 7 (3) GDPR. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.

5.2 Insofar as we process the processing of your personal data on the balance of interests interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR. This is the case if the processing is not necessary, in particular, for performing a contract with you, which is presented by us in each case in the description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

5.3 Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details provided in section 1.2 above.

6. Use of cookies

6.1 In addition to the data mentioned in section 2, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (here by us), certain information flows. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.

6.2 This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies, i.e. cookies that are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies, i.e. cookies regarding which you can have your browser setting configured according to your wishes. Here, for example, the acceptance of third-party cookies or all cookies can be refused. Please note that in this case you may not be able to use all functions of this website.

Furthermore, we use HTML5 storage objects that are stored on your terminal device. These objects store the required data independently of the browser you are using and have no automatic expiration date. You can prevent the use of HTML5 storage objects by setting your browser to private mode. In addition, we recommend that you regularly delete your cookies and browser history manually.

7. Use of Google Analytics

7.1 This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

7.2 The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

7.3 You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

7.4 This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.

7.5 We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) p. 1 lit. f GDPR, insofar as personal data is processed via this.

7.6 Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

7.7 This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate cross-device analysis of your usage in your customer account under “My Data”, “Personal Data”. http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

7.8 We continue to use Google Analytics to evaluate data from Double Click cookies and also AdWords for statistical purposes. If you do not wish this, you can deactivate this via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de). Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help(https://support.google.com/analytics/answer/6004245?hl=de).

8. Web analytics

8.1 This website uses the analysis services of 1&1 Web Analytics. The provider is 1&1 Internet SE, Elgendorfer Straße 57, D – 56410 Montabaur. Within the scope of the analyses with 1&1, among other things, visitor numbers and behavior (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. from which page the visitor comes), visitor locations as well as technical data (browser and operating system versions) can be analyzed. For this purpose, 1&1 stores the following data in particular:

Referrer (previously visited website)
requested website or file
browser type and browser version
operating system used
type of device used
time of access
IP address in anonymized form (only used to determine the location of the access).

According to 1&1, the data collection is completely anonymized so that it cannot be traced back to individual persons. Cookies are not stored by 1&1 Web Analytics.

8.2 The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both its web offering and its advertising. For more information on data collection and processing by 1&1 Web Analytics, please refer to the following links:

https://hosting.1und1.de/hilfe/online-marketing/
https://hosting.1und1.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-company-name-produktes/webanalytics/
https://hosting.1und1.de/terms-gtc/terms-privacy/

8.3 We have concluded an data processing agreement with 1&1. This agreement is intended to ensure data protection-compliant handling of your personal data by 1&1.

9. Facebook

9.1 We currently use a social media plug-in from Facebook. We use the so-called two-click solution for this. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under point 2. of this declaration is transmitted. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is therefore transmitted from you to the plug-in provider and stored in the USA. Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

9.2 We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

9.3 The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-in is Art. 6 para. 1 p. 1 lit. f GDPR, insofar as personal data is processed via this.

9.4 The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

9.5 For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their privacy notices:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

10. YouTube

10.1 This website uses the YouTube button from YouTube. This plugin is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066 USA. This is recognizable by the corresponding logo of YouTube. Further information on YouTube social plugins is available at the following Internet address: https://developers.google.com/youtube/.

10.2 When a visitor calls up a page of this Internet domain that contains such a plugin, a connection is established between the visitor’s browser and YouTube’s servers. YouTube receives and stores data (including the IP address), which allow YouTube to recognize which page of our Internet presence was accessed by the visitor. This applies regardless of whether a YouTube plugin is activated or not. If the visitor activates a YouTube plugin, the corresponding information is transmitted to YouTube in the USA and stored there. If the visitor is logged in with his personal YouTube account at the same time, the forwarded data can be assigned to the specific account. The legal basis for the use is Art. 6 para. 1 p. 1 lit. f GDPR.

10.3 The type, scope, purposes of the collection, use and further processing and use of the data by YouTube, as well as the rights and setting options for protecting the privacy of the user, can be read and adapted in the privacy notices of YouTube (https://www.google.de/intl/de/policies/privacy/). Otherwise, the exact data processing operations or storage periods and purposes are unclear.

11. Mapbox

11.1 This site uses the map service MapBox via an API. The service provider is MapBox Inc, 740 15th St NW, Washington, DC 20005, USA. To use the functions of MapBox, it is necessary to store your IP address. This information is usually transferred to a MapBox server in the USA and stored there. The provider of this site has no influence on this data transmission.

11.2 The use of MapBox is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. More information on the handling of user data can be found in the MapBox privacy policy: www.mapbox.com/privacy12. Google Web Fronts

12. Google web fonts

12.1 This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

12.2. For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

12.3 If your browser does not support web fonts, a standard font will be used by your computer. For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

13. Apple Podcast Player

13.1. Our website uses the podcast web player from Apple. The service provider is Apple Inc, One Apple Park Way, Cupertino, California, USA, 95014. When you visit a page with an embedded Apple Podcasts web player, Apple collects information about where the web player is embedded and how you interact with it to understand how the web player is used and to improve the web player experience.

13.2. Even though the player is embedded in our website, the web player is served by Apple, and therefore Apple is able to collect information about where and how the web player is used. This section applies only to Apple’s collection, use, and disclosure of information related to web player.

13.3. Apple collects information about the web player and activity within the web player. This includes the domain of the embedding page, information about your browser or device, general geographic information based on your connecting IP address (we only store a truncated IP address), and what podcast you play. If you have an Apple ID and are or were signed in to an Apple media service on your browser (for example, Apple Music or Apple TV+), information we collect from the web player on the browser may be associated with your Apple ID. If you do not have an Apple ID or are not signed in to an Apple media service on your web browser, this information is associated with a random unique identifier specific to the web player in your browser and the domain of the embedding page. The identifier resets after one day.

13.4. When collecting data, cookies or similar local storage technologies may be used to save website data on your device in your web browser profile. Disabling cookies or local storage may affect how the player works.

13.5 The podcast player is used in the interest of an appealing and user-friendly presentation of our online content. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Information collected about the Apple Podcasts web player and your activity within the web player is stored for up to two years to allow for analysis of trends. For more information about how your data is used, please see Apple’s privacy policy: www.apple.com/legal/privacy/de-ww/

 

14. Matterport

14.1 Our website contains virtual tours of properties that are integrated via the portal my.matterport.com. The operator of this portal is Matterport, Inc, 352 E. Java Dr. Sunnyvale, CA 94089, USA.

14.2 When you visit one of our pages that contains such a virtual tour, a connection is established to the servers of Matterport. In doing so, the Matterport server is informed which of our pages you have visited. In addition, Matterport obtains your IP address. This also applies if you are not logged in to Matterport or do not have an account with Matterport. The information collected by Matterport is transmitted to the Matterport server in the USA.

14.3 If you have a Matterport account and are logged in, you enable Matterport to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Matterport account.

14.4 The use of Matterport is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. For more information on how Matterport implements the GDPR and handles user data, please visit https://support.matterport.com/hc/en-us/articles/360000904267-Matterport-s-Plan-for-GDPR and see Matterport’s privacy policy at https://matterport.com/legal/privacy-policy/.