1. Privacy at a Glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Who is responsible?
Data processing on this website is carried out by the website operator. You will find the contact details in the legal notice of this website and directly in Section 2 below.
How do we collect data?
Some data is collected because you provide it to us (e.g. via email). Other data is collected automatically by our IT systems when you visit the website (e.g. internet browser, operating system, time of page access).
What do we use your data for?
Some data is collected to ensure the error-free provision of the website. Other data may be used to analyse user behaviour (anonymised statistics).
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data, as well as the right to correction or deletion of this data.
2. Controller & Mandatory Information
Controller
The controller responsible for data processing on this website is:
Heimat- und Kulturverein Ovelgönne e.V.
Breite Straße 27
26939 Ovelgönne
Represented by the board:
Janina Carstens, Uwe Lehmann, Uwe Karger
Phone: +49 (0)4401 81955
E-mail: office@handwerksmuseum-ovelgoenne.de
Withdrawal of consent to data processing
Many data processing operations are only possible with your express consent (e.g. loading of Google Maps). You can revoke consent already given at any time. The lawfulness of data processing carried out before the revocation remains unaffected.
Right to complain to the supervisory authority
In the event of GDPR violations, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
3. Data Collection on this Website
Hosting by SYNECTIVE Systemhaus
We operate our website on our own web server provided and managed by SYNECTIVE Systemhaus GmbH & Co. KG (Bahnhofsplatz 1, 26931 Elsfleth, Germany). When you visit this website, various log files including IP addresses are automatically collected. This data is technically necessary to display the website and to ensure its stability and security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and fast provision of the online offer).
Data processing agreement
We have concluded a data processing agreement (DPA) with SYNECTIVE Systemhaus GmbH & Co. KG. This ensures that personal data of website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
Server log files
The provider automatically collects and stores information in server log files, which are automatically transmitted by your browser:
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
Enquiries by email or telephone
If you contact us by email or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed for the purpose of handling your request. We will not pass on this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in effectively handling enquiries).
Fonts and icons
All fonts and icons on this website are loaded from our own server. No connection to Google Fonts or similar services is made for this purpose.
3D models
Interactive 3D models (“Digital” page) are displayed with the free software “model-viewer”. The program is delivered from our own server, as is the 3D model itself. No connection to Google or any other third party is made while you view it.
Contact form and “Get involved” form
If you write to us using the contact form or the “Get involved” form (submit a memory), we process the data you enter: name, email address, chosen topic, your message and, if you upload one, your photo (JPG or PNG, up to 10 MB). The information is delivered to the museum through the mail server of our hosting; no external services are used for this. Uploaded photos are first stored in a non-public folder on our server and are only published after review and, as stated in the form, with your consent. The form is protected against automated submissions by an invisible field that does not collect any personal data.
We use your details only to process your enquiry or submission and delete them as soon as the purpose ceases to apply, unless statutory retention obligations exist.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR (handling enquiries); for the publication of memories and photos Art. 6(1)(a) GDPR (consent, which you can withdraw at any time with effect for the future).
Votes
For votes on this website (e.g. on the “Get involved” page) we store your choice only as an anonymous total. To limit multiple votes, a check value (hash) is stored for no more than 48 hours; it is generated from your IP address and the date with a secret key. Your IP address itself is not stored for this purpose and cannot be calculated back from the check value. In addition, your browser remembers locally that you have voted.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable voting results).
Cookies and local storage in your browser
We do not set any cookies for analytics or advertising purposes. In your browser we only store, in so-called local storage (localStorage): your decision on the notice banner (so that the question does not appear again on every page view), a note that you have taken part in a vote, and results of quiz games on your device. This information does not leave your device and serves solely the functioning of the website. You can delete it at any time in your browser settings.
Legal basis: Section 25(2) no. 2 TDDDG (technically necessary or a function expressly requested by you) in conjunction with Art. 6(1)(f) GDPR.
4. Analytics Tools
SYNECTIVE server analytics
Our web host SYNECTIVE Systemhaus GmbH & Co. KG (Bahnhofsplatz 1, 26931 Elsfleth, Germany) statistically evaluates the server log files generated during hosting. Only server-side data is analysed (anonymised IP address, browser type, page accessed, access time, HTTP status code). No cookies are set, no cross-device tracking is carried out, and no data is passed on to third parties. The analysis is used solely for the technical operation and optimisation of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically sound and optimised provision of the online offer).
Google Search Console
We use Google Search Console, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Search Console is not a tracking tool embedded on our website: it provides us with data that Google collects as part of its search crawling (e.g. search queries, click-through rates, indexing status). No code is embedded on our website that directly collects data from visitors. All information relates to the behaviour of Google Search, not to individual users of our website.
Google privacy information: policies.google.com/privacy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the findability and visibility of the website in search engines).
No other analytics or tracking services
We do not use any other analytics, tracking or advertising services (for example no Google Analytics, no advertising pixels and no services that follow your behaviour across several websites).
5. Plugins and External Media
Map material from Google Maps is only loaded after your active consent. We show the content of our Instagram account through our own integration, which does not create a connection to Instagram or Meta when our pages are opened.
Google Maps
On our “Visit” and “Contact” pages we embed map material from Google Maps. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after you have clicked the “Load map” button and thereby given your consent. Only then is a connection to Google’s servers established; among other things, your IP address and browser information are transmitted. Google may thereby track your browsing behaviour. Without your consent the map stays hidden and nothing is transmitted.
Legal basis: Art. 6(1)(a) GDPR (consent, which you can withdraw at any time with effect for the future) and Section 25(1) TDDDG.
Google privacy policy: policies.google.com/privacy
Instagram feed (own integration)
On our home page we show recent posts from our Instagram account. For this purpose our server regularly (at most once an hour) retrieves the public posts and some profile details of our account (profile name, profile picture, number of posts and followers) through the official interface (Instagram Graph API) of Meta Platforms Ireland Ltd. and caches images and texts. The access key of our account that is required for this is stored securely on the server.
Visitors load the posts exclusively from our own server. When the home page is opened, no connection to Instagram or Meta is made and no data about your visit is transmitted to Meta. Only when you click on a post or on “Follow” do you leave our website; from then on the privacy policies of Instagram and Meta apply (see section 6). We only publish content for which we hold the necessary rights and consents.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our public relations work).
6. Social Media
We maintain publicly accessible profiles on the following platforms. Use of these platforms and interaction with our profiles is subject to the respective terms of use and privacy policies of the operators. We have no influence over data processing by the platform operators.
The provider is Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). When you visit our Facebook page, Meta processes personal data also as a joint controller with us (Art. 26 GDPR). Details are governed by Meta's joint processing agreement. Meta may also use this data for its own purposes (including profiling and advertising) and transfer it to third countries.
Facebook privacy policy: facebook.com/privacy/policy
The provider is also Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). When you visit our Instagram profile, the same principles apply as for Facebook (joint controllership, possible profiling by Meta).
Instagram/Meta privacy policy: privacycenter.instagram.com/policy
YouTube (channel)
We operate a channel on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit our channel, Google/YouTube processes personal data in accordance with its own privacy policy.
YouTube privacy policy: policies.google.com/privacy
TikTok
We operate a profile on TikTok. The provider is TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland); for users outside the EEA, TikTok Inc. (USA) is responsible. When you visit our profile, TikTok may collect personal data (including IP address, device information and usage behaviour) and process it for its own purposes, including profiling and targeted advertising. Transfer to third countries (including the USA and Singapore) is possible.
TikTok privacy policy: tiktok.com/legal/privacy-policy
Where we are contacted via social networks, we process the transmitted data (messages, comments) solely to handle the respective enquiry. Legal basis: Art. 6(1)(f) GDPR.