1. Privacy at a Glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Who is responsible?
Data processing on this website is carried out by the website operator. You will find the contact details in the legal notice of this website and directly in Section 2 below.
How do we collect data?
Some data is collected because you provide it to us (e.g. via email). Other data is collected automatically by our IT systems when you visit the website (e.g. internet browser, operating system, time of page access).
What do we use your data for?
Some data is collected to ensure the error-free provision of the website. Other data may be used to analyse user behaviour (anonymised statistics).
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data, as well as the right to correction or deletion of this data.
2. Controller & Mandatory Information
Controller
The controller responsible for data processing on this website is:
Heimat- und Kulturverein Ovelgönne e.V.
Breite Straße 27
26939 Ovelgönne
Represented by the board:
Janina Carstens, Uwe Lehmann, Uwe Karger
Phone: +49 (0)4401 81955
E-mail: office@handwerksmuseum-ovelgoenne.de
Withdrawal of consent to data processing
Many data processing operations are only possible with your express consent (e.g. loading of 3D models). You can revoke consent already given at any time. The lawfulness of data processing carried out before the revocation remains unaffected.
Right to complain to the supervisory authority
In the event of GDPR violations, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
3. Data Collection on this Website
Hosting by SYNECTIVE Systemhaus
We operate our website on our own web server provided and managed by SYNECTIVE Systemhaus GmbH & Co. KG (Bahnhofsplatz 1, 26931 Elsfleth, Germany). When you visit this website, various log files including IP addresses are automatically collected. This data is technically necessary to display the website and to ensure its stability and security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and fast provision of the online offer).
Data processing agreement
We have concluded a data processing agreement (DPA) with SYNECTIVE Systemhaus GmbH & Co. KG. This ensures that personal data of website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
Server log files
The provider automatically collects and stores information in server log files, which are automatically transmitted by your browser:
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
Enquiries by email or telephone
If you contact us by email or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed for the purpose of handling your request. We will not pass on this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in effectively handling enquiries).
4. Analytics Tools
SYNECTIVE server analytics
Our web host SYNECTIVE Systemhaus GmbH & Co. KG (Bahnhofsplatz 1, 26931 Elsfleth, Germany) statistically evaluates the server log files generated during hosting. Only server-side data is analysed (anonymised IP address, browser type, page accessed, access time, HTTP status code). No cookies are set, no cross-device tracking is carried out, and no data is passed on to third parties. The analysis is used solely for the technical operation and optimisation of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically sound and optimised provision of the online offer).
Google Search Console
We use Google Search Console, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Search Console is not a tracking tool embedded on our website: it provides us with data that Google collects as part of its search crawling (e.g. search queries, click-through rates, indexing status). No code is embedded on our website that directly collects data from visitors. All information relates to the behaviour of Google Search, not to individual users of our website.
Google privacy information: policies.google.com/privacy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the findability and visibility of the website in search engines).
5. Plugins and External Media
This website embeds content from third-party providers (maps, videos, 3D models, social media feed). Where possible, this content is only loaded after active consent.
Google Maps
We embed map content from Google Maps on our "Visit" and "Contact" pages. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When the map loads, a connection is established to Google's servers, transmitting data including your IP address and location. Google may use this to record your browsing behaviour.
On the "Visit" page, the map is only activated after clicking "Load map". On the "Contact" page, an embedded map is displayed directly; by continuing to use this page you consent to the transmission of data.
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest in displaying our location).
Google privacy policy: policies.google.com/privacy
YouTube (videos)
We embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced privacy mode: according to YouTube, this means YouTube does not store information about website visitors before they play the video. Once a video is started, a connection to YouTube's servers is established and data (including IP address and device information) may be transmitted.
Legal basis: Art. 6(1)(a) GDPR (consent).
Google/YouTube privacy policy: policies.google.com/privacy
Sketchfab (3D models)
We use Sketchfab to display 3D models of our exhibits ("Time Wheel" project). The provider is Sketchfab, Inc., 440 9th Ave, Suite 1700, New York, NY 10001, USA. Sketchfab is a US-based provider; when the 3D models are loaded, personal data (e.g. IP address) is transferred to the USA.
Consent: The 3D models are only loaded after clicking "Load content" or accepting in the cookie banner. This click constitutes consent pursuant to Art. 6(1)(a) GDPR and Art. 49(1)(a) GDPR.
Sketchfab privacy policy: sketchfab.com/privacy
Elfsight (Instagram feed)
On our homepage we embed an Instagram feed via the Elfsight service. The provider is Elfsight Apps, s.r.o. (Slovakia / EU). Elfsight loads a script from elfsightcdn.com that establishes a connection to Elfsight's servers and, indirectly, to Instagram/Meta servers. Data including IP address and browser information may be transmitted. The feed is only loaded after you have accepted the cookie banner.
Legal basis: Art. 6(1)(a) GDPR (consent).
Elfsight privacy policy: elfsight.com/privacy-policy
6. Social Media
We maintain publicly accessible profiles on the following platforms. Use of these platforms and interaction with our profiles is subject to the respective terms of use and privacy policies of the operators. We have no influence over data processing by the platform operators.
The provider is Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). When you visit our Facebook page, Meta processes personal data also as a joint controller with us (Art. 26 GDPR). Details are governed by Meta's joint processing agreement. Meta may also use this data for its own purposes (including profiling and advertising) and transfer it to third countries.
Facebook privacy policy: facebook.com/privacy/policy
The provider is also Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). When you visit our Instagram profile, the same principles apply as for Facebook (joint controllership, possible profiling by Meta).
Instagram/Meta privacy policy: privacycenter.instagram.com/policy
YouTube (channel)
We operate a channel on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit our channel, Google/YouTube processes personal data in accordance with its own privacy policy.
YouTube privacy policy: policies.google.com/privacy
TikTok
We operate a profile on TikTok. The provider is TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland); for users outside the EEA, TikTok Inc. (USA) is responsible. When you visit our profile, TikTok may collect personal data (including IP address, device information and usage behaviour) and process it for its own purposes, including profiling and targeted advertising. Transfer to third countries (including the USA and Singapore) is possible.
TikTok privacy policy: tiktok.com/legal/privacy-policy
Where we are contacted via social networks, we process the transmitted data (messages, comments) solely to handle the respective enquiry. Legal basis: Art. 6(1)(f) GDPR.