Privacy Policy

Images

We have endeavoured to obtain permission from the relevant authors or rights holders to present the images on this website. Where permission has not been obtained, or where images are not already covered by a CC0 licence, we use them for scholarly purposes in accordance with Section 51 of the German Copyright Act (UrhG).

If you notice that an image on this website infringes the rights of third parties, please contact us.

Data protection

Privacy policy

I) Controller and contact details

    Brandenburg Main State Archive
    Represented by Prof. Dr Mario Glauert
    Am Mühlenberg 3
    14476 Potsdam

    E-Mail: poststelle@blha.brandenburg.de
    Telefon: 0331 5674 – 0
    Telefax: 0331 5674 – 212

    II) Contact details of the data protection officer

      You can contact our data protection officer by post at our address, writing “Data Protection Officer” in the subject line, or by email at dsb@blha.brandenburg.de.

      III) Information about processing on and in connection with our website


        Your personal data is handled in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Brandenburg Data Protection Act. We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by our data processor.

        a. Visiting our website

          When you visit our website for purely informational purposes, i.e. if you do not otherwise provide us with information, we only process the technically necessary personal data via server log files, which your browser automatically transmits to our server. These are

          • IP adress (anonymised)
          • Date and time of access
          • Page/file accessed
          • Browser type and operating system
          • Referrer URL

          When using this general data and information, we do not draw any conclusions about the person who owns the device with the corresponding IP address or who used it to visit our website (hereinafter: data subject). There is no personal evaluation or evaluation of the data for marketing purposes or profiling.

          The above data is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6(1)(f) GDPR). The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the secure operation of our website. Consequently, there is no possibility for the data subject to object.

          As soon as the aforementioned personal data is no longer required to display the website, it will be deleted.

          We use the “WordPress Multilingual Plugin (WPML)” to provide multilingual support. No personal data relating to website visitors is processed; only information that is technically necessary for the plugin to function is used.

          b. Malware detection and log data analysis

            We collect log data generated during the operation of communication technology and evaluate it automatically to the extent necessary to detect, limit, or eliminate malfunctions or errors in communication technology, to defend against attacks on our information technology, or to detect and defend against malware.

            The legal basis for the temporary storage and evaluation of the data is Art. 6(1)(f) GDPR. The storage and evaluation of the data is absolutely necessary for the provision of the website and for its secure operation. Consequently, the data subject has no right to object.

            c. Hosting

            Our website is hosted by Hetzner Online GmbH. Personal data collected during the use of our website is processed by the hosting provider on our behalf.

            The hosting service we use provides storage space, technical support, and security for the website and protects against attacks and misuse.

            The provider’s servers are located in Germany.

            In this context, we or our processor process inventory data, contact data, content data, usage data, and meta and communication data of users of our website on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a contract for processing).

            d. Collection of personal data when contacting us by email

            You can contact us by email using the email addresses published on our website.

            If you use this method of contact, the data you transmit, including at least your email address and the information contained in the email, together with the personal data you transmit, will be stored for the purpose of contacting you and processing your enquiry.
            In addition, the following data will be collected by our system:

            • IP address of the requesting device
            • date and time of the email

            The legal basis for the processing of personal data in the context of emails sent to us is Art. 6(1)(b) or (f) GDPR.

            e. Collection of personal data when contacting us by letter

            If you send us a letter or fax, the data you provide, including the information contained in the letter, will be stored for the purpose of contacting you and processing your enquiry.

            The legal basis for the processing of personal data in the context of letters sent to us is Art. 6(1)(b) or (f) GDPR.

            IV) Retention period and deletion of your data
            In accordance with Art. 17 GDPR, we only store your personal data for as long as is necessary for the respective purposes for which we process your personal data. Under certain circumstances, there may be statutory retention periods applicable for the duration of the storage of personal data. After expiry of the period, the corresponding data will be deleted unless it is no longer required for the respective purposes, the performance of the contract, or the initiation of the contract.

              V) What rights do you have?

              As the data subject, you have the following rights in relation to the processing of your personal data:

              a. Right of access pursuant to Art. 15 GDPR

                You have the right to request information about the personal data stored about you, in particular about

                • the purposes of processing
                • the categories of personal data being processed
                • the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
                • where possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
                • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or the existence of a right to object to such processing
                • the existence of a right to lodge a complaint with a supervisory authority
                • all available information about the origin of the data where the personal data is not collected from you
                • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you
                • the existence of appropriate safeguards pursuant to Article 46 GDPR where personal data is transferred to a third country or to an international organisation

                b. Right to rectification pursuant to Art. 16 GDPR

                You may request that we without undue delay rectify any inaccurate personal data concerning you and, where applicable, complete any incomplete personal data.

                c. Right to erasure pursuant to Art. 17 GDPR

                You have the right to request that we erase personal data concerning you without undue delay if one of the following reasons applies:

                • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
                • You withdraw your consent on which the processing is based in accordance with Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
                • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing.
                • The personal data has been unlawfully processed.
                • The erasure of the personal data is necessary to comply with a legal obligation under European Union law or the law of the Member States to which the controller is subject.
                • The personal data has been collected in relation to information society services offered in accordance with Art. 8(1) GDPR.

                The exceptions of Art. 17(3) GDPR and, if applicable, the additions pursuant to Sec. 35 BDSG (Federal Data Protection Act) apply here.

                d. Right to restriction of processing pursuant to Art. 18 GDPR

                You may request that we restrict the processing of your personal data if

                • you contest the accuracy of the personal data, for the period required for us to verify the accuracy of the data;
                • the processing is unlawful and you refuse to have your personal data deleted and instead request the restriction of its use;
                • we no longer need your personal data, but you need it to assert, exercise, or defend legal claims; or
                • you have objected to the processing, pending the verification of whether our legitimate grounds override yours.

                e. Right to data portability pursuant to Art. 20 GDPR

                Upon your request, we will provide you with personal data that you have provided to us in a structured, commonly used, and machine-readable format so that you can transfer it to another controller. However, you are only entitled to this right if the data processing is based on your consent or is necessary for the performance of a contract and the processing is carried out by automated means.

                f. Right to object pursuant to Art. 21 GDPR

                You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims.

                In connection with the use of information society services, you may, notwithstanding Directive 2002/58/EC, exercise your right to object by means of automated procedures using technical specifications.

                g. Right to withdraw consent pursuant to Art. 7(3) GDPR

                You have the right to revoke your consent at any time. As a result, we will no longer process your personal data on the basis of that consent.

                h. Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

                Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes this Regulation.

                VI) Amendment of our privacy policy

                We reserve the right to occasionally amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in this privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.