Data protection declaration
1. Data protection at a glance
General information
The following gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy below.
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website is processed by the website operator. The operator's contact details can be found in the website’s imprint.
How do we collect your data?
Some data is collected when you provide it to us. This could include, for example, the data you enter on a contact form.
Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data (such as the Internet browser and operating system you are using or when you accessed the page). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the imprint if you have any further queries about this or any other issues of data protection. You may also, of course, file a complaint with the relevant regulatory authorities.
Moreover, under certain circumstances, you have the right to demand that the processing of your personal data be restricted. For details, please refer to the “Right to Restriction of Processing” section in the privacy policy.
Analysis tools and third-party tools
It is possible that your surfing behaviour will be statistically analysed when you visit our website. Such analyses are performed primarily using cookies and so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous, i.e., the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and about your options to object can be found in the privacy policy below.
2. General information and mandatory information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and with this privacy policy.
Some personal data will be collected when you use this website. Personal data is data with which you could be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmitted via the Internet (e.g., via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Hochschule für Bildende Künste Dresden
Güntzstraße 34
01307 Dresden
Phone: +49 351 4402260
Email: info©hfbk-dresden.de
The party responsible is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Statutory data protection commissioner
We have appointed a data protection commissioner for our academy.
DID Dresdner Institut für Datenschutz
Stiftung bürgerlichen Rechts | Stiftungsregister LD Dresden
Prof. Dr. Ralph Wagner
Hospitalstraße 4 | 01097 Dresden | Germany
Telefon: +49 (0)351 / 655 772 – 0
Telefax: +49 (0)351 / 655 772 – 22
E-Mail: r.wagner@dids.de | Internet: www.dids.de
Revocation of your consent to the processing of your data
Many data processing operations are possible only with your express consent. You may revoke your consent at any time. You can simply send us an informal email making this request. The data processed before we receive your request may still be legally processed.
Right to object to data collection in special cases and direct mail (Article 21 of the GDPR)
In the event that data is processed on the basis of Art. 6 Para. 1 Letter e or f of the GDPR, you have the right to object, at any time, to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. Please refer to this privacy policy to determine the legal basis on which any processing of data is based. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling legitimate grounds for the processing of your data, that outweigh your interests, rights and freedoms, or if the purpose of the processing is to establish, exercise or defend legal claims (objection pursuant to Art. 21 Para. 1 of the GDPR).
If your personal data is being processed for direct advertising purposes, you have the right to object, at any time, to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Para. 2 of the GDPR).
Right to file complaints with regulatory authorities
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a regulatory authority, in particular, in the member state of their habitual domicile, at their place of work, or of the place where the alleged violation occurred. The right to complain is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to demand that data which we process based on your consent or in fulfilment of a contract be automatically delivered to you or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will be performed only to the extent that is technically feasible.
SSL and/or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content such as the orders or enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion and correction
Within the scope of the applicable statutory provisions, you always have the right to request information about your stored personal data, its origin, its recipients, and the purpose of its processing at no charge, and also the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the imprint if you have any further queries about this or any other issues of personal data.
Right to restriction of processing
You have the right to demand the restriction of processing of your personal data. You can contact us in this regard at any time using the address given in the imprint. The right to restriction of processing applies in the following cases:
- If you dispute the correctness of your personal data stored by us, we will usually need some time to verify this claim. During the time that this verification is ongoing, you have the right to demand the restriction of processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of processing of your data instead of demanding its deletion.
- If we do not need your personal data any longer and you need it to exercise, defend or establish legal claims, you have the right to demand the restriction of processing of your personal data instead of its deletion.
- If you have raised an objection pursuant to Art. 21 Para. 1 of the GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand the restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data – with the exception of its archiving – may be processed only subject to your consent, or to establish, exercise or defend legal claims, or to protect the rights of other natural or legal persons, or for important public interest reasons cited by the European Union or a member state of the European Union.
3. Data collection on our website
Cookies
Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. They help make our website more user-friendly, efficient and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain archived on your device until you delete them. These cookies make it possible for us to recognise your browser the next time you visit our website.
You can configure your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general, and to activate the automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to facilitate electronic communication or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 Para. 1 Letter f of the GDPR. The website operator has a legitimate interest in the storage of cookies to ensure optimised service provision that is free of technical errors. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be addressed separately in this privacy policy.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in the what are called “server log files”. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data will not be combined with data from other sources.
The data is collected pursuant to Art. 6 Para. 1 Letter f of the GDPR. The website operator has a legitimate interest in the technically error-free depiction and the optimisation of the operator’s website. Server log files must be recorded in order to achieve this.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored in order to process the enquiry and in the case of follow-up questions. We will not share this information without your consent.
The processing of the data provided in the contact form is therefore exclusively based on your consent (Art. 6 Para. 1 Letter a of the GDPR). You may revoke your consent at any time. You can simply send us an informal email making this request. The data processing operations carried out before we receive your request remain unaffected by such revocation.
The information you have provided in the contact form shall remain with us until you ask us to delete it, revoke your consent for its storage, or if the purpose for which it was being stored no longer exists (e.g., after fulfilling your enquiry). Any mandatory statutory provisions, especially those regarding data retention periods, remain unaffected by this provision.
Event registration Career Service
For the purpose of organising the Career Service events, a registration form is provided on this website. The form requires the surname, first name, subject of the course and the institution to which the participants belong. Processing is carried out regularly on the basis of Art. 6 Para. 1 letter e DS-GVO in conjunction with § Section 14 para. 1 no. 1 SächsHSFG. Personal data which is processed in connection with participation in the Career Service events is not passed on to third parties unless it is intended to be passed on. This is the case if events are carried out within the framework of cooperation and personal data is transferred to the cooperation institutions for the purpose of confirming participation. In this case, the data is transferred on the basis of contractual measures in accordance with Art. 6 Para. 1 letter b DS-GVO. The data is regularly deleted as soon as it is no longer required for the fulfilment of the above-mentioned purpose, unless further processing is necessary for a limited period (intervention of statutory retention periods).
Data protection information on the online services used within the framework of digital teaching is provided in one of the reminder e-mails for each online event.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your enquiry. We will not share this information without your consent.
This data is processed pursuant to Art. 6 Para. 1 Letter b of the GDPR if your enquiry is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 Letter a of the GDPR) and/or on our legitimate interests (Art. 6 Para. 1 Letter f of the GDPR), since we have a legitimate interest in the effective processing of enquiries addressed to us.
The information you have sent us via contact requests shall remain with us until you ask us to delete it, revoke your consent for its storage or if the purpose for which it was being stored no longer exists (e.g., fulfilling your request). Any mandatory statutory provisions, especially those regarding legal data retention periods, remain unaffected by this provision.
4. Analysis tools and advertising
Matomo (formerly Piwik)
This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and that allow us to analyse how you use our website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before it is stored.
Matomo cookies remain on your device until you delete them.
The storage of Matomo cookies and the use of this analysis tool is based on Art. 6 Para. 1 Letter f of the GDPR. The website operator has a legitimate interest in the anonymous analysis of user behaviour in order to optimise both its website and its advertising.
The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean that you will not be able to enjoy the full functionality of this website.
If you do not agree with the storage and use of your data, you can deactivate this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing your usage data. If you delete your cookies, this will mean that the Matomo opt-out cookie will also be deleted. You will then need to reactivate it when you visit our site again.
5. Plugins and tools
YouTube with extended data protection
Our website uses plugins of the YouTube platform. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. Nevertheless, the extended data protection mode does not necessarily rule out the sharing of data with YouTube partners. For instance, regardless of whether you watch a video, YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube video on our website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified about which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your surfing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after you have started to play a video, YouTube can place various cookies on your device. With the help of these cookies, YouTube can obtain information about the visitors of our website. This information is used, among other things, to generate video statistics with the aim of improving the user-friendliness of the site and to prevent attempts to commit fraud. These cookies remain on your device until you delete them.
Under certain circumstances, additional data processing operations, which are beyond our control, may be triggered after you have started to play a YouTube video.
The use of YouTube is in our interest of presenting our online content in an appealing manner. Pursuant to Art. 6 Para. 1 Letter f of the GDPR, this is a legitimate interest.
For more information about data protection on YouTube, please refer to the YouTube Privacy Policy under: https://policies.google.com/privacy?hl=de.
Vimeo
Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of the pages on our website into which a Vimeo plug-in has been integrated, a connection to Vimeo’s servers will be established. As a result, the Vimeo server will be notified about which of our pages you have visited. Vimeo will also receive your IP address. This will happen even if you are not logged into Vimeo or do not have a Vimeo account. The information recorded by Vimeo will be transmitted to Vimeo’s server in the United States.
If you are logged into your Vimeo account while you visit our site, you enable Vimeo to directly allocate your surfing behaviour to your personal profile. You can prevent this by logging out of your Vimeo account.
The use of Vimeo is in our interest of presenting our online content in an appealing manner. Pursuant to Art. 6 Para. 1 Letter f of the GDPR, this is a legitimate interest.
For more information on how Vimeo handles user data, please refer to the Vimeo Privacy Policy under: https://vimeo.com/privacy.
