Data protection

With this privacy policy, we would like to inform you about how we process personal data and inform you about your rights. We are aware of the importance of processing personal data for you as the affected user and therefore comply with all relevant legal requirements. The protection of your privacy is of the utmost importance to us. We process your personal data in compliance with the General Data Protection Regulation and the national data protection regulations.

Names and contact details of the controller and its representative
Boros Foundation
non-profit limited liability company
Reinhardtstrasse 20
10117 Berlin

+49 30 27594065
info@boros-collection.com

Authorised managing directors
Karen and Christian Boros

Definitions of terms
This privacy policy uses the terminology of the General Data Protection Regulation (GDPR). "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Restriction of processing" is the marking of stored personal data with the aim of restricting its future processing.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"filing system" means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

"Consent" means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Processing operations
We collect and process the following personal data about you

Purposes of processing
We process your data for the following purposes:

Legal basis for data processing
Your data is processed on the following legal bases:

Legitimate interests
If we base the processing of your personal data on legitimate interests within the meaning of Art. Art. 6 para. 1 lit. f) GDPR, these are

Data sources
We receive the data from you (including via the devices you use). If we do not collect the personal data directly from you, we will also inform you of the source from which the personal data originates and, if applicable, whether it originates from publicly accessible sources.

Recipients or categories of recipients of the personal data
When processing your data, we work together with the following service providers who have access to your data:

Data is transferred to third countries outside the European Union. This takes place on the basis of contractual regulations provided for by law, which are intended to ensure adequate protection of your data and which you can view on request.

Storage period
We only store your personal data for as long as is necessary to fulfil the purpose of processing or for as long as the storage is subject to a statutory retention period. We store your data

Your rights
You have - in some cases under certain conditions - the right to

Requirement or obligation to provide data
Unless expressly stated at the time of collection, the provision of data is not required or obligatory. Such an obligation may arise from legal requirements or contractual regulations.

Further information on data protection

Appointment reminder
If you register for a guided tour, we will send you a reminder email one week before the tour takes place. We will use the data required or separately provided by you for this purpose. Once the guided tour has taken place, you will not receive any further e-mail notifications from us.

Data backup
We have taken extensive technical and organisational measures to protect your data against possible risks, such as unauthorised access, unauthorised disclosure, modification or dissemination, as well as against loss, destruction or misuse. In order to protect your personal data from unauthorised access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardised encryption method for online services, especially for the web.

Log files
Every time our website is accessed, usage data is transmitted by the respective internet browser and stored in log files, the so-called server log files. The stored data records contain the following data Domain from which the user accesses the website, date and time of access IP address of the accessing computer Website(s) visited by the user within the scope of the offer, amount of data transferred, browser type and version, operating system used, name of the Internet service provider, message as to whether the access was successful. These log file data records are analysed in anonymised form in order to improve the offer and make it more user-friendly, to find and rectify errors and to control the utilisation of servers.

cookies
This website uses so-called cookies. A cookie is a text file with an identification number that is transmitted to the user's computer together with the other data actually requested when the website is used and stored there. The file is stored there for later access and serves to authenticate the user. As cookies are only simple files and not executable programmes, they pose no danger to the computer. Depending on the settings selected by the user, the Internet browser automatically accepts cookies. However, this setting can be changed and the storage of cookies deactivated or set in such a way that the user is notified as soon as a cookie is set. However, if the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Cookies that are already active can be deleted at any time via an internet browser or other software programmes. We may work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs. We use the following types of cookies: First-party cookies: First-party cookies are transmitted by the platform you have just visited. Third-party cookies (so-called third-party cookies): Third-party cookies are cookies that are transmitted by a provider other than the platform visited by the user. If a user accesses a platform and another entity transmits a cookie through this platform, this is a third-party cookie. Strictly necessary cookies: These cookies are necessary for you to navigate through the platform and use its features, such as accessing secure areas of the platform. Without them, certain services cannot be provided, such as displaying content customised for your computer or device. Performance cookies: These cookies collect information about how visitors use the platform, e.g. which pages are accessed most frequently and whether they receive error messages from websites. However, these cookies do not collect any information about the visitor's identity. All information these cookies collect is aggregated and therefore anonymous. They are only used to optimise the platform. Functionality cookies: These cookies allow the platform to remember choices you make (such as language preferences and your region) and provide you with enhanced, more personalised features. They can also be used to remember your preferences for text size, font and other customisable parts of the website. They can also be used to provide services you have requested, such as displaying a video or the comment function within a blog. The information that these cookies collect can be anonymised. Your browsing activity cannot be tracked on other platforms. Social media cookies: These cookies are used when you click a button on the platform to share information on social media. The social network records this action and may use it for marketing or advertising purposes. Marketing/advertising cookies: These cookies are used to show you adverts that may be relevant to you based on your interests. They are also used to limit the number of times you are shown a particular advert. We also use cookies to measure how effective an advertising campaign is. They are usually placed by advertising networks with our permission and record your visit to a platform. This information is shared with other organisations such as advertising providers. Marketing and advertising cookies are often linked to platform functions. Our advertising cookies also allow you to participate in customer surveys and provide us with your feedback so that we can improve your user experience with us. This website uses cookies and similar functions to process end device information and personal data. The processing serves the integration of content, external services and elements of third parties, statistical analysis/measurement, personalised advertising and the integration of social media. Depending on the function, data is passed on to third parties and to third parties in countries that do not have an adequate level of data protection and is processed by them, e.g. the USA. Your consent is always voluntary, is not required for the use of our website and can be refused or revoked at any time on our website.