Data Privacy

Information Regarding the Collection of Personal Data

(1) In the following, we are informing you about the collection of personal data when
using our platform. Personal data is any data that is related to you personally, e.g.
your name, address, e-mail addresses, and (if applicable) user behavior.

(2) The responsible party pursuant to Art. 4 No. 7 of the EU General Data Protection
Regulation (hereinafter “GDPR”) is:


Ariane von Bethusy-Huc
Wolfshagen 8
20535 Hamburg

Our data protection officer is Ariane von Bethusy-Huc. The postal address is as seen above,
and the email address is arianebethusy@posteo.de

For questions relating to the processing of your personal data as well as to your rights
regarding data privacy, please contact arianebethusy@posteo.de

(3) The data provided when you contact us by email will be processed and stored by us
in order to answer your questions and to send you our newsletter. The legal basis for
the initial data collection is therefore Article 6 para. 1 p. 1 (a) of the GDPR, and for
further processing in the context of fulfilling a contractual agreement is Article 6
para. 1 p. 1(b) of the GDPR, and (if applicable) further storage for other legal reasons
is Article 6 para. 1 p. 1(c) of the GDPR.

Your Rights

(1) You have the following rights regarding the personal data that we collect from you:

The rights to access and data portability can be accessed through the contact details
provided in §1 para. 2.

(2) Furthermore, you have the right to complain to a data protection authority about
any data processing by us that you may consider to be unlawful.

(3) We would like to clarify that pursuant to GDPR Article 22 (1) and (4) we do not use
any automated decision-making.

Collection of Personal Data When Visiting (Accessing) Our Platform

(1) We, the operators of this website, collect data on the accessing of this website based on
our legitimate interest (see Article 6 para. 1 (f) of the GDPR) and we save these data as
“server logfiles” on the website’s server. The following data is logged:

The server log files are stored for a maximum of 7 days and then deleted. The data is stored
for security reasons, e.g., to enable the clarification of cases of misuse. If data must be
retained in order to serve as evidence, it is exempt from deletion until the incident has been
completely clarified.

(2) In addition to the aforementioned data, when using our platform, cookies are saved on
your computer. Cookies are small text files that are stored on your hard drive and are
associated with the browser that you are using, and which are used to transmit certain
information to the entity that sets the cookie (in this cause us). Cookies cannot execute
programs or transfer viruses to your computer. They serve the purpose of making the
internet platform more user-friendly and more effective. Insofar as the use of cookies is
necessary to make our service possible or to further develop it technically, the legal basis for
the storage is Article 6 (1) sentence 1 (f) of the GDPR. In all other cases the basis is Article 6
(1) sentence 1 (a) of the GDPR.

(3) The Use of Cookies:
a) This platform uses the following types of cookies. The scope of their usage and how
they function will be explained in the following:

Transient cookies (see letter b)
Persistent cookies (see letter c)

b) Transient cookies are deleted automatically when you close your browser. In
particular, these include session cookies, which save your session ID which enables
various inquiries from your browser to be assigned to the same session. This way,
your computer can be recognized when you return to our website.

c) Persistent cookies are automatically deleted after a predefined period of time, which
can vary depending on the cookie. You can delete these cookies at any time from the
security setting in your browser.

d) You can configure your browser settings according to your wishes and reject thirdparty
cookies or all cookies, for example. We would like to point out that in this case,
you may not be able to use all the functions of this platform.

Objecting to or Revoking the Right to Process Your Data

(1) If you have granted your consent to the processing of your data on an individual
case, you can revoke this consent at any time by contacting us using the contact
details listed under §1 paragraph 2 or in our legal notice. Such a revocation only
affects the permissibility of processing your data starting after you have expressed
this revocation to us.

(2) You may object to any processing of your personal data for data analysis at any time.
You can inform us about your objection by contacting us at the addresses provided
in §1 paragraph 2 or in the legal notice linked there.

OPEN STUDIO Newsletter

If you would like to receive the newsletter offered on our website, we require a valid email
address from you that allows us to check that you are in fact the owner of this email address
or that its owner agrees to receive the newsletter.

After the email address is submitted, we send you a confirmation email to the address
provided. In it, we ask you to confirm that you wish to receive the newsletter. If you do not
confirm this within 24 hours, the data you have provided in the context of the newsletter
subscription will be automatically deleted. If you confirm the desire to receive the
newsletter, we save your email address until you cancel your subscription.

Your personal data will not be forwarded to third parties.

You can revoke your consent to the storage of your data, your email address, and the usage
thereof for the distribution of the newsletter at any time. You will find a link to cancel your
newsletter subscription at the bottom of each newsletter. If users have only subscribed to
the newsletter, their personal data will be deleted when they cancel their subscription.

The newsletter is distributed using “MailChimp,” a newsletter distribution platform
provided by the US company Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000,
Atlanta, GA, 30308, USA.

The email addresses of our newsletter subscribers, as well as other data of theirs as
described in this notice, are saved on the MailChimp servers in the USA. MailChimp uses this
information in order to distribute and analyze the newsletter on our behalf. Furthermore,
according to our information, MailChimp can use this data in order to optimize or improve
their own services, e.g., in order to optimize the distribution and how the newsletter is
displayed, or for economic purposes in order to determine which countries the recipients
come from. However, MailChimp does not use the data of our newsletter recipients in order
to write to them on their own nor do they forward this data to third parties.

We trust the reliability, the IT security, and data privacy of MailChimp. MailChimp is certified
in accordance with the US-EU data protection agreement “Privacy Shield” and therefore
commits to comply with EU data protection regulations. This is a contract in which
MailChimp is required to protect the data of our users, to process their data in accordance
with this data protection regulations on our behalf, and in particular, not to forward this
data to third parties. You can view the privacy policy of MailChimp here.

Use of Google Analytics

(1) This platform uses Google Analytics, a web analysis service of Google Inc., 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google
Analytics uses “cookies,” text files that are saved on your computer that enable your
usage of the website to be analyzed. The information generated by the cookies about
your usage of this platform is generally transmitted to a Google server in the USA and
stored there. However, since IP anonymization is conducted on this platform, prior to
this transfer, your IP address will be shortened by Google within member states of the
European Union or in other states subject to the Agreement on the European Economic
Area. Only in certain exceptions will the full IP address be transferred to a Google server
in the USA and shortened there. On behalf of the operator of this website, Google will
use this information in order to evaluate your usage of the platform, to compile reports
on website activity, and to provide other services to the website operator relating to use
of the website or the internet.

(2) The (anonymized) IP address that is transmitted in the context of Google Analytics from
your browser will not be merged with other data from Google.

(3) A detailed description of the cookies that are used in the context of Google Analytics can
be found here. You may reject cookies by selecting the appropriate settings on your
browser, however, we would like to inform you that doing so may prevent you from
using the full functionality of this platform. You can also prevent Google from collecting
and processing the data generated by the cookie and related to your use of the platform
(including your IP address) by downloading and installing the browser plug-in available
at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Furthermore, if
you click on this link, it will set an “opt-out cookie”: Deactivate Google Analytics.

Then Google Analytics will not collect any more data from your visit. Opt-out cookies
also prevent the future collection of your data when visiting this platform. In addition,
regardless of the website in question, in order to prevent Universal Analytics from
collecting data across several different devices (on all third-party sites), you must
download the aforementioned opt-out cookie on all systems that you use.

(4) This website uses Google Analytics with the extension “_anonymizeIp ()”. With this
extension, IP addresses are processed in abbreviated form, meaning that is impossible to
connect the IP address to individual people. Insofar as the data collected from you can
be related to a person, this is immediately prevented, and the personal data is deleted
without delay.

(5) We use Google Analytics so that we can analyze the usage of our website and improve it
on a regular basis. With the statistics that are gathered, we can improve our service and
make it more interesting for you as a user. For the rare cases when personal data is
transferred to the USA, Google has committed to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google
Analytics is Art. 6 para. 1, p. 1 (f) of the GDPR.

(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon
House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of service: https://www.google.de/analytics/terms/
Privacy policy: https://policies.google.com/privacy?hl=en&gl=en

Use of Vimeo Videos

(1) We use components from the provider Vimeo on our website. Vimeo is a service of
Vimeo LLC, 555 West 18th Street, New York, NY, 10011, USA. Each time you visit our website,
which is equipped with one of these components, the component causes the browser that
you are using to download a representation of this component from Vimeo. If you click on
one of these videos on our platform and you are logged in to Vimeo at the same time, the
Vimeo uses the information collected from this comment to recognize which specific page
you are visiting and associates this information with your personal account with Vimeo. For
example, if you click the “play” button on and/or off, this information is transmitted to
Vimeo and stored there with your personal account. Additionally, the information that you
have visited our site is passed on to Vimeo. However, this happens because an image file
precedes the video only if you click on the component.

If you wish to prevent your data on our website from being transmitted to and stored by
Vimeo, you must log out of Vimeo before you start a video on our website. The privacy
policy of Vimeo provides further information on this, particularly regarding the collection
and use of the data by Vimeo: https://vimeo.com/privacy

Use of Social Media Plugins

(1) Facebook
Based on our legitimate interest in the analysis, optimization, and operation of our online
services (according to Art. 6 para. 1 (f) of the GDPR), this website uses the Facebook Social
Plugin, which is operated by Meta Platforms Inc. (1 Hacker Way, Menlo Park, California
94025, USA). This integration can be recognized due to the presence of the Facebook logo.
Information about all Facebook plugins can be found at the following link:
https://developers.facebook.com/docs/plugins/

Meta Platforms Inc. abides by the European data protection laws and is certified in
accordance with the Privacy Shield agreement:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

The plugin generates a direct connection between your browser and the Facebook servers.
The operators of this website have no influence on the nature and scope of the data that
the plugin transfers to the Facebook servers. You can find more information about this here:

The plugin informs Meta Platforms Inc. that you have visited this website as a user. In the
process, there is the possibility that your IP address will be saved. If you are logged into your
Facebook account during your visit to this website, the aforementioned information may be
linked with your account.

If you use the functions of the plugin, for example in order to share or “like” a post, then the
corresponding information will also be transferred to Meta Platforms Inc.

If you would like to prevent Meta Platforms Inc. from linking this data with your Facebook
account, then please log out of Facebook and delete any saved cookies before you visit this
website. You can also adjust the settings regarding data processing for advertising purposes
directly in your Facebook account or you can reject the usage of your data for advertising
purposes. You can find these settings here:

Profile settings on Facebook:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Cookie deactivation page for the USA website: http://optout.aboutads.info/?c=2#!/

Cookie deactivation page for the European website:
http://optout.networkadvertising.org/?c=1#!/

In the privacy policy of Meta, you can read about which data, to what extent, and for which
purposes data is collected, used, and processed by Meta Platforms Inc. and which rights and
settings you have available in order to protect your privacy. This policy can be found here:
https://www.facebook.com/privacy/center/

(2) Instagram
Our website uses the Social Plugin for the social network Instagram, which is operated by
Meta Platforms Inc. (hereinafter “Instagram”). The link can be recognized by the “Instagram
icon” on our website. If you access a webpage on our internet platform that contains one of
these buttons, your browser creates a direct connection to the Instagram servers.
The content of the button is transferred by Instagram directly to your browser and
integrated into this website. We therefore have no influence on the scope of the data
Instagram collects through this button.

By embedding the “Instagram” button, Instagram receives (among other things) the
information that you have accessed the corresponding page of our website from your IP
address. This information is stored and used in the USA and is also passed on to third
parties.

In this process, Instagram uses cookies and similar technologies in order to show
advertisements. Instagram can merge this information with data from other subsidiaries and
thus is able to create use profiles under certain circumstances.

If you click on the Instagram icon while you are logged into your Instagram account, you can
link content from our page on your Instagram profile. This allows Instagram to associate
your visit to our website with your user account and save this information. If you wish to
prevent this, you must log out of your Instagram account before clicking the button. We
would like to inform you that we, as the provider of these pages, have no knowledge
concerning the content of the data transmitted to Instagram or how it is used by Instagram.
You can find more information about Instagram’s privacy policy at:
https://privacycenter.instagram.com/policy

Links to External Websites

Insofar as websites from other providers are linked on our website, this data privacy notice
does not apply to their content. We are not capable of knowing or influencing which data
the operators of these sites could potentially collect. Further information about this may
potentially be found on the privacy policies of the individual websites in question.

We make every effort and utilize all the technical and organizational possibilities available in
order to process your personal data in a way that complies with the data protection
regulations and thus to protect your data. Our website and the communication with us
through our website are encrypted using HTTPS.