Privacy Policy

In the paragraphs to follow, we inform you about our handling of your personal data in the frame of our online offer.


Organization Responsible

Stiftung Schloss und Park Benrath

Benrather Schloßallee 100-106
40597 Düsseldorf

Tel.: 0211 - 8921903
Fax: 0211 - 8929468
Mail: info[at]schloss-benrath.de


Contact

If you have any questions on our private policy, please turn to the address above.


Privacy Officer

Nils Volmer
meibers.datenschutz GmbH
Haus Sentmaring 9
48151 Münster

Tel.: 0251 - 2031970
Fax: 0251 - 20319799
Mail: info@meibers-datenschutz.de


Storage Duration

Generally, we delete your personal data when they are no longer required for the purpose they were collected or processed for.

In case we asked for your consent and it was given by you, we delete your personal data if you withdraw your consent, and any other legal basis for the processing of your data is non-existent.

We delete your personal data if you enter an objection against the processing, and no priority reasons for the processing exist or you enter into objection against the data being processed for advertising or a correlating profiling.

If deletion is not possible because the processing is necessary for the fulfilment of a legal obligation, we are liable to (legal storage period etc.) or the enforcement, execution or defence of legal claims, we restrict the processing of your personal data.   

Please see below for further information on storage periods.


Your Right

Concerning your personal data, you have the following rights:

  • disclosure
  • correction
  • deletion
  • restriction of processing
  • objection to processing
  • data portability

Based on reasons resulting from your special situation, you have the right to object to the processing of your personal data according to Art. 6 Abs. 1 lit. e or f DS-GVO at any time; this also applies to profiling based on these conditions. We will then cease to process your personal data, unless we have urgent reasons for the processing that outweigh your interests, rights and liberties or the processing serves the enforcement, execution or defence of legal claims.                                                       In case we process your personal data on behalf of direct advertising, you have the right to enter an objection against the processing of your personal data on behalf of such advertising at any time; this also applies to profiling if it is connected to such advertising. In that case, we will no longer process your personal data for these purposes.

You have the right to object to your consent for the processing of your personal data at any time if you have given us your consent. The legitimacy of the processing until the time of cancellation will not be touched upon by the objection to your consent.

You have the right to raise a complaint with the respective authorities about the processing of your personal data.


Providing Your Personal Data

Providing your personal data is generally not mandatory and not necessary for the completion of a contract. You a principally not obliged to provide your personal data. However, should they be required at some point, we will inform you about the data acquisition (e.g., by highlighting the mandatory fields on forms).

The consequence of not providing your personal data is us being rendered unable to process your data for the following purposes and you being unable to find out about our offers in connection with the processing (e.g., if you don’t provide your e-mail address, you will not receive our newsletter.)


Webhosting

We use external services for webhosting purposes. These services may have access to personal data processed in the frame of our online offer.

Webserver Logfiles

We process your personal data in order to present or online offers to you and to maintain the stability and security of our online offers. The following bits of information will be saved in so-called logfiles (access-log, error-log etc.): requested element, visited URL, operating system, date and time of request, browser type and its used version, IP address used protocol, amount of data processed, user agent, referrer URL, time zone difference to GMT and/or HTTP status code.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in offering a proper display of our online offers and in the warranty of the stability and security of our online offers.

Security

We use an encrypted domain for reasons of security and in order to protect the processing of your personal data and additional confidential contents. This is recognizable by the S (“secure”) attached to the HTTP right below the Palace symbol.

Getting in Touch

If you get in touch with us, we process your personal data in order to process your request.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in processing your request. If processing is required in order to fulfil a contract with you or to take pre-contractual measures based on your request, the legal basis for the processing is Art. 6 Abs. 1 lit. b DS-GVO.

We make use of external services in order to provide and maintain our e-mail accounts. These services may have access to personal data processed in the frame of you getting in touch with us.


Cookies & Similar Technologies

We use cookies. Cookies are bits of text information saved on your terminal device. There are session cookies which are deleted after the browser is closed, and there are permanent cookies that will not be deleted until a certain period of time has elapsed.

Apart from cookies, we also use similar technologies (tracking pixels, web beacons etc.). The following items on cookies also apply for other technologies. They also apply for processing in connection with cookies and similar technologies (analysis and marketing etc.). This also applies for any consent concerning cookies that you have possibly given us. This simultaneously applies to other technologies and the processing correlating with cookies and similar technologies.

Cookies help us make certain functions available. Cookies also help us measure the range of our online offer, making it tailor-made for you based on your interests and thus optimize our online offer and marketing. Cookies can be used by us and external services.

We use a consent tool in order to administer the cookies used and the respective consents. For further information on the cookies applied (purpose, storage duration and possibly external service) and the consent tool, please read the following passages or refer to the consent tool we use.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in administering the cookies applied and the correlating consent. Depending on the purpose of the processing, you can read about our rightful interests in the following passages.

You can avoid the saving of cookies via your browser settings. Below, please find the typical browser links that give you comprehensive information on your cookie settings:

Further possibilities of declining cookies are listed here:                              
www.youronlinechoices.eu, youradchoices.ca/en/tools, optout.aboutads.info and optout.networkadvertising.org.

If you decline saving cookies, it might impact the functions of our online offers. If you delete all cookies, you also lose the settings mentioned above, and they have to be reedited.

You can also activate the “do not track” function of your browser in order to make sure you do not want to be tracked. Below, please find the typical browser links that give you comprehensive information on your “do not track” settings:

You can also use our consent tool to withdraw/administer your consents with respect to the cookies applied.


Shop

If you place an order with us, we save your personal data in order to process and handle your order and to apply by the concomitant rights and duties.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in processing and handling your order. If professing becomes necessary in order to fulfil a contract with you or to take contractual measures due to your request, the legal basis for the processing is Art. 6 Abs. 1 lit. b DS-GVO.

A third party (fulfilment service provider, IT service provider, dispatch or shipping service provider, tax advisors, lawyers, authorities etc.)  can be the recipient of your personal data if it becomes adamant for the processing of your order and the concomitant rights and duties.

Newsletter

If we have requested your consent and you have given it to us, we process your e-mail address for e-mail marketing purposes and further personal data as required in order to address you personally. The legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. E-mail marketing contents will be outlined concretely when your consent is asked for. In addition, e-mail marketing also contains information on us, our products and services.

We use the so-called double opt procedure in order to avoid any abuse of your personal data. For this purpose, we send you an e-mail to the address you have specified and ask you to confirm that you actually demand e-mail marketing. The legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in e-mail marketing processes that are in conformity with the law.

We protocol the moment you consent and the moment of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that we have obtained your consent in conformity with the law. The legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in e-mail marketing processes that are in conformity with the law.

We use external services for e-mail marketing purposes. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

You can withdraw your consent. The legitimacy of the processing until the time of cancellation will not be touched upon by the objection to your consent. If you want to withdraw your consent, please use the link in the e-mails or you can contact us via the specified contact information.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist for future reference. This way, we can ensure that there will be no more e-mail marketing in combination with these personal data. The legal basis of this process is 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in avoiding unwanted e-mail marketing.

We process your personal data in the frame of tracking and/or success measurements in order to test the reach of our e-mail marketing, to make it demand the needs and interests and to optimize our e-mail marketing. In this case, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. If we have asked you for your consent and you have given it to us, the legal basis is Art. 6 Abs. 1 lit. a DS-GVO. If we have not asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in optimizing our e-mail marketing processes. Unfortunately, a separate withdrawal of your consent concerning the tracking and/or success measurements is not possible. You have to use the possibilities of withdrawing your consent and/or objecting to the processing of your personal data for e-mail marketing purposes as a whole.

CleverReach
Provider: CleverReach GmbH & Co. KG, Germany.
Website: www.cleverreach.com/de/
Further information & data protection: www.cleverreach.com/de/datenschutz/


Analysis & Marketing

We process your personal data in order to measure the reach of our online offer, to make it meet demands and interests and to optimize our online offer and our marketing.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in optimizing our online offer and our marketing.

We use external services for marketing analysis purposes. In this case, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

You can avoid the saving of cookies via your browser settings. Below, please find the typical browser links that give you comprehensive information on your cookie settings:

Further possibilities of declining cookies are listed here:                               
www.youronlinechoices.eu, youradchoices.ca/en/tools, optout.aboutads.info and optout.networkadvertising.org.

If you decline saving cookies, it might impact the functions of our online offers. If you delete all cookies, you also lose the settings mentioned above, and they have to be reedited.

You can also activate the “do not track” function of your browser in order to make sure you do not want to be tracked. Below, please find the typical browser links that give you comprehensive information on your “do not track” settings:

Google Ads Conversion-Tracking
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: ads.google.com/intl/de_de/home/
Further information & data protection: policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.

Google AdSense
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: www.google.com/intl/de_de/adsense/start/
Further information & data protection: policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.

Google Analytics
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: marketingplatform.google.com/intl/de/about/analytics/
Further information & data protection:  https://support.google.com/analytics/answer/6004245?hl=de and policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.

Google Remarketing
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: support.google.com/google-ads/answer/2453998
Further information & data protection: policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.

Matomo - Cloud
Provider: InnoCraft Ltd., New Zealand.
Website: matomo.org
Further information & data protection: matomo.org/gdpr-analytics and matomo.org/matomo-cloud-privacy-policy/
Appropriate level of data protection when transferring personal data to New Zealand: Resolution of Appropriateness by the US commission.


Social Media Presence

We use social media presences with external services in order to communicate with users and thus optimize our online offer and marketing.

This declaration of data protection also applies for the following social media presences:
www.facebook.com/schlossbenrath/
twitter.com/schlossbenrath/
www.instagram.com/schlossbenrath/
www.pinterest.de/schlossbenrath/
www.youtube.com/channel/UC0SkxkDRM7h3v5ynK0N5JCg

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in optimizing our online offer and our marketing processes.

In the frame of using external services, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

Facebook
Provider: Facebook Ireland Limited, Ireland. Facebook Ireland Limited is an affiliate of  Facebook, Inc., United States of America.
Website: www.facebook.com
The provider is responsible, as are we. We have come to an agreement with the provider. Ask us if you want to obtain a copy of the agreement.

Further information & data protection: developers.facebook.com/docs/plugins/, www.facebook.com/legal/terms/information_about_page_insights_data, de-de.facebook.com/privacy/explanation, de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381 and de-de.facebook.com/help/568137493302217

Instagram
Provider: Facebook Ireland Limited, Ireland. Facebook Ireland Limited is an affiliate of Facebook, Inc., United States of America.
Website: www.instagram.com
Further information & data protection: help.instagram.com/581066165581870 and help.instagram.com/519522125107875

Pinterest                                                                                                               Provider: For users outside the USA, the service is provided by Pinterest Europe Ltd., Ireland. For users inside the USA, the service is provided by Pinterest Inc., United States of America.

Website: www.pinterest.de
Further information & data protection: policy.pinterest.com/de

Twitter
Provider: If you live in the European Union, EFTA countries or the United Kingdom, the company responsible for the processing is Twitter International Company, Ireland. If you live in the USA or another country outside the European Union, EFTA countries or the United Kingdom, the company responsible for the processing is Twitter Inc, United States of America.                                                               Website: www.twitter.com
Further information & data protection: twitter.com/de/privacy, help.twitter.com/de/rules-and-policies and help.twitter.com/de/safety-and-security

YouTube
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: www.youtube.de
Further information & data protection: policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.


Social Media Contents/Plugins

We use social media contents provided by external services in order to display contents and functions of the respective external services and to optimize our online offer and marketing.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in optimizing our online offer and our marketing processes.

In the frame of using external services, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

In order to protect your personal data, we use the double click solution (2-Klick-Konzept) by Heise. For further information on the 2-Klick-Konzept by Heise, click here: Sie www.heise.de/ct/artikel/2-Klicks-fuer-mehr-Datenschutz-1333879.html.

Facebook
Provider: Facebook Ireland Limited, Ireland. Facebook Ireland Limited is an affiliate of Facebook, Inc., United States of America.
Website: www.facebook.com
Further information & data protection: developers.facebook.com/docs/plugins/, de-de.facebook.com/privacy/explanation, de-de.facebook.com/policies/cookies/, www.facebook.com/help/566994660333381 and de-de.facebook.com/help/568137493302217

Twitter
Provider: If you live in the European Union, EFTA countries or the United Kingdom, the company responsible for the processing is Twitter International Company, Ireland. If you live in the USA or another country outside the European Union, EFTA countries or the United Kingdom, the company responsible for the processing is Twitter Inc, United States of America.                                                              Website: www.twitter.com
Further information & data protection: twitter.com/de/privacy, help.twitter.com/de/rules-and-policies and help.twitter.com/de/safety-and-security

Fonts & Scripts

We use fonts and scripts provided by external services in order to display our online offer and to ensure up-to-date fonts and scriptures at any time.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in the proper display of our online offer and the warrantee of up-to-date fonts and scripts.

In the case of using external services, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

Adobe Fonts
Provider: If you live in North America, services will be provided by Adobe Inc., United Kingdom. If you live outside North America, services will be provided by Adobe Inc., Ireland.                                                                                                                       Website: fonts.adobe.com
Further information & data protection: www.adobe.com/de/privacy.html
Warrantee: EU boilerplates. Feel free to ask us for a copy of the EU boilerplates.


Search Engines

We use search engines provided by external services in order to display your searches in our online offer more properly and to optimize our online offer.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in optimizing our online offer.

In the case of using external services, profiling processes might be triggered (for advertising purposes, personalized information etc). The profiling can span several services or devices. Further information on the services used, the scope of data processing and the technologies and procedures used by the respective services and whether there will be any profiling rendered by the services and, if necessary, information on the logic involved as well as the scope and the aspired effects of such a processing are listed in the additional information section about the services we use at the end of that passage and below the provided links.

Google Programmable Search Engine
Provider: Within the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is an affiliate of Google LLC, United States of America.
Website: programmablesearchengine.google.com/about/
Further information & data protection: policies.google.com
The transmission of personal data to third countries depends on the respective Google service under the legislation of various EU boilerplates as far as they are offered by Google. For further information on this topic and Google’s responsibility, please use the following link: business.safety.google/gdpr/. A copy of the EU boilerplates is available on this website.

Applications

If you send us your application, we process your personal data on behalf of the application procedure and to make a decision concerning the justification of employment. After the application procedure, we restrict the processing of your personal data and delete or destroy them after a maximum of six months if your application has been declined and you have been informed or we send your application back to you and delete or destroy any copy as far as you have not given us your consent to use your personal data for further purposes.

If we have requested your consent and you have given it to us, the legal basis for the processing is Art. 6 Abs. 1 lit. a DS-GVO. If we haven’t asked you for your consent, the legal basis for the processing is Art. 6 Abs. 1 lit. f DS-GVO. We are legitimately interested in a proper application procedure and the defence against claims based on a rejected application. If processing becomes adamant for the explanation and decision of employment, the legal basis of the processing is also  § 26 Abs. 1 S. 1 BDSG.

This privacy policy was written with getLaw.de.