Privacy policy

Controller

The controller for processing on this website is Leo Grützner, email: art [at] gee.berlin.

The website describes private research into missing artworks. There is no user account, no contact form, and no newsletter sent from this website.

Visiting the website

When art.gee.berlin is requested, the web server and the Cloudflare service in front of it process the usual connection data: IP address, date and time, the requested address, the user agent, and the response status. This is necessary to deliver the page and to detect abusive requests.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure operation of the website. Server logs are limited by log rotation and are not used for profiles or advertising.

The site is hosted by 1blu GmbH, Riedemannweg 60, 13627 Berlin, Germany. It is served through Cloudflare, Inc. Cloudflare may process connection data in the United States as well. Where no adequacy decision applies, the transfer is based on the European Commission’s standard contractual clauses.

Cookies

This website does not set its own cookies. There are no analytics or advertising cookies. Cloudflare may set a cookie that is strictly necessary to reject abusive traffic. Under section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG), that does not require consent.

Links in emails

An email about a possible sighting may contain a link of the form https://art.gee.berlin/ followed by a short identifier. When that address is opened, the website stores the time and the browser’s user agent, then redirects to the third-party listing. The IP address is not stored by this application. The identifier can be tied back to the prepared email.

The purpose is to see whether a note was opened and to avoid repeating private correspondence unnecessarily. The legal basis is Article 6(1)(f) GDPR. The record is deleted when the related link is deleted. It is not passed on for advertising.

The privacy policy of the provider applies to the page the link redirects to.

Your rights

You have the following rights against the controller:

• access to the data being processed (Article 15 GDPR),
• rectification of inaccurate data (Article 16 GDPR),
• erasure (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability where the conditions are met (Article 20 GDPR),
• objection to processing based on Article 6(1)(f) GDPR (Article 21 GDPR).

Where processing is based on a legitimate interest, you may object on grounds relating to your particular situation. Send the objection to art [at] gee.berlin.

You also have the right to lodge a complaint with a data-protection supervisory authority (Article 77 GDPR). The Federal Commissioner for Data Protection and Freedom of Information lists the authorities at www.bfdi.bund.de.

There is no statutory duty to provide the data. No automated decision-making, including profiling, takes place.