Privacy policy

General information
The protection of your personal data is of particular concern to us. This privacy policy provides you with an overview of how the Werbegemeinschaft Trier Galerie GbR, Fleischstr. 62, 54290 Trier, Germany (hereinafter referred to as “we”), as the controller within the meaning of the applicable data protection laws, processes your personal data.

Basic principle
Your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this data protection declaration. As a rule, you can make full use of our website without providing any personal data. As far as on our sides personal data are raised, this takes place, as far as possible, always on voluntary basis.

Data collection and processing on this website
We collect personal data from you when you provide it to us. This may, for example, be data that you enter in the contact form on this website, such as your name or your e-mail address. We use this data to answer your inquiry and do not pass the data on to third parties without your consent. The data processing is based on your consent or our legitimate interests in processing your request in accordance with gem. Art. 6 para. 1 S. 1 lit. a and f respectively of the General Data Protection Regulation (“GDPR”).

In addition, we collect data via our IT systems when you visit our website. This data is collected automatically as soon as you visit the website. Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. We process this data either on the basis of your consent or on the basis of our legitimate interests in the efficient and secure provision of this website in accordance with the Data Protection Act. Art. 6 para. 1 S. 1 lit. a or f DSGVO. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Server log files
Each time you visit our website, your browser automatically sends certain information to the website server to enable communication between your browser and the server. This information is stored in so-called log files, which your browser automatically transmits to us. These are for example information on
the type and version of browser you are using, the operating system you are using, the website from which you came to the current page, the host name (IP address) of the accessing computer and the time of the server request.

This data cannot be assigned to specific persons. This data is not merged with other data sources. Subject to any statutory retention obligations, we delete or anonymise your IP address after you leave the website, unless otherwise stated in this data protection declaration and unless this is legally permissible.
In addition, we use the information transmitted by your browser to our server in anonymous form – i.e. without it being possible to draw any conclusions about you – to analyse and improve our services. In this way we can, for example. detect possible errors or determine on which days and at which times our website is particularly heavily used.

Recipients of the data

Processor
We may engage third parties to perform certain services for us as processors, in connection with which the third party may gain access to your personal data. This includes in particular services in the IT, e-mail, website and marketing areas. The service providers used are contractually obliged to us to take appropriate technical and organisational security measures to protect the personal data processed and to process this data only in accordance with our instructions.

Other recipients
In addition, we may disclose your personal information to law enforcement and other authorities, legal advisors or other third parties as necessary in accordance with applicable data protection law. The legal basis for this can be found in the necessity of the data transfer for compliance with legal obligations (Art. 6 (1) p. 1 lit. c) DSGVO), to which we are subject, as well as in our legitimate interests (Art. 6 (1) p. 1 lit. f) DSGVO), such as the exercise or defense of legal claims.

Data transfer to third countries
Your personal data may be transferred to recipients in third countries outside the European Economic Area (EEA) that do not ensure an adequate level of data protection, such as the USA. Recipients in the U.S. may be certified under the EU-U.S. Privacy Shield and thus ensure an adequate level of data protection from the perspective of EU data protection law. For example, data transfers to Google are made on the basis of the EU-U.S. Privacy Shield. Insofar as we transfer your personal data to third parties in countries that do not offer an adequate level of data protection from the point of view of EU data protection law, we base the transfer on appropriate guarantees such as the standard contractual clauses adopted by the European Commission. You can request a copy of the appropriate safeguards by contacting us using the contact details provided at the end of this Privacy Policy. Access shall be limited to recipients who need the data concerned for the performance of their tasks.

Storage period of your data, criteria for storage period
Your personal data will be kept for as long as necessary for the purposes of the respective data processing operations. When we no longer need your personal information for the purposes for which it was collected, we will delete it from our systems and records or make it completely anonymous so that you can no longer be identified. Your personal data will not be deleted or made completely anonymous if and as long as we have to retain the data in order to fulfil legal or official obligations, e.g. legal retention obligations that may arise from the German Commercial Code or the German Fiscal Code, among others, which provide for retention periods of six to ten years, or if we need the data to preserve evidence within the statute of limitations, which is usually three years, but may be up to 30 years in individual cases.

Your rights as a data subject and how to exercise them
If you have declared your consent to the processing of your personal data, you can revoke this at any time with effect for the future. Such withdrawal shall not affect the lawfulness of the processing prior to the withdrawal of consent. If you object, we will no longer process your personal data unless another (legal) basis permits this. However, if a revocation is made and there is no other legal basis, we must delete the personal data without delay (Art. 17 (2) (b) DSGVO).

According to applicable data protection law, you as a data subject have the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). The right of access as well as the right of erasure may be limited under certain circumstances according to national provisions of the applicable data protection law. In addition, you have the right to lodge a complaint with a data protection authority (Art. 77 DSGVO).

Under certain circumstances, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of our legitimate interests (Article 6(1)(f) DSGVO) (Article 21(1) DSGVO). In addition, if your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such purposes, insofar as it is related to such direct marketing (Article 21(2) of the GDPR). In this case, we will no longer process your personal data for these purposes.
To exercise your rights and any revocations, please address them to the following address: Werbegemeinschaft Trier Galerie GbR, c/o Multi Germany GmbH, Fleischstr. 62, 54290 Trier

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses an SSL or SSL protocol. TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

However, we would like to point out that data transmission on the Internet can have security gaps. Complete protection of the data against access by third parties is not possible.

Use of plugins

Facebook Pixel
With your consent, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used within this website for the purpose of analysing, optimising and economically operating our online offer. Translated with www.DeepL.com/Translator (free version)

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law ( https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active ).

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The Facebook pixel is integrated by Facebook with your consent when you visit our website and can save a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our online offering will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we transmit data to Facebook for matching purposes, this data is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done for the sole purpose of making a comparison with the data that is also encrypted by Facebook.

The processing of the data by Facebook takes place within the framework of Facebook’s data use policy. You can find detailed information on this and other questions at https://www.facebook.com/policy.php . Specific information and details about the Facebook Pixel and how it works can also be found in Facebook’s help section: https://www.facebook.com/business/help/651294705016616.
You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of advertisements are shown to you within Facebook, you can go to the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
You can set and prevent the collection of your data by means of the Facebook pixel on our website: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. A connection to the YouTube servers is automatically established when you visit one of our pages equipped with a YouTube plugin. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. This can be prevented by logging out of your YouTube account.
For more information on the handling of user data, please see YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

Cookies
We use so-called cookies on various pages of our online offer in order to make the use of our website more comfortable and to enable the use of certain functions. Cookies are small text files that are stored on your device and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can also set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally or activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be limited.