Privacy Statement
Controller within the meaning of the GDPR
Staatliche Akademie der Bildenden Künste Stuttgart
Am Weißenhof 1
70191 Stuttgart
Deutschland
info@atelier-dsk.org
Contact
If you have any questions or comments regarding privacy, you can directly contact the staff of the Studio for Digital Sovereignty at Art Universities:
info@atelier-dsk.org
Your inquiry will be forwarded to the respective institution or its privacy officer.
Staatliche Akademie der Bildenden Künste Stuttgart:
datenschutz-auskunft@abk-stuttgart.de
Staatliche Akademie der Bildenden Künste Karlsruhe:
datenschutzbeauftragter@kunstakademie-karlsruhe.de
Staatliche Hochschule für Gestaltung Karlsruhe:
fultsch@hfg-karlsruhe.de
Provision of the Website and Creation of Log Files
a) Description and Scope of Data Processing
Each time this website is accessed, the system automatically collects data and information from the accessing computer. The following data is collected in this process:
- Information about the browser type and version used
- The user’s operating system
- The user’s IP address (truncated/anonymized)
- Date and time of access
- Pages or elements accessed
- Access status (HTTP status code)
- Amount of data transferred
- Website from which the access originated
- Websites accessed via this website
The data is stored in so-called log files. This data is not combined with other personal data.
b) Purpose of Data Processing
The processing of data serves the following purposes:
- Ensuring the proper operation of the website
- Ensuring IT security (e.g., defending against attacks)
- Technical optimization of the website
The data is not analyzed for marketing or tracking purposes.
c) Legal Basis
The legal basis for the processing is Article 6(1)(f) of the GDPR.
The legitimate interest lies in the secure and stable provision of this website.
d) Retention Period
The log files are deleted or anonymized no later than 14 days after they are created, unless security-related requirements necessitate longer retention.
e) Right to Object
Since data collection is strictly necessary for the operation of the website, there is no right to object.
Cookies
This website does not use cookies or any similar technologies to recognize users.
Visitor Statistics
This website uses a self-hosted instance of Plausible Analytics to analyze usage statistics for our website. Plausible operates without cookies and does not collect any personal data. In particular, it does not identify users, store any persistent identifiers, or create usage profiles or merge them with other data sources.
Only aggregated usage data processed in a privacy-friendly manner is collected, specifically page views, visitor origin (e.g., referring website), device types used, browsers, and approximate geographic regions. It is not possible to identify individual persons.
All data we collect via Plausible can be viewed in this public dashboard:
plausible.atelier-dsk.org/atelier-dsk.org
If you are still skeptical about tracking, you can follow these instructions to opt out of tracking:
plausible.io/docs/excluding-localstorage
Data processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in analyzing the use of our website, optimizing our offerings, and ensuring its technical operation. By not using cookies, personal data, or user profiles, we safeguard visitors’ rights and freedoms to the greatest extent possible.
Further information about Plausible and how tracking works is available here:
plausible.io/data-policy
Third-Party Services
Social Media Activity
On our website, we may provide links to our social media channels on the following platforms::
- X/Twitter
- Youtube
- Vimeo
Accessing these channels requires that the providers of this content collect users’ IP addresses, since content cannot be sent to a user’s browser without an IP address. The IP address is therefore necessary for displaying this content. We have no control over whether or how third-party providers store and use IP addresses.
Privacy on X/Twitter
The privacy statement of Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA, is available here:
twitter.com/de/privacy
Privacy on Instagram
help.instagram.com/155833707900388
Privacy on YouTube
The privacy statement of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, is available here:
policies.google.com/privacy _blank
Privacy on Vimeo
The Vimeo privacy statement is available here:
vimeo.com/legal/privacy/policy
Embedded YouTube videos
Videos hosted by YouTube may be embedded on our website. This generally requires that the providers of this content collect users’ IP addresses, since content cannot be sent to a user’s browser without the IP address. The IP address is therefore necessary for displaying this content. We have no control over whether or how third-party providers store IP addresses.
Operator: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Privacy policy applicable to content provided by YouTube:
policies.google.com/privacy
Embedded Vimeo videos
Videos hosted by Vimeo may be embedded on our website. When you visit a page on our website that contains such a video, your browser establishes a direct connection to Vimeo’s servers. Through this embedding, Vimeo receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser to a Vimeo server and stored there.
Operator: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Privacy policy applicable to content provided by Vimeo:
vimeo.com/legal/privacy/policy
Contact via E-Mail
a) Description and Scope of Data Processing
When you contact us via e-mail, the personal data transmitted with the e-mail (e.g., name, e-mail address, content of the message) is processed.
b) Purpose of Data Processing
The data is processed exclusively for the purpose of handling the contact request and the associated communication.
c) Legal Basis
The legal basis for the processing is Article 6(1)(b) of the GDPR (implementation of pre-contractual measures) or Article 6(1)(f) of the GDPR (legitimate interest in responding to inquiries).
d) Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected, provided there are no statutory retention requirements.
e) Objection
You may object to the processing of your personal data at any time. In this case, however, communication cannot be continued.
Recipients of Personal Data
Personal data is disclosed only to those parties necessary for the operation of this website. This includes in particular:
- ABK Stuttgart data center (hosting of this website)
- IT service providers of the university
We have data processing agreements with these service providers in accordance with Article 28 of the GDPR.
Transfer to Third Countries
Personal data is not transferred to countries outside the European Union or the European Economic Area.
Rights of Data Subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, you may contact the controller listed above at any time.
Right to File a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedies, you have the right to file a complaint with a data protection supervisory authority.
The competent authority is, in particular:
Ministry of Science, Research and Arts Baden-Württemberg
PO box 10 34 53
70029 Stuttgart
baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen
Automated Decision-Making
Automated decision-making, including profiling as defined in Article 22 of the GDPR, does not take place.