top of page

PRIVACY

The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:


BUA AGENCY
New Kamp 32
20357 Hamburg

info@bua-gallery.com

​

YOUR DATA PROTECTION RIGHTS

You can exercise the following rights at any time using the contact details provided for our data protection officer:

Information about your data stored by us and its processing (Art. 15 DSGVO),

Correction of incorrect personal data (Art. 16 DSGVO),

Deletion of your data stored by us (Art. 17 DSGVO),

Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),

objection to the processing of your data by us (Art. 21 DSGVO) and

Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us consent, you can revoke it at any time with effect for the future.

You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

​

COLLECTION OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE.

NATURE AND PURPOSE OF PROCESSING:
When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.

In particular, they are processed for the following purposes:

Ensuring a smooth connection setup of the website,

Ensuring a smooth use of our website,

evaluation of system security and stability, and

for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimize our Internet presence and the technology behind it.


LEGAL BASIS:
The processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.


RECIPIENTS:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.


STORAGE PERIOD:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.


PROVISION IS PRESCRIBED OR REQUIRED:
The provision of the aforementioned personal data is not required by law or contract. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.

​

COOKIES

NATURE AND PURPOSE OF PROCESSING:
Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. Through this, we automatically receive certain data such as IP address, browser used, operating system and your connection to the Internet.

Cookies cannot be used to run programs or deliver viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.


STORAGE PERIOD AND COOKIES USED:
Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Insofar as these cookies may (also) affect personal data, we will inform you about this in the following sections.

You can delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

 

REGISTRATION ON OUR WEBSITE

NATURE AND PURPOSE OF PROCESSING:
When registering to use our personalized services, we collect some personal data, such as name, address, contact and communication data (e.g. phone number and email address). If you are registered with us, you can access content and services that we offer only to registered users. Registered users also have the option, if necessary, to change or delete the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.


LEGAL BASIS:
The processing of the data entered during registration is based on the user's consent (Art. 6 para. 1 lit. a DSGVO).


RECIPIENTS:
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

​

STORAGE PERIOD:
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the end of this privacy policy.


PROVISION IS MANDATORY OR REQUIRED:
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

PROVISION OF CHARGEABLE SERVICES

NATURE AND PURPOSE OF PROCESSING:
For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order.

 

LEGAL BASIS:
The processing of data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO.

 

RECIPIENTS:
Recipients of the data are, if applicable, order processors.


STORAGE PERIOD:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.


PROVISION MANDATORY OR REQUIRED:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered contents and services.

 

NEWSLETTER

NATURE AND PURPOSE OF PROCESSING:
Your data will be used exclusively to send you the subscribed newsletter by e-mail. Your name is provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances).

For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for newsletter dispatch and is not passed on to third parties.


LEGAL BASIS:
Based on your expressly given consent (Art. 6 para. 1 lit. a DSGVO), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option provided at the end of this privacy notice.


RECIPIENTS:
Recipients of the data are, if applicable, order processors.

 

​

STORAGE PERIOD:
In this context, the data will only be processed as long as the relevant consent is given. After that, they will be deleted.


PROVISION MANDATORY OR REQUIRED:
The provision of your personal data is voluntary, based solely on your consent. Without existing consent, we can unfortunately not send you our newsletter.

 

CONTACT FORM

NATURE AND PURPOSE OF PROCESSING:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the request and the subsequent response to the same. The provision of further data is optional.

 

LEGAL BASIS:
The processing of the data entered in the contact form is based on a legitimate interest (Art 6 (1) lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art 6 (1) lit. b DSGVO).

 

RECIPIENTS:
Recipients of the data are, if applicable, order processors.

STORAGE PERIOD:
Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

 

PROVISION MANDATORY OR REQUIRED:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

 

USE OF MATOMO

NATURE AND PURPOSE OF PROCESSING:
This website uses Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.

Matomo uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of the website is stored on a server in Germany.

The IP address is anonymized immediately after processing and before it is stored. You have the option to prevent the installation of cookies by changing the settings of your browser software. We would like to point out that if you change this setting, not all functions of this website may be available.

You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data.

For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.


LEGAL BASIS:
The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a DSGVO).


RECIPIENTS:
Recipients of the data are, if applicable, order processors.


STORAGE PERIOD:
Data is deleted as soon as it is no longer required for our recording purposes.

In our case, this occurs after the following period: 12 months.


PROVISION MANDATORY OR REQUIRED:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.


REVOCATION OF CONSENT:
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.


PROFILING:
With the help of the tracking tool Matomo, the behavior of visitors to the website can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.

SSL ENCRYPTION
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

CHANGES TO OUR PRIVACY POLICY
We reserve the right to adapt this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
 

bottom of page