The applicant gives their consent to the processing of their personal data for the purpose of issuing the Culture and Leisure Ticket (KUFTI). The information pursuant to Articles 13 and 14 of the Basic Data Protection Regulation (DS-GVO) can be found on the following pages.

Information pursuant to Articles 13 and 14 Basic Data Protection Regulation (DS-GVO) Effective: 10/2019

Responsible for processing the data (Name of agency, location, contact details) Stadt Frankfurt am Main Kulturamt (Amt 41) Brückenstrasse 3–7 60594 Frankfurt am Main

Where applicable, responsible department (Contact details) Museumsadministration, -investitionen und -IT 41.11.1 MuseumsadministrationBrückenstrasse 3–7 60594 Frankfurt am Main E-mail: info.kulturamt@stadt-frankfurt.de

Contact details of data protection officer Referat Datenschutz und IT-Sicherheit Sandgasse 6 60311 Frankfurt am Main E-mail: datenschutz@stadt-frankfurt.de

Purposes and legal basis of the processing of the data Purposes: To apply for or issue a Culture and Leisure Ticket Authorization upon entry to the institutions Settlement with the institutions Proof of advertisment consent Legal basis: Your data is collected on the basis of Article 6(1)(b) of the Basic Data Protection Regulation (DS-GVO): the processing is necessary for the performance of a contract to which you are a party.

Consequences of non-provision of data by data subject: The provision of the personal data is regulated by law or prescribed by contract, the data is required for the conclusion of a contract, or the data subject is obligated to provide the personal data. Consequences of non-provision of data: No Culture and Leisure Ticket (KUFTI) can be issued.

Categories of personal data processed: The provision of the personal data is regulated by law or prescribed by contract, the data is required for the conclusion of a contract, or the data subject is obligated to provide the personal data:
_Full name including title of person placing application
_Mr/Mrs/Mx
_Street and house number
_Postal code and place of residence
_Date of birth
_E-mail address (optional)
_Phone number (optional)
_Full name(s) of the child(ren)
_Date(s) of birth of the child(ren) for whom a Culture and Leisure Ticket is being applied for
_School or day-care centre (if not resident in Frankfurt am Main)
_Ticket holder data
_Log data / usage data / billing data
_Login data

If the data was not collected from the data subject – in addition:

Information about the source from which the personal data originates, and, if applicable, whether it came from a publicly accessible source

Protocol data for using the website www.kufti.de
Each time our website is accessed and each time a file is retrieved, “cookies” are created. Cookies are text files stored on your computer that enable analysis of how you use our website. The information on the usage of this website generated by the cookie is not transmitted to third parties. The IP address is anonymised immediately after processing and before storage. This data are not directly personal and does not allow any direct identification of the Internet visitors.

We use cookies that are not used permanently. Cookies that are not used permanently are automatically deleted after a defined period of time or when the browser is closed.

These include session cookies, in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
The legal basis for processing personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.
You can prevent the installation of cookies by setting your browser software accordingly if you do not want our website to use cookies. In this case, www.kufti.de is not useable or only usable to a limited extent.

The following cookie is used: Cookie while using the website (session cookie)
A session cookie is used to make the shopping cart function available on www.kufti.de. In addition, www.kufit.de uses this cookie to collect data relating to registration, the ordering process and any consent given. Without this cookie, the system will not work or will work incompletely. You can find this cookie under the name “shopsess” in your browser’s cookie settings.
This cookie is automatically deleted 31 minutes after leaving the page or if the user is inactive.

Data transfer to a third country or to an international organisation
No transfer of personal data to a third country within the meaning of Art. 13 para. 1 lit. f GDPR is intended.

Recipients or categories of recipients of the personal data
Within the city administration of Frankfurt, those departments are given access to the data that are responsible for issuing the culture and leisure ticket and checking the eligibility requirements for receiving the ticket free of charge.
Outside the city administration of Frankfurt, our service provider has access to the data that it processes to produce the culture and leisure ticket as part of the order from the above-mentioned responsible body, subject to instructions.
Data transfer to a third country or to an international organisation

No transfer of personal data to a third country within the meaning of Art. 13 para. 1 lit. f GDPR is intended.

Storage duration of the data and the criteria for determining the storage duration
After collection, your personal data will be stored for as long as is necessary to fulfill the task.
Usage data is deleted no later than 18 months after the data has been recorded
Master data will be deleted no later than 18 months after the end of the validity of the culture and leisure ticket.
Tax-relevant documents are kept in accordance with the statutory deadlines.

Information on data subject rights
We expressly refer to the GDPR with regard to your rights to information, correction, deletion, limitation of processing, data portability and opposition to all processed personal data.
If the processing of personal data is based on your consent, you may revoke it at any time with effect for the future.

You have the right to lodge a complaint with the Hessian Data Protection Officer.
Postal address: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Tel.: 0611 / 1408-0 or email: poststelle@datenschutz.hessen.de