DATA PROTECTION
The applicant consents to the processing of personal data for the purpose of issuing the culture and leisure ticket. You will find the information in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) on the following pages.

Information in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) Status: 10/2019

Person responsible for data processing
(Name of authority, registered office, contact details)
City of Frankfurt am Main
Cultural Office (Office 41)
Brückenstraße 3-7
60594 Frankfurt am Main

If applicable, responsible department
(contact details)
Museum administration, investments and IT
41.11.1 Museum administration
Brückenstraße 3-7
60594 Frankfurt am Main
E-mail: info.kulturamt@stadt-frankfurt.de

Contact details of the data protection officer
Data Protection and IT Security Unit
Sandgasse 6,
60311 Frankfurt am Main
E-mail: datenschutz@stadt-frankfurt.de

Purposes and legal bases of data processing
Purposes:
Applying for or issuing a culture and leisure ticket
Authorization upon entry to the facilities
Settlement with the facilities
Proof of advertising consent

Legal bases:
Your data will be processed on the basis of Art. 6 para. 1 (b) GDPR: processing is necessary for the performance of a contract to which you are party.

Consequences of non-provision of data by the data subject:
The provision of personal data is required by law or contract, is necessary for the conclusion of a contract or the data subject is obliged to provide the personal data.

Categories of personal data that are processed:
The provision of personal data is required by law or contract, is necessary for the conclusion of a contract or the data subject is obliged to provide the personal data. Full name including title of the applicant.

Salutation
Street and house number
Zip code and place of residence
Date of birth
E-mail address (optional)
Phone number (optional)
Full name(s) of the child/children
Date of birth of the children for whom a culture and leisure ticket is requested
School or daycare center (if residence is not in Frankfurt am Main)
User data of the card
Log data / usage data / billing data
Login data

If the data was not collected from the data subject – additionally:
Information on the source of the personal data and, if applicable, whether it originates from publicly accessible sources.

Log data on the use of the kUFTI.de website
Cookies are created each time our website is accessed and each time a file is retrieved. Cookies are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is not passed on to third parties. The IP address is anonymized immediately after processing and before it is stored. This data is not directly personal and does not allow the direct identification of Internet visitors.

We use cookies that are not used permanently. Cookies that are not used permanently are automatically deleted after a defined period of time or when the browser is closed.

These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 sentence 1 letter f EU GDPR.
You can prevent the installation of cookies by setting your browser software accordingly if you do not want our website to use cookies. In this case, the use of KUFTI.de is not possible or only possible to a limited extent.

The following cookie is used: Cookie during the use of the website (session cookie)
The session cookie is used to provide the shopping cart function on KUFTI.order.de. KUFTI.order.de also uses this cookie to collect data relating to registration, the ordering process and any consent given. Without this cookie, the system will not function or will not function fully. You will find this cookie in your browser’s cookie settings under the name “shopsess”.
This cookie is automatically deleted 30 minutes after the user leaves the site or is inactive.

Matomo
We use the open source software Matomo (formerly Piwik) for the statistical evaluation of KUFTI.de. The software also uses cookies. Matomo stores the IP addresses in anonymized form. Anonymization is carried out by shortening the IP address by the last octet in accordance with the resolutions of the Data Protection Conference of the Federal and State Data Protection Supervisory Authorities (DSK). This means that no conclusions can be drawn about an Internet visitor. Matomo also collects certain technical information based on the data transmitted by your browser. These are Browser type and version, operating system used, device type, model and brand, screen resolution, the search engine used by your device, the websites visited on our site including the time spent, search terms and keywords, the day and time of your visit, the location of your visit (continent, country, region, city) and the browser language. We only evaluate this information for statistical purposes. The data will not be passed on to third parties.
You can find this in the cookie settings of your browser under the name: “Piwik Analytics Cookie”. If you do not want your data to be used statistically, please deactivate this cookie in the cookie settings.
Matomo’s privacy policy is available at the following link: https://matomo.org/privacy-policy/

Planned data transfer to a third country or to an international organization
A transfer of personal data to a third country within the meaning of Art. 13 para. 1 lit. f GDPR is not intended.

Recipients or categories of recipients of the personal data:
Within the Frankfurt city administration, those departments that are responsible for issuing the culture and leisure ticket and checking the eligibility requirements for receiving the ticket free of charge have access to the data.
Outside the Frankfurt city administration, our service provider has access to the data that it processes for the production of the culture and leisure ticket within the scope of the order from the above-mentioned responsible body in accordance with instructions.

Planned data transfer to a third country or to an international organization
A transfer of personal data to a third country within the meaning of Art. 13 para. 1 lit. f GDPR is not intended.

Storage period of the data, or the criteria for determining the storage period:
Your personal data will be stored after collection for as long as is necessary for the fulfillment of the task.
Usage data is deleted no later than 18 months after the data is collected.
Master data will be deleted no later than 18 months after the end of the validity of the culture and leisure ticket.
Tax-relevant documents are stored in accordance with the statutory periods.

Information on data subject rights
At this point, we expressly draw your attention to your rights to information, correction, deletion, restriction of processing, data portability and objection with regard to all your processed personal data. The legal basis for this is Art. 15 to 21 GDPR.
If the processing of personal data is based on your consent, you can revoke this consent at any time with effect for the future.
You have the right to lodge complaints with the Hessian Data Protection Officer. Postal address: The Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Tel.: 0611 / 1408-0 or e-mail: poststelle@datenschutz.hessen.de.