YouTube Channel of the State Palaces and Gardens of Baden-WürttembergData Protection Information

As the operator of this channel on YouTube, we and YouTube, of Google Ireland Limited (hereinafter simply Google), are controllers in the sense of Article 4(7) of the General Data Protection Regulation (GDPR).

When visiting our YouTube channel, personal information is processed by the controllers.

Below, we will inform you of which data is collected, in what way it is processed, and what rights you have regarding these.

Google's terms of service and Google's privacy policy, as well as other terms and guidelines listed there, apply to the use of Google.

Name and contact information of the controller

The following entity is responsible for the collection and use of personal information in the sense of the data protection law.

Staatliche Schlösser und Gärten
Baden-Württemberg – Headquarters
Represented by Managing Director Manuel Liehr
Schlossraum 22 a
76646 Bruchsal
Phone +49(0)72 51.74 -27 27
Fax +49(0)72 51.74 -27 11
E-mail info(at)ssg.bwl.de
 

(hereinafter referred to as “SSG” or “we”)

jointly with

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Irland

Phone: +353 1 543 1000
Fax: +353 1 686 5660
E-mail: support-deutschland@google.com

Link to contact them electronically

Management: Elizabeth M. Cunningham, Nicholas Leeder

Google Ireland Limited is an established and registered company according to Irish law. Commercial Register Number: 368047.

(hereinafter referred to as “Google“

Contact information for the controller’s data security officer

Our data security officer can be reached at the following address:

Official Data Security Officer
Vermögen und Bau Baden-Württemberg
General Management
Rotebühlplatz 30
70173 Stuttgart
Phone +49(0)711 / 6673-3521
datenschutz@vbv.bwl.de

Google’s data security officer can be contacted via an online form provided by Google: https://www.youtube.com/t/contact_us

Shared responsibility for data processing

We, as operators of the YouTube channel, and Google, as the platform provider for YouTube, share responsibility for processing of personal information belonging to subscribers, visitors, users on or via the channel.

Information on how our company processes information can be found in our privacy policy.

Information on how Google handles personal data for YouTube can be found in their privacy policy.

Use of Insights and cookies

In conjunction with operation of a YouTube channel, Google offers an analysis function, which we use to collect anonymized statistical data on users of and interactions with our channel. To this end, Google stores a cookie on the end device of any user who visits our channel. This cookie contains a distinct user code. The user code can be linked to the data of those users who are registered with YouTube.

The information stored in the cookie is received, recorded and processed by Google. Furthermore, other sites, such as Google partners, can use cookies to provide services to companies advertising on YouTube or other Google services. Additional information on the use and implementation of cookies by Google can be found here: https://policies.google.com/technologies/cookies?hl=de

Reasons for processing

The processing of information is intended to enable Google to improve their system of advertising across its network. We have no influence over or knowledge of how the data is processed by Google after data transfer has occurred. Google is therefore solely responsible for all subsequent data processing after data transfer (cf. Judgment of the ECJ from 07/29/2019 – C-40/17).

Information on the purpose and scope of further data collection by Google, as well as your rights and options for protecting your privacy with regards to such collection within your Google account, can be found in Google's privacy policy (http://facebook.com/privacy/explanation.php).

It is also intended to provide us as operator of the YouTube channel with statistics compiled by Google based on visits to our YouTube channel. The purpose of this is to direct the marketing of our activity. For example, this allows us to acquire information about the profiles of users who like or access specific content on our YouTube channel, so that we can provide them with relevant information and develop relevant functions that would be of greater interest to them. 

In order to improve our understanding of how we can better achieve our goals with our YouTube channel, demographic and geographic assessments are also performed on the collected data and provided to us. We can use this information to toggle targeted interest-based advertisements without receiving direct information about the identity of the visitor. Insofar as visitors use YouTube on multiple end devices, collection and assessment may also take place across all devices if they belong to a registered visitor logged into their own profile.

The visitor statistics compiled are transferred exclusively in an anonymized format. We have no access to the underlying data. Only Google has access to this data.

Legal right and legitimate interest

We operate this YouTube channel in order to present ourselves to and communicate with YouTube users as well as other interested parties who visit our YouTube channel. The processing of users’ personal information is carried out on the basis of our legitimate interests in an optimal presentational of SSG (Article 6(1)(f) of the GDPR).

Data transfer

It is conceivable that personal data may be processed outside the European Union or the European Economic Area by Google Ireland’s parent company, Google LLC, headquartered in the U.S. Specifics can be found in Google’s privacy policy. Our contract partner, however, is Google Ireland Limited, headquartered in Ireland, and thus within the European Union.

In addition, the U.S. parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA is certified under the EU-U.S. Data Privacy Framework (DPF), so that the transfer of data there is permitted under the European Commission’s adequacy decision for the U.S.

We do not transfer any personal data ourselves.

Options to object

YouTube users can influence the extent to which their user behavior during a visit to or their use of Google services, including our YouTube channel, is recorded by changing the settings in their account.

The processing the data via Google's cookies can also be prevented by changing your browser settings so that cookies for third-parties or specifically for Google are not permitted.

If your personal data is processed, then you are a “data subject” and are entitled to the following rights.

Information requests and assertions of additional data subject rights should be asserted directly with Google. As the provider of YouTube and other Google services, Google has sole control over the direct access to the necessary information and can further undertake any required measures and provide information. To do so, use the contact information provided above.

Should you still require our support in this matter, you can always contact us using the contact information provided above.

Concerning your questions and your rights as a user:
Should you contact us, we will answer your inquiry ourselves to the extent that we are able to do so based on our own data processing and will otherwise forward your inquiry directly to Google along with a request to provide the information, since we have no insight into Google's data processing.

Right to request access

You have the right to obtain free confirmation from us as to whether we are processing your personal data. If this is the case, you have the right to request access to this personal data and also have the right to obtain further information as specified in Article 15 of the GDPR.

Right to rectification

You have the right to request that we immediately rectify your personal data in the event that this data is incorrect. You also have the right—taking into account the purposes of processing specified above—to request the completion of incomplete personal data—also by means of a supplemental statement.

Right to erasure

You have the right to request the immediate deletion of your personal data if one of the conditions specified in Article 17 of the GDPR applies.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data if one of the conditions specified in Article 18 of the GDPR applies.

Right to information

If you exercise your right of rectification, to erasure or to restriction of processing vis-à-vis the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

You also have the right to be informed about those recipients by the controller upon request.

Right to data portability

You have the right to receive the personal data that you have provided us with in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance by us if the conditions specified in Article 20 of the GDPR apply.

Right to object to processing for legitimate interests

If we process personal data on the basis of Article 6(1)(f) of the GDPR (meaning for the purposes of legitimate interests), you have the right to object to the processing of your personal data by us at any time for reasons relating to your unique situation. If no compelling legitimate grounds for the further processing of your data can be demonstrated which would override your interests, rights and freedoms, we will no longer process your personal data (cf. Article 21 of the GDPR).

If personal data are processed for the purposes of direct marketing, you have the right to object to the processing of the respective personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
 

Technical mechanisms that you use such as, for example, “Do Not Track” mechanisms installed in your web browser that send us clear information regarding your preferences, are also considered an objection in this context.

Right to withdraw consent

You have the right to withdraw your consent to the collection and use of your personal data with effect for the future at any time. This does not alter the legality of the processing carried out on the basis of the consent until revocation.

Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between us and you, is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

We do not make these kinds of automated decisions.

Voluntary provision of personal data

As a rule, if the provision of personal data is a statutory or contractual requirement, we will inform you of such at the time when we obtain the personal data. Some of the data that we obtain is necessary for entering into a contract; specifically in the event that we are otherwise unable to meet or to sufficiently meet our contractual obligations to you. You are not obligated to provide us with your personal data. However, failure to provide data may result in us being unable to provide you with or offer you a desired service, action, measure, or the like, or make it impossible for us to enter into a contract with you.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other rights, you have the right to lodge a complaint with a supervisory authority for data protection at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you violates the GDPR.

This data protection information was last updated on: 10/05/2023