X (formerly Twitter) Accounts of the State Palaces and Gardens of Baden-WürttembergData Protection Information

As the operator of an account on the X platform (formerly Twitter), we, along with the operators of the X social media network, Twitter International Unlimited Company (hereinafter simply ‘X’), are controllers in the sense of Article 4(7) of the General Data Protection Regulation (GDPR).

When visiting our X page, personal information is processed by the controllers.

Below, we will inform you of which data is collected, in what way it is processed, and what rights you have regarding these.

The X terms of service, the X privacy policy, and the X rules and guidelines apply to the use of X, as well as the other terms and guidelines included there.

Name and contact information of the controller

The following entity is responsible for the collection and use of personal information in the sense of the data protection law:

Staatliche Schlösser und Gärten
Baden-Württemberg – Zentrale
Schlossraum 22a
76646 Bruchsal, Germany

represented by CEO Manuel Liehr


Phone +49(0)72 51.74 -27 27
Fax +49(0)72 51.74 -27 11

E-mail info@ssg.bwl.de
Web: https://www.schloesser-und-gaerten.de

You can find more information about us on our website at http://www.schloesser-und-gaerten.de/wir-ueber-uns/impressum/.

(hereinafter referred to as “SSG” or “we”)

jointly with

Twitter International Unlimited Company

One Cumberland Place

Fenian Street

Dublin 2

D02 AX07

Ireland

registered at the Companies Registration Office of the Republic of Ireland.

Representatives: Fai Cheung, Diego De Lima Gualda, Mohit Bhargava

Business Identification Number: 503351

VAT ID number: IE9803175Q

Customer Service:  Contact Twitter International Unlimited Company

via support.twitter.com/forms

Fax:  1-415-222-9958

Domestic authorized agent for service in accordance with Section 5 (1) of the Network Enforcement Act (NetzDG), Section 24d of the Protection of Young Persons Act (JuSchG), Section 21 (2) of the Interstate Treaty on the Protection of Minors in the Media (JMStV) and Section 92 of the Interstate Media Treaty:

T. I. Kontakt GmbH

c/o von BOETTICHER Rechtsanwälte

Partnerschaftsgesellschaft mbB

Widenmayerstraße 6, D 80538 München

This authorization shall apply exclusively to service in official proceedings pursuant to Section 4 of the NetzDG, Section 24b of the JuSchG, Section 24 of the JMStV and Section 115 of the Interstate Treaty on Media, as well as in legal proceedings before German courts for the dissemination of illegal content within the meaning of Section 1 (3) of the NetzDG and Section 21 (2) of the JMStV.

To reach X via e-mail: de.support@twitter.com

(hereinafter referred to as ‘X’)

Name and contact information of the controller

The following entity is responsible for the collection and use of personal information in the sense of the data protection law:

Staatliche Schlösser und Gärten
Baden-Württemberg – Zentrale
Schlossraum 22a
76646 Bruchsal, Germany

represented by CEOs Michael Hörrmann and Manuel Liehr

Phone +49(0)72 51.74 -27 27
Fax +49(0)72 51.74 -27 11

E-mail info@ssg.bwl.de
Web: https://www.schloesser-und-gaerten.de

You can find more information about us on our website at http://www.schloesser-und-gaerten.de/wir-ueber-uns/impressum/.

(hereinafter referred to as “SSG” or “we”)

jointly with

Twitter International Company
One Cumberland Place
Fenian Street
Dublin 2
D02 AX07
Ireland

registered at the Companies Registration Office of the Republic of Ireland.

Representatives: Laurence O'Brien, Robert O'Shea

Business Identification Number: 503351
 

To reach Twitter via e-mail: de.support@twitter.com

(hereinafter referred to as “Twitter“)

Contact information for the controller’s data security officer

Our data security officer can be reached at the following address:

Official Data Security Officer
Vermögen und Bau Baden-Württemberg
General Management
Rotebühlplatz 30
70173 Stuttgart
Phone +49(0)711 / 6673-3521
datenschutz@vbv.bwl.de

The X data security officer can be contacted via an online form provided by X.

Scope of the processing of personal data on the Twitter account

As operators of the X account, we and X itself share responsibility for the processing of personal information belonging to followers, visitors, users on or via the page.

Information on how our company processes information can be found in our privacy policy.

Additional information on how X handles personal data is available in their privacy policy.

Use of Insights and cookies

In conjunction with operation of an X account, X offers an analysis function, which we use to collect anonymized statistical data on users of and interactions with our X account. To this end, X stores a cookie on the end device of any user who visits our account. This cookie contains a distinct user code. The user code can be linked to the data of those users who are registered with X.

The information stored in the cookie is received, recorded and processed by X. Furthermore, other sites, such as X partners, can use cookies to provide services to companies advertising on X services. Additional information on the use and implementation of cookies by X can be found here: https://help.twitter.com/de/rules-and-policies/twitter-cookies#

Reasons for processing

The processing of information is intended to enable Twitter itself to improve their system of advertising across its network. We have no influence over or knowledge of how the data is processed by X after data transfer has occurred. X is therefore solely responsible for all subsequent data processing after data transfer (cf. Judgment of the ECJ from 07/29/2019 – C-40/17).

Information on the purpose and scope of further data collection by X, as well as your rights and options for protecting your privacy with regards to such collection within your X account, can be found in the X privacy policy (https://twitter.com/de/privacy).

The data processing is also intended to provide us as the X account controller with statistics compiled by X based on visits to our X account. The purpose of this is to direct the marketing of our activity. For example, this allows us to acquire information about the profiles of users who value or make use of specific content on our X account, so that we can provide them with relevant information and develop relevant functions that would be of greater interest to them. 

In order to improve our understanding of how we can better achieve our goals with our X account, demographic and geographic assessments are also performed on the collected data and provided to us. We can use this information to toggle targeted interest-based advertisements without receiving direct information about the identity of the visitor. Insofar as visitors use X on multiple end devices, collection and assessment may also take place across all devices if they belong to a registered visitor logged into their own profile.

The visitor statistics compiled are transferred exclusively in an anonymized format. We have no access to the underlying data. Only Twitter has access to this data.

Legal right and legitimate interest

We operate this X account in order to present ourselves to and communicate with X users as well as other interested parties who visit our X account. The processing of users’ personal information is carried out on the basis of our legitimate interests in an optimal presentational of SSG (Article 6(1)(f) of the GDPR).

Data transfer

It is conceivable that personal data may be processed outside the European Union and the European Economic Area by the X parent company, headquartered in the U.S. More detailed information from X can be found here: X privacy policy X’s transfer of data to the US is covered under the EU standard contractual clauses agreed with its parent company in the US. Our contract partner, however, is Twitter International Unlimited Company, headquartered in Ireland, and thus within the European Union.

We do not transfer any personal data ourselves.

Options to object

Twitter users can influence the extent to which their user behavior during a visit to Twitter or their use of Twitter services, including our Twitter page, is recorded by changing the settings in their account.

The processing of information via Twitter's cookies can also be prevented by changing your browser settings so that cookies for third-parties or specifically for Twitter are not permitted.

If your personal data is processed, then you are a “data subject” and are entitled to the following rights.

Information requests and assertions of additional data subject rights should be asserted directly with Twitter. As the provider of the social network and all other Twitter services, Twitter has sole control over the direct access to the necessary information and can further undertake any required measures and provide information. To do so, use the contact information provided above.

Should you still require our support in this matter, you can always contact us using the contact information provided above.

Concerning your questions and your rights as a user:
Should you contact us, we will answer your inquiry ourselves to the extent that we are able to do so based on our own data processing and will otherwise forward your inquiry directly to Twitter along with a request to provide the information, since we have no insight into Twitter's data processing.

Right to request access

You have the right to obtain free confirmation from us as to whether we are processing your personal data. If this is the case, you have the right to request access to this personal data and also have the right to obtain further information as specified in Article 15 of the GDPR.

Right to rectification

You have the right to request that we immediately rectify your personal data in the event that this data is incorrect. You also have the right—taking into account the purposes of processing specified above—to request the completion of incomplete personal data—also by means of a supplemental statement.

Right to erasure

You have the right to request the immediate deletion of your personal data if one of the conditions specified in Article 17 of the GDPR applies.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data if one of the conditions specified in Article 18 of the GDPR applies.

Right to information

If you exercise your right of rectification, to erasure or to restriction of processing vis-à-vis the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

You also have the right to be informed about those recipients by the controller upon request.

Right to data portability

You have the right to receive the personal data that you have provided us with in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance by us if the conditions specified in Article 20 of the GDPR apply.

Right to object to processing for legitimate interests

If we process personal data on the basis of Article 6(1)(f) of the GDPR (meaning for the purposes of legitimate interests), you have the right to object to the processing of your personal data by us at any time for reasons relating to your unique situation. If no compelling legitimate grounds for the further processing of your data can be demonstrated which would override your interests, rights and freedoms, we will no longer process your personal data (cf. Article 21 of the GDPR).

If personal data are processed for the purposes of direct marketing, you have the right to object to the processing of the respective personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
 

Technical mechanisms that you use such as, for example, “Do Not Track” mechanisms installed in your web browser that send us clear information regarding your preferences, are also considered an objection in this context.

Right to withdraw consent

You have the right to withdraw your consent to the collection and use of your personal data with effect for the future at any time. This does not alter the legality of the processing carried out on the basis of the consent until revocation.

Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between us and you, is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

We do not make these kinds of automated decisions.

Voluntary provision of personal data

As a rule, if the provision of personal data is a statutory or contractual requirement, we will inform you of such at the time when we obtain the personal data. Some of the data that we obtain is necessary for entering into a contract; specifically in the event that we are otherwise unable to meet or to sufficiently meet our contractual obligations to you. You are not obligated to provide us with your personal data. However, failure to provide data may result in us being unable to provide you with or offer you a desired service, action, measure, or the like, or make it impossible for us to enter into a contract with you.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other rights, you have the right to lodge a complaint with a supervisory authority for data protection at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you violates the GDPR.

This data protection information was last updated on: 10/05/2023