Privacy
Settings
To continuously enhance our digital offerings and provide you with a better user experience, we collect and analyze statistical data during your visit to our website. We use the open-source web analytics platform Matomo. You can opt out of this service here. Click here to decline.
Privacy Policy
Google Tag Manager
This site uses Google Tag Manager. The publisher is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The Google Tag Manager acts as a container through which scripts can be integrated into the website. This constitutes a legitimate interest under Article 6(1)(f) GDPR. For more information on the handling of user data, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en
1. Privacy at a Glance / General Information
The following information provides a brief overview of what happens with your personal data when you visit our website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy, which is listed below this text.
Data Collection on Our Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details in the legal notice (Imprint) of the website.
How do we collect your data?
Some of the data is collected because you voluntarily provide it—such as by filling out a contact form. Other data is automatically collected when you visit the website by our IT systems. These are primarily technical data (e.g., Internet browser, operating system, or time of page access). This data collection occurs automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request correction, blocking, or deletion of this data. For this and other questions on data protection, you can contact us anytime using the address provided in the legal notice. You also have a right to lodge a complaint with the relevant supervisory authority.
Analytics Tools and Third-Party Tools
When you visit our website, your browsing behavior may be statistically evaluated, mainly through cookies and analytics programs. The analysis of your browsing behavior is generally anonymous; the behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. More details are available in our privacy policy under "Third-party modules and analytics tools." You may object to this analysis, and the means to do so are outlined in our privacy policy.
2. General Notes and Mandatory Information on Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy. When you use the website, various personal data are collected. Personal data is data that can identify you personally. This privacy policy explains which data is collected and how and why we use it. We also note that data transmission over the internet (e.g., via email) may have security vulnerabilities. A completely secure transmission of data to prevent third-party access is not possible.
Responsible Body
The entity responsible for data processing on this website is:
Deichtorhallen Hamburg GmbH
Deichtorstraße 1–2, 20095 Hamburg
Phone: +49 (0)40 32103-0
Email: mail@deichtorhallen.de
The responsible body is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Withdrawal of Your Consent to Data Processing
Many data processing steps are only possible with your explicit consent. You can withdraw consent at any time by sending an informal email. The legality of any data processing until the withdrawal remains unaffected.
Right to Data Portability
You have the right to receive personal data that we process automatically based on your consent or for the purpose of fulfilling a contract in a common, machine-readable format. If you request direct transfer to another controller, this will only occur if technically feasible.
SSL / TLS Encryption
This site uses SSL/TLS encryption to protect the transmission of sensitive information (e.g., orders or inquiries). You can recognize a secured connection when "https://" appears in the browser’s address bar along with a lock symbol. With SSL/TLS active, the data you submit cannot be read by third parties.
Information, Blocking, Deletion
Under applicable law, you may request information about your stored personal data free of charge, including its origin, recipients, and purpose, and you may request correction, blocking, or deletion. Please contact us via the legal notice for further inquiries.
3. Data Protection Officer (Statutorily Required)
We have appointed a Data Protection Officer for our company:
Jurist Jens O. Brelle – Art Lawyer
c/o Deichtorhallen Hamburg GmbH, Deichtorstraße 1–2, 20095 Hamburg
Phone: +49 (0)40 32103-0
Email: datenschutz@deichtorhallen.de
4. Guided Tours and Workshops
Deichtorhallen offers guided tours and workshops for the current exhibitions at the HALLE FÜR AKTUELLE KUNST, HAUS DER PHOTOGRAPHIE, and SAMMLUNG FALCKENBERG in Hamburg-Harburg. The data required for ticket processing is transferred to Museumsdienst Hamburg as a contract data processor. Additional information on data handling can be found in the Museumsdienst Hamburg’s privacy notice: https://museumsdienst-hamburg.de/datenschutzhinweise/.
5. Data Collection on Our Website – Cookies
Our web pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies help make our offerings more user-friendly, effective, and secure. Cookies are small text files stored on your device by your browser.
Most of the cookies we use are “session cookies,” which are deleted automatically at the end of your visit. Other cookies remain until you delete them, allowing us to recognize your browser on your next visit.
You can configure your browser to notify you about cookie usage, allow cookies on a case-by-case basis, disable cookies, or automatically delete cookies upon closing. Disabling cookies may limit the functionality of this website.
Cookies necessary for electronic communication or delivering desired features (e.g., shopping cart) are stored per Article 6(1)(f) GDPR, as the website operator has a legitimate interest in ensuring technically flawless and optimized service. Other cookies (e.g., for behavior analysis) are discussed separately in this privacy policy.
Server Log Files
The provider of this site collects and stores information automatically in server log files that your browser transmits to us. These include:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
We do not consolidate this data with other sources. Processing is based on Article 6(1)(b) GDPR, which allows processing for contractual or pre-contractual measures.
Website Registration
You may register on our website to access additional features. We only use registration data for the purpose of providing the service. Required fields must be filled in; otherwise, registration will be denied.
We may use your registration email to inform you of important changes (e.g., in service scope or technical updates).
Registration data processing is based on your consent (Article 6(1)(a) GDPR), and you can withdraw consent at any time by informal email—without affecting the lawfulness of processing that occurred before the withdrawal.
Provided data is stored for as long as you are registered and then deleted, unless legal retention periods apply.
SoundCloud
Our website may use SoundCloud plugins (SoundCloud Limited, Berners House, 47–48 Berners Street, London W1T 3NF, UK). When such a plugin is activated during your visit, a direct connection is established between your browser and SoundCloud’s servers. SoundCloud receives information that you visited the page, along with your IP address. If you click a “Like” or “Share” button while logged into your SoundCloud account, the page visit may be linked to your account. We do not access the content of data transmitted or how SoundCloud uses it.
SoundCloud is used under Article 6(1)(f) GDPR, as we have a legitimate interest in visibility on social media. More information can be found in SoundCloud’s privacy notice: https://help.soundcloud.com/hc/en/articles/115003570428-Privacy-on-SoundCloud. If you don’t want SoundCloud to link your page visit to your account, log out of SoundCloud before using the plugin.
Analytics Tools and Advertising
Matomo (formerly Piwik)
This website uses the open-source web analytics tool Matomo. Matomo uses technologies (e.g., cookies or device fingerprinting) to recognize users across pages and analyze behavior. Information collected by Matomo about website use is stored on our server. IP addresses are anonymized before storage.
Matomo allows us to track website usage, including when pages were accessed and from which region, along with various log files (e.g., IP address, referrer, browser, OS). It also helps us measure user actions (e.g., clicks, purchases).
Use of this tool is covered under Article 6(1)(f) GDPR, as we have a legitimate interest in anonymized user behavior analysis to optimize our website and advertising. If consent was obtained (e.g., for cookies), processing occurs under Article 6(1)(a) GDPR and is revocable anytime.
Hosting
We host Matomo exclusively on our own servers, so all analytics data remains with us and is not shared.
7. Newsletter: Newsletter Data
If you wish to subscribe to the newsletter offered on the website, we require your email address and verification that you own it and consent to receiving the newsletter. No other data is collected or is optional. These data are used exclusively for sending the requested information and are not shared with third parties.
Processing of newsletter signup data is based on your consent (Article 6(1)(a) GDPR). You can withdraw this consent anytime, for example via an “unsubscribe” link in the newsletter. The legality of processing before withdrawal remains unaffected.
Newsletter data is retained until you unsubscribe. Data held for other purposes (e.g., member accounts) remain unaffected.
8. Online Shop
Data Collection and Processing
Personal data is collected during ticket or merchandise ordering for payment processing. We process this data under Article 6(1)(b) GDPR for contractual obligations.
If you register an account in our ticket shop, all provided or later added information is stored. Required information includes: title (Mr./Ms.), first and last name, address (street, number, postal code, city, country), email address, chosen password, payment method, and shipment/invoice data if applicable.
Upon registration, you receive a unique customer number and registration date. As a guest, required information includes: title, first and last name, address, and email—stored per legal retention periods.
We process this data for order handling, notifying you of your order status, and delivering purchased products (especially online tickets and confirmations). We also contact you if issues arise or for follow-ups.
Data may be shared with cooperating financial service providers for billing or payment processing.
For events, we may work with freelance cultural guides. Data is shared only when necessary for booking and handled per GDPR. Shared data includes: group leader’s name, group size, age group, institution (if applicable), institution name, phone number, email, address, booked event, and, if it’s a school class, class level. No further data is shared unless explicitly consented to. No data is shared for advertising without consent. Processing is based on contractual necessity (Article 6(1)(b) GDPR).
To simplify booking for events, exhibitions, etc., we use the visitor management system of Museums‑dienst Hamburg (Historical Museums Foundation Hamburg). All required booking data remains our responsibility. The provider is:
Stiftung Historische Museen Hamburg / Museumsdienst Hamburg
Glacischaussee 2–4, 20359 Hamburg
Details are available in their privacy notice: https://museumsdienst-hamburg.de/datenschutzhinweise/.
9. Plugins and Tools
YouTube
Our site uses YouTube plugins by Google (YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA). Visiting a page with a plugin connects your browser with YouTube’s servers and notifies them which page you visited. If you are logged into your YouTube account, YouTube may link your visit to your profile. To prevent this, log out of your YouTube account before activating the plugin.
Use of YouTube is based on our legitimate interest in enhancing the presentation of our content (Article 6(1)(f) GDPR). More info: https://www.youtube.com/intl/ALL_en/howyoutubeworks/user-settings/privacy/.
10. Newsletter (Duplicate Section)
If you subscribe to the newsletter, we require your email and confirmation of ownership and consent. We use double opt-in to ensure consent is granted properly. Data is used only for sending requested information.
Newsletter software is provided by Newsletter2Go GmbH, which is prohibited from selling your data or using it for other purposes. Newsletter2Go is a German, GDPR-certified provider. More information: https://newsletter2go-help-de.sendinblue.com/datenschutz/sicherheit.html
Consent can be withdrawn anytime—e.g., via an “unsubscribe” link. Please check our privacy policy regularly for updates due to technical changes.
Final Note
Data protection measures are subject to technical updates. Please review our privacy policy regularly for the latest information.
© 2025 Deichtorhallen Hamburg