Privacy Policy according to GDPR

legal information in accordance with Article 13 of the General Data Protection Regulation (GDPR)
We, the Society for Indo-Asian Art Berlin, hereby inform you about the processing of your personal data
by us and about the rights and claims to which you are entitled according to the general data protection
regulations. Which data is processed in detail and how it is used is determined by the regulations agreed in each case.

1. Who is responsible for personal data processing and whom can I contact?

Gesellschaft für indo-asiatische Kunst Berlin e.V. (GIAK)
c/o Museum für Asiatische Kunst
Kunstsammlung Süd-, Südost- und Zentralasien
Takustraße 40
D-14195 Berlin

2. What sources and data do we use?

We process personal data that we receive from you in your capacity as a member of the Society for Indo-Asian Art Berlin.
Relevant personal data includes:

• Your name
• Your adress
• Other communication data
• Date and place of birth
• Nationality

It may also include order data (e.g. payment orders), data relating to the performance of our contractual
obligations (e.g. invoicing and billing), documentation data (e.g. minutes of meetings), data relating to
your use of the telemedia we provide (e.g. access to our website, forum or newsletter).

3. Why do we process your data (purpose of the processing) and on what legal basis?

We process your personal data on the basis of your membership of the GIAK and, in

Accordance with Article 9(2) of the GDPR, to

• administer your membership of the Society
• invite to statutory events
• process fees and donations.

Accordance with Article 9(2), on the basis of your consent you have given to:

• be kept informed about the work of the Society
• be kept informed and invited to other events
• the transfer of your personal data to the Prussian Cultural Heritage Foundation.

Accordance with Article 9(1), on the basis of your consent you have given to:

• respond to your specific request
• be included in the relevant mailing list events
• be included in the mailing list for invitations.

4. How long will my data be stored?

We will process and store your personal data for as long as it is necessary for the purposes set out above
or as required by applicable law and to maintain our relationship with you.

Business records are kept for a maximum of 6 and 10 years in accordance with the requirements of the
German Commercial Code and the German Fiscal Code.

Unless you object, we will use your information to maintain and develop our relationship for the benefit of both parties.
If you ask us to delete your data, we will do so immediately, unless legal retention periods prevent us from doing so.

5. Is data transferred to a third country or to an international organisation?

Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is
required for the execution of your orders, prescribed by law or if you have given us your consent. We will
notify you of the details separately, where required by law.

6. What data protection rights do I have?

Every data subject has a right of access (article 15 GDPR), a right to rectification (article 16 GDPR), a
right to erasure (article 17 GDPR), a right to restriction of processing (article 18 GDPR) and a right to
data portability (article 20 GDPR).

The right of access and right to erasure are subject to the restrictions under §§ 34 and 35 BDSG.
Data subjects also have a right to lodge a complaint with a supervisory authority (article 77 GDPR in
conjunction with § 19 BDSG).

We hope that this information has helped you to exercise your rights.
If you would like more detailed information about data protection rules, please contact your data
protection authority.

The Data Protection Officer
As of: 2023