1 Controller
Responsible for the processing of personal data on this website is:
van den Boom
Fohrder main road 20d
14798 Havel lake
Germany
Telephone: +49 171 2800777
E-Mail: info@galerie-vandenboom.de
2 General information
We process personal data only to the extent necessary for the operation of this website, communication with interested parties, information about exhibitions and events and the maintenance of contacts. Personal data is any information relating to an identified or identifiable person.
The relevant legal basis is set out in the following sections. Insofar as we obtain consent, the processing is based on Article 6 (1) (a) GDPR. Insofar as the processing is necessary for the implementation of pre-contractual measures or for the fulfilment of the contract, it is based on Article 6 (1) (b) GDPR. Legal obligations are based on Article 6(1)(c) GDPR. Processing to safeguard legitimate interests is carried out on the basis of Article 6(1)(f) GDPR.
3 Hosting and server log data
Our website is provided by a technical hosting service provider within the European Union. When accessing the website, the hosting service provider processes in particular IP address, date and time of access, page or file accessed, amount of data transferred, referrer URL, browser type, browser version, operating system and access status. This data is processed in server log files.
The processing is necessary to deliver the website, to ensure its stability and security and to detect technical attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the safe and trouble-free operation of the website. The log data will be deleted or anonymized as soon as it is no longer required for these purposes, unless there is a specific security-relevant evaluation or legal obligation to retain it.
The hosting service provider processes data on our behalf. A contract for order processing pursuant to Article 28 GDPR is concluded with him.
4 Encrypted transmission
This website uses TLS encryption. As a result, data that you transmit to us is protected against disclosure by third parties during transmission. You can usually recognize an encrypted connection by the Internet address starting with https.
5 Contact by form, e-mail or telephone
If you contact us via the contact form, by e-mail or by telephone, we process the data you provide, in particular your name, contact details and the content of your message. Mandatory information in the contact form is marked as such. Further information is voluntary.
The processing is carried out to process your request. If the request relates to the possible acquisition of a work of art, an event or any other contractual service, Article 6(1)(b) GDPR is the legal basis. For general requests, the processing is based on Article 6(1)(f) GDPR; Our legitimate interest lies in the proper response to incoming messages.
We delete request data if the processing has been completed and there are no legal retention obligations, evidence interests or ongoing contractual relationships. We store contract and billing-relevant information in accordance with the legal deadlines.
6 Consent management and cookies
We use consent management, through which you can determine whether optional technologies and external content may be loaded. Your selection is saved so that it can be considered and documented when further page views are made. In particular, consent status, time, a technical identifier and the version of the consent text can be processed.
The storage of technically necessary information takes place on the basis of § 25 paragraph 2 TDDDG. The subsequent processing serves the fulfilment of legal obligations to provide evidence and is based on Article 6(1)(c) GDPR. Optional technologies are only activated on the basis of your consent pursuant to § 25 paragraph 1 TDDDG in conjunction with Article 6 paragraph 1 letter a GDPR.
You can change your selection at any time via the link cookie settings in the page footer or revoke a given consent with effect for the future. The lawfulness of the processing until revocation remains unaffected.
7 Range measurement and visitor statistics
We use IONOS WebAnalytics for statistical evaluation of the use of our website. The provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, where our website is hosted. In particular, the number of visits and page views, the pages and files accessed, the previously visited website (referrer), browser, operating system and device type, date and time of access and the approximate location derived from the anonymised IP address are evaluated.
The statistics shall be compiled in anonymised form only; It is not possible to draw conclusions about individual persons. No cookies are set and no information is stored on or read from your device. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in understanding the use of our offer and improving the website.
IONOS processes the data on our behalf within the European Union. With IONOS, there is a contract for order processing in accordance with Article 28 GDPR.
If you agree to the statistics category, we can evaluate pseudonymous usage data to understand what content is accessed and how the website is used. In particular, shortened or anonymized IP addresses, device and browser information, time and duration of the visit, pages accessed, referrer information and interactions can be processed.
If possible, the evaluation is implemented with a self-hosted Matomo installation, activated IP anonymization and without passing it on to advertising networks. It will only be activated after your consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. You can revoke your consent at any time via cookie settings.
8 Newsletters
You can voluntarily subscribe to our newsletter. We use your e-mail address to inform you about exhibitions, events and news of the gallery. Further information will only be processed if it is marked as voluntary.
The registration takes place in the double opt-in procedure. After registration, you will receive an e-mail in which you must confirm the registration. To prove consent, registration and confirmation times as well as technical log data can be stored. The legal basis for shipping is Article 6(1)(a) GDPR. Evidence documentation is provided to fulfil legal obligations or to defend against legal claims on the basis of Article 6(1)(c) or (f) GDPR.
You can revoke your consent at any time with effect for the future, in particular via the unsubscribe link in each newsletter or by sending a message to info@galerie-vandenboom.de. Your address will then be removed from the active mailing list; a limited blocking list storage may remain necessary so that the revocation is permanently observed.
9 Local image, audio and video files
Images, audio and video files that are loaded directly from our own web server do not lead to a connection to a social media or video platform solely because of their playback. Upon retrieval, our hosting service provider processes the technically required connection data as described in Section 3.
10 Embedded Content from Instagram
On individual pages, content of the Instagram service can be integrated. The provider for users in the European Union is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Instagram content is not loaded until you have consented to the External Media category or have explicitly activated the content via an upstream button.
After activation, your browser connects to Meta. In particular, IP address, device and browser information, page accessed, time, cookie or identifier data and interactions can be transmitted to Meta. If you are logged in to Instagram, Meta can assign the call to your account. Processing in countries outside the European Union, in particular in the USA, cannot be excluded.
The legal basis for loading the content is Section 25(1) TDDDG and Article 6(1)(a) GDPR. For more information: https://privacycenter.instagram.com/policy/
11 Embedded YouTube videos
Videos from YouTube can be integrated on individual pages. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube videos are not loaded until you have consented to the External Media category or activated the video via an upstream button.
After activation, Google may in particular process IP address, device and browser information, page accessed, time, cookie or identifier data and interactions. If you are logged in to Google, the call can be assigned to your account. Processing outside the European Union, in particular in the USA, cannot be excluded.
The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. For more information: https://policies.google.com/privacy?hl=de
12 Embedded cards
For an interactive access map, Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be used. The card will not be loaded into the External Media category until you have given your consent. After activation, in particular IP address, location and device data, the page accessed, time and cookie or identifier data can be processed. Processing outside the European Union cannot be excluded.
The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. For more information: https://policies.google.com/privacy?hl=de
13 External Links and Social Media Sites
Our website may link to external pages and to our Instagram presence. As long as you do not click on such a link, the mere link will not transfer any data to the respective provider. After clicking, the data protection information of the external provider applies.
If you visit our Instagram site or interact with us there, Meta also processes personal data on its own responsibility. In particular, we may process messages, comments, reactions and statistical information in order to communicate and evaluate our appearance. Depending on the transaction, the legal basis is Article 6(1)(a), (b) or (f) GDPR.
14 photo and video recordings at events
At public events of the gallery, overview and event recordings can be created to report on the event and the work of the gallery. Such recordings may be published on our website, on our social media sites, as well as in press and information materials. The legal basis may be Article 6(1)(f) GDPR; Our legitimate interest lies in the public relations and documentation of our events. In doing so, we take into account the rights and interests of the persons depicted.
Close-ups of individual persons or recordings in which a person is the focus of attention, we generally publish on the basis of consent, unless another legal basis applies. Consent can be revoked at any time with effect for the future. If you do not want to be included, you can contact the gallery team on site or afterwards. info@galerie-vandenboom.de turn.
15 Recipients and processors
Personal data is only received by entities that need it to fulfil the described purposes. This may include hosting and IT service providers, newsletter and consent service providers, communication providers, photographers, press and media service providers, as well as public authorities and advisory professions. Insofar as service providers process data on our behalf, we conclude the necessary contracts in accordance with Article 28 GDPR.
16 Transfer to third countries
When external content is activated, personal data may be transferred to countries outside the European Union and the European Economic Area. In the absence of an adequacy decision by the European Commission for the specific recipient, appropriate safeguards such as standard contractual clauses may be used. Despite such guarantees, access risks by authorities of the third country may remain, especially in the case of transfers to the USA. Therefore, we only load external content with your consent.
17 Storage period
We only store personal data for as long as is necessary for the respective purpose. In addition, we store data if required by legal retention periods, the assertion or defense of claims or a continuing purpose of proof. The specific deadlines depend on the type and purpose of the respective processing.
18 Your rights
In accordance with the legal requirements, you have the right to information, correction, deletion, restriction of processing and data portability. You may object to processing based on Article 6(1)(e) or (f) GDPR for reasons arising from your particular situation. You can revoke your consent at any time with effect for the future.
To exercise your rights, a message to info@galerie-vandenboom.de.
19 Right of appeal
You have the right to complain to a data protection supervisory authority. In particular, van den Boom GmbH is responsible for:
The State Commissioner for Data Protection and the Right of Access to Files Brandenburg
Stahnsdorfer dam 77
14532 Kleinmachnow
Telephone: +49 33203 356-0
E-Mail: Poststelle@LDA.Brandenburg.de
Website: www.lda.brandenburg.de
20 No automated decision
Only automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place.
21 update
We adapt this privacy policy if the website, the services used or the legal requirements change.
State of play: 14 September 2026