Privacy Statement

We are deeply committed to protecting and handling your personal data with great care and in compliance with legal regulations.

The following items provide an explanation of how and for what purpose your personal data is collected and processed when you use our website.

1. Information on the Collection of Personal Data

(1) Personal data includes all data that directly relates to you and can be used to identify you as a person, e.g. your name, address, e-mail addresses and user behaviour.

(2) The data controllers as described in Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) are

Galerie Gerda Bassenge
Erdener Str. 5a, 14193 Berlin, Germany
Authorised general partner: David Bassenge

Phone: +49 (0)30 - 893 80 29 - 0
Fax: +49 (0)30 - 891 80 25
E-mail: info@bassenge.com

and

Bassenge Buch-Auktionen GbR
Erdener Str. 5a, 14193 Berlin, Germany
Authorised representatives: Dr. Markus Brandis, David Bassenge

E-mail: books@bassenge.com

and

Nicolaas Teeuwisse und Tilman Bassenge Photo-Auktionen GbR
Erdener Str. 5a, 14193 Berlin, Germany
Authorised representative: David Bassenge
E-mail: art@bassenge.com

(3) The aforementioned persons are jointly responsible pursuant to Art. 26 Sec. 1 GDPR. Upon request, we will be happy to send you the agreement that regulates the respective obligations of the persons responsible with regard to the GDPR. Please refer to the contact details of Galerie Gerda Bassenge for this request. According to the agreement mentioned above, Galerie Gerda Bassenge is primarily responsible for data protection and your point of contact should you wish to assert your rights granted under the GDPR. However, you are free to assert your rights against any data controller.

(4) We require a legal basis for collecting and processing your personal data. The sections below establish the relevant legal basis for the respective processing of personal data. The legal basis for data processing can also be derived from your voluntary consent to the respective data processing.

(5) When you contact us by e-mail, the data you provide (e.g. e-mail address, name and, if applicable, telephone number, content, etc.) will be stored and processed by us in order to answer your questions. We need your e-mail address so we can answer your enquiry.

The data will be processed for the purpose of contacting us in accordance with Art. 6 Sec. 1 S. 1 lit. a GDPR on the basis of your voluntary consent.

We will delete the data arising in this context as soon as retention is no longer necessary, e.g. after we answered your enquiry; in cases where legal retention obligations exist, we will limit processing.

(6) A third-party provider commissioned by us provides us with data processing services relating to website hosting and presentation. The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. f GDPR. Our legitimate interests are accessibility and the correct presentation of our website. This service provider is based in a country of the European Union or the European Economic Area.

(7) Within the scope of data processing on our behalf, intra-community IT service providers provide the following services for us: maintenance of the customer database and of our auction program including storage of all data collected by means of it, the evaluation of data collected via our website, backup of all data collected and backup and storage of accounting data. The legal basis for this data processing is provided in Art. 6 Sec. 1 S. 1 lit. f GDPR. It is in our legitimate interest not to have to provide these services ourselves and to implement them using data technology.

(8) We take physical, technical and administrative security measures to adequately protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These security measures include firewalls, data encryption, physical access restrictions to our data centres and authorization controls for access to data.

2. Processing Data of Visitors to Our Website

(1) When you visit our website for the sole purpose of obtaining information, we only collect the personal data that your browser transmits to our server. This information is temporarily stored in a so-called log file. We collect the following data of visitors to our website:

• IP address,
• Date and time of the request,
• Time zone difference to Greenwich Mean Time (GMT),
• Content of the request (specific page),
• Access status/HTTP status code,
• The amount of data transferred in each case,
• Web page from which the request originated,
• Browser,
• Operating system and interface used, and
• Language and version of the browser software.
  

This data will be processed by us for the following purposes:

• Ensure a smooth connection to the website,
• Ensure convenient use of our website,
• Evaluate the system security and stability, as well as
• For other administrative purposes.

The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. f GDPR. Our legitimate interests derive from the purposes for data processing listed above. The aforementioned data will be deleted no later than seven days after the end of your visit to the site.

(2) We use so-called 'cookies' on various pages to improve the usability of our website, to enable the use of certain functions, to display relevant products or for market research purposes. Cookies are small text-based files that are automatically stored on your end device.

Use of cookies:

a) This website uses the following types of cookies, the scope and mode of operation of which are explained below:

Transient cookies

Persistent cookies

b) Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, which is used to assign different requests of your browser to a common session. These cookies thus allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that in this case you may not be able to use all functions of this website.

e) You can view the duration of retention in the overview in the cookie settings of your web browser.

The legal basis for this data processing is provided in Art. 6 Sec. 1 S. 1 lit. f GDPR. Our legitimate interests derive from the purposes mentioned above (increased usability, etc.).

3. Data Processing for Watch List / Customer Account

(1) If you wish to use our watch list, we will collect and process your data (contact data, lots, etc.) in order to make it easier for you to retrieve items you are interested in. The use of the watch list is voluntary. The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. a GDPR. You can delete your entries in the watch list at any time using the function provided there. Otherwise, we will store your data for as long as you keep using the watch list.

(2) If you wish to open a customer account for our website, we will collect and process the personal data you provide during registration. The opening of a customer account is voluntary. The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. a GDPR. We will store this data for as long as you are a customer of ours. You can delete your customer account at any time by sending a message to the contact listed above.

4. Data Processing for the Submission of Bids / Issuing Purchase Contracts

(1) If you want us to place bids for you at an auction, you must first register with us as the initial bidder. During this registration, we will collect the following personal data in order to identify you beyond any doubt, to process your purchase order and to be able to add you to our customer record:

Contact details

• Reference of another German auction house with regard to your creditworthiness, if applicable
• Reference of a bank with regard to your creditworthiness, if applicable
• Credit card information
• Copy of your official photo ID

(2) The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. b GDPR. The copy of your photo ID may fall into a special personal data category within the meaning of Art. 9 GDPR with regard to the photo. By registering for this service, you also give us your express consent to collect and process this personal data for the aforementioned purposes. The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. a GDPR.

(3) During the transaction, we also make use of external service providers, in particular payment service providers, to process your purchase contract. We will pass on your payment data to these companies to enable payment processing.

(4) Furthermore, in order to fulfil the contract, we will pass on your data to the shipping company commissioned with the delivery if this is necessary for the delivery of acquired works and/or you requested a delivery.

(5) We will store the aforementioned data for as long as you remain our customer. Once a purchase contract has been executed, we are additionally required to meet obligations of retention with regard to personal data. These are derived, among other sources, from Section 147 of the Tax Code and Section 257 of the Commercial Code (10 years each) and Section 45 of the Cultural Goods Protection Act (30 years). The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. c GDPR.

5. Data Processing Relating to Delivered Goods / Placement of a Sales Order

(1) If you would like to submit an item to us so that we can sell it for you at an auction, you must register with us as a seller. During this registration, we will collect the following personal data in order to identify you, to process your sales order and to be able to add you to our customer record:

• Contact details,
• Author or title of the work to be submitted,
• Further information regarding the work to be submitted.

(2) The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. b GDPR.

(3) Clearly identifiable works with an estimated price of at least EUR 2,500 will be compared with the International Art and Antique Loss Register Limited, First Floor, 63–66 Hatton Garden, London, EC1N 8LE prior to the auction.

(4) We will store the aforementioned data for as long as you remain our customer. Once a sales contract has been executed, we are required to meet obligations of retention with regard to personal data. These are derived, among other sources, from Section 147 of the Tax Code and Section 257 of the Commercial Code (10 years each) and Section 45 of the Cultural Goods Protection Act (30 years). The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. c GDPR.

6. Data Processing for Catalogue Orders

(1) If you wish to order a catalogue via our website, we will collect and process the personal data requested in our order form. We need your contact details in order to fulfil the purchase contract.

(2) The legal basis for data processing is provided in Art. 6 Sec. 1 S. 1 lit. b GDPR.

(3) Due to commercial and tax regulations, we are obliged to store your order data for the legally prescribed duration (e.g. § 147 Tax Code and § 257 Commercial Code, each 10 years). The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. c GDPR.

(4) We will store the aforementioned data for as long as you remain our customer.

(5) Furthermore, in order to fulfil the contract, we will pass on your data to the shipping company commissioned with the delivery if this is necessary for the delivery of ordered catalogues.

7. E-Mail Advertising upon Newsletter Registration

(1) If you subscribe to our newsletter, we will inform you regularly by e-mail or post about interesting offers. Registration is voluntary.

(2) However, we require your e-mail or postal address in order to deliver the newsletter. We will process your e-mail or postal address for the purpose of sending you the newsletter. The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. a GDPR.

(3) In addition, we will store your IP addresses and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to detect possible misuse of your personal data. The legal basis for this is provided in Art. 6 Sec. 1 S. 1 lit. f GDPR. Our legitimate interest derives from the aforementioned purposes.

(4) We use the so-called double opt-in procedure for subscriptions to our newsletter. This means that after your registration we will send an e-mail to the e-mail address you have provided, asking you to confirm that you would like to receive the newsletter.

(5) You can revoke your consent to being sent the newsletter at any time; this will effectively cancel the newsletter. You can unsubscribe either by sending a message to the contact listed above, via a link provided in the newsletter or by sending an e-mail to info@bassenge.com.

(6) After cancellation of your registration, we will delete your e-mail address unless you have consented to further or other use.

8. Use of Google Analytics

Diese Website benutzt Google Analytics, einen Webanalysedienst der Google Inc. ("Google"). Google Analytics verwendet sog. "Cookies", Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglichen. Die durch den Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Durch die aktivierte IP-Anonymisierung auf dieser Webseite, wird Ihre IP-Adresse von Google innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Werbeaktivitäten zusammenzustellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Website-Betreiber zu erbringen. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können.

Darüber hinaus können Sie das Erfassen der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren. Link: tools.google.com/dlpage/gaoptout

Die Nutzung von Google Analytics erfolgt in Übereinstimmung mit den Voraussetzungen, auf die sich die deutschen Datenschutzbehörden mit Google verständigten.

Informationen des Drittanbieters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Nutzerbedingungen: www.google.com/analytics/terms/de.html, Übersicht zum Datenschutz: www.google.com/intl/de/analytics/learn/privacy.html, sowie die Datenschutzerklärung: www.google.de/intl/de/policies/privacy.

Deactivate Google Analytics Tracking

9. Your Rights

(1) With regard to personal data relating to you, you have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details;
• to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
• to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• to demand the restriction of the processing of your personal data pursuant to Art. 18 GDPR if you dispute the accuracy of the data, if the processing is unlawful but you object to our deleting the data, even if we no longer need it, because you require it to assert, exercise or defend legal claims, or if you have filed an objection to the processing pursuant to Art. 21 GDPR, and
• to receive a copy of your personal data provided to us in a structured, current and machine-readable format in accordance with Art. 20 GDPR or to request the transmission to another authorised person.

(2) You also have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data by us (Art. 77 GDPR ) if you believe that the processing of personal data concerning you violates this regulation. One such responsible data protection supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, phone: +49(0)30 13889-0, fax: +49 (0)30 2155050, e-mail: mailbox@datenschutz-berlin.de.

(3) You may revoke your consent to data processing (legal basis: Art. 6 Sec. 1 S. 1 lit. a GDPR) at any time pursuant to Art. 7 Sec. 3 GDPR. As a result, we will no longer be allowed to continue processing data based on this consent in the future. The legality of data processing based on the consent until revocation remains unaffected.

(4) Right of objection to processing (Article 21 GDPR)

Right of Objection

a) You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is being carried out on the basis of Art. 6 Sec. 1 lit. f GDPR (data collection for the protection of a legitimate interest); this also applies to profiling based on these provisions. Should you object, we will cease to process this personal data unless we can produce compelling reasons for further processing that outweigh your interests, rights and freedoms, or when the processing serves to assert, exercise or defend legal claims.

b) If we process your personal data for direct marketing purposes, you have the right to object at any time to this manner of processing; this also applies to profiling, insofar as it is associated with such direct marketing. The existence of a special situation, as in a), is therefore not necessary for an effective objection in the event of direct advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.

The objection can be made either by sending a message to the contact listed above or by e-mail to info@bassenge.com.

§ 10 Prismic

Auf unserer Website nutzen wir Prismic als Teil unseres Content Management Systems. Prismic is ein Dienst von Prismic.io Inc. (“Prismic”).

Für die Darstellung des Bassenge Internetauftritts wird ein Verbindungsaufbau zu den Prismic Servern hergestellt.

Wir nutzen Prismic um Webauftritt-Inhalte (Karussell Bilder der Startseite und Texte, außerhalb der Kataloge) zu editieren und online zu stellen.
Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO.

Durch die bei Aufruf unseres Internetauftritts hergestellte Verbindung zu Prismic kann Prismic ermitteln von welcher IP-Adresse die Anfrage erfolgte und an welche welche IP-Adresse die Informationen zu übermitteln sind.

Unter https://prismic.io/legal/privacy und https://prismic.io/security bietet Prismic weitere Informationen zum Thema Datenschutz. Prismic kommunziert dort, dass Ihre Datenschutzrichtlinie der DSGVO entspricht.

§ 11 Schätzungsformular 

Durch das Anklicken des Buttons „Anfrage senden” erhält Bassenge den Auftrag Ihnen eine kostenlose und unverbindliche Schätzung, der im Formular angebenen Werke, zukommen zu lassen.
Die durch das Schätzungsformular erhobenen Daten werden ausschließlich dazu genutzt, Ihnen ihre Schätzungsanfragen zu beantworten.
Rechtsgrundlage für die Erhebung und die vorübergehende Speicherung der durch das Schätzungsformular übertragenen Daten ist Art. 6 Abs. 1 S. 1 lit. f) DSGVO.

Galerie Gerda Bassenge KG, Stand Juni 2020