Privacy Policy

For the operator of this website,

VENATOR & HANSTEIN KG
Book and Graphic Art Auctions
Cäcilienstr. 48
50667 Cologne, Germany

the protection and confidentiality of personal data is of particular importance. We collect and use personal data strictly within the framework of the applicable legal provisions, specifically in accordance with current German and European data protection legislation. This privacy policy is intended to inform visitors to our website about the personal data we collect, the purposes for which we use such data, and the choices available to users regarding their personal information.

We have implemented organisational, contractual and technical security measures to ensure compliance with data protection regulations and to protect against accidental or intentional manipulation, loss, destruction, or unauthorised access. Nevertheless, it is important to note that 100% security in data transmission over the Internet cannot be guaranteed.

1. Access Data
   Through our website provider, we collect data on each access to our online offering (known as server log files). The access data include: the name of the retrieved webpage, file, date and time of access, volume of data transferred, notification of successful retrieval, browser type and version, the visitor’s operating system, referrer URL (the previously visited page), and the requesting provider.

These log files are analysed in accordance with legal regulations, without assigning them to individual persons or creating user profiles. They are used solely for statistical evaluations with the aim of operating, securing and optimising the online service. However, the provider reserves the right to subsequently review the log data if there are concrete indications of unlawful usage.

IP addresses are stored for a limited time within the log files when required for security purposes, for service provision, or in the event that there is a specific suspicion of criminal activity in connection with the use of our website.

Processing is based on Article 6(1)(f) GDPR and reflects our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed to third parties or used for any other purpose.

2. Inventory Data
   When you contact us (e.g. by email), we collect personal data. Additional personal data is only stored and used if you provide it voluntarily, for example, in the course of direct communication with us. Where personal data has been made available to us, it is used solely for the purpose of responding to enquiries, fulfilling contractual obligations, and for technical administration.

Personal data collected during registration and login to our online catalogue are stored to enable binding bids. Passwords entered are stored in encrypted form. Data entered via forms is stored in a database on the same web server. This data is manually synchronised with auction software used by Venator & Hanstein.

The legal basis for data processing is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR, as well as your consent given upon data submission.

If your enquiry is directed towards entering into a contract, the additional legal basis is Article 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully processed, provided that no statutory retention obligations apply.

3. Cookies
   We use cookies as part of our online offering. Cookies are small files stored on the user’s computer that can retain specific information for the website provider.

We use cookies to facilitate redirection to previously viewed lots after login, to store login status during a session, and temporary cookies that allow a watch list to be created during a browser session (which is deleted when the browser is closed).

Website users can influence the use of cookies. Most browsers offer settings to limit or completely prevent the storage of cookies. We strive to design our website in a way that minimises the necessity of cookies. However, we point out that the functionality and user experience of the website may be restricted without cookies.

4. Information via Newsletter
   Emails containing promotional information about our company and services are only sent with the express consent of the recipient. The option to object can be found, among other places, at the end of each email.

Upon newsletter registration, a confirmation email is sent to the address provided, requiring the user to confirm their registration.

During the registration process, we store the registration and confirmation timestamps, as well as the IP address of the user. This is required by law to document and verify a proper registration process.

5. Your Rights as a Data Subject
   Under applicable data protection law, you have extensive rights with respect to the processing of your personal data by us, the data controller. These include, in particular:

Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, including the purposes of processing, data categories, recipients, retention periods, origin of the data (if not collected directly from you), the existence of automated decision-making including profiling, and any safeguards for data transfers to third countries.

• Right to rectification (Art. 16 GDPR): You have the right to request immediate correction of inaccurate data or completion of incomplete data stored by us.

• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data if the conditions under Art. 17(1) GDPR are met. This right does not apply where processing is required for the exercise of freedom of expression and information, legal obligations, public interest, or the establishment, exercise or defence of legal claims.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing while the accuracy of your data is being verified, if processing is unlawful but you oppose erasure, if the data is no longer needed but you require it for legal claims, or if you have objected to processing pending resolution.

• Right to notification (Art. 19 GDPR): If you exercise your rights to rectification, erasure, or restriction, we are obligated to inform all recipients to whom your data has been disclosed, unless this proves impossible or requires disproportionate effort. You have the right to be informed about those recipients.

• Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to request transfer to another controller, where technically feasible.

• Right to withdraw consent (Art. 7(3) GDPR): You may withdraw any previously given consent at any time with effect for the future. Upon withdrawal, we will delete the relevant data unless there is another legal basis for processing. The legality of processing prior to the withdrawal remains unaffected.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. This can be done in the Member State of your residence, place of work or the place of the alleged infringement.

• Right to object: If we process your data based on our legitimate interests, you have the right to object to this processing at any time on grounds relating to your particular situation. If you exercise this right, we will cease processing the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims.

You may contact the data protection supervisory authority responsible for us at:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2–4
40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Fax: +49 211 38424-10
Email: poststelle@ldi.nrw.de

We do, however, assume that no such complaints will arise and trust that we can resolve any concerns you may have in direct communication.

6. Data Controller under Data Protection Law
   Venator & Hanstein KG
   Book and Graphic Art Auctions
   Cäcilienstr. 48
   D-50667 Cologne, Germany
   Email: info@venator-hanstein.de
   Tel.: +49 221 257 54 19
   Fax: +49 221 257 55 26

Last updated: 23 May 2018