This Privacy Notice explains how the Art Foundation of ZF Friedrichshafen AG hereinafter referred to as “ZF”, “we”, “our” or “us”) acting as the data controller, collects, processes and uses your personal data when you visit the ZF Art Foundation websites available at https://zf-kunststiftung.com/ (hereinafter referred to as the “ZF Websites”).
At ZF, we take our responsibility for protecting your personal data seriously. In this Privacy Notice, “personal data” means any information that relates to an identified or identifiable natural person, either on its own or in combination with other information to which we have access. We respect your right to data protection and process your personal data only in accordance with applicable data protection laws. This Privacy Notice applies to information collected when you use the ZF Websites and their features. In connection with the use of cookies, information may be stored on your device. The purposes, access rights and retention periods correspond to the information set out in this Privacy Notice.
1. Information on the Collection and Use of Data
Each time you visit our ZF Websites, we collect certain information. This information is used for the purposes listed below. The specific categories of personal data we collect depend on your activities on the ZF Websites. Further details are provided below.
1.1 Automatically Collected Information
When using the ZF Websites without registration, you are not required to actively provide personal data. However, we automatically collect and process the following information: Technical session and connection data, including the IP address of your device; Browser type; Information about your device, hardware and software; User preferences; Websites visited immediately before accessing the ZF Websites; Pages viewed on the ZF Websites; Date and time of your visit.
We process and use the above data for the following purposes: (1) Providing the ZF Websites and their functionalities; (2) Improving the features and functionality of the ZF Websites; (3) Preventing and detecting misuse and malfunctions of the ZF Websites, including troubleshooting.
The collection of this information is carried out, among other means, through the use of cookies. More detailed information regarding the types of cookies used and their specific purposes can be found in Section 2 below.
The processing and use of this data is based on legal provisions permitting such processing because: (1) Processing is necessary for the performance of the agreement governing the use of the ZF Websites oder (2) ZF has a legitimate interest in ensuring the functionality, security and error-free operation of the ZF Websites and in adapting them to users’ requirements.
1.2 Personal Data from Other Sources: Social Media Plug-ins and Social Networks
When using our ZF Websites, you may share information through social media platforms by means of so-called social plug-ins. Even without actively interacting with a plug-in, social networks may collect personal data.
For this reason, whenever we use social plug-ins from social networks on our websites, they are integrated as follows: When you visit our websites, the social plug-ins are deactivated by default, meaning that no data is transmitted to the operators of these social networks. If you wish to use one of these networks, please click on the relevant social plug-in to establish a direct connection with the server of the respective social network. If you are logged into a social network while visiting ZF websites that contain embedded social plug-ins, the social network may collect and store information about your visit and associate it with your social media account. If you wish to prevent this, please log out of the relevant social network before activating the social plug-in. Once logged out, the data retrieved during your visit to the ZF websites cannot be linked to your user account with the social network.
ZF has no influence over the data collected by social networks through their respective plug-ins. We therefore recommend reviewing the privacy policies of the respective providers to learn more about the operation of their social plug-ins, the categories of data collected, the purposes of collection and their general privacy practices.
Facebook Social Plug-ins
Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Information regarding Facebook’s privacy practices is available at: https://www.facebook.com/policy
Instagram Social Plug-ins
Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Information regarding Instagram’s privacy practices is available at: https://help.instagram.com/519522125107875
VIMEO Social Plug-ins
VIMEO is operated by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. Information regarding VIMEO’s privacy practices is available at: https://vimeo.com/legal/privacy/policy or https://vimeo.com/legal/privacy/us-state-notice
When you share information through social media platforms, these platforms may automatically grant us access to certain personal data stored about you, such as: Content you have viewed; Content you have liked; Advertisements shown to you and advertisements you have clicked on.
You may also access our ZF Websites via third-party providers, for example through our social media profiles. In such cases, we may collect the following personal data from your social media account: First and last name; Email address; Telephone number; Any information that you have made publicly available.
We process and use the above information in order to improve the features and functionality of the ZF Websites and to provide you with a tailored user experience.
The processing and use of this data is based on legal provisions permitting such processing because ZF has a legitimate interest in adapting the functionality of the ZF Websites to user requirements, conducting targeted marketing activities and carrying out market research.
You may limit our access to your personal data by adjusting your privacy settings on the respective social media platforms.
1.3 Additional Services
You may provide us with additional information when ordering further services through the ZF Websites. Such information may include, for example, delivery addresses, payment information and similar data. The collection and use of such additional information are governed by separate privacy notices applicable to the respective service.
Data Privacy Notice for Social Media
2. Subscription to Newsletters and Other Marketing Communications
ZF websites may offer you the opportunity to subscribe to a newsletter or other marketing communications that are sent to you by email. For this purpose, we process and use your name and email address to provide you with the newsletter and any other communications to which you have subscribed.
The processing and use of personal data for the purpose of subscribing to newsletters and other marketing communications is based on (1) legal provisions that permit such processing where the processing of the relevant data is necessary to provide the subscription service, or (2) your consent.
To confirm your subscription and consent, we use the double opt-in procedure. We retain your confirmation for documentation purposes and as evidence of your subscription/consent. You have the right to unsubscribe at any time and/or withdraw your consent at any time without incurring any costs other than the transmission costs according to the basic rates. Unsubscribing from the newsletter or withdrawing your consent does not affect the lawfulness of data processing carried out on the basis of your consent prior to such unsubscribe request or withdrawal.
3. Ordering Brochures and Other Promotional Materials
You may order brochures and, in connection with specific applications and services made available through the ZF websites, other promotional materials via our ZF websites. We process and use the information you provide (such as your name, address, additional contact details, and the brochure you selected) in order to fulfill your request and send the requested materials to you in the desired manner (e.g., by email, postal mail, etc.).
The processing and use of personal data for these purposes is based on (1) legal provisions that permit such processing where the processing of the relevant data is necessary to deliver the requested materials, or (2) your consent. You have the right to withdraw your consent at any time. Withdrawal of your consent does not affect the lawfulness of data processing carried out on the basis of your consent prior to its withdrawal.
4. Detection and Prosecution of Misuse
We store usage data, including IP addresses, for the purpose of detecting and, where applicable, prosecuting misuse of the ZF websites. If such data is not required for law enforcement purposes, it will be deleted after seven days.
The storage and use of data are based on legal provisions that permit such processing because (1) the processing is necessary for the performance of the agreement, including the terms of use applicable to the ZF websites, or (2) ZF has a legitimate interest in ensuring the functionality and security of the ZF websites.
5. Deletion of Data
As a general rule, we delete personal data as soon as it is no longer necessary for the purposes for which it was originally collected or otherwise processed.
Where processing is based on your consent and you withdraw that consent, we will delete your personal data without undue delay following the withdrawal, unless we are legally required to retain the data.
6. Additional Services, Applications and Websites
You may access other services and applications through the ZF websites, the use of which and the associated processing of personal data are described in separate privacy information notices.
Our ZF websites also contain links to other websites. ZF assumes no responsibility for the use and protection of personal data on such third-party websites. Please be aware of this when leaving our ZF websites and review the privacy notices of any other websites you visit.
YouTube:
To embed video clips on our ZF websites, we use the YouTube video platform operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a corresponding page of our website, the embedded YouTube player establishes a connection to YouTube in order to transmit and play the video or audio file. In this process, data is processed by YouTube. YouTube acts as the data controller for such processing, and we have no influence over it. Further information on YouTube’s processing of personal data can be found in its Privacy Policy: https://policies.google.com/privacy
7. Your Rights
In accordance with applicable data protection laws, you generally have the right to obtain information regarding your personal data processed by ZF, as well as the right to request the rectification or erasure of such data. Where applicable, you also have the right to request the restriction of processing, to object to the processing of your personal data, and to exercise your right to data portability. You also have the right to lodge a complaint with a competent supervisory authority.
8. Contact Information
If you have any questions regarding our use, integrity and/or accuracy of your personal data, or if you wish to exercise any of the rights described in Section 7, please contact us by email at cevinpl@ms.pbz.
The contact details of our Data Protection Officer are as follows:
Data Protection Officer
Kunststiftung der ZF Friedrichshafen AG
Löwentaler Straße 20
88046 Friedrichshafen
Germany
9. Changes to this Privacy Notice
As our collection and processing of your data may change over time, this Privacy Notice may also be amended to ensure that it always reflects the current status of our data processing activities.
We therefore recommend that you review this Privacy Notice periodically.
Last updated: September 2026