DATA PRIVACY STATEMENT OF THE LEOPOLD MUSEUM-PRIVATSTIFTUNG
We, the Leopold Museum-Privatstiftung, commercial register FN 112 406d, commercial court Vienna, Museumsplatz 1, A-1070 Vienna (hereinafter “Leopold Museum” / “we”) comply in terms of data privacy with the statutory provisions of the EU General Data Protection Regulation (GDPR) and wish to inform you about our approach to collecting and processing personal and non-personal data.
Our privacy officer Mag. Sabrina Fischer can be contacted at:
via email: datenschutz@leopoldmuseum.org or
by post: Leopold Museum-Privatstiftung, FAO Privacy Officer, Museumsplatz 1, A-1070 Vienna
1. PERSONAL DATA
“Personal data” includes all data containing particulars about personal or material circumstances, including name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photographs, voice recordings of persons as well as biometrical data such as fingerprints. It may also include sensitive data, such as health data.
We only gather personal data essential to the implementation and processing of our goods and services and to the purpose of our enterprise, or data which you have provided voluntarily.
2. DATA SECURITY
Your personal data is protected through appropriate organizational and technical provisions. These provisions apply especially to the protection of your data against unauthorized, unlawful or random access, processing, loss, use and manipulation.
We always endeavor to detect data breaches early and, if applicable, to report such breaches without delay to you or to the appropriate regulatory authority citing the data categories concerned.
Our website has a SSL (Secure Socket Layer) certificate. This certificate allows for the encrypted transfer of your personal data.
Despite our efforts to uphold a high standard of diligence requirements we cannot rule out that information provided by you to us may be seen and used by others.
Please note that we therefore assume no liability whatsoever for the disclosure of information due to errors occurring during data transfer that are not caused by us and/or due to unauthorized access by third parties (e.g. hacker attack on email account or telephone, interception of faxes).
3. DATA PROCESSING
We gather, process and use your personal data only with your consent, or in connection with your commission or order for the purposes agreed with you, or if any other legal basis applies in keeping with the GDPR; the only exception to this is use for statistical purposes, provided that the data has been anonymized.
Data processing is carried out subject to data protection law and civil law regulations (Telecommunications Act, EU GDPR and Data Protection Act, in the relevant latest versions).
DATA PROCESSING OF WEBSITE USERS:
You can visit our website without providing any personal data. When you access our website we will only process certain access data (your IP address as well as other metadata, e.g. user agent) by automated means for the purpose of member support, for security reasons and for the improvement of the services offered by the website, and, if applicable, may pass this data on to third parties once it has been anonymized. As a mere visitor to the website you will generally be able to access the information on offer in its full extent.
Please note that online purchases transacted via Bookingkit are subject to the data privacy statement of Bookingkit, the content of which we are not responsible for.
We will only use your personal data for promotional purposes, such as the sending of newsletters, invitations etc., if you have given us your consent to do so.
Your data will be transferred to:
· our technical partners:
- Mag. Michael Ivellio-Vellin, Ivellio-Vellin professionelle IT-Lösungen e.U. Kaiserstr. 26, 1070 Vienna
- echonet communication GmbH, Rosenbursenstraße 2, Top 24, 1010 Vienna
· and our delivery agents and carriers
- for instance the Austrian Post for sending purchased goods
NEWSLETTER:
You can sign up for our newsletter via email or by post or through our website by clicking on the menu item “Newsletter”. We will record your name, address, email address and gender so that we may address you personally in our communications. You may also inform us on a voluntary basis about your particular interests, so that we might design the newsletters according to your preferences.
When you sign up for our newsletter through our website, we use a method known as a double-opt-in process in order to verify that it was you who ordered the subscription to our newsletter. Immediately after signing up, we will send you a confirmation email to the email address provided by you during registration. By clicking on the link in the email you confirm to us that you wish to receive our newsletter in the future.
You may revoke this consent at any time. Every electronic newsletter contains an unsubscribe link. You may also contact us directly and we will immediately delete your email address from our distribution list. For this purpose, please contact:
via email: datenschutz@leopoldmuseum.org or
by post: Leopold Museum-Privatstiftung, FAO Privacy Officer, Museumsplatz 1, A-1070 Vienna
TRANSFER OF DATA TO THIRD PARTIES:
Some of the recipients of your personal data listed above are located outside of your country of residence or process your personal data abroad. The level of data protection may in some circumstances deviate from that of Austria. However, we will only transfer your data to countries for which the European Commission has decided that they have an appropriate level of data protection, or we take measures ensuring that all recipients have an appropriate level of data protection by concluding standard contractual clauses (2010/87/EC and/or 2004/915/EC).
4. DATA STORAGE
We do not store data longer than necessary for us to fulfil our contractual and lawful obligations and to ward off possible liability claims.
5. YOUR RIGHTS
In accordance with data protection rules, you have the following rights:
- having proved your identity, you may inquire at any time what type of personal data is being processed by us and have the right to be informed as to the data’s origin, recipients and the purpose of data processing. The initial information is free, while further information may in certain cases incur a charge;
- you may demand at any time that outdated or incorrect personal data be corrected or that incorrect or improperly processed data be deleted;
- you may object at any time to the use of (all or some of) your personal data due to special, personal interests in confidentiality meriting protection;
- in keeping with data protection requirements, you may ask for your data to be passed on to third parties.
Should you wish to exercise one or several of these rights, please contact us:
via email: datenschutz@leopoldmuseum.org or
by post: Leopold Museum-Privatstiftung, FAO Privacy Officer, Museumsplatz 1, A-1070 Vienna
If you feel that the processing of your personal data by us infringes the current data protection laws or that your data protection rights have been infringed in some other way, you have the right to lodge a complaint with the appropriate regulating authority. In Austria, the competent authority is the Austrian Data Protection Authority.
6. WEB ANALYSIS
In order to ensure the evaluation and ongoing improvement of our website https://www.leopoldmuseum.org, we use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For this purpose, “cookies” –text files saved onto your computer or smartphone – are employed to analyze your use of the website. The information we receive from cookies about your use of the website is stored by Google on servers in the US and processed. IP addresses are completely anonymized before we are able to access the gathered data. A reversal of the anonymization of IP addresses and a matching of IP addresses with gathered data is not possible.
We use the generated information in order to analyze the user behavior of our website visitors, to compile reports on their behavior and in order to constantly improve our visitors’ experience of our website.
When using our website, you agree to the processing of your data for the purposes listed above. You can object to the gathering of your data by clicking on the button below. An opt-out cookie will then be placed preventing the future collection of your data when you visit our website.
The following cookies are used on our website:
Session cookies: These are temporary cookies stored in the cookie file of your browser until you leave the website and are automatically deleted from your device once you have left the website.
Persistent cookies: These cookies are stored on your terminal device, where they remain for improved user-friendliness, and allow us to recognize your browser when you next visit our website.
If you do not wish this, you can set your browser so that it informs you about the setting of cookies and only allow this in individual cases.
When cookies are deactivated, the functionality of our website may be limited.
7. CONVERSION TRACKING
We use Google AdWords to place advertisements and to measure the performance of these advertisements. For this purpose, we use the conversion tracking service provided by Google AdWords. If you click on a Google AdWords advertisement during your Google search and reach our website this way, we can see which advertising medium led you to our website. This does not lead to the storing of any of your personal data. All we receive is an advertisement ID.
You can set your browser to reject the placing of cookies.
Alternatively, you can set your browser to inform you before a cookie is placed on your device. Certain services require the placing of cookies. If you decide to reject such cookies, certain areas of these services will no longer be rendered by our website. Popular browsers offer various configuration options. Further information on your browser settings and on the possibilities of deactivating cookies can be found in the browser’s documentation.
8. LOG FILES
All visits to our website are recorded in server log files. This access data is transferred to us via your browser.
The access data contains the following information: the date and time of the visit, the name of the viewed page, the IP address, the URL from which you have accessed our site, the transferred data volume as well as information on your browser (provider and version). We require this information to optimize the services offered by our website, to correct possible problems and to protect the website against attacks such as DDoS attacks. This data is not merged with personal data sources. We reserve the right to assess this data retroactively if there are concrete indications of an unlawful usage of our website.
9. SOCIAL MEDIA PLUG-INS
Our website https://www.leopoldmuseum.orgcontains social media plug-ins of Facebook, Instagram, Twitter, Pinterest, Google+ and YouTube. These plug-ins are indicated by a small logo of the provider. As soon as you visit a page of our website showing such a logo, an automatic connection is established with the server of the respective social media provider. In this way, the social media service gains information as to which pages are visited by you.
We cannot influence which type of data is thus transferred to the respective provider. The transfer of data occurs even if you do not click on a plug-in symbol. In case you are logged in to your account with Facebook, Instagram, Twitter, Pinterest, Google+ or YouTube while visiting our website, the plug-in is able to connect to your account. Should you “like” something or comment using the plug-in, the plug-in will transfer this information to the social media provider and link it with your account with this provider. If you do not agree to this, you must log out of your social media account before clicking on the plug-in or install an add-on blocking social media plug-ins on your terminal device.
Please note that social media plug-ins are also subject to the data privacy statements of the respective provider (Facebook, Instagram, Twitter, Pinterest, Google+ and YouTube), for the content of which we assume no liability.
Share and follow