Privacy statement

Name and address of the responsible person and the data protection officer

Responsible according to the General Data Protection Regulation (GDPR)

Kunstmuseum Liechtenstein
Städtle 32
9490 Vaduz
Liechtenstein

+423 235 03 00
mail@kunstmuseum.li
www.kunstmuseum.li

Data protection officer of Kunstmuseum Liechtenstein

Fachstelle Datenschutz
Regierungsgebäude
Peter-Kaiser-Platz 1
9490 Vaduz
Liechtenstein

+423 236 73 08
datenschutz@regierung.li
www.llv.li


Data processing in general

Scope of the processing of personal data

The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes agreed or on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services or if you provide data voluntarily.

Legal bases

The legal basis for processing the data in connection with our internet presence is Art. 6(1)(f) GDPR, our legitimate interest in processing the data. This legal basis also applies to processing personal data, for example in the course of sending physical and electronic invitations and information about our exhibitions and events.

The legal basis for processing your inquiry and contact is Art. 6(1)(a) GDPR, your consent to data processing, and Art. 6(1)(b) GDPR, precontractual measures and performance of a contract based on your inquiry.

You can withdraw your consent with future effect at any time and without stating any reasons. You can withdraw your consent by telephone, post or email. You can find the contact details of the responsible officer at the top.

Data subject

As soon as you visit our website, you are regarded as a user of the website, and your personal data is subject to processing. If you contact us, your personal data will also be processed outside of our internet presence.

Your rights (rights of the data subject)

You have the right to request information about any of your personal data we process. In particular, you have the right to request information about the purpose of the processing, the categories of personal data, the categories of recipients who will have access or were disclosed with your data, the duration periods for saving the personal data, whether there is a right to adjust/correct, erase, restrict or object, transmission of data , the source of your data if not collected through us and if we use automatic decision-making technologies including profiling.

Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.

If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws you have the possibility to lodge a complaint with the data protection office.

Contact details of the data protection office:

Datenschutzstelle Fürstentum Liechtenstein
Städtle 38
Postfach 684
9490 Vaduz
Liechtenstein

+423 236 60 90
info.dss@llv.li
www.datenschutzstelle.li


Description and scope of data processing

Provision of the website - category of personal data, log files

Each time our website is accessed, our system automatically collects data and information from the computer system used to access it.

The following data is collected:
•    Information about the browser type and version used
•    The user’s operating system
•    The user’s internet service provider
•    Host name of the accessing computer (IP address)
•    Date and time of access
•    Referring URL (the website previously visited)
•    Name of the file accessed
•    Amount of data transmitted
•    Message whether the retrieval was successful

We store this information for a period of one month. Storage is for the purpose of data security in order to ensure the stability and operational security of our system.

Web analytics

Our website uses Matomo, an open-source web analytics platform. We host Matomo exclusively on our own servers; no analysis data is transmitted to Matomo or other parties.

We do not store any Matomo analytics cookies if you do not give your consent. In this case, web tracking is cookieless. If you accept optional cookies, Matomo may store analytics cookies on the domain .kunstmuseum.li in order to statistically evaluate repeat visits.

Data processed may include, in particular, retrieved pages, date and time of access, referrer, browser, operating system, device type and an abbreviated IP address.

Cookieless web analytics is performed on the basis of our legitimate interest in optimising our website in accordance with Art. 6(1)(f) GDPR. Analytics cookies are only used with your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time in the cookie settings.

Contact by email

If you contact us by email or other electronic communication channel, we will process the data you provide to process your inquiry, registration or message as well as for potential follow-up questions.

Depending on the inquiry, processing is based on your consent in accordance with Art. 6(1)(a) GDPR or to perform precontractual or contractual measures in accordance with Art. 6(1)(b) GDPR.

Your personal data will be deleted as soon as the inquiry has been fully processed and if no statutory storage obligations exist.

Newsletter

If you subscribe to our newsletter, we will process the data you provide, particularly your email address, to send the newsletter. Registration is performed on the basis of a double opt-in process. This means that, after registering, you will receive an email asking you to confirm your registration.

We use CleverReach to send the newsletter. CleverReach processes the data on our instructions. Processing is performed on the basis of your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link in every newsletter.

Unsubscribed recipients are automatically deleted after seven days. Unconfirmed registrations for which the double opt-in process was not completed are also deleted after seven days.

Data protection conformity is activated in CleverReach. The reports show anonymised data about recipients who open and click your mailings. Activation also prevents the collection and processing of complete IP addresses and cookies.

Registration for events

If you fill in a registration form for an event, we store your data in our database. This data usually consists of first name, surname, email address and telephone number. When registering minors, we also store their age.

We store your data for a period of five years. You can view your data at any time and request that it be deleted. The legal basis for storing this data is the processing of the registration and, if necessary, contacting you.

The legal basis for processing your registration for an event is Art. 6(1)(a) or (b) GDPR.

Order inquiries in the online shop

You do not need to sign up to make an order inquiry in our webshop.

We only process the personal data you provide when sending an order inquiry for the purpose of processing your request, to communicate with you and for potential processing of the order. In particular, this data may include name, contact details, invoice and delivery address, order details and, where appropriate, information concerning the mode of payment.

You can revoke your consent to process your data for this purpose at any time. In this case, the order can no longer be processed and any incomplete orders will be cancelled. Please send revocation of consent to mail@kunstmuseum.li.

Personal data will be deleted after completion of your order provided that this does not conflict with any statutory retention periods, particularly for accounting or taxation purposes.

The legal basis for processing your personal data in connection with orders is Art. 6(1)(b) GDPR.

Cookies

We use cookies on our website to provide user-friendly access to our services. Cookies are small files automatically created by your browser and stored on the your device (laptop, tablet, smartphone, etc.) whenever you visit our website. This allows us to recognise your browser the next time you visit the website. Cookies are stored until you delete them.

If you do not wish to use cookies, you can configure your browser to inform you whenever a page uses cookies and decide on a case-by-case basis whether to accept or reject them. However, please note that if you disable them you will not be able to use all the functions on our website.

The legal basis for data processed via cookies is Art. 6(1)(1)(f) GDPR.

Map

Our website uses maps from Google Maps. The map is embedded via an API.

To display the map, it is technically necessary to transmit your IP address to Google. Our website does not store any local cookies in connection with embedding Google Maps.

Data is processed on the basis of our legitimate interest in user-friendly display of locations and travel details in accordance with Art. 6(1)(f) GDPR.

Vimeo

This website uses plugins of the Vimeo video portal. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. If you visit one of our pages featuring an embedded Vimeo video, a connection to the Vimeo servers is established. The Vimeo server is informed about which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected is transmitted to a Vimeo server in the US. If you are logged in to your Vimeo account, Vimeo allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account. Vimeo uses cookies and similar technologies to recognise visitors to the website. Vimeo is used to display our online services correctly. This constitutes legitimate interest in accordance with Art. 6(1)(f) GDPR. If your consent has been obtained, data is processed on the basis of Art. 6(1)(a) GDPR and § 25(1) of the Telecommunications Digital Services Data Protection Act (TTDSG) to the extent that such consent includes storage of cookies or access to information on the user’s device, for example device fingerprinting, in accordance with the TTDSG. Consent can be withdrawn at any time. Data transmission to the US is performed on the basis of the EU Standard Contractual Clauses and, according to Vimeo, is based upon legitimate business interests.

Please refer to the Vimeo privacy policy for further details at vimeo.com/privacy.


Data security

We use the common HTTPS encryption technology in connection with the highest encryption levels that are supported by your browser. If a page on our website was/is being transmitted encrypted, it is shown by the lock symbol in the address bar of your browser.

Additionally, we use appropriate technical and organisational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or to prevent unauthorised access by third parties. Our security measures are continuously upgraded according to the latest technological developments.