Pri­vacy Policy

Machine Trans­la­tion Notice:
This pri­vacy policy has been trans­lated auto­mat­i­cally for your con­ve­nience. The legally valid ver­sion is the orig­i­nal German ver­sion, which is avail­able at the fol­low­ing link: https://www.kunsthauslangenthal.ch/datenschutz/. In case of any dis­crep­an­cies or legal ques­tions, the German ver­sion shall pre­vail. We rec­om­mend review­ing the German ver­sion for com­plete and accu­rate infor­ma­tion regard­ing data pro­tec­tion and pri­vacy matters.

Ver­sion dated July 28, 2023

In this pri­vacy policy, we, Kun­sthaus Lan­gen­thal, explain how we col­lect, store, and process per­sonal data. This is not an exhaus­tive descrip­tion; spe­cific mat­ters may be gov­erned by other pri­vacy poli­cies or terms and con­di­tions, par­tic­i­pa­tion require­ments, and sim­i­lar doc­u­ments. Per­sonal data refers to all infor­ma­tion that relates to a spe­cific or iden­ti­fi­able individual.

This pri­vacy policy is designed to comply with the require­ments of the EU Gen­eral Data Pro­tec­tion Reg­u­la­tion (“GDPR”), the Swiss Data Pro­tec­tion Act (“DSG”), and the revised Swiss Data Pro­tec­tion Act (“revDSG”). How­ever, the applic­a­bil­ity of these laws depends on the indi­vid­ual circumstances.

1. Respon­si­bil­ity

The entity respon­si­ble for the data pro­cess­ing described here is Kun­sthaus Lan­gen­thal, located at Mark­t­gasse 13, 4900 Lan­gen­thal. If you have any data pro­tec­tion con­cerns, you can con­tact us at the fol­low­ing email address:

2. Col­lec­tion and Pro­cess­ing of Per­sonal Data

We pri­mar­ily process per­sonal data that we receive from our cus­tomers and other busi­ness part­ners, as well as from indi­vid­u­als involved in our busi­ness rela­tion­ship or from users of our web­site and/or other appli­ca­tions. In addi­tion to the data directly pro­vided by you, the cat­e­gories of per­sonal data that we receive from third par­ties about you include data related to the use of the web­site (e.g., IP address, smart­phone or com­puter MAC address, infor­ma­tion about your device and set­tings, cook­ies, date and time of the visit, accessed pages and con­tent, used fea­tures, refer­ring web­site, loca­tion data).

3. Pur­poses of Data Pro­cess­ing and Legal Basis

We pri­mar­ily use the per­sonal data we col­lect to con­clude, ful­fill, and process our ser­vices with our cus­tomers and busi­ness partners.

Fur­ther­more, we process per­sonal data from you and other indi­vid­u­als to the extent per­mit­ted and deemed appro­pri­ate for the fol­low­ing pur­poses, in which we (and some­times third par­ties) have a legit­i­mate inter­est cor­re­spond­ing to the purpose:

• Offer and Devel­op­ment of Our Offers, Ser­vices, Web­sites, Apps, and Other Plat­forms on Which We are Present;
• Com­mu­ni­ca­tion with Third Par­ties and Han­dling of Their Inquiries (e.g., job appli­ca­tions, media inquiries);
• Adver­tis­ing and Mar­ket­ing (includ­ing orga­niz­ing events), unless you have objected to the use of your data (if we send you adver­tis­ing as an exist­ing cus­tomer, you can object at any time, and we will place you on a do-not-con­tact list for fur­ther advertising);
• Enforce­ment of legal claims and defense in con­nec­tion with legal dis­putes and admin­is­tra­tive proceedings;
• Pre­ven­tion and inves­ti­ga­tion of crimes and other mis­con­duct (e.g., con­duct­ing inter­nal inves­ti­ga­tions, data analy­sis for fraud prevention);
• Ensur­ing the oper­a­tion of our busi­ness, espe­cially our IT, web­sites, apps, and other platforms.

If you have pro­vided us with con­sent for pro­cess­ing your per­sonal data for spe­cific pur­poses (for exam­ple, when you sub­scribed to receive newslet­ters), we will process your per­sonal data in accor­dance with and based on this con­sent, unless we have another legal basis and require one. You can with­draw your con­sent at any time, but this will not affect any data pro­cess­ing that has already occurred.

4. Cookies/Tracking and Other Tech­nolo­gies Related to the Use of Our Website

On our web­sites, we typ­i­cally use “cook­ies” and sim­i­lar tech­nolo­gies that can iden­tify your browser or device. A cookie is a small file sent to your com­puter or auto­mat­i­cally stored on your com­puter or mobile device by the web browser you use when you visit our web­site. When you revisit this web­site, we can rec­og­nize you, even if we do not know who you are. In addi­tion to cook­ies that are used only during a ses­sion and are deleted after your web­site visit (“ses­sion cook­ies”), cook­ies can also be used to store user pref­er­ences and other infor­ma­tion for a spe­cific period (“per­sis­tent cook­ies”). How­ever, you can con­fig­ure your browser to reject cook­ies, store them only for a ses­sion, or delete them pre­ma­turely. Most browsers are preset to accept cookies.

Con­tact Forms

When you submit inquiries to us via a con­tact form, the infor­ma­tion you pro­vide in the inquiry form, includ­ing the con­tact details you pro­vide, will be stored by us for the pur­pose of pro­cess­ing the inquiry and for follow-up ques­tions if nec­es­sary. We do not dis­close this infor­ma­tion to third par­ties with­out your consent.

Newslet­ter

In our newslet­ters and other mar­ket­ing emails, we may include both vis­i­ble and invis­i­ble image ele­ments, which, when retrieved from our servers, allow us to deter­mine whether and when you have opened the email. This helps us mea­sure and better under­stand how you use our offer­ings, allow­ing us to tailor them to your needs. You can block this in your email pro­gram; most email pro­grams are preset to do this.

By using our web­sites and con­sent­ing to receive newslet­ters and other mar­ket­ing emails, you agree to the use of these tech­niques. If you do not wish to allow this, you will need to adjust your browser or email pro­gram set­tings accord­ingly, if such adjust­ments are available.

Google Ser­vices

Ser­vices pro­vided by the Amer­i­can com­pany Google LLC use cook­ies, and as a result, data is trans­ferred to Google in the United States. We assume that, within this frame­work, no indi­vid­u­al­ized track­ing solely through the use of our web­site takes place.

Google has com­mit­ted to ensur­ing ade­quate data pro­tec­tion in accor­dance with the EU-US and Swiss-US Pri­vacy Shield frameworks.

For more infor­ma­tion, please refer to Google’s Pri­vacy Policy: https://policies.google.com/privacy?hl=en

Google reCAPTCHA

This web­site uses the reCAPTCHA ser­vice pro­vided by Google Ire­land Lim­ited (Gordon House, Barrow Street Dublin 4, Ire­land, “Google”). The pur­pose of this ser­vice is to dis­tin­guish whether the input is being made by a human or auto­mated machine pro­cess­ing. The inquiry includes the trans­mis­sion of the IP address and, if nec­es­sary, other data required by Google for the reCAPTCHA ser­vice. For this pur­pose, your input is trans­mit­ted to Google and used there. How­ever, your IP address is short­ened by Google within the member states of the Euro­pean Union or other par­ties to the Agree­ment on the Euro­pean Eco­nomic Area before being trans­mit­ted. Only in excep­tional cases will the full IP address be sent to a Google server in the United States and then short­ened there. On behalf of the oper­a­tor of this web­site, Google will use this infor­ma­tion to eval­u­ate your use of this ser­vice. The IP address trans­mit­ted by your browser as part of reCAPTCHA will not be merged with other data from Google. Your data may be trans­ferred to the United States as well. For data trans­fers to the United States, the Euro­pean Com­mis­sion has issued an ade­quacy deci­sion known as the “Pri­vacy Shield.” Google par­tic­i­pates in the Pri­vacy Shield frame­work and adheres to its prin­ci­ples. By click­ing the inquiry, you con­sent to the pro­cess­ing of your data. You can with­draw your con­sent at any time with­out affect­ing the law­ful­ness of the pro­cess­ing car­ried out based on your con­sent prior to withdrawal.

For more infor­ma­tion about Google reCAPTCHA and its pri­vacy policy, please visit: https://policies.google.com/privacy?hl=en

Google Ana­lyt­ics

We use Google Ana­lyt­ics or sim­i­lar ser­vices on our web­sites from time to time. These are third-party ser­vices that may be located in any coun­try world­wide. In the case of Google Ana­lyt­ics, it is pro­vided by Google Ire­land (based in Ire­land), and Google Ire­land relies on Google LLC (based in the USA) as a data proces­sor (both referred to as “Google,” www.google.com). These ser­vices allow us to mea­sure and eval­u­ate the usage of the web­site (non-per­sonal infor­ma­tion). To achieve this, per­sis­tent cook­ies are also used by the ser­vice providers. We have con­fig­ured the ser­vice to trun­cate the IP addresses of vis­i­tors from Europe before for­ward­ing them to the USA, making them non-trace­able. We have dis­abled the “Data Shar­ing” and “Sig­nals” set­tings. Although we assume that the infor­ma­tion we share with Google is not con­sid­ered per­sonal data by Google, it is pos­si­ble that Google may use this data to draw con­clu­sions about the iden­tity of vis­i­tors, create per­sonal pro­files, and link this data to the Google accounts of these indi­vid­u­als. If you have reg­is­tered directly with the ser­vice provider, the ser­vice provider will have knowl­edge of you. The pro­cess­ing of your per­sonal data by the ser­vice provider is then the respon­si­bil­ity of the ser­vice provider, gov­erned by their pri­vacy policies.

Users can pre­vent the stor­age of cook­ies by adjust­ing their browser soft­ware set­tings accord­ingly. Fur­ther­more, users can pre­vent Google from col­lect­ing and pro­cess­ing the data gen­er­ated by the cookie related to their use of the online ser­vice by down­load­ing and installing the browser plugin avail­able at the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en

Google Tag Manager

Google Tag Man­ager is a solu­tion that allows us to manage web­site tags, includ­ing the inte­gra­tion of Google Ana­lyt­ics and other Google mar­ket­ing ser­vices, through an inter­face. The Tag Man­ager itself, which imple­ments the tags, does not process any per­sonal data of users. Con­cern­ing the pro­cess­ing of per­sonal data of users, please refer to the infor­ma­tion pro­vided for the spe­cific Google ser­vices being used.

Usage Guide­lines: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

YouTube

On this web­site, fea­tures of the “YouTube” ser­vice are inte­grated. “YouTube” is owned by Google Ire­land Lim­ited, a com­pany reg­is­tered and oper­ated under Irish law, with its reg­is­tered office at Gordon House, Barrow Street, Dublin 4, Ire­land, pro­vid­ing ser­vices in the Euro­pean Eco­nomic Area and Switzerland.

Your legal agree­ment with “YouTube” is gov­erned by the terms and con­di­tions found at the fol­low­ing link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms con­sti­tute a legally bind­ing agree­ment between you and “YouTube” regard­ing the use of the ser­vices. Google’s Pri­vacy Policy explains how “YouTube” han­dles your per­sonal data and pro­tects your data when you use the service.

Vimeo

On this web­site, plu­g­ins from the video portal Vimeo, oper­ated by Vimeo, LLC, located at 555 West 18th Street, New York, New York 10011, USA, are inte­grated. When you visit a page that offers one or more Vimeo video clips, a direct con­nec­tion is estab­lished between your browser and a Vimeo server in the USA. Infor­ma­tion about your visit and your IP address is stored there. Inter­ac­tions with the Vimeo plu­g­ins (e.g., click­ing the start button) also result in this infor­ma­tion being trans­mit­ted to and stored by Vimeo. You can find more infor­ma­tion about the col­lec­tion and use of your data by Vimeo in Vimeo’s Pri­vacy Policy.

If you have a Vimeo user account and do not want Vimeo to col­lect data about you through this web­site and link it to your Vimeo member data, you must log out of Vimeo before vis­it­ing this website.

Fur­ther­more, Vimeo calls the tracker Google Ana­lyt­ics via an iframe in which the video is accessed. This is Vimeo’s own track­ing, which we do not have access to. You can pre­vent track­ing by Google Ana­lyt­ics by using the deac­ti­va­tion tools that Google offers for some inter­net browsers. You can also pre­vent Google Ana­lyt­ics from col­lect­ing and pro­cess­ing data related to your use of the web­site (includ­ing your IP address) by down­load­ing and installing the browser plugin avail­able at the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en

5. Data Shar­ing and Inter­na­tional Data Transfer

As part of our busi­ness activ­i­ties and the pur­poses out­lined in sec­tion 3, we may dis­close infor­ma­tion to third par­ties, either because they process it on our behalf or because they want to use it for their own pur­poses, to the extent per­mit­ted and deemed appro­pri­ate. This includes, but is not lim­ited to, the fol­low­ing entities:

• Our ser­vice providers, includ­ing data proces­sors (such as IT providers);
• Mer­chants, sup­pli­ers, and other busi­ness partners;
• Cus­tomers;
• Domes­tic and for­eign author­i­ties, gov­ern­ment agen­cies, or courts;
• Media;
• The gen­eral public, includ­ing vis­i­tors to web­sites and social media.

These recip­i­ents may be located both domes­ti­cally and abroad.

6. Reten­tion Period for Per­sonal Data

We process and store your per­sonal data for as long as it is nec­es­sary to ful­fill our con­trac­tual and legal oblig­a­tions or for the pur­poses for which the pro­cess­ing is car­ried out. This means, for exam­ple, for the dura­tion of the entire busi­ness rela­tion­ship (from ini­ti­a­tion, exe­cu­tion, to ter­mi­na­tion of a con­tract) and in accor­dance with legal reten­tion and doc­u­men­ta­tion require­ments. It is pos­si­ble that per­sonal data may be retained for the period during which claims can be asserted against our com­pany and as long as we are oth­er­wise legally oblig­ated or have legit­i­mate busi­ness inter­ests (e.g., for evi­den­tiary and doc­u­men­ta­tion purposes).

7. Data Security

We imple­ment appro­pri­ate tech­ni­cal and orga­ni­za­tional secu­rity mea­sures to pro­tect your per­sonal data from unau­tho­rized access and misuse.

8. Oblig­a­tion to Pro­vide Per­sonal Data

In the con­text of our busi­ness rela­tion­ship, you are required to pro­vide the per­sonal data nec­es­sary for the estab­lish­ment and exe­cu­tion of a busi­ness rela­tion­ship and the ful­fill­ment of related con­trac­tual oblig­a­tions (you gen­er­ally do not have a legal oblig­a­tion to pro­vide us with data). With­out this data, we will typ­i­cally not be able to enter into a con­tract with you (or the entity or person you rep­re­sent) or to carry out such a con­tract. Cer­tain infor­ma­tion essen­tial for data traf­fic secu­rity (such as IP address) must also be dis­closed to use the website.

9. Rights of the Data Subject

You have the right, in accor­dance with applic­a­ble data pro­tec­tion laws and to the extent pro­vided therein (such as under the GDPR), to access, rec­tify, delete, restrict the pro­cess­ing of your data, and object to our data pro­cess­ing activ­i­ties. You also have the right to receive cer­tain per­sonal data for trans­fer to another con­troller (data porta­bil­ity). Please note that we reserve the right to assert the legally pre­scribed restric­tions on our part, such as when we are oblig­ated to retain or process cer­tain data, have an over­rid­ing inter­est (to the extent we are enti­tled to invoke such inter­ests), or require the data for assert­ing claims.

10. Changes

We reserve the right to amend this pri­vacy policy at any time with­out prior notice. The cur­rent ver­sion pub­lished on our web­site is applic­a­ble. If this pri­vacy policy is part of an agree­ment with you, we will inform you of changes via email or by other appro­pri­ate means in the event of an update.