Machine Translation Notice:
Version dated July 28, 2023
The entity responsible for the data processing described here is Kunsthaus Langenthal, located at Marktgasse 13, 4900 Langenthal. If you have any data protection concerns, you can contact us at the following email address:
2. Collection and Processing of Personal Data
We primarily process personal data that we receive from our customers and other business partners, as well as from individuals involved in our business relationship or from users of our website and/or other applications. In addition to the data directly provided by you, the categories of personal data that we receive from third parties about you include data related to the use of the website (e.g., IP address, smartphone or computer MAC address, information about your device and settings, cookies, date and time of the visit, accessed pages and content, used features, referring website, location data).
3. Purposes of Data Processing and Legal Basis
We primarily use the personal data we collect to conclude, fulfill, and process our services with our customers and business partners.
Furthermore, we process personal data from you and other individuals to the extent permitted and deemed appropriate for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the purpose:
- Offer and Development of Our Offers, Services, Websites, Apps, and Other Platforms on Which We are Present;
- Communication with Third Parties and Handling of Their Inquiries (e.g., job applications, media inquiries);
- Advertising and Marketing (including organizing events), unless you have objected to the use of your data (if we send you advertising as an existing customer, you can object at any time, and we will place you on a do-not-contact list for further advertising);
- Enforcement of legal claims and defense in connection with legal disputes and administrative proceedings;
- Prevention and investigation of crimes and other misconduct (e.g., conducting internal investigations, data analysis for fraud prevention);
- Ensuring the operation of our business, especially our IT, websites, apps, and other platforms.
If you have provided us with consent for processing your personal data for specific purposes (for example, when you subscribed to receive newsletters), we will process your personal data in accordance with and based on this consent, unless we have another legal basis and require one. You can withdraw your consent at any time, but this will not affect any data processing that has already occurred.
4. Cookies/Tracking and Other Technologies Related to the Use of Our Website
On our websites, we typically use “cookies” and similar technologies that can identify your browser or device. A cookie is a small file sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit our website. When you revisit this website, we can recognize you, even if we do not know who you are. In addition to cookies that are used only during a session and are deleted after your website visit (“session cookies”), cookies can also be used to store user preferences and other information for a specific period (“persistent cookies”). However, you can configure your browser to reject cookies, store them only for a session, or delete them prematurely. Most browsers are preset to accept cookies.
When you submit inquiries to us via a contact form, the information you provide in the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for follow-up questions if necessary. We do not disclose this information to third parties without your consent.
In our newsletters and other marketing emails, we may include both visible and invisible image elements, which, when retrieved from our servers, allow us to determine whether and when you have opened the email. This helps us measure and better understand how you use our offerings, allowing us to tailor them to your needs. You can block this in your email program; most email programs are preset to do this.
By using our websites and consenting to receive newsletters and other marketing emails, you agree to the use of these techniques. If you do not wish to allow this, you will need to adjust your browser or email program settings accordingly, if such adjustments are available.
Google has committed to ensuring adequate data protection in accordance with the EU-US and Swiss-US Privacy Shield frameworks.
This website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland, “Google”). The purpose of this service is to distinguish whether the input is being made by a human or automated machine processing. The inquiry includes the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service. For this purpose, your input is transmitted to Google and used there. However, your IP address is shortened by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the United States and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. Your data may be transferred to the United States as well. For data transfers to the United States, the European Commission has issued an adequacy decision known as the “Privacy Shield.” Google participates in the Privacy Shield framework and adheres to its principles. By clicking the inquiry, you consent to the processing of your data. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent prior to withdrawal.
We use Google Analytics or similar services on our websites from time to time. These are third-party services that may be located in any country worldwide. In the case of Google Analytics, it is provided by Google Ireland (based in Ireland), and Google Ireland relies on Google LLC (based in the USA) as a data processor (both referred to as “Google,” www.google.com). These services allow us to measure and evaluate the usage of the website (non-personal information). To achieve this, persistent cookies are also used by the service providers. We have configured the service to truncate the IP addresses of visitors from Europe before forwarding them to the USA, making them non-traceable. We have disabled the “Data Sharing” and “Signals” settings. Although we assume that the information we share with Google is not considered personal data by Google, it is possible that Google may use this data to draw conclusions about the identity of visitors, create personal profiles, and link this data to the Google accounts of these individuals. If you have registered directly with the service provider, the service provider will have knowledge of you. The processing of your personal data by the service provider is then the responsibility of the service provider, governed by their privacy policies.
Users can prevent the storage of cookies by adjusting their browser software settings accordingly. Furthermore, users can prevent Google from collecting and processing the data generated by the cookie related to their use of the online service by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Google Tag Manager
Google Tag Manager is a solution that allows us to manage website tags, including the integration of Google Analytics and other Google marketing services, through an interface. The Tag Manager itself, which implements the tags, does not process any personal data of users. Concerning the processing of personal data of users, please refer to the information provided for the specific Google services being used.
Usage Guidelines: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/
On this website, features of the “YouTube” service are integrated. “YouTube” is owned by Google Ireland Limited, a company registered and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, providing services in the European Economic Area and Switzerland.
If you have a Vimeo user account and do not want Vimeo to collect data about you through this website and link it to your Vimeo member data, you must log out of Vimeo before visiting this website.
Furthermore, Vimeo calls the tracker Google Analytics via an iframe in which the video is accessed. This is Vimeo’s own tracking, which we do not have access to. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some internet browsers. You can also prevent Google Analytics from collecting and processing data related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
5. Data Sharing and International Data Transfer
As part of our business activities and the purposes outlined in section 3, we may disclose information to third parties, either because they process it on our behalf or because they want to use it for their own purposes, to the extent permitted and deemed appropriate. This includes, but is not limited to, the following entities:
- Our service providers, including data processors (such as IT providers);
- Merchants, suppliers, and other business partners;
- Domestic and foreign authorities, government agencies, or courts;
- The general public, including visitors to websites and social media.
These recipients may be located both domestically and abroad.
6. Retention Period for Personal Data
We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations or for the purposes for which the processing is carried out. This means, for example, for the duration of the entire business relationship (from initiation, execution, to termination of a contract) and in accordance with legal retention and documentation requirements. It is possible that personal data may be retained for the period during which claims can be asserted against our company and as long as we are otherwise legally obligated or have legitimate business interests (e.g., for evidentiary and documentation purposes).
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse.
8. Obligation to Provide Personal Data
In the context of our business relationship, you are required to provide the personal data necessary for the establishment and execution of a business relationship and the fulfillment of related contractual obligations (you generally do not have a legal obligation to provide us with data). Without this data, we will typically not be able to enter into a contract with you (or the entity or person you represent) or to carry out such a contract. Certain information essential for data traffic security (such as IP address) must also be disclosed to use the website.
9. Rights of the Data Subject
You have the right, in accordance with applicable data protection laws and to the extent provided therein (such as under the GDPR), to access, rectify, delete, restrict the processing of your data, and object to our data processing activities. You also have the right to receive certain personal data for transfer to another controller (data portability). Please note that we reserve the right to assert the legally prescribed restrictions on our part, such as when we are obligated to retain or process certain data, have an overriding interest (to the extent we are entitled to invoke such interests), or require the data for asserting claims.