Besöksadress

Hässleholmsvägen, Vanås
289 90 Knislinge

Telefon

+46 (0)44–660 71 (week days)

+46 (0)44–253 15 68 (week-ends)

E-mail

info@wanaskonst.se

Privacy Policy and Handling of Personal Data

We care about your personal privacy and always strive for a high level of data protection. In our privacy policy, we explain how we collect and use your personal information. Here, you will find information about your rights. You are always welcome to contact us with any questions.

We want you to feel confident about how we handle your personal data. Therefore, we are transparent about how we collect and manage the information we store about you. We ensure that your personal data is always protected with us and that our processing complies with the requirements of the General Data Protection Regulation (GDPR) and internal guidelines.

In this privacy policy, we explain what personal data we collect about you, the purpose of its collection, how we process it, how long it is stored, and the legal basis for processing it in different situations.

What is personal data?

Personal data is any information that can be used to identify a living individual. Some typical personal data includes your personal identification number/SSN, name, and address. Images of and audio recordings of individuals that are processed electronically can also be personal data, even if no names are mentioned. Encrypted data and various types of electronic identities (such as IP numbers and cookies) are personal data if they can be linked to physical persons.

What is the processing of personal data?

Processing of personal data refers to any action performed on personal data. Every action taken with personal data is considered processing, whether automated or not. Common types of processing include: collection, registration, organization, structuring, alteration, storage, processing, dissemination, transmission, and deletion.

What personal data do we collect about you and for what purpose?

1. Sales of tickets and membership in Wanås Art Club

Purpose

To handle ticket and membership purchases.

Processing activities:

  • Sending of booking confirmations.
  • Communication regarding the sale.
  • Payment handling.
  • Categories of personal data
    • First name and last name
    • Postal address
    • Phone number
    • Email address

Storage time

Until the service is completed.

2. Bookings for services

Purpose

To handle bookings for services, such as tours and visits.

Processing activities:

  • Receiving bookings, cancellations, and changes.
  • Sending of booking confirmations.
  • Communication regarding the booking.
  • Payment handling.
  • Categories of personal data
    • First name and last name
    • Contact information (email and phone number, billing address)
    • Organization/personal identification number
    • Any notes you choose to provide.

Storage time

Until the service is completed.

3. Service inquiries and requests

Purpose

To handle service inquiries and requests.

Processing activities:

  • Communicating and responding to inquiries through information services (via phone, email, feedback forms, or digital channels, including social media).
  • Investigation of complaints or questions.
  • Categories of personal data
    • Name or username
    • Contact details (e.g., email and phone number)
    • Your correspondence

Storage time

Until the service is completed.

4. Information to special stakeholders (Patrons, Wanås Art Club, VIP contacts)

Purpose

To inform stakeholders about our activities. Processing is necessary to deliver newsletters, press releases, and other mailings to those who voluntarily sign up to receive them. If the information is not provided or is withdrawn, we will no longer be able to provide these mailings.

Processing activities:

  • Collecting personal data from those wishing to subscribe to newsletters or receive other mailings.
  • Sending newsletters, press releases, event invitations, and publications to specific interest groups and mailing lists. Includes both physical and digital mailings.
  • Categories of personal data
    • Name
    • Address
    • Email address
    • Phone number

Storage time

Until the recipient no longer wishes to receive the mailings.

5. Information to the public

Purpose

To inform the public about our activities. The processing is necessary for Wanås Konst to conduct its operations.

Processing activities:

  • Information about current speakers, exhibiting artists, course and conference organizers, curators, as well as images and video recordings of artists, curators, exhibition staff, and, where applicable, the audience. To be used on the museum’s official communication channels such as the website, mailings, and social media.
  • Categories of personal data
    • Name and professional title
    • Images
    • Audio and video recordings
    • Contact details (where applicable)

Storage time

Until the information is no longer relevant or needed.

6. Making collections/exhibitions accessible

Purpose

To display, make accessible, and promote our collections. Processing is necessary for Wanås Konst to conduct its operations.

Processing activities:

  • Collecting and registering personal data regarding purchased, donated, and loaned artworks.
  • Registering ownership history and provenance.
  • Categories of personal data
    • Name
    • Contact information (address, studio details, telephone, email)
    • Birth year
    • Country of birth and country of residence/operations

Storage time

Until the information is no longer relevant or needed.

7. Loans and donations of artworks

Purpose

To handle donations or loans of artworks. Processing is necessary for receiving, borrowing, or lending artworks.

Processing activities:

  • Collecting information about institutions and individuals lending and donating artworks.
  • Correspondence with architects, designers, artists, institutions, donors, sellers, and lenders.
  • Collecting company and personal information about those transporting and handling the artworks.
  • Categories of personal data
    • Name
    • Contact information (email, address, phone number)

Storage time

For correspondence as long as an agreement is valid.

8. Participation in events

Purpose

To manage participation in events/press tours. Processing is necessary to carry out the events.

Processing activities:

  • Collecting and registering those wishing to attend events/press tours.
  • Managing participants during the event (check-in).
  • Categories of personal data
    • Name
    • Email address

Storage time

Until the event is completed.

9. Recruit staff

Purpose

To recruit staff. Processing is necessary for Wanås Konst to fill vacant positions and conduct its operations.

Processing activities:

  • Collecting personal data from job applications.
  • Communication regarding interview processes.
  • Categories of personal data
    • Name
    • Personal identification number
    • Contact information (address, postal address, email, phone number)

Storage time

Until recruitment is completed and for 2 months after a hiring decision.

Who is responsible for the personal data we collect?

The data controller for the collection of personal data is Wanås Konst, company registration no: 838201-7518, address: Box 67, 289 21 Knislinge.

Where do we obtain your personal data from?

In addition to the information you provide to us or that we collect based on your purchases, we may also collect personal data in connection with documenting our activities and events. The data we collect in this way includes: photographs and audio and video recordings.

Who might we share your personal data with?

Data processors

Where necessary for us to provide our services, we share your personal data with companies that act as data processors on our behalf. A data processor is a company that processes information for us according to our instructions. We have data processors who assist us with:

  1. Marketing and communication (services for newsletters and mailings, media and web agencies, distribution)
  2. Transport (logistics and delivery companies)
  3. Booking and service (to manage various events, tours, and courses)
  4. Ticket booking and payment (to manage advance tickets online)
  5. IT services (companies that handle necessary IT operations, technical support, and maintenance)

When your personal data is shared with data processors, it is only for purposes that are consistent with the original purposes for which we collected the information.

Self-Independent Data Controllers

We also share your personal data with certain companies that are independent data controllers. Being an independent data controller means that we do not control how the information provided to these companies is processed.

  • Companies offering payment solutions (card acquiring companies, banks and other payment service providers.
  • Companies handling newsletters and email mailings.
  • Companies providing product delivery services.

Where do we process your personal data?

We always strive to process your personal data within the EU/EEA area, and all our own IT systems and those of our data processors are located within the EU/EEA.

In cases where your data would be used outside of the EU, for example, by one of our service providers, we ensure that appropriate safeguards are in place, such as data transfer agreements, to ensure that recipients process the data in the same secure manner that we do.

What rights do you have if we hold your personal data?

Right of access (so-called register extract)

We are always transparent about how we handle your personal data, and you can request access to the data.

Right to Rectification

You can request that your personal data be corrected if it is inaccurate. Within the scope of the stated purpose, you have the right to supplement any incomplete personal data.

Right to Erasure

You can request the erasure of personal data we process about you if:

  • You wish to be removed from a register that requires consent.
  • The data is no longer necessary for the purposes for which it was collected or processed.
  • The personal data is processed unlawfully
  • The personal data must be erased to comply with a legal obligation we are subject to.

We may have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and anti-money-laundering laws, as well as consumer protection legislation.

It may also occur that processing is necessary for us to establish, exercise, or defend legal claims. If we are unable to comply with a deletion request, we will block the personal data from being used for any purposes other than the purpose that prevents its deletion.

Right to Restriction

You have the right to request that our processing of your personal data is restricted. If you dispute the accuracy of the personal data we process, you can request restricted processing for the period of time needed to verify whether the personal data is correct.

Right to Data Portability

If our right to process your personal data is based on your consent or the performance of a contract with you, you have the right to request that the data related to you and that you have provided to us be transferred to another data controller (so-called data portability). A condition for data portability is that the transfer is technically feasible and can be automated.

How is your personal data protected?

We use IT systems to protect the confidentiality, integrity, and availability of personal data. We have implemented specific security measures to protect your personal data from unauthorized or unlawful processing (such as unauthorized access, loss, destruction, or damage). Only those individuals who actually need to process your personal data in order for us to fulfill our stated purposes have access to it.