Purpose
To manage ticket and membership purchases.
Processing Activities
- Sending booking confirmations.
- Communication regarding sales.
- Payment processing.
- Categories of personal data
- First and last name
- Postal address
- Phone number
- Email address
Storage time
Until the service is completed.
2. Service bookings
Purpose
To manage bookings of services such as tours and visits.
Processing Activities
- Receiving bookings, rescheduling, and cancellations.
- Sending booking confirmations.
- Communication regarding bookings.
- Payment processing.
- Categories of personal data
- First and last name
- Contact details (email and phone number, billing address)
- Organization/personal identification number
- Any notes you choose to provide.
Storage time
Until the service is completed.
3. Service Inquiries and Requests
Purpose
To handle service inquiries and requests.
Processing Activities
- Communication and response to inquiries via phone, email, feedback forms, or digital channels, including social media.
- Investigation of complaints or queries.
- Categories of personal data
- Name or username
- Contact details (e.g., email and phone number)
- Your correspondence
Storage time
Until the service request is completed.
4. Information to Specific Stakeholders (Patrons, Wanås Art Club, VIP Contacts)
Purpose
To provide information about our activities to specific stakeholders. Processing is necessary to deliver newsletters, press releases, and other mailings to those who have voluntarily subscribed. If the data is not provided or withdrawn, we can no longer send mailings to the recipient.
Processing Activities
- Collecting personal data for those who want to subscribe to newsletters or receive other mailings.
- Sending newsletters, press releases, event invitations, and publications to specific interest groups and lists via physical and digital mailings.
- Categories of personal data
- Name
- Address
- Email address
- Phone number
Storage time
Until the recipient no longer wishes to receive the mailings.
5. Public Information
Purpose
To inform the public about our activities. Processing is necessary for Wanås Konst to operate.
Processing Activities
- Information on current lecturers, exhibiting artists, course and conference organizers, and curators. Images and video recordings of artists, curators, exhibition staff, and, where applicable, the audience. These will be used on the museum’s official communication channels such as the website, mailings, and social media.
- Categories of personal data
- Name and professional title
- Images
- Audio and video recordings
- Contact details (where applicable)
Storage time
Until the information is no longer relevant or needed.
6. Making Collections/Exhibitions Accessible
Purpose
To display, make accessible, and communicate our collections. Processing is necessary for Wanås Konst to operate.
Processing Activities
- Collection and registration of personal data related to purchased, donated, and loaned artworks.
- Registration of ownership history and provenance.
- Categories of personal data
- Name
- Contact details (address, studio details, phone, email)
- Year of birth
- Country of birth and activity
Storage time
Until the information is no longer relevant or needed.
7. Art Loans and Donations Purpose
Purpose
To manage donations or the loaning in and out of artworks. Processing is necessary for receiving, borrowing, or lending artworks.
Processing Activities
- Collecting information about institutions and individuals involved in loans or donations.
- Correspondence with architects, designers, artists, institutions, donors, sellers, and lenders.
- Collecting company and personal data for those handling transportation and management of the artworks.
- Categories of personal data
- Name
- Contact details (email, address, phone number)
Storage time
For correspondence, as long as an agreement is valid and applicable.
8. Event Participation
Purpose
To organize and manage participation in events/press previews. Processing is necessary to conduct these events.
Processing Activities
- Collecting and registering participants for events/press previews.
- Managing event participants (attendance check-in).
- Categories of personal data
- Name
- Email address
Storage time
Until the event is completed.
9. Staff Recruitment
Purpose
To recruit staff. Processing is necessary for Wanås Konst to fill vacancies and operate.
Processing Activities
- Collecting personal data from job applications.Collection of personal data from job applications.
- Communication regarding job interviews.
- Categories of personal data
- Name
- Personal identification number
- Contact details (address, postal address, email, phone number)
Storage time
Until the recruitment is completed, plus two months after the hiring decision.
Who is Responsible for the Collected Personal Data?
The data controller for the collection of personal data is Wanås Konst, org. no: 838201-7518, with address Box 67, 289 21 Knislinge.
From which sources do we obtain your personal data?
In addition to the data you provide to us or that we collect from you based on your purchases, we may also collect personal data during documentation of our activities and events. The collected data includes photographs, audio, and video recordings.
Who Do We Share Your Personal Data With?
Data processors
If necessary for providing our services, we share your personal data with companies that process data on our behalf, following our instructions.We also share personal data with companies that are independently responsible for their data processing, such as payment solution providers, newsletter services, and delivery companies.
- Marketing and information (newsletter and mailing services, media and web agencies, distribution)
- Transport (logistics and delivery companies)
- Booking and service (to manage various events, viewings and courses)
- Booking and payment of admission tickets (to manage advance tickets online)
- IT services (companies that handle the necessary operation, technical support and maintenance of IT solutions)
When your personal data is shared with data processors, it is only for purposes that are compatible with the purposes for which we have collected the information.
Companies that are independent data controllers
We also share your personal information with certain companies that are independent data controllers. The fact that the company is an independent data controller means that we do not control how the information provided to the company is processed.
- Companies that offer payment solutions (card acquiring companies, banks and other payment service providers.
- Companies that handle newsletters and email mailings.
- Companies that offer delivery of the products.
Where do we process your personal data?
We always strive to process your personal data within the EU/EEA area and all of our own IT systems and the personal data processors we employ are located within the EU/EEA.
In cases where your data is used outside the EU, for example by one of our service providers, we always ensure that there are safeguards, such as data transfer agreements, in place so that the recipients process the data in the same secure manner as we do.
What rights do you have if we have your personal data?
Right of access (so-called register extract)
We are always transparent about how we handle your personal data, and you can request access to the data.
Right to Rectification
You can request that your personal data be corrected if it is inaccurate. Within the scope of the stated purpose, you have the right to supplement any incomplete personal data.
Right to Erasure
You can request the erasure of personal data we process about you if:
- You wish to be removed from a register that requires consent.
- The data is no longer necessary for the purposes for which it was collected or processed.
- The personal data is processed unlawfully.
- The personal data must be erased to comply with a legal obligation we are subject to.
We may have the right to refuse your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and anti-money-laundering laws, as well as consumer protection legislation.
It may also occur that processing is necessary for us to establish, exercise, or defend legal claims. If we are unable to comply with a deletion request, we will block the personal data from being used for any purposes other than the purpose that prevents its deletion.
Right to Restriction
You have the right to request that our processing of your personal data is restricted. If you dispute the accuracy of the personal data we process, you can request restricted processing for the period of time needed to verify whether the personal data is correct.
Right to Data Portability
If our right to process your personal data is based on your consent or the performance of a contract with you, you have the right to request that the data related to you and that you have provided to us be transferred to another data controller (so-called data portability). A condition for data portability is that the transfer is technically feasible and can be automated.
How is your personal data protected?
We use IT systems to protect the confidentiality, integrity, and availability of personal data. We have implemented specific security measures to protect your personal data from unauthorized or unlawful processing (such as unauthorized access, loss, destruction, or damage). Only those individuals who actually need to process your personal data in order for us to fulfill our stated purposes have access to it.