External Personal Data Policy for ARoS
Your personal data belongs to you. You share your personal data with ARoS when, for instance, you wish to apply for a job, become a member of one of our clubs or when you purchase an item. We imagine you would like to know how we use and process your personal data. This Personal Data Policy is intended to answer your questions.
ARoS is the data controller and processes personal data related to events, sponsorships, marketing, press and media, recruitment, salary and personnel administration. Therefore, we have drawn up this Personal Data Policy to outline how we collect and process personal data.
1. CONTACT INFORMATION
ARoS Aarhus Kunstmuseum,
BUS.REG.NO.: 39 79 99 28
ARoS Allé 2, 8000 Aarhus C,
Telephone: + 45 8730 6600
2. Collection of personal data
We collect personal data both directly and via third parties (external partners). In marketing contexts, we collect data directly via cookies and through IP addresses via Google Analytics. We also collect data directly when hiring and in connection with press and media assignments through research.
When you purchase a product or communicate with us, we collect the data you yourself provide. We gather data via third parties, for example, payment information, for online purchases in ARoS’ shop, including purchase of membership of our clubs such ARoS30 and ARoS Klubben, as well as through email advertising. Customer purchases related to events, purchases in our shop and in Wine & Food are registered in our database.
ARoS only uses the data which you give us. This may be in the context of ordering a club membership, purchase of an item or a job application.
We use, among others, the following data:
- Name and address of sender and recipient
- Telephone number
- Payment address
- Email address
- Payment information
- IP address
- Date of birth (for membership of ARoS 30)
3. WHAT DO WE USE PERSONAL DATA FOR?
We use the data you provide for various purposes:
Data related to press and media are used to build and maintain press contacts domestically and internationally and are registered in our database. Our membership data is used to administer our clubs, including for information on events. These data are registered in our membership system. We also use personal data in the context of recruitment, and which are registered in our HR system.
We use your data to process your orders, in our web shop, for example. In certain circumstances we may also share your data with the companies we work with, also termed third parties, in order to process your orders.
Naturally, you would like to hear about all the experiences that ARoS offers. If you give your consent, you can receive notifications about these, for instance, via email or social media.
We want to ensure you can use our website optimally and in the most personalised way possible. Therefore, we use statistical services such as Google Analytics to observe how you use our website. We have, of course, security agreements with these companies, so IP addresses are anonymised.
Our website may contain links to other websites. We have no influence on these sites and cannot guarantee that they handle data as securely as we do. We recommend that you read their personal data policies before using them.
We process your personal data in accordance with applicable personal data protection legislation. We have, in addition, taken appropriate technical and organisational measures to protect your data against, for example, loss, manipulation or unauthorised access. We regularly adapt our security measures to keep pace with ongoing technological developments.
We protect the data you give us using the most advanced techniques so that no unauthorised parties may access them. If it is necessary to share data with third parties, we require that all companies process your data as securely as we do and only for the intended purposes.
We store your personal data as long as is necessary and, for our own use, for a maximum of two years. Afterwards, your data is deleted unless we are legally obliged to store them for a longer period. For example, the law requires that we store payment data for seven years.
To keep you informed on the use of personal data, we continually update this Personal Data Policy. We recommend therefore that you regularly read it.
5. YOUR RIGHTS
As a data subject, you have the right to access the data on you that is processed and the right to request correction or deletion of your data. If you wish to exercise your rights under the data protection legislation, you are welcome to contact us.
You may request to view, amend, erase or transfer your personal data. If you have any questions or if you wish to complain concerning this Personal Data Policy, you may contact our Data Protection Officer by sending an email to: firstname.lastname@example.org or by regular post to:
ARoS Aarhus Kunstmuseum
ARoS Allé 2
ARoS Allé 8000 Aarhus C