We attach great importance to protecting your personal data and your privacy. Your personal data are treated as strictly confidential and handled in accordance with this privacy policy. Together with our hosting providers, we make every effort to protect our databases against unauthorized access, loss, misuse or falsification. Data security is assured at all times.
This privacy policy provides an overview of the ways in which your personal data are processed when you use the websites of the Zürcher Kunstgesellschaft, Kunsthaus Zürich, Winkelwiese 4, CH-8001 Zurich (the ‘Kunstgesellschaft’, ‘we’ or ‘us’).
We process personal data collected when you visit our websites solely for the purpose stated during processing and in accordance with the law.
Your personal data are collected only when you voluntarily supply them to us when placing an order in our online shop, creating a customer account, using a contact form or signing up for our newsletter. An exception applies when, for practical reasons, it is not possible to obtain prior consent and processing of the personal data is permitted by law.
We process the following personal data relating to you while you are using our websites:
Your personal master data, specifically your last name, first name, postal address, telephone number, e-mail address;
Your communication data, specifically your IP address, operating system, browser ID and browser activity, as well as other information about how you have interacted with our websites or other websites; and
Your payment data, specifically your credit card details, IBAN and BIC or account numbers, and details of your credit rating.
What do we use your personal data for?
In principle, we process your personal data only to the extent necessary to provide a properly functioning website and to perform and execute a contract. In connection with contract performance and execution we process your personal data in particular (i) to enable you to select, order and pay for your chosen products and services and for them to be delivered or performed, and (ii) to notify you, among other things, of the status of the order process or contact you if we have any queries.
When you register for a customer account we will use your personal data to ensure performance and execution of the contract and to enable the provision and performance of other services you have requested. Your customer account is not publicly accessible and cannot be indexed by search engines.
If you sign up to a newsletter, we will use your e-mail address only for our own advertising purposes.
How long are your personal data stored for?
Your personal data are processed and stored for as long as is necessary to achieve the purpose for which they were collected and for us to fulfil our contractual or legal obligations. Your personal data may also be stored if expressly provided for under national or international law to which we are subject.
If you cancel the purchase process, the personal data we have stored are deleted. In the event that a contract is concluded, all personal data arising out of the contractual relationship are stored until the end of the retention period stipulated under tax law (up to 10 years). Other personal data, such as name, postal address, goods purchased and date of purchase, are stored until the expiry of the warranty of quality and fitness and warranty of title and the product liability period (up to 10 years).
We will continue to use your e-mail address for our own advertising purposes until you unsubscribe from the newsletter. You may unsubscribe at any time. The unsubscribe link can be found at the end of every newsletter.
If you have opened a separate customer account, the account and the personal data stored in it will remain until it is deactivated.
How are your payment data transferred?
When you make a payment, we use Secure Sockets Layer (SSL) technology to process your personal data. All information transferred using this method is subjected to high-level encryption (minimum 128-bit, with commonly used browsers up to 256-bit) before it is sent to us. This ensures as far as possible that no unauthorized third party can access your personal data.
Are your personal data shared with third parties?
We can transfer the personal data collected from you for all the purposes set out in this privacy policy to third parties in other countries engaged by us to maintain our websites and the services we offer. These may include countries outside Switzerland and the European Union that may not have data protection legislation comparable to that in Switzerland or any data protection legislation at all. By using our websites, you agree to this transfer.
Data are transferred to third parties in Switzerland or abroad solely on the basis of contractual agreements that comply with the applicable laws and guarantee appropriate protection of your personal data at all times.
Facebook
Our websites include plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. These can be identified by the Facebook logo or the ‘Like’ button on our website. An overview of Facebook plugins can be found at: https://developers.facebook.com/docs/plugins/.
When you visit our websites, the plugin creates a direct connection between your browser and the Facebook server. As a result, Facebook will be informed that you have visited our website using your IP address. By clicking the Facebook ‘Like’ button while logged in to your Facebook account, you can link to content from our websites on your Facebook profile. This allows Facebook to associate your visit to our websites with your user account. Please note that as provider of the websites, we have no knowledge of the content of the data transmitted or their use by Facebook. We can therefore not be held liable for any use of the plugins by you. Further information can be found in Facebook’s Data Policy at https://www.facebook.com/about/privacy.
If you do not wish to allow Facebook to associate your visit to our websites with your Facebook account, please log out of your Facebook account.
YouTube
Our website includes YouTube functions. ‘YouTube’ refers to Google Ireland Limited, a company registered and operated under Irish law (register number: 368047) with its offices at Gordon House, Barrow Street, Dublin 4, Ireland, which offers the services in the EEA and Switzerland. Your legal agreement with YouTube consists of the Terms of Service set out at the following link: https://www.youtube.com/static?template=terms.
These Terms of Service constitute a legally binding agreement between you and YouTube regarding the use of the services. Google’s Privacy Policy (https://policies.google.com/privacy?hl=en-US) explains how Google handles your personal data and protects your data when you use YouTube services. We cannot be held liable for any use of YouTube services by you.
Instagram
Our websites include Instagram functions. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
When you are logged in to your Instagram account you can use the Instagram button to link the content of our websites to your Instagram profile. This allows Instagram to associate your visit to our websites with your Instagram user account. Please note that as provider of the websites, we have no knowledge of the content of the data transmitted or their use by Instagram. We cannot be held liable for any use of Instagram services by you.
We use Vimeo to integrate videos. Vimeo is operated by Vimeo, LLC which is headquartered at 555 West 18th Street, New York, New York 10011.
Every time you visit a website that offers one or more video clips a direct connection is established between your browser and a Vimeo server. This tells the Vimeo server which of our web pages you have visited. If you are logged in as a Vimeo member at the time, Vimeo will associate this information with your personal user account. When you use the plugin, for example by clicking the start button on a video, this information is also associated with your user account. You can prevent this from happening by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies.
More information about data processing and how Vimeo protects your data can be found at https://vimeo.com/privacy. We cannot be held liable for any use of Vimeo services by you.
LinkedIn
Our websites use functions from the network LinkedIn. They are provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you visit one of our pages that incorporates LinkedIn functions, a connection is established to LinkedIn servers. LinkedIn is informed that you have visited our websites using your IP address. If you click on the LinkedIn ‘Recommend’ button while logged in to your LinkedIn account, LinkedIn can associate your visit to our websites with you and your user account. Please note that we have no knowledge of the content of the data transmitted or their use by LinkedIn. Further details can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy
Does the Kunsthaus website use cookies?
Our websites use cookies. These are small text files that are saved on your device. Some of the cookies used by us are deleted at the end of your browser session (session cookies); others remain on your device and enable your browser to be recognized the next time you visit (persistent cookies).
You can set your browser to notify you when a site wishes to place cookies and either decide whether or not to accept them in each case or block cookies in specific cases or generally. Declining to accept cookies may limit the functionality of our websites.
User analytics
Our websites use functions of the web analytics service Google Analytics, which are provided by Google Inc. Google Analytics also uses cookies. Our websites use Google Analytics together with the ‘anonymize IP’ feature. This means that the user’s IP address collected by the Google Analytics cookie is truncated by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before being transferred to the US. In exceptional cases, the complete IP address may be transferred to a Google server in the US and truncated there. The information generated by the Google Analytics cookie is used by Google on our behalf to evaluate use of the websites, compile reports on site activity and provide us with other services in relation to the use of the websites and the Internet. Google Analytics will not link the IP address transmitted by the browser of the accessing system with any other data held by Google.
You can disable the use of cookies by selecting the appropriate settings in your browser. However, doing so may prevent you from making full use of some of the functions on the website. Furthermore, you can prevent Google from compiling and using the data generated by the cookie in relation to your use of the website (including your IP address) by downloading and installing the browser add-on from the following link https:tools.google.com/dlpage/gaoptout?hl=en Further information on the Terms of Service and data privacy and security can be found at https://www.google.com/analytics/terms/us.htmland https://support.google.com/analytics/answer/6004245?hl=en. Please note that on this website the code ‘gat._anonymizeIpl’ has been added to Google Analytics to ensure anonymization/masking of IP addresses.
Marketing
We use functions such as remarketing, conversion tracking and identification of similar target groups to reach you if you have already visited our website or are interested in similar offerings. These allow us to present you with more information based on what you have already been interested in.
Your data protection rights
You are entitled to receive information about your stored data free of charge, and to have such data corrected, blocked or deleted. Please contact us by e-mail at legal@kunsthaus.ch.
Responsibility for the privacy policy
Responsibility for this privacy policy lies with the Zürcher Kunstgesellschaft, Winkelwiese 4, CH-8001 Zurich, tel.: +41 44 253 84 82, e-mail: legal@kunsthaus.ch.