Västergötlands museum protects your personal privacy and we always strive to protect your personal data and comply with the requirements of the Swedish Privacy Protection Authority. In our privacy policy you can read about how we handle your personal data and what rights you have under the new law.
Who Is Responsible for How We Process Your Personal Data?
Västergötlands museum, corporate identity number 868400-3190, is the data controller for the processing of your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable laws and regulations.
Address: Stiftelsen Västergötlands museum, Box 253, 532 23 Skara. If you have any questions about your personal data, you can contact us via: info@vgmuseum.se
What Personal Data Do We Process About You and Why?
We use your personal data for the following purposes:
Provision of Goods and Services
Personal data is used to enable us to deliver goods and services, to communicate with you and to provide information. The data we collect for this purpose is mainly business and contact information and can be name, social security number, organisation number, address details, email and phone number. The processing is based on the existence of a contract with the controller and suppliers, customers and employees.
Newsletters and Other Information
If you choose to subscribe to our newsletter, you will provide us with your e-mail address. It is then used for our newsletter mailings and information about upcoming events. The newsletter contains an unsubscribe link for those who do not wish to continue receiving our mailings. The legal basis for this processing is the balancing of interests. We want to be able to provide information to those who may be interested in our activities and exhibitions.
Programme or Activity
When you register to participate in one of our programmes or activities, we collect your email address. This is to be able to manage your registration and inform you of any changes. The legal basis here is the balancing of interests.
Recruitment
In order to manage job applications, conduct interviews and make decisions in a recruitment procedure, we need to process certain personal data. In this case, it concerns name, social security number, address, information on experience and qualifications, and photographs. The basis for this processing is the balancing of interests.
Questions, Enquiries and Comments Via Email, Phone and Social Media
In order to contact you and respond to your questions or comments, we need your name and contact details. The legal basis for this is the balance of interests. The data is kept until it has been answered and then it is deleted.
As all questions and comments received are public documents, your data may in some cases be kept longer in accordance with the Archives Act. This is to defend a legal claim, because you have given your consent, or on the basis of a balance of interests or a public interest.
Our Mission as a Museum
In order to fulfil our mission as a museum, we process personal data to make available, organise and manage visits to our collections. This may involve both material submitted to our collections and publications and exhibitions where personal data may be involved. The personal data we collect may include name, address, contact details, profession and interests. It may be in the form of films, photographs and sound recordings. Where we use sensitive personal data, such as sexual orientation or trade union membership, we take great care to ensure that we have your prior consent or that you have already made the information public. The processing is based on a public interest.
When sensitive personal data is included in material of cultural-historical value, processing is only carried out in situations where it is necessary from a scientific and historical perspective. We then process the data for archiving purposes in the public interest.
Who Has Access to Your Data?
Your personal data will be processed by Stiftelsen Västergötlands museum. Where necessary, we share personal data with our subcontractors who are our data processors. We have written agreements with our data processors that regulate how they handle our personal data. The contract states the purpose of the processing and the data processor guarantees that they fulfil the legal requirements for handling your personal data.
How Long Do We Keep Your Data?
We never keep the data for longer than is necessary to fulfil the purpose for which the information was collected or for as long as is required to comply with, for example, the Archives Act or the Accounting Act.
Your Rights
As a data subject, you have the right to be informed about what data we store about you and you always have the right to request rectification of your data if it is found to be inaccurate. You can also ask for your data to be deleted if you think it is no longer necessary for the purpose for which it was collected or if you think it is being used inappropriately. You can have the data deleted unless it contravenes, for example, the Archives Act or the Accounting Act.
If you have given your consent to processing, you can withdraw it at any time and we will delete your data.
If you have any complaints about our processing of your personal data, you can contact the Data Protection Authority and lodge a complaint. The DPA is responsible for monitoring the application of the law and can issue injunctions if we do not comply with the law. If you want to find out more about your rights, you can visit the DPA’s website and read more.