Privacy Policy

The protection and security of personal data are of the utmost importance to us. We comply with the legal requirements of the General Data Protection Regulation (GDPR) and provide you with information below about our procedures for collecting and processing personal and non-personal data.

Under applicable data protection laws, you have the following rights:

• You may request information at any time, subject to proof of your identity, about the personal data concerning you that we process. The initial request for information is free of charge; however, subsequent requests may, in certain cases, be subject to a fee payable by you.
• You may request at any time the rectification of outdated or inaccurate personal data concerning you or the deletion of your data.
• You may object at any time to the use of your personal data on grounds relating to your particular situation and legitimate interests in maintaining confidentiality.
• Subject to the requirements of applicable data protection law, you may request that your data be transferred to third parties.

If you wish to exercise one or more of these rights, please contact us by email at datenschutz@salzburgmuseum.at or, alternatively, by post at:

Salzburg Museum GmbH
Mozartplatz 1
5010 Salzburg
Austria

To ensure an appropriate level of information and system security and to detect malware, we store log data relating to email communications. If you send an email to one of our email addresses, the following data is logged:

• Email and IP addresses of the recipient and sender
• Number of recipients
• Subject line
• Date and time the email is received by the server
• File names of any attachments
• Message size
• Spam risk classification and delivery status

Emails are initially checked solely by automated means. Individual emails are reviewed manually by authorized personnel only if there is reason to suspect a threat to the security of our IT systems.

In addition, where necessary, we process your personal data in connection with email communications for the duration of the entire business relationship and beyond that period in accordance with statutory retention and documentation requirements.

The security of your data within our systems is of great importance to us. Our aim is to handle your data with the utmost care and to implement all necessary technical and organizational security measures to protect your personal data against loss and misuse.

Virtual access to all of our websites is secured via HTTPS, provided that your browser supports SSL. This means that communication between your device and our servers is encrypted.

By subscribing to our newsletter, you consent to the processing of all data provided for marketing purposes in connection with the distribution of the newsletter.

You may withdraw this consent at any time without giving a reason by clicking the unsubscribe link included in every newsletter.

If you wish to update your data, you can send an email to office@salzburgmuseum.at.

We use the eworx email marketing software to distribute and analyze our newsletters. eworx records opening and click behavior. Specifically, the following information is tracked:

• Time of delivery
• Time of opening
• Duration of opening
• IP address used when opening the email
• Email application used (mail client)
• Which link was clicked and the time of the click

This data is processed exclusively within the European Union and is not disclosed to third parties.

The log files generated by the web server based on visitor requests are analyzed using open-source web analytics software to produce graphical and text-based statistics. Personal data, such as IP addresses, is anonymized in the process.

We use social plugins (“plugins”) from the social network Facebook on our website. Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can be identified by one of the Facebook logos (a white “f” on a blue tile or a “thumbs up” symbol) or by the wording “Facebook Social Plugin.”

When you visit a page on our website that contains such plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the website. We therefore have no influence over the extent of the data collected by Facebook through these plugins and can only provide you with information based on our current knowledge.

By integrating the plugins, Facebook receives information that you have accessed the corresponding page of our website. If you are a Facebook member and are logged into your account, Facebook may associate your visit with your Facebook account. If you interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Even if you are not a Facebook member, Facebook may still obtain and store your IP address. According to Facebook, only an anonymized IP address is stored in Germany.

For information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and the settings available to protect your privacy, please refer to Facebook’s privacy policy at www.facebook.com/policy.php.

If you are a Facebook member and do not want Facebook to collect data about you through this website and associate it with your member data stored by Facebook, you must log out of Facebook before visiting our website. You can also block Facebook social plugins by using browser add-ons, such as “Facebook Blocker.” Further settings and options for objecting to the use of data for advertising purposes are available in your Facebook profile settings at www.facebook.com/settings.

When booking online tickets directly through our website, information relating to your booking is transmitted to the relevant service provider. This transfer is carried out for the performance of a contract or in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) and is necessary for the performance of the contract.

This website may contain links to other websites that are not covered by this Privacy Policy. Please note that we do not endorse or assume responsibility for other websites or their content.