Thank you for visiting our website.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our site. Our data protection practices comply with the legal provisions of the Swiss Federal Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR). The following data protection declaration serves to fulfill the information obligations arising from the DPA and the GDPR. These are contained, for example, in Art. 8 et seq. of the GDPR as well as Art. 13 et seq. of the GDPR.
The owner or controller within the meaning of art. 3 letteri GDPR or art. 4 no. 7 GDPR is the person who, alone or jointly with others, decides on the purposes and means of the processing of personal data. The controller within the meaning of art. 4 no. 7 GDPR is also the recipient of the personal data within the meaning of art. 4 no. 9 GDPR. Any third-party recipient is identified separately.
The owner or person responsible for our website is :
Association Biennale Son
Rte de la Madeleine 48
CH - 1966 Argnou (Ayent)
info@biennaleson.ch
Your rights as a data subject
You may exercise the following rights at any time using the contact details provided by our data protection officer
If you have given us your consent, you may revoke it at any time with effect for the future.
You may at any time lodge a complaint with a supervisory authority, for example the competent supervisory authority in the federal state of your residence or the authority responsible for us as a responsible body.
Website availability and creation of log files
Each time you access our website, our system automatically collects data and information from the device (computer, cell phone, tablet, etc.) used to access it.
What personal data is collected and to what extent is it processed?
(1) Information on the type and version of browser used;
(2) Operating system of the search device;
(3) Host name of the accessing computer;
(4) IP address of the search device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) consulted on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Message indicating whether extraction was successful;
(9) Amount of data transmitted.
This data is stored in our system log files. This data is not stored with the personal data of a specific user, so that individual visitors to the site cannot be identified.
Legal basis for processing personal data
Personal data is processed in accordance with the principle of lawfulness(Art. 4 FADP) and the principle of good faith (Art. 2 CC) and Art. 6 para. 1lit. f GDPR (legitimate interest).
Purpose of data processing
The temporary (automated) recording of data is necessary during the visit to a website to enable the website to be supplied. The recording and processing of personal data is also intended to maintain the compatibility of our website with the greatest possible number of visitors, to combat misuse and to eliminate malfunctions. To this end, it is necessary to record the technical data of the computer accessing the site, so that we can react as quickly as possible to display errors, attacks on our computer systems and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our IT systems.
Storage time
The aforementioned technical data is deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after access to our website.
Possibility of opposition and deletion
You may object to processing at any time in accordance withArticle 21 of the GDPR and request deletion of data in accordance withArticle 17 of the GDPR. You will find your rights and how to exercise them at the bottom of this privacy policy.
Special website functions
Our website offers you various functions, during the use of which we collect, process and store personal data. We explain below what happens to this data:
Contact form(s)
What personal data is collected and to what extent is it processed?
The data you have entered in our contact forms, which you have entered in the input mask of the contact form.
Legal basis for processing personal data
Personal data is processed in accordance with the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 CC) as well as Art. 6 para. 1 lit. a GDPR (consent by unequivocal deconfirming action or behavior).
Purpose of data processing
We will only use the data collected via our contact form(s) to process the specific contact request received via the contact form. Please note that in order to respond to your contact request, we may also send you e-mails to the address you have provided. The purpose of this is to confirm that your request has been correctly transmitted to us. However, sending this confirmation e-mail is not obligatory for us and is for your information only.
Storage time
Once your request has been processed, the data collected will be deleted immediately, unless legal retention periods apply.
Possibility of opposition and deletion
You may object to processing at any time in accordance withArticle 21 of the GDPR and request deletion of data in accordance withArticle 17 of the GDPR. You will find your rights and how to exercise them at the bottom of this privacy policy.
Need to provide personal data
The use of our contact forms is voluntary. You are not obliged to contact us via the contact form, but you can also use the other contact options offered on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the information required in the contact form, you will not be able to send your request or we will not be able to process your request due to lack of information.
Disclosure ofinformation to third parties
Personal data is processed in accordance with the principle of legality (Article 4 of the RGPD) and the principle of good faith (Article 2 of the CC).
The disclosure of information to third parties depends on the scope of the activities or offers of our website or our business model described below.
As a matter of principle, we only keep your information for as long as is necessary and treat it confidentially. Exceptions to this rule are the transfer of personal data to debt-collection service providers, public bodies and authorities and private individuals who are entitled to it by virtue of statutory provisions, judicial decisions or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law-enforcement purposes if our legally protected rights are challenged.
Utilisationde Google Analytics
Nature and purpose of processing :
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on these web pages, your IP address will be cancelled beforehand by Google within the Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purpose of data processing is to evaluate the use of the website and to compile reports on website activities. Based on the use of the website and the Internet, other related services will be provided.
Legal basis for the processing of personal data :
The legal basis for data processing is your consent in our information banner to the use of cookies and web tracking (consent through a clearly confirmed action or behavior)in accordance with Article 13 Para. 1 of the Data Protection Act. 13 Para. 1 GDPR and art. 6 Para. 1 lit. a GDPR.
Recipient :
The recipient of the data is Google as the party responsible for order processing. For this purpose, we have concluded an order processing agreement with Google.
Storage period :
Data is deleted as soon as it is no longer required for registration purposes.
Transfer to a third country :
Google processes your data in the USA and has joined the EU-US Privacy Shield. We have also signed standard data protection agreements with Google for the use of Google Analytics.
Prescribed or required :
The provision of your personal data is voluntary and is based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent :
You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note, however, that if you do this, you may not be able to use all the functions of this website. You can also prevent the transmission to Google of data generated by cookies and linked to your use of the site (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Browser Add On to deactivateGoogle Analytics.
In addition or as an alternative to the browser add-on, you can prevent our pages from being tracked by Google Analytics by clicking on this link. A deactivation cookie will then be installed on your device. This will prevent the collection of data by Google Analytics for this website and browser in the future, as long as the cookie remains installed in your browser.
Profiling :
The Google Analytics tracking tool enables us to evaluate the behavior of site visitors and analyze their interests. To this end, we create a pseudonymous user profile.
UsingGoogle Maps
Nature and purpose of processing :
On this website, we use Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This enables us to display interactive maps directly on the website, making it easier for you to use the map function.
You can find out more about how Google processes data in Google's privacy policy. You can also change your personal privacy settings in the Privacy Center.
Here you'll find detailed instructions on how to manage your own data in connection with Google products.
Legal basis :
The legal basis for the transmission of personal data isyour consent in accordance with Art. 4 para. 5 GDPR or Art. 13 para. 2 GDPR andin accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, whichyou have given on our website.
Recipient :
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This occurs irrespective of whether Google provides a user account by which you are logged in or whether no user account exists. If you are connected to Google, your data will be assigned directly to your account.
If you do not want your profile to be assigned to Google, you must log out of Google before activating the button. Google saves your data in the form of user profiles and uses them for advertising purposes, market research and/or to design the website according to your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other social network users of your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, please contact Google.
Storage period :
We do not collect any personal data through Google Maps integration.
Transfer to a third country :
Google processes your data in the United States and has joined the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent :
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.
Prescribed or required :
The provision of your personal data is voluntary and is based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
UsingGoogle Tag Manager
What personal data is collected and to what extent is it processed?
Our website uses the Google Tag Manager service provided by Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/ (hereinafter referred to as Google Tag Manager). Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programs by means of so-called "tags". In this context, Google Tag Manager saves cookies on your computer and analyzes your browsing behavior (so-called "tracking"), insofar as web tracking tools are run using Google Tag Manager. The data transmitted by the various tags integrated into Google Tag Manager are grouped, stored and processed by Google Tag Manager as part of a uniform user interface. All integrated "tags" are again listed separately in this data protection declaration. Further information on data protection for the tools integrated into Google Tag Manager can be found in the corresponding section of this data protection declaration. When you use our website with the integration of Google TagManager tags activated, data such as your IP address and your user activities in particular are transmitted to the servers of Google Ireland Limited. With regard to web services integrated by means of Google TagManager, the provisions of the corresponding section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager prior to transmission by means of IP source code anonymization. Google Tag Manager is therefore only able to record IP addresses anonymously (so-called IP masking).
Legal basis:
The legal basis for data processing is your consent in our information banner to the use of cookies and web tracking (consent through a clearly confirmed action or behavior)in accordance with Article 13 Para. 1 of the Data Protection Act. 13 Para. 1 GDPR and art. 6 Para. 1 lit. a GDPR.
Purpose of data processing :
On our behalf, Google will use the information obtained through Google Tag Manager to evaluate your visit to this website, to compile reports on website activity and to provide us with other services relating to website and Internet usage.
Storage life :
Google will store data relating to the Google Tag Manager function for the time required to perform the reserved web service. Data collection and storage is anonymous. In the event of a reference to a person, the data will be deleted immediately, insofar as there is no legal obligation to retain the data. In any case, data will be deleted on expiry of the retention period.
Opposition and deletion :
You can prevent the collection and transmission of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, by installing a script blocker in your browser or by activating the "Do Not Track" setting in your browser. In addition, you can prevent the collection by Google of data generated by Google cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google's security and privacy policies can be viewed athttps://policies.google.com/privacy.
UsingGoogle Fonts
Our website uses the Google Fonts service provided by GoogleIreland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/. At the discretion of the Swiss authorities, processing takes place in safe third countries. You will find a list of Switzerland's countries on the following link:https://www.edoeb.admin.ch/edoeb/en/home/data-protection/handel-und-wirtschaft/transborder-data-flows.html. Personal data is also transferred to the USA. With regard to the transfer of personal data to the United States, there is an adequacy decision on the EU-US data protection framework of the European Commission within the meaning of Article 45 of the GDPR (hereinafter: "adequacy decision"). 45of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer.
The legal basis for the transmission of personal data isyour consent in accordance with Art. 4 para. 5 GDPR or Art. 13 para. 2 GDPR andin accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, whichyou have given on our website.
We use the Google Fonts service to be able to integrate catchy fonts on our website so that we can present our website to you in a visually enhanced version. The service may also be used on our website if other Google services are reloaded on our website and require Google Fonts to function. This is the case, for example, if our website uses Google services that require the use of Google Fonts.
For the processing itself, the service or we collect the following data: Font data, IP address of the page visitor, font usage statistics and other data from Google services linked to our website.
If the service is activated on our website, our website establishes a connection with the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to Google Apis, Google Cloud and Google Ads in accordance with Google's privacy policy. You can access certification under the EU-US data protection framework at the following address:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.
You may revoke your consent at any time. You will find further information on revoking your consent either with the consent itself or at the end of this privacy policy.
For further information on the processing of data transmitted, please consult the supplier's privacy policy at https://policies.google.com/privacy.
The supplier also offers a pick-up option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
UsingYouTube
Nature and purpose of processing
On some of our websites, we integrate YouTube videos and Facebook/Instagram links. The operators of the corresponding plugins areYouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube") and Facebook Inc, Menlo Park, California. When you visit a page with the YouTube plugin, a connection is established with the YouTube servers. This connection tells YouTube which pages you are visiting. If you are logged in to your YouTube account, YouTube may attribute your browsing behavior to you personally. You can prevent this by first logging out of your YouTube account.
When a YouTube video is launched, the provider uses cookies to collect information about the user's behavior.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's data protection statements, where you will also find further information on your rights in this regard and the privacy settings available to you(https://policies.google.com/privacy). Google processes your data in the USA and has joined the EU-US PrivacyShield https://www.privacyshield.gov/EU-US-Framework
Legal basis
The legal basis for the integration of YouTube and the resulting transfer of data to Google is your consent.
Beneficiary
Calling up YouTube automatically triggers a connection to Google.
Retention period and revocation of consent
People who have deactivated cookie registration for Google's advertising program should not expect to receive suchcookies when they watch videos on YouTube. However, YouTub also stores non-personal usage information in other cookies. To avoid this, you should block cookies in your browser.
Further information on data protection at "YouTube" can be found in the provider's data protection declaration at :
https://www.google.de/intl/de/policies/privacy/
Transfer to a third country
Google processes your data in the United States and has joined the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Mandatory or required provision
The provision of your personal data is voluntary and is based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Integration ofexternal web services and data processing outside the EU
On our website, we use active content from external providers, known as web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside Switzerland and the EU. You can prevent this by installing an appropriate browser plug-in or by disabling script execution in your browser. This may result in functional restrictions on the Internet pages you visit.
Utilisationde Vimeo
Our website uses the Vimeo service provided by Vimeo, Inc.555 West 18th Street, 10011 New York, USA, e-mail: Privacy@vimeo.com, website: http://www.vimeo.com/. Your personal data will be transferred to so-called unsafe third countries. In doing so, we have obliged the partners concerned, on appropriate bases, to comply with the data protection lawsapplicable in Switzerland (generally the EU's standard contractual clauses)in accordance with Art. 6 para. 2 let. a of the GDPR. You have consented to this or there is a direct link between the state and the conclusion of the contract. From an EU perspective, the data processing takes place in a third country for which the European Commission has not issued an adequacy decision. As a result, the usual GDPR level of protection cannot be guaranteed for the transfer, as it cannot be ruled out that the authorities of the third country, for example, may access the data collected.
The legal basis for the transmission of personal data isyour consent in accordance with Art. 4 para. 5 GDPR or Art. 13 para. 2 GDPR andin accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, whichyou have given on our website.
Videos from the Vimeo platform are integrated into our website via the Vimeo service.
You may revoke your consent at any time. You will find further information on revoking your consent either with the consent itself or at the end of this privacy policy.
For further information on the processing of data transmitted, please consult the supplier's privacy policy at https://vimeo.com/privacy.
The supplier also offers a pick-up option at https://vimeo.com/privacy.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Right todata portability
In accordance with Article 20 of the RGPD, you have the right to the transfer of your personal data. We will provide the data in a structured, common and machine-readable format. The data may be sent either to you or to a responsible person designated by you.
We will provide you with the following data on request:
We will transmit personal data directly to a responsible person of your choice, insofar as this is technically possible. Please note that we are not permitted to transfer data that interferes with the overriding interests of third parties, or only to a limited extent, in accordance with Article 9(1)(b) GDPR and Article 20(4) GDPR.
Changes to our privacy policy
We reserve the right to adapt this data protection declaration to comply with current legal requirements or to make changes to our services in the data protection declaration, for example when new services are introduced. The new privacy policy will then apply to your next visit.
Questions to the Data Protection Officer
If you have any questions about data protection, please send us an e-mail to the following address: info@biennaleson.ch
