PRIVACY POLICY

Information on data protection

Thank you very much for your interest in our company. Protecting your data is a high priority for the management of the Fürstliche Sammlungen Art Service GmbH & Co OG. In principle, you can use the Fürstliche Sammlungen Art Service GmbH & Co OG website without providing any personal data. However, where a person wishes to make use of particular services offered by our company, this may necessitate the processing of personal data.
We respect the privacy of every person who visits our website. If you contact us by e-mail we only save the name, postal address, e-mail address, type of query and any other information that we need in order to deal with your query as necessary. If you tell us that this data should not be used to contact you in future, we will willingly comply with your request. Otherwise we will use this information to contact you about products and services we offer that we believe may be of interest to you.
The processing of personal data such as the name, address, e-mail address or telephone number of the person concerned is always undertaken in accordance with the applicable General Data Protection Regulation and in compliance with the national data protection regulations to which the Fürstliche Sammlungen Art Service GmbH & Co OG is subject. Our company would like to use this privacy policy to inform the public about the nature, scope and purpose of the personal data collected, used and processed by us. This policy also provides the persons concerned (data subjects) with information about the rights to which they are entitled.
If you have provided us with personal data and wish to have that data deleted, please contact us via e-mail at office@liechtensteincollections.at  or send us a letter. Please also contact us using either of these methods if you wish to know whether and what data concerning you we have collected. We will immediately comply with your request in accordance with the statutory provisions.

1. Name and address of the data controller responsible for the processing

The data controller responsible for the processing of personal data is the Fürstliche Sammlungen Art Service GmbH & Co OG, 1090 Vienna, Fürstengasse 1.

2. Purpose of processing and legal basis

Processing is undertaken in order to perform a contract, to protect the legitimate interests of the data controller and where consent has been given by the data subject.
The processing of personal data in order to protect the legitimate interests of the data controller pursuant to point (f) of Article 6 (1) GDPR is necessary because the contact form is used to initiate business relationships in the interests of both parties.

3. Recipient

We do not pass any personal data on to third parties.

4. Collection of general data and information

Every time that the Fürstliche Sammlungen Art Service GmbH & Co OG's website is accessed by a data subject or an automated system, it collects a range of general data and information. This general data and information is stored in the server's log files. The following data can be collected: (1) date and time, (2) Server IP, (3) the method used to access the site, (4) URL, (5) server port, (7) client IP (including the user agent), (8) the http status code and the duration of the request and other similar data and information which is used to protect our IT systems in the event of attacks. In using this general data and information, the Fürstliche Sammlungen Art Service GmbH & Co OG does not draw any conclusions about the data subject. This data and information, which is collected anonymously, is evaluated by the Fürstliche Sammlungen Art Service GmbH & Co OG with the aim of improving data protection and data security within our company, and, ultimately, in order to ensure an optimum level of protection for the personal data we process.

5. Duration of storage

The personal data are always stored until the business relationship is terminated and for as long after this as there is a legal obligation to store said data or for as long as legal claims can be made in connection with the contract (generally 30 years after termination). If you wish your data to be deleted immediately, please let us know.

6. The data subject's rights

a)    Right to confirmation
Every data subject has the right granted by the European legislator to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she can contact a member of the data controller's staff at any time.

b)    Right to information
Every data subject affected by the processing of personal data has the right granted by the European legislator to request information on the personal data concerning him or her held by the data controller free of charge and to be given a copy of this data. The European legislator has further granted data subjects the right to the following information:
o    the purpose of the processing
o    the categories of personal data that are to be processed
o    the recipients or categories of recipients to whom the personal data have been or are being disclosed, especially in the case of recipients in third countries or international organisations
o    where possible, the period for which the personal data is intended to be stored, or if that is not possible, the criteria used to determine that period
o   the existence of the right to rectification or erasure of personal data concerning him or her, to restriction of processing by the controller or to object to such processing
o    the existence of a right to lodge a complaint with a supervisory authority
o   where the personal data were not collected from the data subject: all available information on the source of the data
o   the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

The data subject further has the right to be informed as to whether personal data were transferred to a third country or international organisation. Where this is the case, the data subject also has the right to be informed regarding suitable safeguards in connection with the transfer of data.
If a data subject wishes to exercise this right to information, he or she can contact a member of the data controller's staff at any time.

c)    Right to rectification
Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject further has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she can contact a member of the data controller's staff at any time.

d)    Right to erasure (right to be forgotten)
Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and the processing is not essential:
o    The personal data were collected or otherwise processed for purposes for which they are no longer required.
o    The data subject withdraws the consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and there is no other legal ground for the processing.
o   The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
o    The personal data have been unlawfully processed.
o    The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
o    The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Insofar as one of the above grounds applies and a data subject wishes to request the erasure of personal data stored by the Fürstliche Sammlungen Art Service GmbH & Co OG, he or she can contact a member of the data controller's staff at any time. The member of the Fürstliche Sammlungen Art Service GmbH & Co OG's staff will ensure that the request for erasure is complied with immediately.
Where personal data have been made public by the Fürstliche Sammlungen Art Service GmbH & Co OG and our company, as the data controller, is obliged to delete this personal data pursuant to Article 17(1) GDPR, the Fürstliche Sammlungen Art Service GmbH & Co OG, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copies or replication of, those personal data, provided the processing is not essential. The member of staff of the Fürstliche Sammlungen Art Service GmbH & Co OG shall arrange the necessary measures in each individual case.

e)    Right to restriction of processing
Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller restriction of processing provided one of the following prerequisites applies:
o   The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
o    The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
o    The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
o   The data subject has objected to processing pursuant to Article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override those of the data subject.

Insofar as one of the above prerequisites applies and where a data subject wishes to demand the restriction of processing of personal data stored by the Fürstliche Sammlungen Art Service GmbH & Co OG, he or she can contact a member of the data controller's staff at any time. The member of staff of the Fürstliche Sammlungen Art Service GmbH & Co OG shall arrange for processing of the data to be restricted.

f)     Right to data portability
Every data subject affected by the processing of personal data has the right granted by the European legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. They further have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, provided the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and that the processing is carried out by automated means and is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In exercising his or her right to data portability pursuant to Article 20(1) GDPR, the data subject shall further have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
The data subject can contact a member of staff at the Fürstliche Sammlungen Art Service GmbH & Co OG at any time in order to assert this right to data portability.

g)    Right to object
Every data subject affected by the processing of personal data has the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR. This also includes profiling based on these provisions.
Where this right to object is exercised, Fürstliche Sammlungen Art Service GmbH & Co OG shall no longer process the personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing is necessary for the establishment, exercise or defence of legal claims.
The data subject further has the right to object, on grounds relating to his or her particular situation, to the processing of personal data undertaken by the Fürstliche Sammlungen Art Service GmbH & Co OG for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR unless such processing is necessary for tasks in the public interest.
The data subject can contact a member of staff at the Fürstliche Sammlungen Art Service GmbH & Co OG at any time in order to exercise this right to object. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.

h)      Right to withdraw data protection consent
Every data subject affected by the processing of personal data has the right granted by the European legislator to withdraw his or her consent to the processing of personal data at any time.
If a data subject wishes to exercise this right to withdraw consent, he or she can contact a member of the data controller's staff at any time.

7. Protection of your data when you apply for a job with us

The data controller responsible for processing collects and processes the personal data of applicants in order to carry out the application process. This processing may also be undertaken using electronic means. This applies in particular when an applicant submits the relevant application documents to the data controller via electronic channels such as e-mail. In the event that the data controller concludes a contract of employment with an applicant, the data provided shall be stored in order to manage the employment relationship, taking account of the statutory provisions. If no contract of employment is concluded with the applicant, the application documents will be erased after the applicant has been notified of the decision to reject their application and within the statutory period, unless this runs counter to the legitimate interests of the data controller and unless both parties agreed that the application documents should be retained for evidential purposes. In this context the legitimate interests of the controller might be, for example, the burden of proof in a legal action in connection with the German Equal Treatment Act (AGG).

8. Princely Archive

For security reasons we process your personal data when you access our archive and store this data permanently in our archive.
Processing of your personal data is necessary to protect the legitimate interests of the controller as we are required to permanently document who has accessed our archives.

9. Withdrawal of consent

Insofar as processing is based on consent given by the party concerned, we hereby inform the parties concerned that they may withdraw their consent at any time and that any processing of data undertaken prior to such revocation of consent remains lawful.

10. Profiling

The data controller hereby declares that it does not use any automated decision-making processes pursuant to Article 22 GDPR or other profiling measures pursuant to Article 4 GDPR.

Vienna, 24th May 2018

 

 

Zum Seitenanfang
Seite drucken
Neuerwerbungen
New acquisitions >>