Privacy Statement

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal regulations (GDPR, TKG 2021 – Austrian Telecommunications Act, AVG – Austrian General Administrative Procedure Act). In this data protection information, we inform you about the most important aspects of data processing on our website.

Operator of the website:
Stadtmuseum Graz GmbH
Sackstraße 18
8010 Graz
FN 264638 z
Email: grazmuseum@stadt.graz.at

Contacting us

If you contact us using the contact options provided (e.g., contact form, telephone, email, or social media), your information (name, contact details, subject, and inquiry) will be processed for the purpose of processing and responding to your inquiry.
The legal basis is the fulfillment of (pre-)contractual measures pursuant to Art. 6 (1) (b) GDPR or our legitimate interest pursuant to Art. 6 (1) (f) GDPR in processing and responding to inquiries from customers, interested parties, and partners.
This data will not be passed on to third parties without your consent.

You have the opportunity to subscribe to interesting information about our collections and exhibitions via our website. You also have the possibility to order our school newsletter by clicking on it. For this we need your first name, last name and email address as well as your consent to receive the newsletter in order to send you news about the GrazMuseum. You can cancel your newsletter subscription at any time. Please send your notice of cancellation to the following email address: datenschutz.grazmuseum@stadt.graz.at. We will immediately delete your information in connection with sending the newsletter. You also have the option to unsubscribe directly from the newsletter.

Sending Our Newsletter

Our newsletter is sent by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. We have concluded a corresponding agreement with the provider for order information processing. On the data security of this provider: https://www.cleverreach.com/en/data-security/

Additional Offers

If you would like to receive additional offers by postal mail (for example museum offers especially for children, our GrazMuseum programme folder, etc.), we need your first name, last name, your address, postcode and town/city. Without this information, we won’t be able to send you these additional offers. Your information will be stored by us until your explicit revocation to datenschutz.grazmuseum@stadt.graz.at. We will not share your information with third parties, with the exception of the transport company / shipping company commissioned by us for delivery of the goods.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They’re not doing any damage.

We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit us. If you do not wish this, you can set your browser so that it informs you about the setting of cookies and you only allow this in individual cases. Disabling cookies may limit the functionality of our website and adversely affect the appearance and your user experience.

Web Analysis with Matomo

We use the open source software tool Matomo on our website, which was set up on a virtual server from the provider abaton EDV-Services GmbH, Hans-Resel-Gasse 17, 8020 Graz. This ensures that no data is transmitted to third parties and that the data remains under our control. Matomo uses cookies. These cookies allow us to count visits. These text files are stored on your computer and enable us to analyze the use of our website. The last two character blocks of your IP address are marked, so we have no technical way of clearly identifying you as a user. We see this analysis as part of an internet service in order to be able to further improve the website and adapt it even better to the needs of users. With the cookie content when you use our site for the first time, you have the opportunity to agree whether a web analysis cookie may be stored in your browser to enable us to collect and analyze statistical data.

Social Plugin

Our website includes plug-ins from social networks:

Facebook, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plug-ins are marked with a Facebook logo and the word “Like,” and possibly with the addition “Facebook Social Plugin” or “Facebook Social Plugin.”

Instagram, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”). The plug-in is marked with the Instagram logo and the “follow” function.

YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The plug-in is marked with the YouTube logo and the respective channel ID.

If you access a page on our website that contains such a plugin, you can select whether and with which social network the browser should establish a direct connection by activating the switch located next to the respective plugin. The content of the plugin is then transmitted directly from the respective social network to the browser, which integrates it into the website. Without the consent described above, the plugins remain inactive and no connection to the social networks is established.

By activating a plugin, the respective social network receives the information that the browser has accessed the corresponding page on our website. This also applies when activating the plugin if you do not have a respective social media account or are not currently logged into the respective social media account. This information is transmitted from the browser directly to a server of the respective social network and stored there.

By visiting the pages of our website, which have integrated such a plug-in, a direct connection to the servers of the social network providers is partly established. These send the content of the plug-ins to our website. This transfers the information that you have visited the GrazMuseum website to the social network operator. If you are logged in to one of the social network providers while visiting the GrazMuseum website, the provider can refer your visit to your account. If you do not wish this to happen, you must log out of the corresponding social network user account before visiting the GrazMuseum website. For further information, please refer to the data protection regulations of the respective social network provider:

If you are logged into one of the social networks while visiting our website and the plugin is activated at the same time, the network can directly associate your visit to our website with your social media account. If you interact with the plugin, for example, by clicking the “Like” or “Follow” button or leaving a comment, the corresponding information is also transmitted directly to a server of the social network and stored there. The information may also be published on the social network and displayed to your Facebook friends, Instagram followers, and YouTube subscribers.

If you do not want a social network to assign the data collected via our website to your network account, you must leave the respective plugin in the default inactive mode.

For the purpose and scope of data collection and the further processing and use of the data by the respective social network, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of the respective social network.

YouTube Videos

We have embedded YouTube videos on our website that are stored on youtube.com and can be played directly from our website. These are all embedded in what is known as “extended data protection mode,” which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos are YouTube cookies stored on your device and data transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the YouTube operator. When you play videos stored on YouTube, at least the following data is transferred to Google Ireland Limited: IP address and cookie ID, the specific address of the page accessed on our website, the browser language setting, the system date and time of the access, and your browser identifier.
The data is transferred regardless of whether you have a Google user account through which you are logged in or whether you do not have a user account. If you are logged in, this data is assigned directly to your account. If you do not wish to be assigned to your profile, you must log out before activating the button. YouTube or Google Ireland Limited stores this data as user profiles and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right you must contact Google Ireland Limited as the operator of YouTube. Further information on the purpose and scope of data collection and processing by Google Ireland Limited can be found at www.google.at/intl/de/policies/privacy. We do not process the data in question.

Video surveillance

Stadtmuseum Graz GmbH uses video surveillance in the Graz Museum and in the Graz Museum Schlossberg. The video surveillance serves the purpose of self-protection (protection of the property of the organization) as well as the protection of responsibility (protection of visitors and employees) as well as for the purpose of prevention, containment and clarification of criminally relevant behavior, with exclusive evaluation in the Purpose-defined event. The data are generally stored for 72 hours (if necessary for the duration of the process). In all cases you will be informed of such video surveillance by signs.

Competitions

This information may be used for the purposes of advertising, market research, and tailoring the services of the respective social network to meet your needs. For this purpose, usage, interest, and relationship profiles are also created, e.g., to evaluate your use of our website with regard to the advertisements displayed on Facebook, Instagram, Twitter, YouTube, or LinkedIn, to inform other users of the social network about your activities on our website, and to provide other services related to the use of the network.

When entering a ticket or season ticket draw, participants expressly agree that the personal data they submit (first name, last name, email address) will be stored electronically. This data will not be passed on to third parties. This data is required to announce the winner. When entering a publication draw, participants expressly agree that the personal data they submit (first name, last name, email address, address including postal code and city) will be stored electronically. This data will be passed on to the transport/shipping company commissioned by us to deliver the prize. The stored data will be deleted immediately after the end of the competition, the announcement of the winner, and the dispatch of the prize.

In the lottery of admission tickets / annual tickets, the participant expressly agrees that the personal information (surname, email address) transmitted by him/her will be stored electronically. This information will not be passed on to third parties. These data are required for the announcement of the winners. When drawing lots for publications/CDs, the participant expressly agrees that the personal information transmitted by him/her (first name, surname, address including postcode and location) will be stored electronically—the data will be forwarded to the transport company / shipping company commissioned by us for delivery of the prize. The stored information will be deleted immediately after the end of the competition and the announcement of the winner and the dispatch of the prize.

Your Rights

In principle, you have the rights to information, correction, deletion, restriction, data transferability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can file a complaint with the regulatory authority. In Austria, this is the “Österreichische Datenschutzbehörde” (DSB – Data Protection Authority)

You can reach us using the following contact details:

Graz Museum & Graz Museum Schlossberg & Stadtarchiv Graz
Stadtmuseum Graz GmbH

Sackstraße 18
A-8010 Graz

Phone +43 316 872-7604
datenschutz.grazmuseum@stadt.graz.at
datenschutz.stadtarchiv@stadt.graz.at