Data protection
Please note: this page is an automatic translation. Only the French version is legally binding.
Thank you for your interest in the Association des musées de Lausanne et Pully. In principle, our website can be used without providing any personal data. However, for certain services (e.g. contact form, newsletter), the processing of personal data may be necessary.
This privacy policy explains how and for what purposes we process personal data, in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU GDPR.
Data controller
The controller responsible for the processing of personal data is:
Association des musées de Lausanne et Pully
Av. Mon-Repos 3
1005 Lausanne
Switzerland
E-mail: [email protected]
Website: lausannemusees.ch
Collection of general data and information (log files)
Each time our website is accessed, technical data is automatically collected and stored in the server log files. This may include:
- browser type and version
- operating system
- referring website (referrer)
- pages visited
- date and time of access
- IP address
- Internet service provider
- other data and information used to prevent attacks on our systems
This data is processed in order to:
- ensure the correct display of the website
- guarantee the security and stability of our systems
- optimise our online services
- enable technical analysis in the event of a security incident
In principle, this data is not used to personally identify users and is not combined with other personal data.
Purposes of processing personal data
We process personal data in particular for the following purposes:
- provision of the website
- communication with you (e.g. enquiries by e-mail or via the form)
- sending newsletters
- organisation of activities and events
- compliance with legal obligations
- IT security and abuse prevention
Legal bases for processing (nFADP)
Under the nFADP, the processing of personal data is lawful in particular where it is based on:
- your consent (e.g. newsletter subscription)
- the conclusion or performance of a contract with you
- compliance with legal obligations
- our overriding private interest (e.g. website security, internal administration), provided that your fundamental interests do not prevail
Retention period
We retain personal data only for as long as necessary to fulfil the purposes mentioned or as long as legal retention obligations apply (e.g. accounting obligations). The data is then deleted or anonymised.
Disclosure of data to third parties and abroad
We may use service providers (e.g. website hosting, IT tools, newsletter delivery) that process data on our behalf. These providers are contractually bound to comply with data protection requirements.
Data may be transferred abroad (e.g. to the United States in connection with Google services). In such cases, we ensure that an adequate level of protection is guaranteed, in particular by means of:
- adequacy decisions of the Swiss Federal Council, or
- recognised standard contractual clauses, or
- other appropriate safeguards within the meaning of the nFADP.
Cookies
Our website uses cookies. Cookies are small text files stored on your device via your browser.
They are used in particular to:
- ensure the technical functioning of the website
- improve user-friendliness
- analyse the use of the website
You can configure your browser to refuse cookies or to notify you before they are stored. However, refusing cookies may limit certain features of the website.
Google Analytics
We use Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to analyse your use of the website.
The information generated (possibly including a shortened IP address) may be transmitted to Google servers abroad and stored there. This data is used to evaluate the use of the website, compile reports and improve our services.
You can prevent the storage of cookies by adjusting your browser settings accordingly or by using appropriate blocking tools.
Newsletter
You can subscribe to our newsletter on our website. The data processed in this context generally includes:
- e-mail address
- possibly first name/surname
- date and time of registration
- IP address at the time of registration (for evidence and security purposes)
The newsletter is sent on the basis of your consent. You can withdraw your consent at any time via the unsubscribe link included in every newsletter.
Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration.
Rights of data subjects (nFADP)
Under applicable law, you have in particular the following rights:
- right of access to your personal data
- right to rectification of inaccurate data
- right to receive or transfer your data (portability, in certain cases)
- right to object to processing
- right to erasure of data, insofar as no legal obligation prevents it
To exercise these rights, you can contact us at the address indicated above.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
