Cookies and privacy policy

The Privacy and Data Protection Policy for Gammel Estrup the Danish Manor Museum and the Danish Research Centre for Manorial Studies

As a result of the new General Data Protection Regulation – also referred to as GDPR – Gammel Estrup has updated its privacy and data protection policy.

The new rules came into force on 25 May 2018 and apply throughout the EU (and the EEA countries). You are automatically covered by the rules and thus do not need to take any action.

All information that is attributable to a single person is personal information. This information may be given to the museum in connection with recruitment, affiliation as a volunteer, through a professional network or as a business partner. Information may also be given in connection with signing up for the likes of events or collected when visiting websites etc.

Security

Gammel Estrup always handles personal information securely and in accordance with applicable legislation: both when the Museum (most often) is the data controller and if the museum acts as the data controller.

Gammel Estrup always seeks to use data processors within the EU who abide by the same legislation as us.

Internally in the organisation, we seek to have a high level of data security. We encrypt or anonymise information as far as possible and lock information in paper format in accordance with law.

Website

When you visit any of Gammel Estrup’s or the Danish Manor Museum and the Danish Research Centre for Manorial Studies’ websites, Gammel Estrup collects data to produce statistics, optimise the websites and target marketing. For example, we process IP addresses, operating system and browser system and date and time of visits, and we create cookies. In order to produce statistics and any re-marketing we collect data and disclose it to a third party such as Google.

Cookies

Gammel Estrup uses cookies for analytical purposes, and all information is anonymous. For example, we collect information about the number of visits, the average time of visits and the traffic on the websites.

Newsletters

You receive a newsletter because you have subscribed to it. We store only (first) name and email address. We use Mailchimp for sending newsletters. You can unsubscribe from the newsletter at any time.

Events

When signing up for an event, booking a guided tour etc., the participant/s is/are recorded with name, address and contact details. The information is stored for up to 6 months after the event then discarded.

Donations

When paying donations to the Museum, the donor will provide his/her name and address and civil registration number, if you wish to make a deduction on your tax return. The Museum only uses your civil registration number for disclosure to SKAT (the Danish tax authority) so that the donor can receive the deduction for the donation. The data is stored for up to 5 years in accordance with the Danish Bookkeeping Act.

Business partners/trade

In the context of ordering goods and the provision of services from Gammel Estrup, we create a personal profile, which is used for delivery and billing. When Gammel Estrup purchases goods/services from business partners, we also create a profile with name, address, contact information and bank account details for payment use. The information is stored for up to 5 years in accordance with the Danish Bookkeeping Act.

Jobs

If you apply for a job at Gammel Estrup, we process the personal information we have received from the applicant along with any references, which the applicant has consented to our contacting. We save all applications for 3 months before discarding them.

Questions

If you have any questions about Gammel Estrup’ privacy and data protection policy, you can contact the Museum at any time at post@gammelestrup.dk. You can also contact us here if you want insight into your own personal information, which Gammel Estrup possesses, if you want to have your information amended or deleted, of if you wish to withdraw your consent.

Contact details:
Gammel Estrup
Randersvej 2
DK-8963 Auning
T (+45) 8648 3001
post@gammelestrup.dk
www.gammelestrup.dk

Company registration number 5824 7618

If you wish to complain, you must contact:

The Danish Data Protection Agency
Borgergade 28
1300 DK-Copenhagen K
T (+45) 3319 3200
dt@datatilsynet.dk

Gammel Estrup reserves the right to change this privacy policy due to legislative changes, new technical solutions, enhanced features or improvement of the website and other media.

1.2.3 Tag Manager

We constantly strive to improve the customer experience on our website by giving visitors more personalized and targeted campaigns and offers. To do this, we use Google Tag Manager (GTM).

GTM is a small piece of code that helps us track user behavior across our websites and then pushes the data to our Google Analytics account. Afterwards, all data is perfectly organized and ready to evaluate and review potential website improvements and remarketing campaigns.

We consider Google to be a third-party data processor (see section 2 below).

1.2.4 How can I avoid the use of cookies on websites?

No matter which browser you use, you can adjust your browser settings so that it does not store cookies. Some browsers also allow you to adjust this setting specifically for certain websites.

If you do not want to receive or if you wish to delete cookies, please see the guide here: http://minecookies.org/cookiehandtering.

1.4 Contact Forms

If you choose to contact us by using a contact form on our website, your information will be stored in our backend and compiled into an email which is then sent to us via SMTP (Simple Mail Transfer Protocol).

The information in the email will, if relevant, be transferred to our CRM system. Afterwards, the data will be linked to an existing account with a similar email or created as a new contact.

There may be follow-up on your inquiry, and therefore we reserve the right to store contact information until the matter in question has been completed.

We do not disclose your information to third parties.

2. Our Third-Party Data Processor

We use third parties to process personal data on our behalf. These third parties have been carefully selected. Read more on their respective websites.

Google (Privacy Policy)

3. Data Breach

We will report any unlawful data breach of this website’s database or the databases of any of our third-party data processors to all relevant individuals and authorities within 72 hours of the breach if it appears that personal data stored in an identifiable manner has been stolen.

4. Data Management

The data management on this website is handled by: Encounter, which is a private limited Danish company.

Encounter
Randersvej 2
8963 Auning
Phone: +45 86 48 30 01
Email: dch@gammelestrup.dk

5. Right of Access and to be Forgotten

Contact us if you wish to request access to your personal information stored in our databases, or if you would like your personal data deleted from our databases. We will respond without undue delay (and in any case within one month of receipt of your request, although this may be extended in complex cases).

Encounter
Randersvej 2
8963 Auning
Phone: +45 86 48 30 01
Email: dch@gammelestrup.dk

When a privacy-related question or access/download request is received, we have a dedicated team that reviews the contacts and seeks to resolve the specific concern or request. If your issue is more substantial, we may contact you for more information.

6. Questions Regarding Privacy and Cookie Policy

If you have questions or concerns regarding the privacy policy or data processing, or if you would like to file a complaint about a possible breach of personal data protection law, please contact us:

Encounter
Randersvej 2
8963 Auning
Phone: +45 86 48 30 01
Email: dch@gammelestrup.dk

When a privacy-related question or access/download request is received, we have a dedicated team that reviews the contacts and seeks to resolve the specific concern or request. If your issue is more substantial, we may contact you for more information.