Privacy and Data Protection Policy
The Privacy and Data Protection Policy for Gammel Estrup the Danish Manor Museum and the Danish Research Centre for Manorial Studies
As a result of the new General Data Protection Regulation – also referred to as GDPR – Gammel Estrup has updated its privacy and data protection policy.
The new rules came into force on 25 May 2018 and apply throughout the EU (and the EEA countries). You are automatically covered by the rules and thus do not need to take any action.
All information that is attributable to a single person is personal information. This information may be given to the museum in connection with recruitment, affiliation as a volunteer, through a professional network or as a business partner. Information may also be given in connection with signing up for the likes of events or collected when visiting websites etc.
Gammel Estrup always handles personal information securely and in accordance with applicable legislation: both when the Museum (most often) is the data controller and if the museum acts as the data controller.
Gammel Estrup always seeks to use data processors within the EU who abide by the same legislation as us.
Internally in the organisation, we seek to have a high level of data security. We encrypt or anonymise information as far as possible and lock information in paper format in accordance with law.
When you visit any of Gammel Estrup’s or the Danish Manor Museum and the Danish Research Centre for Manorial Studies’ websites, Gammel Estrup collects data to produce statistics, optimise the websites and target marketing. For example, we process IP addresses, operating system and browser system and date and time of visits, and we create cookies. In order to produce statistics and any re-marketing we collect data and disclose it to a third party such as Google.
You receive a newsletter because you have subscribed to it. We store only (first) name and email address. We use Mailchimp for sending newsletters. You can unsubscribe from the newsletter at any time.
When signing up for an event, booking a guided tour etc., the participant/s is/are recorded with name, address and contact details. The information is stored for up to 6 months after the event then discarded.
When paying donations to the Museum, the donor will provide his/her name and address and civil registration number, if you wish to make a deduction on your tax return. The Museum only uses your civil registration number for disclosure to SKAT (the Danish tax authority) so that the donor can receive the deduction for the donation. The data is stored for up to 5 years in accordance with the Danish Bookkeeping Act.
In the context of ordering goods and the provision of services from Gammel Estrup, we create a personal profile, which is used for delivery and billing. When Gammel Estrup purchases goods/services from business partners, we also create a profile with name, address, contact information and bank account details for payment use. The information is stored for up to 5 years in accordance with the Danish Bookkeeping Act.
If you apply for a job at Gammel Estrup, we process the personal information we have received from the applicant along with any references, which the applicant has consented to our contacting. We save all applications for 3 months before discarding them.
If you have any questions about Gammel Estrup’ privacy and data protection policy, you can contact the Museum at any time at firstname.lastname@example.org. You can also contact us here if you want insight into your own personal information, which Gammel Estrup possesses, if you want to have your information amended or deleted, of if you wish to withdraw your consent.
Company registration number 5824 7618
If you wish to complain, you must contact:
The Danish Data Protection Agency
1300 DK-Copenhagen K
T (+45) 3319 3200