Privacy Policy
1. Protecting your privacy
The department of Kunst & Historie in the City of Copenhagen takes processing of your personal data seriously.
In this Privacy policy you can read how your personal data is processed in connection to purchasing tickets, products and other services through this webshop.
In the Terms and Conditions of Purchase you will find everything else which apply to purchase of tickets, products and other services through the webshop.
2. Data responsibility and contact information
The City of Copenhagen acts as data controller and is responsible for the processing of personal data that the municipality receives about you. Please contact the relevant department within the municipality using the following:
The City of Copenhagen, Kunst & Historie
Address: Stormgade 20, 1555 Copenhagen V
Email: UogA@kff.kk.dk
Tel.: +45 33 66 33 66
Cvr.: 64942212
Please do not hesitate to contact us, if you have any questions regarding the processing of your personal data.
3. Processing of your personal data
We need your personal data in order to deliver purchased tickets, annual pass gift vouchers, products and other services.
You are required to provide correct personal data.
When paying with debit/credit card, payment is made through a secure connection and server, where your personal data is encrypted, before being sent through the internet.
3.1 Processing of personal data in connection to purchases
The following normal categories of personal data is registered and processed, in connection to purchases:
- Name
- Telephone number
- Transaction and order history
Optional:
- Postal code
- Country
- Consent to receive newsletter
3.2 Personal data processed when redeeming a membership voucher at a physical location
When a Membership voucher for an annual Membership pass is redeemed at one of History & Art’s the physical locations, the following personal data concerning the future passholder will be processed:
- Name
- Telephone number
- Transaction and order history
Optional:
- Postal code
- Country
- Date of birth
- Consent to receive newsletter
4. Purpose of processing personal data
The purpose of processing your personal data is to ensure delivery of the purchased product or service to you.
If you consent to receiving newsletters, your personal data will be processed in order to deliver these to you.
Personal data will only be processed to the extent necessary in order to fulfil these purposes.
5. Lawful basis for the processing of personal data
The lawful processing of personal data with regards to online purchasing is set out in the European General Data Protection Regulation Article 6, 1., (b). It states that it is lawful to process data when necessary to fulfil the contracts you enter with us.
Regarding newsletter subscriptions, the processing of your personal data is based on your consent, which provides the legal basis for processing in accordance with Article 6, 1., (a) of the GDPR. However, you can always withdraw your consent, which will result in your newsletter subscriptions being terminated.
6. Data Processor
The system behind Kunst & Historie’s webshop and ticketing services is provided by a third party, who is the municipality’s data processor when processing personal data in connection to purchase of services. Naturally, a data processing contract has been entered.
Personal data is otherwise not disclosed to third parties.
The Data Processor is:
Navi Partner København ApS
Titangade 16
2200 Copenhagen Ø
Cvr.: 21382191
6. Retention of personal data
Your personal data is only kept as long it is necessary, for us to be able to deliver a purchased product or service, unless otherwise required by law. As example, the Accounting law states that accounting records must be kept for up to 5 years.
If you have subscribed to a newsletter, your personal data will be retained for the duration of the subscription.
7. Your rights
You have certain rights in relation to the processing of personal data. These are described below.
You can also find more information in the Danish Data Protection Agency’s guidelines on their website: www.datatilsynet.dk.
If you would like to exercise these rights, please contact us through the contact information provided at the beginning of the Privacy policy. We will deal with your enquiry as promptly as possible.
7.1. Right of access by the data subject
You have the right to gain access to the personal data concerning you which is processed.
This includes the purpose of the processing, the categories of personal data which are processed, where the personal data originates from, who receives the personal data, the period of retention of the personal data, your rights and options to make a complaint.
7.2. Right to rectification (correction) and erasure
If you believe that the personal data processed about you is inaccurate, you have the right to have it corrected or deleted. Such a request will be granted, unless there are special circumstances that demand the retention of incorrect personal data. As example, if the municipality is legally obliged to do so or in order to establish or defend a legal claim.
7.3. Right to restrict processing
In some cases, you have the right to have the processing of your personal data restricted. If you request a restriction of processing, your personal data will still be retained. However, it will only be processed with your consent, unless it is necessary to establish, assert or defend a legal claim, or to protect a person’s interests or vital societal interests.
7.4. Right to data portability
When the processing of your personal data is based on a contract, and processing is carried out automatically, you are entitled to data portability.
This means that you have the right to receive the personal data processed about you, in a structured, easy to use and in a machine-readable format, which you have the right to transfer to another service provider.
8. The City of Copenhagen’s Data Protection Officer
As a public authority, the City of Copenhagen has appointed a Data Protection Officer. You are always welcome to contact the municipality’s Data Protection Officer, if you have general questions concerning the municipality’s processing of personal data.
The Data Protection Officer’s contact information:
The City of Copenhagen’s Data Protection Officer
Address: Internal Audit, Suhmsgade 4, 2. 1125 Copenhagen N
Email: dpo@kk.dk
Tel. +45 71 74 54 54, Tuesday and Thursday, between 9-12.
Use this secure link to write to The City of Copenhagen’s Data Protection Officer (digital post)
9. Complaints procedure
If you wish to make a formal complaint regarding the municipality’s processing of your personal data, you have the right to file a complaint to the Danish Data Protection Agency.
Contact information:
The Danish Data Protection Agency
Address: Borgergade 28, 5, 1300 Copenhagen K
Email: dt@datatilsynet.dk
Tel.: +45 45 33 19 32
Website: www.datatilsynet.dk
