Online Privacy Policy

AQUATIS - Aquarium-Vivarium Lausanne, located at Route de Berne 144, 1010 Lausanne, Switzerland (also herein referred to as “Aquatis” or “Museum”) is committed to protecting the privacy of its online visitors and mobile application users. The purpose of the AQUATIS - Aquarium-Vivarium Lausanne Online Privacy Policy is to help you understand what information Aquatis collects about you when you visit its main website (, access its mobile applications, and receive emails from Aquatis. A link to this Online Privacy Policy can be found at the bottom of every page on  Additional information may be found in other areas of the Aquatis website, mobile applications and emails as appropriate. By using or receiving any of AQUATIS - Aquarium-Vivarium Lausanne websites, mobile applications, or emails, you signify your acceptance of this Online Privacy Policy.

Occasionally, Aquatis may make changes to this policy. Users of the Aquatis website and mobile application and email recipients should check this document periodically to stay informed of current Aquatis privacy guidelines. If Aquatis makes changes, we will indicate it you by changing the date at the bottom of this Online Privacy Policy, and if the changes are substantial, we may provide you with additional notice such as adding a statement at the top of the homepage or emailing you the update. Your use of any Aquatis website, mobile applications or continuing to receive emails following the posting of changes to these terms will constitute your acceptance of those changes.

Information Collection and use

As described in more detail below, AQUATIS - Aquarium-Vivarium Lausanne may collect personal information relating to an identified or identifiable person (such as name and postal or email address) through its website, mobile application and emails.  Individuals may transmit personal information to Aquatis as part of a form submission or in connection with other activities, services, or resources made available on the website, mobile applications or through emails. Aquatis also works with third-party services to collect information from the website and mobile application in order to learn more about visitor usage patterns and how to improve communications and user experiences.

We collect personal information from you and other sources. Aquatis collects this information in order to meet the legitimate business purposes of the Museum, including furthering the Museum’s not-for-profit mission and meeting the needs of our online and onsite visitors, mobile app users, and email recipients.  We use your personal information for the following key purposes:

The Museum’s collection and use of personal information varies with the type of transaction, as detailed below.

The personal information we collect and store is managed in accordance with applicable data protection laws including the General Data Protection Regulation (“GDPR”) for European resident visitors to our website and other applicable data protection laws (the “Data Protection Laws”).

Online Ticketing, Museum Membership, Museum Shop Purchases, and Donations

If you make an online purchase of a Museum ticket, membership, or item from the Museum Shop, or donate to the Museum, you are asked to provide personal information to process and fulfill your online transaction. This information includes contact information (such as name, email and physical addresses) and credit card information. If the Museum has trouble processing an order or donation, we may use your contact information to reach you. Please see the section called Security, below, regarding credit card processing.

Email Subscriptions

If you are subscribed to any of the Museum’s email newsletters, Aquatis will use your email address to send the newsletter to you and may personalize it. Aquatis works with third party partners to perform these services, as discussed further below. You may unsubscribe at any time by clicking the “unsubscribe” link at the bottom of every email.


AQUATIS - Aquarium-Vivarium Lausanne has implemented appropriate and reasonable physical, technical, and administrative processes and procedures in an effort to reduce the risk of loss, misuse, and unauthorized access, modification or destruction of the personal information under our control. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. We require that such parties only process your personal information on our instructions and that they agree to keep your information confidential.

When you transmit highly sensitive information (such as a credit card number) through our website or in our mobile application, we encrypt the transmission of that information using the Secure Sockets Layer (SSL) protocol. Credit card information is encrypted in transmission and is not permanently stored on any Museum web server. The Museum has processes in place to maintain conformance with PCI DSS (Payment Card Industry Data Security Standard) and other relevant security standards.

While we have employed security technologies and procedures to assist safeguarding your personal information, no system or network can be guaranteed to be 100% secure.

Cookies and Pixel Tags

Like most websites, Aquatis uses cookies and pixel tags to better understand its online visitors, to improve its marketing efforts, and to make improvements to website content, navigation, and structure.

A cookie is a small text file that is sent to your browser from a website and is stored on your computer's hard drive. A cookie acts as an anonymous tag that identifies your computer or device. Cookies can store information about which webpages you’ve viewed, or what you’ve put in your online cart. Certain functionality on the website, such as the purchase of tickets or items from the Shop, require the use of cookies to operate.

A pixel tag is a small graphical image, embedded on a webpage or in an email. When you access a page or email with a pixel tag, the tag generates a generic notice of that action. Pixel tags usually work in conjunction with cookies, registering when a particular device visits a particular page or opens an email.

If you are concerned about the use of cookies, Aquatis suggests that you explore your browser's options to notify you whenever a cookie is set, or to disallow cookies altogether, allowing you to decide whether to accept cookies. You can also delete cookies from your computer. Users should be aware, however, that prohibiting the use of cookies may prevent certain elements of the website from properly functioning for you. For more information, see

Mobile Device Information

We may collect personal information from you if you access services through our mobile applications; for example, your unique device identifier, the mobile’s operating system, mobile carrier and location. Depending on which platform you use to access our services (e.g. iOS or Android), you may be able to control whether we collect location data by adjusting the privacy settings on your wireless device. Please be advised that some features will not be available if you choose to disable the collection of location data. Personal information obtained from your mobile device in connection with any text notification services you request may include your cell phone number, your carriers name, the date, time and content of your messages and other information you provide to us as part of these services.

Aggregate Information

Aquatis also collects some anonymous, non-personal information on an aggregate basis about its website visitors and app users. This information is used for statistical purposes and to help the Museum monitor how visitors navigate our website. Examples of such information include IP address, browser type, and device type.

Additionally, Aquatis may collect location data for WiFi-enabled devices visiting the Museum. This includes device ID but is not correlated to any other information on specific users. The data is used to understand the flow of visitors through the Museum to improve the visitor experience.

Third Parties

AQUATIS - Aquarium-Vivarium Lausanne does not sell or rent your personal information. However, the Museum contracts with third-party vendors in order to provide certain services to its online visitors, including ticketing, membership and online shop purchases, donation processing, and distribution and customization of the Museum’s email newsletters, and may need to share your personal information with these vendors to accomplish these functions where we are lawfully permitted to do so. The Museum requires third-party vendors to protect the privacy of the Museum’s online visitors and to keep all information secure and confidential and prohibits them from using or sharing such information except as specifically described in their agreements with Aquatis.

Aquatis uses third-party web analytics services to help it analyze how users interact with the website and emails. The information generated by a cookie or pixel, such as a user’s IP address, may be transmitted to and stored by these analytics services on their servers to create aggregate reports on website activity and provide other services relating to internet usage. The web analytics services may also transfer this information to third parties where required to do so by law, or where such third parties process the information on behalf of the web analytics services. By using the website of Aquatis and receiving its emails, you consent to the processing of personal information about you by these web analytics services in the manner and for the purposes set out above.

Aquatis may share personal information, such as name, email or physical address, or records of transactions you have conducted with the Museum, with third-party partners in order to deliver Museum advertisements and better understand the needs and behavior of its website visitors, app users, donors and members.

The Museum may additionally share the names and postal addresses of Museum members and donors with other organizations for marketing purposes. You can request that your information is not shared for these marketing purposes by emailing

Links to Other Sites

Users may find content on the Museum's website that links to the websites and services of our partners, or other third parties. Aquatis does not control the content or links that appear on these websites. These websites and services may have their own privacy policies and customer service policies, or no policy at all, and those may change from time to time; you are encouraged to review the privacy policies of any websites you visit.

Children Under 13 Years of Age

Aquatis does not knowingly collect personal information from children under 13 years of age. If we learn we have collected or received personal information from a child under 13, we will delete that information. We may refuse to process, or continue to process, the child’s personal information until we receive this evidence of consent or authorization.

Additional Rights for Residents of the European Union

If you reside or are located in the European Economic Area, Switzerland and the UK you may have additional rights under applicable European data privacy laws, including the GDPR (the “European Data Privacy Laws”). The Museum is the data controller. You have the right to ensure your personal information is accurate. You have the right to request that we delete your personal information. (In this case, we may still need to retain your personal information as permitted under the European Data Privacy Laws.) You also have the right to request that we restrict the processing of your personal information, which may compromise our ability to provide you with our services. You also have the right to transfer your personal information to another service provider subject to applicable European Data Privacy Laws. We will, following your written request to us, provide you with your relevant personal information in a machine-readable format to transfer to another service provider.

If you would like to exercise any of these rights, please contact us at We will respond to your request consistent with applicable law. When you email us with a request, we may ask that you provide us with information necessary to confirm your identity. We will aim to respond to your request within one calendar month of receipt of the request. Where we were unable to do so within the calendar month, we will notify you of our need to extend this timeline. There are certain exemptions and restrictions of these rights under European Data Privacy Laws that enable personal information to be retained, processed or withheld from access and we will inform you of these if applicable.

Note on data transmissions to the United States

For the sake of completeness, we would like to inform users whose domicile or registered office is in Switzerland that the United States is subject to surveillance measures by the US authorities. These generally allow the storage of all personal data of persons whose data has been transmitted from Switzerland to the USA. This is done without any differentiation, limitation or exception based on the purpose and without any objective criteria to limit the access of the US authorities to the data and their further use. Furthermore, we would like to inform you that in the United States there is no legal recourse for data subjects from Switzerland to access, correct or delete your data, nor is there effective judicial protection against general access rights of the US authorities. We explicitly draw the data subject's attention to this legal and factual situation so that he or she can make an informed decision about consenting to the use of such data.

We inform users domiciled in an EU Member State that, according to the EU, the US - in particular due to the issues mentioned in this section - does not have a sufficient level of data protection. Insofar as we have explained in this privacy policy that certain data recipients (e.g. Google) are based in the USA, we will ensure either by means of contractual arrangements with these companies, or by means of their certification according to the EU-US or Swiss-US Privacy Shield, that your data are afforded a reasonable level of protection by our partners.

Data Retention

To determine the appropriate retention period for your personal information, we consider the amount, nature, sensitivity of personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Information associated with your Museum account will be kept until it is no longer necessary to fulfil the Museum’s legitimate business purposes or until such information is deleted in accordance with this Policy.

Contact Information

Please contact us with any questions about this policy at:
AQUATIS - Aquarium-Vivarium Lausanne
Route de Berne 144
1010 Lausanne
Vaud - Switzerland

This policy was last updated June 15, 2020.