As described in more detail below, AQUATIS - Aquarium-Vivarium Lausanne may collect personal information relating to an identified or identifiable person (such as name and postal or email address) through its website, mobile application and emails. Individuals may transmit personal information to Aquatis as part of a form submission or in connection with other activities, services, or resources made available on the website, mobile applications or through emails. Aquatis also works with third-party services to collect information from the website and mobile application in order to learn more about visitor usage patterns and how to improve communications and user experiences.
We collect personal information from you and other sources. Aquatis collects this information in order to meet the legitimate business purposes of the Museum, including furthering the Museum’s not-for-profit mission and meeting the needs of our online and onsite visitors, mobile app users, and email recipients. We use your personal information for the following key purposes:
The Museum’s collection and use of personal information varies with the type of transaction, as detailed below.
The personal information we collect and store is managed in accordance with applicable data protection laws including the General Data Protection Regulation (“GDPR”) for European resident visitors to our website and other applicable data protection laws (the “Data Protection Laws”).
If you make an online purchase of a Museum ticket, membership, or item from the Museum Shop, or donate to the Museum, you are asked to provide personal information to process and fulfill your online transaction. This information includes contact information (such as name, email and physical addresses) and credit card information. If the Museum has trouble processing an order or donation, we may use your contact information to reach you. Please see the section called Security, below, regarding credit card processing.
If you are subscribed to any of the Museum’s email newsletters, Aquatis will use your email address to send the newsletter to you and may personalize it. Aquatis works with third party partners to perform these services, as discussed further below. You may unsubscribe at any time by clicking the “unsubscribe” link at the bottom of every email.
AQUATIS - Aquarium-Vivarium Lausanne has implemented appropriate and reasonable physical, technical, and administrative processes and procedures in an effort to reduce the risk of loss, misuse, and unauthorized access, modification or destruction of the personal information under our control. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. We require that such parties only process your personal information on our instructions and that they agree to keep your information confidential.
When you transmit highly sensitive information (such as a credit card number) through our website or in our mobile application, we encrypt the transmission of that information using the Secure Sockets Layer (SSL) protocol. Credit card information is encrypted in transmission and is not permanently stored on any Museum web server. The Museum has processes in place to maintain conformance with PCI DSS (Payment Card Industry Data Security Standard) and other relevant security standards.
While we have employed security technologies and procedures to assist safeguarding your personal information, no system or network can be guaranteed to be 100% secure.
A pixel tag is a small graphical image, embedded on a webpage or in an email. When you access a page or email with a pixel tag, the tag generates a generic notice of that action. Pixel tags usually work in conjunction with cookies, registering when a particular device visits a particular page or opens an email.
We may collect personal information from you if you access services through our mobile applications; for example, your unique device identifier, the mobile’s operating system, mobile carrier and location. Depending on which platform you use to access our services (e.g. iOS or Android), you may be able to control whether we collect location data by adjusting the privacy settings on your wireless device. Please be advised that some features will not be available if you choose to disable the collection of location data. Personal information obtained from your mobile device in connection with any text notification services you request may include your cell phone number, your carriers name, the date, time and content of your messages and other information you provide to us as part of these services.
Aquatis also collects some anonymous, non-personal information on an aggregate basis about its website visitors and app users. This information is used for statistical purposes and to help the Museum monitor how visitors navigate our website. Examples of such information include IP address, browser type, and device type.
Additionally, Aquatis may collect location data for WiFi-enabled devices visiting the Museum. This includes device ID but is not correlated to any other information on specific users. The data is used to understand the flow of visitors through the Museum to improve the visitor experience.
AQUATIS - Aquarium-Vivarium Lausanne does not sell or rent your personal information. However, the Museum contracts with third-party vendors in order to provide certain services to its online visitors, including ticketing, membership and online shop purchases, donation processing, and distribution and customization of the Museum’s email newsletters, and may need to share your personal information with these vendors to accomplish these functions where we are lawfully permitted to do so. The Museum requires third-party vendors to protect the privacy of the Museum’s online visitors and to keep all information secure and confidential and prohibits them from using or sharing such information except as specifically described in their agreements with Aquatis.
Aquatis uses third-party web analytics services to help it analyze how users interact with the website and emails. The information generated by a cookie or pixel, such as a user’s IP address, may be transmitted to and stored by these analytics services on their servers to create aggregate reports on website activity and provide other services relating to internet usage. The web analytics services may also transfer this information to third parties where required to do so by law, or where such third parties process the information on behalf of the web analytics services. By using the website of Aquatis and receiving its emails, you consent to the processing of personal information about you by these web analytics services in the manner and for the purposes set out above.
Aquatis may share personal information, such as name, email or physical address, or records of transactions you have conducted with the Museum, with third-party partners in order to deliver Museum advertisements and better understand the needs and behavior of its website visitors, app users, donors and members.
The Museum may additionally share the names and postal addresses of Museum members and donors with other organizations for marketing purposes. You can request that your information is not shared for these marketing purposes by emailing email@example.com.
Users may find content on the Museum's website that links to the websites and services of our partners, or other third parties. Aquatis does not control the content or links that appear on these websites. These websites and services may have their own privacy policies and customer service policies, or no policy at all, and those may change from time to time; you are encouraged to review the privacy policies of any websites you visit.
Aquatis does not knowingly collect personal information from children under 13 years of age. If we learn we have collected or received personal information from a child under 13, we will delete that information. We may refuse to process, or continue to process, the child’s personal information until we receive this evidence of consent or authorization.
If you reside or are located in the European Economic Area, Switzerland and the UK you may have additional rights under applicable European data privacy laws, including the GDPR (the “European Data Privacy Laws”). The Museum is the data controller. You have the right to ensure your personal information is accurate. You have the right to request that we delete your personal information. (In this case, we may still need to retain your personal information as permitted under the European Data Privacy Laws.) You also have the right to request that we restrict the processing of your personal information, which may compromise our ability to provide you with our services. You also have the right to transfer your personal information to another service provider subject to applicable European Data Privacy Laws. We will, following your written request to us, provide you with your relevant personal information in a machine-readable format to transfer to another service provider.
If you would like to exercise any of these rights, please contact us at firstname.lastname@example.org. We will respond to your request consistent with applicable law. When you email us with a request, we may ask that you provide us with information necessary to confirm your identity. We will aim to respond to your request within one calendar month of receipt of the request. Where we were unable to do so within the calendar month, we will notify you of our need to extend this timeline. There are certain exemptions and restrictions of these rights under European Data Privacy Laws that enable personal information to be retained, processed or withheld from access and we will inform you of these if applicable.
For the sake of completeness, we would like to inform users whose domicile or registered office is in Switzerland that the United States is subject to surveillance measures by the US authorities. These generally allow the storage of all personal data of persons whose data has been transmitted from Switzerland to the USA. This is done without any differentiation, limitation or exception based on the purpose and without any objective criteria to limit the access of the US authorities to the data and their further use. Furthermore, we would like to inform you that in the United States there is no legal recourse for data subjects from Switzerland to access, correct or delete your data, nor is there effective judicial protection against general access rights of the US authorities. We explicitly draw the data subject's attention to this legal and factual situation so that he or she can make an informed decision about consenting to the use of such data.
To determine the appropriate retention period for your personal information, we consider the amount, nature, sensitivity of personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Information associated with your Museum account will be kept until it is no longer necessary to fulfil the Museum’s legitimate business purposes or until such information is deleted in accordance with this Policy.
Please contact us with any questions about this policy at:
AQUATIS - Aquarium-Vivarium Lausanne
Route de Berne 144
Vaud - Switzerland
This policy was last updated June 15, 2020.