Privacy Policy

We safeguard your privacy. When you come into contact with our organisation in various situations, your personal data (such as name, address, email address, personal ID number and phone number) may be processed by us. 

We always process your personal data in accordance with applicable privacy legislation, such as the General Data Protection Regulation, the Swedish Data Protection Act and other supplementary legislation. 

This personal data policy describes the situations in which we process your personal data, how we process it, what our obligations are and what your rights are. The policy is divided into different sections so that you can quickly refer to the one that is relevant to you. 

Data controller 

For the processing of personal data as described in this policy, the National Museum of Science and Technology (Stiftelsen Tekniska Museet, corp. ID no. 802005-9187, PO Box 27842, 115 93 Stockholm, Sweden, phone number (switchboard): +46 (0)8-450 56 00, info@tekniskamuseet.se) is the data controller. If you have any questions or thoughts about this policy and/or our processing of your personal data, you are always welcome to contact us at info@tekniskamuseet.se. 

The privacy policy will be updated. The current version of the privacy policy will always be available at tekniskamuseet.se. 

Your rights 

Regardless of in which situation and for what purpose we are processing your personal data, you always have the right to: 

• access the data we are processing about you by requesting a register extract 
• request rectification (that we correct incorrect data) 
• request erasure (that we erase personal data that no longer needs to be processed) 
• request restriction (that we stop processing in some way) 
• receive the data we are processing about you in a structured, commonly used and machine-readable format, if you wish to transfer it to another party (data portability) 

In cases where the processing of personal data is supported by your consent, you also have the right to withdraw your consent, at any time and free of charge.
If you wish to exercise any of the above rights, the easiest way is to contact us at info@tekniskamuseet.se. 

Complaints 

If you have a complaint about how we process your personal data, you have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (email address: imy@imy.se, tel.: +46(0)8­657 61 00, www.imy.se). 

1. Annual pass 

1.1. Which personal data do we process? 

When you buy an annual pass for adults for the National Museum of Science and Technology, we process your personal data such as your name, personal ID number, home address, mobile phone number and email address. Most of the personal data is provided by you in connection with your purchase, but we obtain data such as your name and home address from the Swedish Tax Agency’s population register. For purchases of an annual pass for children, the only data we need is the child’s name and date of birth.  

1.2. Why do we process your personal data? 

We process your personal data so that we can manage your purchase of an annual pass. This means that your personal data is needed so that we can complete the purchase of the annual pass, manage information about those who hold an annual pass to make sure that you can use it during the year, and communicate information about membership so that you can make use of the benefits that membership brings. 

When your membership expires, we process your email address to send information about our activities and special offers. The legal basis for this is legitimate interest. You can, at any time, decline such mailings.  

1.3. Legal basis 

Our processing of your personal data that takes place before, during and after your membership is necessary in order that we can deliver the benefits we promised you when you joined us as a member at the National Museum of Science and Technology. The legal basis for our processing of your personal data is thus the membership agreement (by means of your purchase of an annual pass) we concluded with you, as well as the legitimate interest. 

The processing of data that takes place after the membership expires in order to send information and special offers to you is conducted on the basis of a legitimate interest. We consider that we have a legitimate interest in sending this information to you as you have shown an interest in our services through your previous membership.  

1.4. How long do we process your personal data? 

We process your personal data throughout the entire period during which you have a valid membership with us. Your email address will however continue to be processed for a maximum of three years after your membership has ended – this is so that you can receive information about our activities if you decide to visit us again. 

If you do not renew your membership within three years of the expiry of your membership, we will stop processing your personal data. 

1.5. Parties with which we share your personal data 

We share your personal data with the system suppliers we use in order to register you as a member and to send you member-related information. Certain system suppliers may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there.

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

2. Webshop

2.1. Which personal data do we process? 

We process your personal data when you make a purchase in our web shop, contact our customer support or visit our web shop in any other way. We process personal data about you such as your forename, surname, address, phone number and/or email address, as well as payment card information when you make a purchase. 

2.2. Why do we process your personal data? 

If you make a purchase in our web shop, we process your personal data in order to handle your purchase. This means that we must be able to receive payment, dispatch the product you bought, and help you during and after the purchase if you have any questions, thoughts or comments about your purchase.

If you contact our customer support, we process your personal data in order to answer your questions and assist you.

We will also process your email address in order to send you information and special offers. We do this so that we can inform you about our activities and also about other special offers we have that may be of interest to you. 

2.3. Legal basis 

The processing of your personal data that takes place before and during your purchase is necessary so that we can meet our commitments and obligations under the purchasing agreement we have concluded with you. The legal basis for our processing of your personal data is thus the purchasing agreement. 

The processing activity that takes place after you have made a purchase from our web shop is conducted on the legal bases of Sweden’s Consumer Purchase Act and a balancing of interests in which we consider that we have a legitimate interest in processing your personal data in order to inform you of special offers and news concerning other aspects of the museum’s activities. You can decline future mailings at any time, free of charge, by sending an email to webshop@tekniskamuseet.se or by following the link included in each mailing. 

2.4. How long do we process your personal data? 

We process your personal data for up to three years after your latest purchase from us. This is because, in accordance with the Consumer Purchase Act, you have the right to submit a complaint about the product purchased within this period. In order for the museum shop to be able to manage any request you might have – or any other general enquiry – we need to be able to continue to process your personal data. 

Your email address, which is processed for the purpose of sending you special offers and news, is processed for up to three years after your latest customer contact with us. You can decline future mailings at any time, free of charge, by sending an email to webshop@tekniskamuseet.se or by following the link included in each mailing. 

2.5. Parties with which we share your personal data 

We share personal data with the system supplier that provides our web shop and the supplier that helps us with the web shop’s payment software. Your personal data will also be shared with the delivery company with which we work to deliver the product purchased to your home. The museum shop will also share your email address with the actor the museum uses for our mailings of information and special offers – this actor may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

3. Conferences, events, children’s parties, school bookings, etc.

3.1. Which personal data do we process? 

In connection with your submitting a booking enquiry for an event, a conference, school tours, a children’s party, etc. (the term “event” is used hereinafter as a collective term for all arrangements), we process your personal data such as name, phone number, email address and, if necessary, which company/organisation you work for/come from. This data is provided by you in connection with a booking enquiry. 

3.2. Why do we process your personal data? 

We process your personal data in order to organise the event that you want to hold at the National Museum of Science and Technology. This means that we must process your personal data in order to take payment from you, to organise the event itself, to communicate with you in the event of questions relating to your event, and to contact you if relevant for feedback on the event.

After the event has taken place, your email address is processed for the purpose of informing you in future about our activities and providing you with access to our various special offers. You can decline future mailings at any time, free of charge, by either following the link included in each mailing or sending an email to info@tekniskamuseet.se. 

3.3. Legal basis 

The processing of your personal data that takes place before, during and after the organisation of your event is necessary so that we can meet the commitments and obligations undertaken by us as part of the (booking) agreement we have concluded with you in connection with your booking, as well as conducting a follow-up of the event. 

If your booking enquiry does not result in a booking, we stop processing your personal data when we have completed the booking discussions, unless the museum has requested your consent. 

With regard to our processing of your email address after the event, the processing of personal data is supported by the basis of legitimate interest, in which we consider that you, as a previous customer of ours, have an interest in receiving future communication, such as (for example) news about the services we offer. You can decline future mailings at any time, free of charge, by following the link included in each mailing or sending an email to info@tekniskamuseet.se. 

3.4. How long do we process your personal data? 

We process your personal data for up to three years after your event took place at our venue. In accordance with the rules of consumer legislation, consumers have the right to lodge a complaint about a service within three years – we also apply this limit towards business operators. In order to help you if you have a complaint and/or questions in respect of the service we provided, we therefore need to continue to process your personal data for up to three years. 

Your email address, which is processed for the purpose of sending you special offers and news, is processed for up to three years after your latest customer contact with us. You can decline future mailings at any time, free of charge, by following the link included in each mailing or sending an email to info@tekniskamuseet.se. 

3.5. Parties with which we share your personal data 

We share your personal data with the system suppliers we use in order to implement your booking, and to send information and special offers. Certain system suppliers may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there. We also share your personal data with our restaurateur and with any other service providers if you as a customer have special wishes for supplementary orders.

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

4. If you donate or have donated an artefact, an image or archive material to our collections 

4.1. Which personal data do we process? 

In connection with your contacting us to donate an artefact, an image or archive material (hereinafter, the “gift”) to the National Museum of Science and Technology’s collections, we need to process your personal data. The personal data you provide is your name, email address, phone number, home address and date of birth. Depending on what kind of gift you donate, the gift itself can contain personal data – relating to both you and a third party.

The National Museum of Science and Technology may also purchase material for the museum’s collections. The processing of personal data for such purchases takes place in the same way as for gifts. What is set out below about processing (sections 4.2-4.5) is thus also applicable in situations in which we buy material from you. 

4.2. Why do we process your personal data? 

When you contact us to donate a gift to our collections, we process your personal data. The processing of personal data is necessary for us to be able to assess whether or not the gift in question is relevant for our collection, and to be able to contact you with a decision on our assessment.

If we accept your gift, your personal data is processed so that transfer documents can be prepared.

When we have received the gift you have donated, we process your personal data so that we can preserve the cultural heritage. As a museum, we are administrators of cultural heritage material, which means that we must archive and preserve the gift to facilitate the conducting of future research. We therefore need to process your personal data in order to be able to know from where the gift originates. 

4.3. Legal basis 

The personal data processing that takes place in order to assess whether we should accept or decline the gift you wish to donate, as well as processing that takes place in order to prepare the transfer documents, are supported by the legal basis of agreement. 

The processing of personal data that takes place when we have received the gift is conducted with the support of three different kinds of legal basis. We have support by means of the transfer documents you have signed (agreements), but we also, as a museum, have support based on the public interest to preserve cultural heritage (preservation of artefacts, pictures and archive documents) and to promote research and learning in the future. This support is also contained in the legal obligations we have as a museum, as well as in accordance with the government’s appropriation directions and our statutes. Against the background of these legal bases, the processing of your personal data is necessary for the provenance of the material. 

4.4. How long do we process your personal data? 

In the event that we do not accept your gift, we process your personal data for up to one year after our last contact with you. We then erase your personal data. 

If we accept your gift, this means that the personal data will be stored by us indefinitely in accordance with the legal bases that govern our personal data processing with regard to museum activities (transfer documentation, public interest and legal obligation). This means that your personal data – which is linked to the gift you donated – will be processed by us indefinitely. The reason for this is so that we, and those to whom we make the collections available, are able to conduct future research on, among other things, our cultural heritage. 

4.5. Parties with which we share your personal data 

When we receive a gift from you, we publish information about the gift (this information includes your and any third party’s personal data) in various searchable databases – both Nordic and European. This means that those who use the databases (including users outside Europe) will be able to see where the gift comes from, who manufactured it, who has used it, etc. The databases are, however, in Sweden and Norway – there is therefore no transfer to a third country. 

We also share your personal data with the system suppliers (databases) we use to register, catalogue, preserve and archive our collections. Your personal data will therefore also be included in these databases. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

5. Loans to/from the museum’s collections

5.1. Which personal data do we process? 

When an institution/organisation applies for the loan of an artefact from/to the National Museum of Science and Technology’s collections (“loan”), the contact person provides personal data in connection with the loan application. The text below refers to the contact person, which entails that this person will be referred to as “you”. 

The loan application must include your name, mobile phone number, email address, the institution or organisation for which you work and your position. This information is provided by you in connection with your submitting an application for the institution/organisation that you represent. 

5.2. Why do we process your personal data? 

We process your personal data so that we can manage and assess the loan application. 

In connection with an agreement for a loan, your personal data is processed in order that we can document and manage the actual loan arrangement. This means that your name may also appear as a reference in our accounting material. The National Museum of Science and Technology also processes your personal data so that we can guarantee the security of objects being stored at the museum and at other locations. 

Your personal data is also processed to ensure that the loaned item can be returned at the end of the loan period. 

5.3. Legal basis 

The personal data processing that takes place before, during and after the loan is conducted with the support of the loan agreement we concluded with the institution/organisation that you represent. The processing of your personal data, as the contact person for the party to the agreement, is therefore necessary in order that the agreement can be fulfilled by both parties. 

5.4. How long do we process your personal data? 

In the event that a loan agreement has been prepared, your personal data is processed during the period when we have a valid agreement with the company that you represent. After the loan period has expired, your personal data is processed for up to one year. 

In the event that you stop working at the institution/organisation, we will stop processing the data as of the point in time when we are informed that you are no longer the contact person for the institution/organisation with which we have an agreement. 

In the event that your personal data appears in our accounting material, we will still need to process your personal data for bookkeeping purposes despite the fact that the loan agreement has expired or you are no longer the contact person. This means that the personal data that appears in the accounting material will be processed for up to seven years, in accordance with obligations under accounting legislation. 

5.5. With whom do we share your personal data? 

We share your personal data with the system suppliers we use in our ongoing activities in order to, for example, receive, manage and retain the loan application and loan agreement.

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing, and we will not transfer your personal data to a country outside the EU/EEA. 

6. Contemporary documentation

6.1. Which personal data do we process? 

As a museum, we document the times in which people live (“contemporary documentation”). Contemporary documentation often contains personal data, e.g. names. This information comes from both public sources and from you – for example, because you have previously donated a gift to us. 

6.2. Why do we process your personal data? 

We process your personal data in order to contribute to society and its development by promoting knowledge and technical developments, and by preserving our cultural heritage. 

6.3. Legal basis 

Personal data processing that takes place in connection with contemporary documentation is supported by the public interest in a museum preserving cultural heritage and promoting research and learning in the future. This support is also contained in the legal obligations we have as a museum in accordance with the government’s appropriation directions. 

6.4. How long do we process your personal data? 

Your personal data will be stored by us indefinitely in accordance with the legal bases we have for our processing of personal data in connection with museum activities. 

6.5. With whom do we share your personal data? 

Your personal data is shared with the system suppliers we use to create and preserve contemporary documentation. Contemporary documentation will be shared with the various searchable databases – both Nordic and European – with which we work in our role as a museum. This means that those who use the databases (including users outside Europe) will be able to access the contemporary documentation (which may contain your personal data) in order to use this. 

7. Orders of images from the National Museum of Science and Technology’s image archive/collections

7.1. Which personal data do we process? 

When you order an image from the National Museum of Science and Technology’s image archive/collections, we process personal data such as your name, phone number and email address. This is personal data that you provide by submitting your enquiry. For us be able to deliver the order, you may also need to provide your postal address. 

7.2. Why do we process your personal data? 

We process your personal data so that we can manage and process your image order. This work includes being able to deal with your enquiry and locate the image requested, to send the material ordered to you, to receive payment for the image and to record the payment in our accounts. 

7.3. Legal basis 

The personal data processing that takes place before, during and after your image order is conducted with the support of the purchase agreement you conclude with us in connection with your order. 

7.4. How long do we process your personal data? 

The personal data that is used in connection with our accounting material is processed for up to seven years after the end of the financial year, in accordance with obligations under accounting legislation. 

7.5. With whom do we share your personal data? 

We share your personal data with the system suppliers we use in our ongoing activities in order to, for example, receive and process your order. We use a service in which the image is available for the purchaser to download for a period of one week. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will never sell your personal data to a third party for direct marketing, and we will not transfer your personal data to a country outside the EU/EEA. 

8. Newsletter

8.1. Which personal data do we process? 

When you register for our newsletter, you provide us with personal data in the form of your name and email address. We process the personal data in accordance with the purposes set out below, and only if we have your expressed consent to do so. 

8.2. Why do we process your personal data? 

We process your personal data solely for the purpose of being able to send out the newsletter that you have requested. 

8.3. Legal basis 

The personal data processing that takes place in order to be able to send out the newsletter is conducted with the support of your consent. You can withdraw your consent at any time, free of charge, if you no longer consent to the processing of personal data. The easiest way to do this is to send an email to info@tekniskamuseet.se. You can also unsubscribe from future mailings by following the link that is included in all newsletters. 

8.4. How long do we process your personal data? 

We process your personal data for as long as we have your consent to do so. This means that you will receive our newsletter until you actively choose not to receive it any more. You can withdraw your consent at any time, free of charge, and thus choose not to receive the newsletter any more. The easiest way to do this is to send an email to info@tekniskamuseet.se. You can also unsubscribe from future mailings by following the link that is included in all newsletters. 

8.5. With whom do we share your personal data? 

We share your personal data with the system supplier we use to send out our newsletter. Certain system suppliers may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

9. Weekend,evening and school holiday courses 

9.1. Which personal data do we process? 

When you register yourself, or your child, for a course at the National Museum of Science and Technology, you provide personal data in the form of your name, email address, mobile phone number and, if relevant, the name of the course participant and the age of the child. 

You also have the opportunity to provide other information that we need to know about your child in a free text field. Depending on which data you provide, this can mean that we also process what is known as sensitive data about you or your child (e.g. information about health or allergies). The information provided in the free text field is processed exclusively with the support of your consent. 

9.2. Why do we process your personal data? 

We process your and the course participant’s personal data in order to be able to provide the event for which you have registered and to be able to communicate important information about the event. 

We also process the other information you have provided in order to meet any needs, answer questions, etc. 

9.3. Legal basis 

We process your personal data, including the data provided about the child’s/course participant’s name and age, with the support of the agreement you conclude with us in connection with your booking and purchasing a place on the course. 

The processing of personal data is necessary in order that we can meet our commitments and obligations in accordance with the agreement – i.e. to offer a place and to organise the course in question.

In cases where you have provided information in the free text field that includes sensitive data, we only process this data with the support of your consent. You can withdraw your consent at any time, free of charge, and we will then cease with any subsequent processing activity. If you withdraw your consent before the event has been completed, this does mean that we are unable to take account of any allergies, etc. If you would like to withdraw your consent, the easiest way to do this is to send an email to skolbokning@tekniskamuseet.se. 

9.4. How long do we process your personal data? 

Any information that you have provided in the free text field and that we process with the support of your consent is processed by us until the event has been completed. We then erase this information. 

Other information is processed for up to three years after the end of the course. In accordance with the rules of consumer legislation, consumers have the right to lodge a complaint about a service within three years. In order for us to help you if you have a complaint and/or questions in respect of the course in which you or your child have taken part, we therefore need to continue to process your personal data for up to three years after the end of the course. 

9.5. With whom do we share your personal data? 

We share your personal data with the system supplier we use to enable you to make your booking. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will never sell your personal data to a third party for direct marketing. 

10. School agreements

10.1. Which personal data do we process? 

In connection with you submitting an application to conclude a school agreement, you provide personal data in the form of which school you work at, your name, your phone number and your email address. If you provide information in the free text field, we also process any personal data you enter in the free text field. 

10.2. Why do we process your personal data? 

We process your personal data in order to process your application and then conclude a school agreement with the school that you represent. Your personal data is needed in this regard as we need a contact person whom we can contact and to whom we can invoice the amount that has to be paid in connection with the school agreement. 

10.3. Legal basis 

Our processing of your personal data that takes place before, during and after the school agreement is concluded is conducted with the support of the agreement as a legal basis. 

10.4. How long do we process your personal data? 

In cases where your application does not result in a school agreement, we stop processing your personal data when we have completed the discussions about the agreement, unless the National Museum of Science and Technology has requested your consent. 

In cases where a school agreement is concluded, your personal data is processed during the period when we have a valid agreement with the school you represent. 

If, during the term of the agreement, you cease to be the contact person for the school that you represent, we cease with the processing of your personal data as soon as we are informed of this.

10.5. Parties with which we share your personal data 

We share your personal data with the system suppliers we use to register the agreement, communicate and invoice. Certain system suppliers may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there.

We do not share your personal data with any third party, unless we are obliged to do so by law. We will never sell your personal data to a third party for direct marketing.  

11. Operational material – images and films of you

11.1. Which personal data do we process? 

In certain instances, the National Museum of Science and Technology wishes to photograph and/or film you. Images and films of individuals represent a kind of personal data processing. In connection with this you, as the person depicted, or your guardian(s), are asked for your consent for the processing of personal data. If you give your consent to the processing activity, we also process the data included in the consent (e.g. address, phone number and email address). 

11.2. Why do we process your personal data? 

We use the material (images, films and press images) to inform the public about activities at the National Museum of Science and Technology. This means that we publish images and/or films, for example, on our website, in our social media and in our newsletter. We do this for the purpose of, among other things, encouraging more children and young people to become interested in science and technology. 

In our work to encourage more children and young people to become interested in science and technology, we make use of sponsors/business partners. The images/films we process (which contain your personal data) are shared with our sponsors/business partners so that we can achieve our goals together. 

11.3. Legal basis 

The processing of personal data takes place exclusively with the support of your consent. You can withdraw your consent at any time, free of charge, by contacting info@tekniskamuseet.se. Please note, however, that withdrawal does not affect the legality of processing that took place before consent was withdrawn. 

11.4. How long do we process your personal data? 

We process your personal data during the period when we have valid consent from you. You can withdraw your consent at any time, free of charge, by contacting info@tekniskamuseet.se. Please note, however, that withdrawal does not affect the legality of processing that took place before consent was withdrawn. 

11.5. With whom do we share your personal data? 

We share your personal data (i.e. images and/or films) with our business partners/sponsors and the system suppliers we use to store and process images and films. They may then publish the material in their channels (e.g. websites and social media) for both editorial and commercial purposes. 

Your personal data will also be shared with the system supplier we use to store the films/images securely. If we publish the material in our social media channels, the personal data will also be shared with these platforms. 

12. Other communication (email, social media, etc.)

12.1. Which personal data do we process? 

When you contact one of our employees by email, you provide your email address, your name and any other personal data that your email contains. 

If you leave comments, “like” postings, etc. on the National Museum of Science and Technology’s Instagram and/or Facebook pages, you provide personal data in the form of your name and possibly other personal data, depending on what your contribution contains. 

12.2. Why do we process your personal data? 

We process your personal data so that we can reply to your email and/or comments on social media. 

In cases where your contact with us takes place in relation to one of the various services we offer or our museum activities (sections 1-9), we will process your email, post, comment, etc. in accordance with the legal bases described above. 

If your question relates to the museum’s collections, we process your data in order to reply to your question and to save questions and answers about the history of technology for the general purpose of being able to convey our cultural heritage. Questions are also stored as a basis for the annual report. 

12.3. Legal basis 

In the event that your question/post, etc. cannot be attributed to any of the circumstances described above (sections 1-11), we process your personal data with the support of our legitimate interest in replying and responding to your questions, comments, etc. As you are the one that has contacted us, we do not consider it to be a question of processing that you cannot foresee, and we do not consider that your interest to protect personal data or fundamental freedoms and rights carries more weight than our legitimate interest in replying to you. 

With regard to questions received relating to the collections, the processing of personal data is conducted with the support of the public interest in a museum preserving cultural heritage and promoting research and learning in the future. This support is also contained in the legal obligations we have as a museum, and in accordance with the government’s appropriation directions. 

12.4. How long do we process your personal data? 

If your contact with us relates to a purchase, an order or something else attributable to our museum activities as described above, we will process your personal data in accordance with the storage criteria set out there. 

If it relates to a general question for us, without being attributable to an existing customer relationship and/or matter, we will stop processing your personal data when we have answered your question. To make it easier for you to respond with possible follow-on questions, we will of course await any such follow-on questions before we stop processing your personal data for this purpose. 

As regards questions received about our collections, these are saved. We then consider whether the question is of interest to the preservation of cultural heritage or in the promotion of research or learning in the future. If your question is considered to be of such interest, we will as far as possible erase your personal data and only save the question itself (i.e. without your personal data). If this is not possible, your personal data will be processed together with the question indefinitely with the support of the legal obligations we must observe, and the public interest as a museum to preserve cultural heritage and to promote research and learning in the future. 

12.5. With whom do we share your personal data? 

We use various system suppliers, e.g. for our email system. For natural reasons, your personal data is therefore shared with these suppliers. They may not, however, make use of your personal data in any way, but must only keep the IT services available to us. 

We do not share your personal data with any third party, unless we are obliged to do so by law. We will not sell your personal data to a third party for direct marketing. 

In cases where you communicate with us via our social media channels, this means that the social media channel also has access to your personal data in accordance with the terms and conditions you approved when you created an account with them. Certain companies that provide social media platforms – which you may use when you contact us – may be located outside the EU/EEA, which means that they will comply with the corresponding personal data protection rules that apply there.  

13. Recruitment 

In order for the National Museum of Science and Technology to handle your application, to conduct interviews and to make decisions regarding recruitment, the museum must process certain personal data.  

13.1 Which personal data do we process, and who is the recipient? 

In conjunction with the recruitment process, and in addition to the personal data that is customarily recorded as part of the application (e.g. qualifications, etc.), photographs, interview notes, references and the results of background checks may also be registered. 

In conjunction with the ordering of a background check, relevant personal data is shared with external suppliers. 

The processing of your personal data is only conducted for the purpose of processing your application and assessing your merits in order that we can make a decision concerning your suitability for the position. With the exception of HR, your data will be shared internally only with those who are involved in the recruitment process, such as the manager responsible, union representative and recruitment companies. In the event that a recruitment company is responsible for handling the recruitment process, a personal data processor agreement is always concluded with the external actor.  

13.2 How long do we process your personal data? 

The National Museum of Science and Technology never saves data for longer than is necessary in consideration of the purpose of the data processing. The museum therefore conducts regular disposals of stored personal data, and removes data that is no longer required. We may however store personal data after the completion of the recruitment process if, in our assessment, this is necessary in order to fulfil legal requirements to which the museum may become subject. All your personal data that is collected in conjunction with the recruitment process is therefore removed from our systems after the elapsing of two years after the employment decision was made. 

13.3 Legal basis 

In conjunction with a recruitment process, the legal basis for our processing of personal data is the fulfilment of an agreement. 

If personal data is stored in order to be used with other recruitment processes, the museum must obtain your consent. 

Last updated 23 February 2021.