Data privacy

Information on the processing of personal data

Name and contact details of the person responsible:
Fluxguide Ausstellungssysteme GmbH
Kandlgasse 15/5
1070 Vienna

With the MuseumStars App, Fluxguide Ausstellungssysteme GmbH provides an information service in the context of art and culture education.

The following data is processed in order to provide the information service:

The app offers the possibility to retrieve information about museums, exhibitions, exhibits and tours from a central information system (editorial system). The information service uses various formats (text, image, map, video, audio). The retrieved data is stored on the requesting mobile device. Much of the content from the editorial system is loaded onto the mobile device the first time the app is started. In addition, information about functions of the app can be deleted from the mobile device and retrieved and stored by the central editorial system.

The app only transmits data from the mobile device to the central information system that is required to retrieve data from the editorial system or to operate the information service properly.

The transmitted IP address is used to deliver requested information. The IP address is technically required to answer the HTTP request of the client (app), i.e. to deliver the content of the requested HTML page or multimedia file (image, audio, video).  The IP address is not stored or forwarded beyond this. Thus, there is explicitly also no storage of the IP address in log files of the server.

When the app is installed, a unique anonymous identification number is assigned and stored on the mobile device. This anonymous identification number is used for the proper operation of the system and for evaluations with regard to the information offered. 

The following data is stored and also processed when the central system is accessed:

  • Information about the type of browser and the version used (in abbreviated form)
  • the user’s operating system (in abbreviated form)
  • date and time of access
  • name / ID of the accessed information / file
  • the selected language in the app
  • anonymous identification number

The data collected for the administration of the system is stored centrally on the web server in a log file and deleted after 60 days.

In order to display the current position on the map and nearby locations, the app collects location data even when the app is closed or running in the background. The prerequisite for this is that the app has been granted the corresponding location permissions.

Fluxguide Ausstellungssysteme GmbH would like to continuously improve the information offered and also report on the impact of the offer. For this reason, accesses to the central editorial system are stored in a database in anonymized form with regard to the use of the information offering and evaluated for statistical purposes.

The following data is further evaluated for usage statistics:

  • Date and time of access
  • name / ID of the accessed information / file
  • the selected language in the app
  • anonymous identification number

Legal basis for the processing of data

The processing of this data is based on Art. 6 para. 1 letter e DSGVO.

Support for the operation of the app

The editorial responsibility for the content lies with the participating museums. The data center hosting the editorial system is located in Frankfurt, Germany.

Contact details of the data protection officer

Data Protection Officer
Fluxguide Ausstellungssysteme GmbH
Kandlgasse 15/5
1070 Vienna

Data subject rights

You have the following rights:

  • Right to information according to Art. 15 DS-GVO
    In accordance with Art. 15 DS-GVO, you have the right to receive information about the data stored about you.
  • Right to rectification according to Art. 16 DS-GVO
  • Right to deletion according to Art. 17 DS-GVO
  • Right to restriction of processing according to Art. 18 DS-GVO
  • Right of objection according to Art. 21 DS-GVO

With regard to these rights, we would like to point out that due to the described form of data processing, we do not store any date by which we could identify a data subject.

You have a right of appeal to the competent data protection supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42,
1030 Vienna

ERsB: 9110025734727
UID: ATU73971829

Use of Google Analytics

We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website and advertising measures. Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, United States). Google processes the website usage data on our behalf and is contractually obliged to take measures to ensure the confidentiality of the processed data.

During your visit to the website, following data recorded:

  • Pages called
  • Orders including sales and ordered products
  • Your behavior on the pages (e.g. clicks, scrolling behavior and length of stay)
  • Your approximate location (country and city)
  • Your IP address (in abbreviated form so that no clear assignment is possible)
  • Technical information such as browser, internet provider, end device and screen resolution
  • Source of origin of your visit (i.e. via which website or via which advertising material you came to us)

This data is transferred to a Google server in the USA. Google observes the data protection provisions of the “EU-US Privacy Shield” agreement.

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future website visits.

The recorded data is saved together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remain stored indefinitely in aggregate form.

If you do not agree to the collection, you can prevent this by installing the browser add-on to deactivate Google Analytics.

Digital marketing service providers

We periodically engage digital marketing service providers to conduct marketing activities on our behalf, which may result in the lawful processing of personal information. Our appointed data processors include:

  • Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 and their Data Protection Officer can be contacted by email at: dpo@sopro.io.