Last modified: June 2018
Vesterheim Norwegian-American Museum places a high priority on protecting your privacy. This privacy notice applies solely to information collected by the website vesterheim.org. This statement details the steps we take to protect personal information provided on our websites. It describes the types of personal information that we collect, the purposes for which we use such information, and the choices our users have regarding our use of it. The steps we take to protect personal information and how it can be reviewed and corrected are also covered here. By accessing our website, users are consenting to the information collection and use practices described in this privacy statement.
Our collection of information
In the course of a visit to vesterheim.org, we collect a variety of information directly from visitors and customers. Anyone can visit our site without entering any personal information. On certain pages, users may be asked for personal information to provide a service or carry out a transaction that they have requested. The personal information we collect from a user in any of these circumstances may include:
Information we collect from visitors to our web site
If you signed up to receive our email newsletters, asked a question, registered for a class or event, subscribed for our membership, ordered goods, or made a donation on our website, we collect contact information that may include your name, email, address, or phone number. These are generally referred to as contact information.
Payment & Billing Information
If you process any sort of financial transaction through our website, we will collect information related to that transaction. All credit card information is processed by our third party payment processor (Authorize.net), who specializes in the secure online capture and processing of credit/debit card transactions. We do not retain any sensitive credit card information on our servers. We do retain other pertinent details about the financial transactions for our bookkeeping purposes.
For certain classes and events and memberships, we may ask additional questions on our registration forms to help organizers and instructors to best prepare for and facilitate the classes and events and complete membership orders.
In connection with an employment application or inquiry, visitors may provide us with information about themselves, such as a résumé or curriculum vitae. We may use this information for the purpose of employment consideration. We will retain the information for future consideration unless directed not to do so.
We use analytics services by third parties to collect information about the use of our website, such as how many people visit our site and which pages are most often visited. Analytics tools use tracking technologies (like cookies) to track how you engage with our website.
Web Server Log Files
As is common with websites providing e-commerce services, a record of all visits to Vesterheim Norwegian-American Museum’s site is stored on our web servers. These log files include data that is not associated with any visitor’s identity that is not used to associate with personally identifiable information provided by any visitors to our sites. Information collected in these logs includes details such as a visitor’s IP address, browser type, referring page and time of visit. We also collect information about visits to our sites, including what pages are viewed, the number of bytes transferred, the links clicked, the materials accessed, and other actions taken within Vesterheim Norwegian-American Museum’s site.
How Your Information May Be Used
Email lists, preferences, and unsubscribe
We may use your contact information to send you communications that may be of interest to you based on your communication preferences. These may include newsletters, special announcements, information about our programs and activities, appeals, and notifications about changes in our services. You may opt out of receiving these types of communications from us by clicking the ‘Update preferences’ link at the bottom of our emails, or you may unsubscribe from our email list entirely by clicking the ‘Unsubscribe from this list’ link at the bottom of our emails.
Other forms of communication
We may occasionally use your information to mail certain printed material to you. If you wish for us to discontinue all forms of communication to you, or have specific requests please contact us (email@example.com) and we will update your account accordingly.
Processing and fulfilling contracts
We will collect and use your personal data when you register for a class or event, make a donation, place an order on our online Museum Store, or subscribe for or renew a membership, so that we can process your payment, confirm transaction details, and facilitate offering you the services promised or delivery of any goods. You will receive an email receipt with the details of the transaction. Please keep this for your records.
Improving our services
Based on the information we receive from certain questions on forms and registration pages on our website, as well as from information we get through our website analytics, we may make certain improvements to our platforms and the services we offer. We use your IP address to help diagnose problems with our server, to administer vesterheim.org, and for statistical metrics used to track website visitor traffic.
Vesterheim Norwegian-American Museum does not provide, sell, or rent email addresses to anyone outside the organization.
Web Server Log Files
We use the information collected in our server logs to analyze how visitors use our sites, to improve the efficiency of our systems and to enhance the quality of the user experience on our sites. This data is useful in analyzing the performance of the hardware and software that run our sites, as well as supporting the analysis of site security. All users have a “right to be forgotten” and may request so by calling our offices at 563-382-9681 or sending an email to firstname.lastname@example.org.
Cookies and Tracking Pixels
We may use session cookies to store elements of user profiles, to facilitate movement around our site and other information useful in administering the session. We may also use this information to make our websites easier to use by eliminating the need for customers to repeatedly enter the same information or by customizing our site to their particular preference or interests. Our sites also may contain electronic images known as tracking pixels that allow us to count the number of users who have visited those pages. We may include tracking pixels in promotional e-mail messages or newsletters in order to determine whether messages have been opened and acted upon.
We use Google Analytics, Google AdWords Conversion tracker, and other Google services that place cookies on browsers visiting our websites. These cookies are set and read by Google, and they are used to increase the effectiveness of our websites for our visitors. To opt out of Google tracking, please visit this page.
We may use Google AdWords remarketing to market our sites across the web, which places a cookie on browsers visiting our sites. Google reads these cookies and may serve ads on other sites based on pages and products viewed on our sites. You may opt out of this advertising program by visiting Google’s opt out page. If you are concerned about 3rd party cookies served by other networks, you should also visit the Network Advertising Initiative opt-out page.
Our use of web analytics
Vesterheim Norwegian-American Museum uses industry standard web analytics to track web visits. Users may opt out of web analytics by installing the following tools on their computer. Please visit https://tools.google.com/dlpage/gaoptout for more information.
Disclosure of personal information
Except as described here, personal information provided to Vesterheim Norwegian-American Museum through our website will not be shared outside of Vesterheim Norwegian-American Museum without permission. Vesterheim Norwegian-American Museum contracts with other companies to provide services on our behalf, such as hosting websites, sending out information, processing transactions, and analyzing our websites. We provide these companies with only those elements of our customers’ personal information they need to deliver those services. These companies and their employees are prohibited from using that personal information for any other purpose. We may disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property, or in urgent circumstances to protect the personal safety of any individual.
Vesterheim Norwegian-American Museum is committed to protecting the security of the non-public personal information shared with us by our contacts. We maintain physical, electronic, and procedural safeguards to help protect that non-public personal information from unauthorized access, use, or disclosure. Our payment processing systems, as well as those of our partners in payment processing, are PCI compliant, using industry-standard Secure Socket Layer (SSL) technology to encrypt sensitive customer data both in transit and in storage. This technology is designed to prevent unauthorized persons from accessing your personal information in the course of a transaction.
As mentioned above, highly sensitive information such as credit card data is processed directly by a third party (Authorize.net) who specializes in data security and credit card processing. We do not retain any credit card information on any of our servers.
At your own risk
We strive to protect your personal information and have security measures in place for both the transmission to and storage of your data on our servers. However, no method of transmission over the internet, or method of electronic storage is 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.
If a data breach were to occur and any unauthorized party managed to gain access to your personal information, we would contact you without undue delay to report the breach and the measures being taken to fix it.
The website vesterheim.org includes links to external websites. These links do not fall under the vesterheim.org domain, and Vesterheim Norwegian-American Museum is not responsible for the privacy practices or the content of external websites. Your use of any linked website is solely at your own risk.
We are legally required to hold some types of information to fulfill our statutory obligations. We will hold your personal information on our systems unless otherwise notified.
Children's online privacy
Vesterheim Norwegian-American Museum is committed to protecting the online privacy of children. Our websites and online marketing activities are designed and intended for a general audience and are not meant to market directly to children. To protect the privacy of children, Vesterheim Norwegian-American Museum websites and mobile applications do not knowingly collect personal information from anyone under the age of 13 without prior parental consent. If you believe we may have collected information from your child without your consent, please contact us at email@example.com to inform us of this collection, and we will work to correct the situation in a timely manner.
Links to other sites
Our websites may contain links to other sites and content such as social media, video archives, professional, non-profit and government organizations, and publications. We also link to third-party providers that host, maintain and operate a variety of web-based services. While we try to link only to sites and services that share our high standards and respect for privacy, we are not responsible for the content, security, or privacy practices employed by other companies and their sites.
Compliance with the General Data Protection Regulation (GDPR)
Vesterheim Norwegian-American Museum’s procedures and policies meet the general spirit of GDPR. In the event of a security breach of our contact’s private data, all reporting protocols will be met. Data collection will be considered valid until a contact requests to be removed from communications, have their data deleted or otherwise requests clarification on data use.
Should a contact residing in the EU at the time submit their information, Vesterheim Norwegian-American Museum will follow GDPR requirements as they pertain to all policies stated within this statement.
Your access to and control over information
You may opt out of any future contacts from us at any time and you have the right to ask for a copy of the information Vesterheim has about you. To request a copy of the information Vesterheim has about you, write to firstname.lastname@example.org.
How to withdraw your consent to be contacted or delete your information (right to be forgotten):
For email, you simply have to click the ‘unsubscribe’ link at the bottom of any email to immediately withdraw your consent. For all other contact, including removal of all of your personal information (right to be forgotten), please write to email@example.com with your request.
Changes to this privacy statement
Vesterheim Norwegian-American Museum may occasionally update this privacy statement. When we do, we will revise the “last updated” date at the top of the privacy statement.