Privacy Notice 

Last updated: June 2026

 

General Information

  1. Introduction

The Rudolf Nureyev Foundation (“the Foundation”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of all individuals with whom we interact, including visitors to our website, grant applicants, artists, contributors, rights holders, partners, suppliers and other stakeholders. 

This Privacy Notice explains how we collect, use, disclose, store and otherwise process personal data in accordance with the EU General Data Protection Regulation (“GDPR”), the applicable data protection laws of Liechtenstein, and other applicable legal requirements.

Data Controller

The data controller responsible for the processing of personal data under this Privacy Notice is: 

Rudolf Nureyev Foundation 

Registered Address: 

Äulestrasse 5
9490 Vaduz
Liechtenstein 

Email: contact@nureyev.org 

Website: https://nureyev.org 

 Privacy Contact

For questions regarding this Privacy Notice or the processing of your personal data, you may contact: 

Email: contact@nureyev.org 

 Categories of Personal Data

Depending on our relationship with the data subject, the following categories of personal data may be processed: 

  • Identification and Contact Data: title, name, date of birth, nationality, postal address, email address, telephone number; 
  • Grant and Application Data: applicant data, CVs and biographies; 
  • Professional and Artistic Information: biographies, artistic profiles, publications, portfolios;  
  • Communication Information: correspondence, enquiries and other communications with the Foundation; 
  • Financial Information: banking information, payment details, financial and compliance information; 
  • Image, Media and Cultural Heritage Information: including photographs, video recordings, archival materials, historical records and documentation relating to artistic and cultural heritage activities. 

 Purposes and Legal Bases of Processing

The Foundation processes personal data only where a valid legal basis exists under Article 6 GDPR and applicable data protection law. 

Compliance with legal obligations 

The Foundation may process personal data where necessary to comply with legal obligations to which it is subject. 

This may include: 

  • Procurement, contract administration, payments and compliance 
  • Storage of Foundation records and accountability documentation 
  • Handling access, rectification, deletion, restriction and other GDPR requests 

Legal basis: Article 6(1)(c) GDPR. 

Performance of a contract 

The Foundation may process personal data where such processing is necessary to enter into or perform a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract. 

This may include: 

  • Evaluation, administration and management of grant applications and grant recipients 
  • Administration of governance and ambassador relationships 
  • Management of partnerships, collaborations and contractual relationships 
  • Procurement, contract administration, payments and compliance 
  • Administration of image rights, licensing arrangements and authorised use of media 
  • Creation and publication of commissioned content 

Legal basis: Article 6(1)(b) GDPR. 

Legitimate interests pursued by the Foundation 

The Foundation may process personal data where such processing is necessary for its legitimate interests, provided that those interests are not overridden by the interests, rights or freedoms of the data subject. 

Such legitimate interests may include: 

  • Governance, decision-making, oversight and accountability of the Foundation 
  • Administration of governance and ambassador relationships 
  • Responding to enquiries and maintaining correspondence 
  • Administration of image rights, licensing arrangements and authorised use of media 
  • Preservation of Foundation records, accountability and historical documentation 

Where processing is based on legitimate interests, the Foundation carries out an appropriate balancing assessment and applies safeguards to protect the rights and freedoms of affected individuals. 

Legal basis: Article 6(1)(f) GDPR. 

Consent provided by the data subject 

Where required by law, the Foundation processes personal data on the basis of the data subject’s consent. 

This may include: 

  • Documentation, promotion and public communication of Foundation activities 
  • Creation and publication of content incl. photographs or video recordings 

Consent may be withdrawn at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. 

Legal basis: Article 6(1)(a) GDPR. 

Archiving, research and cultural heritage activities 

The Foundation may process personal data for archiving purposes in the public interest, historical research purposes, scientific research purposes or cultural heritage preservation activities where permitted by applicable law. Such processing is carried out in accordance with Article 89 GDPR. 

The applicable legal basis will depend on the specific circumstances and may include Article 6(1)(c), Article 6(1)(f) or another lawful basis under applicable law. 

Website and Online Services

Website Use

When you visit our website, certain technical information is processed where necessary to ensure the security, stability and functionality of the website, including: 

  • IP address; 
  • browser information; 
  • device information; 
  • operating system; 
  • access date and time; 
  • requested content. 

Such processing is based on the Foundation’s legitimate interest in maintaining the security and functionality of its online services. 

Such data is retained only for as long as necessary for these purposes, subject to applicable legal retention requirements. 

 Cookies and Similar Technologies

Strictly necessary cookies and similar technologies may be used to ensure the security and functionality of the website. 

Non-essential cookies and similar technologies are used only where the user has provided consent. 

Users may manage and withdraw their cookie preferences through cookieYes, which is used by the Foundation to manage cookie consent and preferences. 

Website Analytics

The Foundation may use analytics technologies, currently google analytics, to better understand how visitors interact with the website and to improve its functionality and performance. 

Google Analytics may process information relating to website usage, device characteristics and user interactions (such as IP address, browser type and pages visited) to generate usage statistics and analytics.  

Google analytics is activated only after obtaining appropriate consent. Consent may be withdrawn at any time through the cookie settings. 

The use of Google Analytics may involve the transfer of personal data to Google entities outside the EEA, including in the United States, where applicable and subject to appropriate transfer mechanisms. 

Further information regarding analytics technologies used on the website may be found in the Cookie Policy widget. 

 Embedded Media Content 

The website may contain embedded multimedia content provided by third-party services, such as youtube. 

Display of, or interaction with such content may result in the processing of personal data by the respective provider. 

Embedded content is managed through cookieYes. Embedded content will only load or track user data once appropriate cookie consent has been granted, or where privacy – enhanced embedding is enabled.  

 Service Providers and Data Transfers

Recipients of Personal Data

Personal data may be disclosed where necessary to: 

  • members of the Foundation’s governing bodies;  
  • service providers supporting the Foundation’s operations;  
  • professional advisers;  
  • financial institutions;  
  • public authorities where required by law; 
  • other recipients where necessary for the purposes described in this Privacy Notice. 

Recipients may act as controllers or processors depending on the circumstances. 

 Communication and IT-Support Services

The Foundation uses third-party IT-Support and communication services to support its activities. 

Such service providers may process personal data on behalf of the Foundation under contractual arrangements and applicable data protection safeguards. 

 Hosting and Website Technology

The Foundation uses external service providers for website hosting, maintenance and technical operation. 

Such providers process personal data only to the extent necessary for providing their services and are subject to appropriate contractual obligations. 

Further details may be provided upon request where appropriate. 

 International Data Transfers

Where personal data is transferred outside the European Economic Area or other jurisdictions recognised as providing an adequate level of protection, the Foundation implements appropriate safeguards in accordance with applicable data protection law. International transfers of personal data are carried out only in accordance with the GDPR (Articles 44–49 GDPR). 

Such safeguards may include: 

  • adequacy decisions; 
  • Standard Contractual Clauses; 
  • supplementary technical and organisational measures; 
  • other lawful transfer mechanisms. 

Data Protection Rights

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes or to establish, exercise or defend legal claims. 

The criteria used to determine retention periods include legal retention obligations, contractual requirements, limitation periods and the Foundation’s legitimate operational needs. 

Further information regarding specific retention periods may be provided upon request. 

 Data Security

The Foundation implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. 

Such measures are regularly reviewed and updated where appropriate. 

 Your Rights

Subject to applicable law, data subjects may have the following rights: 

  • Right of access (Article 15 GDPR);  
  • Right to rectification (Article 16 GDPR);  
  • Right to erasure (Article 17 GDPR);  
  • Right to restriction of processing (Article 18 GDPR);  
  • Right to data portability (Article 20 GDPR);  
  • Right to object (Article 21 GDPR);  
  • Right not to be subject to automated decision-making (Article 22 GDPR, where applicable);  
  • Right to withdraw consent at any time (Article 7(3) GDPR);  
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR). 

Requests may be submitted to: 

contact@nureyev.org 

 Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. 

For processing activities carried out by the Foundation, the competent supervisory authority is generally: 

Data Protection Authority of the Principality of Liechtenstein 

Current contact information is available at: 

https://www.datenschutzstelle.li. 

 Changes to this Privacy Notice

The Foundation may update this Privacy Notice from time to time. 

Any changes will be published on the Foundation’s website together with the updated version date. 

We encourage users to review this Privacy Notice periodically.