Privacy Notice
Last updated: June 2026
General Information
- Introduction
The Rudolf Nureyev Foundation (“the Foundation”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of all individuals with whom we interact, including visitors to our website, grant applicants, artists, contributors, rights holders, partners, suppliers and other stakeholders.
This Privacy Notice explains how we collect, use, disclose, store and otherwise process personal data in accordance with the EU General Data Protection Regulation (“GDPR”), the applicable data protection laws of Liechtenstein, and other applicable legal requirements.
Data Controller
The data controller responsible for the processing of personal data under this Privacy Notice is:
Rudolf Nureyev Foundation
Registered Address:
Äulestrasse 5
9490 Vaduz
Liechtenstein
Email: contact@nureyev.org
Website: https://nureyev.org
Privacy Contact
For questions regarding this Privacy Notice or the processing of your personal data, you may contact:
Email: contact@nureyev.org
Categories of Personal Data
Depending on our relationship with the data subject, the following categories of personal data may be processed:
- Identification and Contact Data: title, name, date of birth, nationality, postal address, email address, telephone number;
- Grant and Application Data: applicant data, CVs and biographies;
- Professional and Artistic Information: biographies, artistic profiles, publications, portfolios;
- Communication Information: correspondence, enquiries and other communications with the Foundation;
- Financial Information: banking information, payment details, financial and compliance information;
- Image, Media and Cultural Heritage Information: including photographs, video recordings, archival materials, historical records and documentation relating to artistic and cultural heritage activities.
Purposes and Legal Bases of Processing
The Foundation processes personal data only where a valid legal basis exists under Article 6 GDPR and applicable data protection law.
Compliance with legal obligations
The Foundation may process personal data where necessary to comply with legal obligations to which it is subject.
This may include:
- Procurement, contract administration, payments and compliance
- Storage of Foundation records and accountability documentation
- Handling access, rectification, deletion, restriction and other GDPR requests
Legal basis: Article 6(1)(c) GDPR.
Performance of a contract
The Foundation may process personal data where such processing is necessary to enter into or perform a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract.
This may include:
- Evaluation, administration and management of grant applications and grant recipients
- Administration of governance and ambassador relationships
- Management of partnerships, collaborations and contractual relationships
- Procurement, contract administration, payments and compliance
- Administration of image rights, licensing arrangements and authorised use of media
- Creation and publication of commissioned content
Legal basis: Article 6(1)(b) GDPR.
Legitimate interests pursued by the Foundation
The Foundation may process personal data where such processing is necessary for its legitimate interests, provided that those interests are not overridden by the interests, rights or freedoms of the data subject.
Such legitimate interests may include:
- Governance, decision-making, oversight and accountability of the Foundation
- Administration of governance and ambassador relationships
- Responding to enquiries and maintaining correspondence
- Administration of image rights, licensing arrangements and authorised use of media
- Preservation of Foundation records, accountability and historical documentation
Where processing is based on legitimate interests, the Foundation carries out an appropriate balancing assessment and applies safeguards to protect the rights and freedoms of affected individuals.
Legal basis: Article 6(1)(f) GDPR.
Consent provided by the data subject
Where required by law, the Foundation processes personal data on the basis of the data subject’s consent.
This may include:
- Documentation, promotion and public communication of Foundation activities
- Creation and publication of content incl. photographs or video recordings
Consent may be withdrawn at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Legal basis: Article 6(1)(a) GDPR.
Archiving, research and cultural heritage activities
The Foundation may process personal data for archiving purposes in the public interest, historical research purposes, scientific research purposes or cultural heritage preservation activities where permitted by applicable law. Such processing is carried out in accordance with Article 89 GDPR.
The applicable legal basis will depend on the specific circumstances and may include Article 6(1)(c), Article 6(1)(f) or another lawful basis under applicable law.
Website and Online Services
Website Use
When you visit our website, certain technical information is processed where necessary to ensure the security, stability and functionality of the website, including:
- IP address;
- browser information;
- device information;
- operating system;
- access date and time;
- requested content.
Such processing is based on the Foundation’s legitimate interest in maintaining the security and functionality of its online services.
Such data is retained only for as long as necessary for these purposes, subject to applicable legal retention requirements.
Cookies and Similar Technologies
Strictly necessary cookies and similar technologies may be used to ensure the security and functionality of the website.
Non-essential cookies and similar technologies are used only where the user has provided consent.
Users may manage and withdraw their cookie preferences through cookieYes, which is used by the Foundation to manage cookie consent and preferences.
Website Analytics
The Foundation may use analytics technologies, currently google analytics, to better understand how visitors interact with the website and to improve its functionality and performance.
Google Analytics may process information relating to website usage, device characteristics and user interactions (such as IP address, browser type and pages visited) to generate usage statistics and analytics.
Google analytics is activated only after obtaining appropriate consent. Consent may be withdrawn at any time through the cookie settings.
The use of Google Analytics may involve the transfer of personal data to Google entities outside the EEA, including in the United States, where applicable and subject to appropriate transfer mechanisms.
Further information regarding analytics technologies used on the website may be found in the Cookie Policy widget.
Embedded Media Content
The website may contain embedded multimedia content provided by third-party services, such as youtube.
Display of, or interaction with such content may result in the processing of personal data by the respective provider.
Embedded content is managed through cookieYes. Embedded content will only load or track user data once appropriate cookie consent has been granted, or where privacy – enhanced embedding is enabled.
Service Providers and Data Transfers
Recipients of Personal Data
Personal data may be disclosed where necessary to:
- members of the Foundation’s governing bodies;
- service providers supporting the Foundation’s operations;
- professional advisers;
- financial institutions;
- public authorities where required by law;
- other recipients where necessary for the purposes described in this Privacy Notice.
Recipients may act as controllers or processors depending on the circumstances.
Communication and IT-Support Services
The Foundation uses third-party IT-Support and communication services to support its activities.
Such service providers may process personal data on behalf of the Foundation under contractual arrangements and applicable data protection safeguards.
Hosting and Website Technology
The Foundation uses external service providers for website hosting, maintenance and technical operation.
Such providers process personal data only to the extent necessary for providing their services and are subject to appropriate contractual obligations.
Further details may be provided upon request where appropriate.
International Data Transfers
Where personal data is transferred outside the European Economic Area or other jurisdictions recognised as providing an adequate level of protection, the Foundation implements appropriate safeguards in accordance with applicable data protection law. International transfers of personal data are carried out only in accordance with the GDPR (Articles 44–49 GDPR).
Such safeguards may include:
- adequacy decisions;
- Standard Contractual Clauses;
- supplementary technical and organisational measures;
- other lawful transfer mechanisms.
Data Protection Rights
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, to resolve disputes or to establish, exercise or defend legal claims.
The criteria used to determine retention periods include legal retention obligations, contractual requirements, limitation periods and the Foundation’s legitimate operational needs.
Further information regarding specific retention periods may be provided upon request.
Data Security
The Foundation implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Such measures are regularly reviewed and updated where appropriate.
Your Rights
Subject to applicable law, data subjects may have the following rights:
- Right of access (Article 15 GDPR);
- Right to rectification (Article 16 GDPR);
- Right to erasure (Article 17 GDPR);
- Right to restriction of processing (Article 18 GDPR);
- Right to data portability (Article 20 GDPR);
- Right to object (Article 21 GDPR);
- Right not to be subject to automated decision-making (Article 22 GDPR, where applicable);
- Right to withdraw consent at any time (Article 7(3) GDPR);
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR).
Requests may be submitted to:
contact@nureyev.org
Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority.
For processing activities carried out by the Foundation, the competent supervisory authority is generally:
Data Protection Authority of the Principality of Liechtenstein
Current contact information is available at:
https://www.datenschutzstelle.li.
Changes to this Privacy Notice
The Foundation may update this Privacy Notice from time to time.
Any changes will be published on the Foundation’s website together with the updated version date.
We encourage users to review this Privacy Notice periodically.
