1 November 2018
Article 1: Application and scope
Article 2: Processing of your personal data
The personal data we collect from you and process include, depending on the purpose and services you use or the products you purchase:
- Your personal data related to the conclusion of an employment relationship or agreement for the performance of work such as your name, date and place of birth, nationality, address, telephone number, citizen service number (BSN). These data have a legal basis.
- Your contact details such as your name, e-mail address, address and (mobile) telephone number.
- Your account details and (electronic) identification details such as your account on the website, your bank account number, electronic identification data such as your IP or MAC address, including any data you add to your account (including your username and password).
- Information concerning the use of our online services or applications such as the web pages you visit, products and services you are interested in, or anything your purchase from us online.
- Information concerning the products and services you purchase from us such as interests, profession/job, pictures, personal characteristics and the knowledge you have made use of this specific product or service.
- The content of your communication with us, for example when you contact us by letter, e-mail, phone or otherwise.
Article 3: The purposes and legal basis of the processing of your personal data
We collect and use your personal data on a legal basis for the purposes set out below. Insofar as Stedelijk Museum Breda already has personal data about you in its possession, these personal data will be used for the same purposes and with the same legal basis.
- Necessary for the implementation of an agreement
Your personal data will be collected in the context of the conclusion of an employment relationship or the introduction of an agreement for the performance of work for the museum.
- Your personal data will be collected and processed to handle your purchase of Products and a request for the provision of Services. We also process your personal data to handle any requests, complaints or questions you may have.
- Necessary for the protection of the legitimate interests of Stedelijk Museum Breda.
We use the above personal data to improve our products and services and to be able to better understand and target our visitors and partners at an aggregated and individual level. This means that we analyse your use of our products and services and use this information to improve our products and services and to provide you with a better user experience. For example, we analyse which web pages you visit on our website and which products and services you use, which enables us to create personal profiles and assess what might be of interest to you and what recommendations we can give you when you make use of our services.
- Based on permission
You can revoke this permission at any time. We have set out below how you can do this.
- Necessary to comply with a legal obligation
Your personal data will be collected in the context of the conclusion of an employment relationship or the introduction of an agreement for the performance of work for the museum. Where necessary, we will ask you for permission to keep you informed of news or actions related to our products and services. We can use your personal data to comply with applicable legislation, to fulfil requests from public authorities and government agencies, or to cooperate with law enforcement.
Article 5: Who will receive your personal data?
Only authorised employees of Stedelijk Museum Breda have access to your personal data insofar as this is necessary for the performance of their work at Stedelijk Museum Breda. We will not share the personal data you provide to us with third parties without your express prior permission unless this is necessary to achieve the purposes described in Article 3. We may share your personal data with suppliers/service providers to implement agreements we conclude with you, e.g. to process payments. We can also share your personal data with public authorities in order to comply with applicable legal obligations.
Article 6: Disclosure of personal data
Unless otherwise stated, we will process and store your personal data in the European Union. Our service providers may transfer your personal data outside the European Economic Area (EEA) to a country which does not offer the same level of protection under European legislation as the country in which you usually make use of your products and/or services. In this case, we will take the necessary steps to ensure that your personal data are sufficiently secured, for example by drawing up EU standard contracts with parties located outside the EEA.
Article 7: Security
We will take suitable and reasonable security measures to protect your personal data against unauthorised access, modifications, disclosure, loss or misuse, and to ensure the accuracy and integrity of your personal data. We will take technical and organisational measures to ensure a security level which matches the risk, including securing access to our systems.
Article 8: For how long will we store your personal data?
- the period during which we have an ongoing relationship with you;
- whether there is a legal obligation to which we are subject; and
- whether the retention is desirable in relation to our legal position (for example in relation to enforcing our general terms and conditions, legal proceedings or legal examinations).
Article 9: What rights do you have in relation to your personal data and how can you exercise these rights?
You have various rights in relation to your personal data based on applicable laws and regulations, including:
- Right of access. We will inform you about the personal data we process about you upon your request without charging any costs.
- Right of rectification. We will correct, supplement, block or remove your personal data following your request if these are actually incorrect, incomplete or irrelevant for the purpose(s) of the processing or if these are processed in a way which infringes on a statutory provision.
- Revoking your permission. You can revoke your permission for our future processing of your personal data at all times.
- Right of resistance. You have the right to resist against the processing of your personal data for marketing purposes.
- Right of limitation. If applicable, you have the right to have Stedelijk Museum Breda limit the processing of your personal data. This means that your personal data will (temporarily) not be processed and may not be changed.
- Right of data removal. If applicable, we will remove your personal data without any unreasonable delays (right to be forgotten).
- Right of objection. If applicable, you have the right to object to the processing of your personal data based on, among other things, the legal basis of “legitimate interest” of Stedelijk Museum Breda.
- Right of data transferability. If applicable, we will provide you with an overview of the personal data you have provided to us to enable the transfer of these data to another data controller, insofar this is technically possible (data portability).
Article 10: Contact details
Stedelijk Museum Breda
4811 GH Breda
Last updated on 1 November 2018.