Open now until 17:00

Privacy

Privacy Policy of Stedelijk Museum Breda

1 November 2018

Privacy policy

This is the privacy policy of Stichting Stedelijk Museum Breda, with registered offices in Boschstraat 22, 4811 GH Breda. Stedelijk Museum Breda greatly values your privacy and will always process your personal data in accordance with the General Data Protection Regulation (GDPR).

Article 1: Application and scope
This privacy policy covers all personal data collected about you and used by Stedelijk Museum Breda when you are employed by Stedelijk Museum Breda or otherwise carry out work for the museum, visit our website, purchase an e-ticket or order a store product, sign up for our newsletter, participate in activities, receptions and events, make a donation or sponsor us, or when you make use of one of our other services (“Services”) or purchase one of our other products (“Products”). Personal data are data that enable us to identify an individual as described below in the “Processing of your personal data” section.

Article 2: Processing of your personal data
The personal data we collect from you and process include, depending on the purpose and services you use or the products you purchase:

  • Your personal data related to the conclusion of an employment relationship or agreement for the performance of work such as your name, date and place of birth, nationality, address, telephone number, citizen service number (BSN). These data have a legal basis.
  • Your contact details such as your name, e-mail address, address and (mobile) telephone number.
  • Your account details and (electronic) identification details such as your account on the website, your bank account number, electronic identification data such as your IP or MAC address, including any data you add to your account (including your username and password).
  • Information concerning the use of our online services or applications such as the web pages you visit, products and services you are interested in, or anything your purchase from us online.
  • Information concerning the products and services you purchase from us such as interests, profession/job, pictures, personal characteristics and the knowledge you have made use of this specific product or service.
  • The content of your communication with us, for example when you contact us by letter, e-mail, phone or otherwise.

Article 3:  The purposes and legal basis of the processing of your personal data
We collect and use your personal data on a legal basis for the purposes set out below. Insofar as Stedelijk Museum Breda already has personal data about you in its possession, these personal data will be used for the same purposes and with the same legal basis.

  • Necessary for the implementation of an agreement
    Your personal data will be collected in the context of the conclusion of an employment relationship or the introduction of an agreement for the performance of work for the museum.
  • Your personal data will be collected and processed to handle your purchase of Products and a request for the provision of Services. We also process your personal data to handle any requests, complaints or questions you may have.
  • Necessary for the protection of the legitimate interests of Stedelijk Museum Breda.
    We use the above personal data to improve our products and services and to be able to better understand and target our visitors and partners at an aggregated and individual level. This means that we analyse your use of our products and services and use this information to improve our products and services and to provide you with a better user experience. For example, we analyse which web pages you visit on our website and which products and services you use, which enables us to create personal profiles and assess what might be of interest to you and what recommendations we can give you when you make use of our services.
  • Based on permission
    You can revoke this permission at any time. We have set out below how you can do this.
  • Necessary to comply with a legal obligation
    Your personal data will be collected in the context of the conclusion of an employment relationship or the introduction of an agreement for the performance of work for the museum. Where necessary, we will ask you for permission to keep you informed of news or actions related to our products and services. We can use your personal data to comply with applicable legislation, to fulfil requests from public authorities and government agencies, or to cooperate with law enforcement. 


Article 4: Use of cookies
Our website and applications use cookies to increase the user-friendliness, effectiveness and security, as well as for marketing purposes. Cookies are small text files that are stored on your computer by your browser. For more information about the use of cookies by Stedelijk Museum Breda, we refer you to our Disclaimer, which includes our cookie statement.

Article 5: Who will receive your personal data?
Only authorised employees of Stedelijk Museum Breda have access to your personal data insofar as this is necessary for the performance of their work at Stedelijk Museum Breda. We will not share the personal data you provide to us with third parties without your express prior permission unless this is necessary to achieve the purposes described in Article 3. We may share your personal data with suppliers/service providers to implement agreements we conclude with you, e.g. to process payments. We can also share your personal data with public authorities in order to comply with applicable legal obligations.

Article 6: Disclosure of personal data
Unless otherwise stated, we will process and store your personal data in the European Union. Our service providers may transfer your personal data outside the European Economic Area (EEA) to a country which does not offer the same level of protection under European legislation as the country in which you usually make use of your products and/or services. In this case, we will take the necessary steps to ensure that your personal data are sufficiently secured, for example by drawing up EU standard contracts with parties located outside the EEA.

Article 7: Security
We will take suitable and reasonable security measures to protect your personal data against unauthorised access, modifications, disclosure, loss or misuse, and to ensure the accuracy and integrity of your personal data. We will take technical and organisational measures to ensure a security level which matches the risk, including securing access to our systems.

Article 8: 
For how long will we store your personal data?
We will store your personal data for as long as necessary or permitted in relation to the purposes for which they were obtained and as set out in this privacy policy. The criteria that were used to determine our retention periods include:

  • the period during which we have an ongoing relationship with you;
  • whether there is a legal obligation to which we are subject; and
  • whether the retention is desirable in relation to our legal position (for example in relation to enforcing our general terms and conditions, legal proceedings or legal examinations).


Article 9:
What rights do you have in relation to your personal data and how can you exercise these rights?

You have various rights in relation to your personal data based on applicable laws and regulations, including:

  • Right of access. We will inform you about the personal data we process about you upon your request without charging any costs.
  • Right of rectification. We will correct, supplement, block or remove your personal data following your request if these are actually incorrect, incomplete or irrelevant for the purpose(s) of the processing or if these are processed in a way which infringes on a statutory provision.
  • Revoking your permission. You can revoke your permission for our future processing of your personal data at all times.
  • Right of resistance. You have the right to resist against the processing of your personal data for marketing purposes.
  • Right of limitation. If applicable, you have the right to have Stedelijk Museum Breda limit the processing of your personal data. This means that your personal data will (temporarily) not be processed and may not be changed.
  • Right of data removal. If applicable, we will remove your personal data without any unreasonable delays (right to be forgotten).
  • Right of objection. If applicable, you have the right to object to the processing of your personal data based on, among other things, the legal basis of “legitimate interest” of Stedelijk Museum Breda.
  • Right of data transferability. If applicable, we will provide you with an overview of the personal data you have provided to us to enable the transfer of these data to another data controller, insofar this is technically possible (data portability).
  • Right to submit a complaint. Finally, you have the right to submit a complaint to the supervisory authority if you believe that your personal data are processed in violation of this privacy policy. You can exercise one of your rights by contacting the contact details described below.

Article 10: Contact details
If you have any questions about this privacy policy, the way in which we process your personal data, or if you want to exercise the rights described above, contact Stedelijk Museum Breda:

Stedelijk Museum Breda
Boschstraat 22
4811 GH Breda
Netherlands

Or at privacy@stedelijkmuseumbreda.nl

The privacy policy of Stedelijk Museum Breda will be updated from time to time. This privacy policy took effect on 25 May 2018. The most recent version can be found at www.stedelijkmuseumbreda.nl.

Last updated on 1 November 2018.