Privacy policy

1 PERSONAL DATA PROCESSED BY US

This Privacy Policy applies to all personal data about you that is collected and used by Museum MORE when you visit our website, participate in one of our receptions and events, make a purchase using the ticket shop, when you subscribe or are already subscribed to the newsletter, of otherwise use one of our other services/purchase products from us.

Depending on the type of services you use, or products you purchase, the personal data we collect and process about you include:

• Your contact details, such as name, email address, home address, phone number
• Other (electronic) (contact) data, such as IP-address (anonymized), as well as the data you have added to your account yourself (i.g. through our mail service)
• The content of your communications with us, for example when you contact us by email, phone or otherwise
• Footage taken at Museum MORE events
• For applicants: nationality, date of birth, availability, curriculum vitae, employment history, educational history, motivation letter as provided by the applicant
• For suppliers: data for the purpose of placing orders, purchasing services, calculating and recording fees and expenses, and making payments and collection claims, including the bank account number as provided by the supplier
• Other data from suppliers the processing of which is required or necessary to comply with applicable legislation and/or regulations, including in the context of compliance

1.1 COOKIES

Our website and applications use cookies to improve usability, effectiveness and security, as well as for marketing purposes. Cookies are small text files on your computer that are stored by your browser. For more information about the use of cookies by Museum MORE, please refer to the Cookie Policy.

2 THE LEGAL BASIS AND PURPOSES FOR PROCESSING YOUR PERSONAL DATA

We process your personal data on the basis of one or more of the following legal grounds:

1. When this is necessary for the execution of an agreement to which you are a party or for carrying out pre contractual activities at your request.
2. When this is necessary to fulfil a legal obligation.
3. When this is necessary for the protection of our legitimate interests or the interests of a third party.
4. After your consent.

Purposes with related bases:

• To provide the requested services and products, such as (online) tickets and events (1, 2 and 3: to be able to offer and improve our products and services);
• To be able to deal with any requests, complaints or questions (1, 2 and 3: to defend rights, to maintain and improve existing relationships through proper complaint handling and to improve the quality of our services and products);
• To enable you access to our websites, to improve the websites, to display the websites in your chosen language and for the purposes of security and tracking of user statistics of our websites (3: the importance of being able to offer safe and optimised websites to you);
• To maintain contact with you and to communicate with you, e.g. by sending you newsletters and personal invitations to events (1, 2, 3: the importance of bringing our products, services and events to the attention of existing customers, 4);
• For processing your application (1, 2, 3: our legitimate interest in assessing your suitability for the vacant position and d: consent if you wish to remain in the portfolio for a longer period, see: ‘How long do we retain your personal data?’);
• For compliance with our legal- and/or regulatory obligations (2, 3: the importance to fulfil these obligations).

2.1 WHO RECEIVES YOUR PERSONAL DATA?

Only authorised employees of Museum MORE have access to your personal data to the extent necessary for the performance of their work at Museum MORE.

We do not provide your personal data to third parties (‘recipients’ in the sense of the privacy legislation), unless this is necessary for the proper execution of the purposes described in this Privacy Statement, when this is legally required or after you have given your consent. The third parties to whom the personal data are shared, are obliged to treat your personal data confidentially. If these parties are regarded as ‘(sub) processors’ within the meaning of the privacy legislation, we will ensure that a processing agreement is concluded with them, which meets the requirements set out in the GDPR. Third parties engaged by us who offer services as independent processors are themselves responsible for the (further) processing of your personal data in accordance with the applicable privacy legislation.

In order to provide services, we may transfer personal data to a recipient in a country outside the European Economic Area that offers a lower level of protection of personal data than that provided by European legislation. In such a case, we will ensure that such a transfer of personal data is in accordance with the applicable legislation and regulations, for example, by concluding a model contract drawn up and approved for that purpose by the European Commission, and will check whether additional measures are necessary to guarantee an adequate level of protection of your personal data.

2.2 HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will not retain your personal data in an identifiable form longer than is necessary to fulfil the purposes set out in this Privacy Statement.

2.3 WHAT RIGHTS DO YOU HAVE WITH REGARD TO YOUR PERSONAL DATA AND HOW CAN YOU EXERCISE THESE RIGHTS?

Under the applicable laws and regulations, you have a number of rights with regard to your personal data, including:

• The right to request whether we are processing personal data relating to you and, if so, to access your personal data and certain information concerning the processing of your personal data.
• The right to rectification of your personal data if they are incorrect or incomplete.
• The right to have your personal data erased (‘right to oblivion’).
• The right to object to the processing of your personal data or to restrict the processing of your personal data.
• The right to withdraw consent to the processing of your personal data, if the processing is based on your consent.
• The right to receive or transfer your personal data to a third party designated by you in a structured, commonly used and machine-readable form (‘right to data portability’).

If you wish to exercise one of your rights, you can do so by using the contact information set out above. To prevent us from providing information to the wrong person, we may ask for additional information to verify your identity. In principle, we will inform you within one month after receipt of your request whether we can comply with your request. This period may be extended by two months in specific cases, such as a complex request. We will inform you of such an extension no later than one month after receipt of your request. Pursuant to privacy laws, we may refuse your request under certain circumstances. If this is the case, we will explain why. You can find more information about your privacy rights on the website of the Dutch Data Protection Authority.

2.4 SECURITY

We take appropriate and reasonable security measures to protect your personal data against unauthorised access, modifications, disclosure, loss or improper use, and to protect the accuracy and integrity of your personal data. In order to ensure a risk-adapted level of security, we implement technical and organisational measures, including security with regard to access to our systems.

If you have the impression that your data is not properly protected or there are indications of abuse, or if you want more information about the protection of personal data collected by Museum MORE, please contact Museum MORE via the contact details above.

2.5 COMPLAINTS

If you have a complaint about Museum MORE’s processing of your personal data, we shall try to resolve it together with you. If this does not lead to the desired result, you have the right to submit a complaint to the competent regulator. In the Netherlands this is the Data Protection Authority. If you live or work in another country of the European Union, you can file a complaint with the regulator in that country.

2.6 AMENDMENTS

This Privacy Statement was last updated on 16 September 2024. Museum MORE reserves the right to amend this Privacy Statement. The most recent version of this Privacy Statement will always be posted on our websites (for example www.museumore.nl). In case of substantial amendments, which may significantly affect one or more data subjects, we will strive to inform these data subjects directly.