Privacy statement

This privacy statement applies to all services offered by the Louwman Museum.

This Privacy Statement consists of the following sections:

1. The responsible person
2. Our goal: protection of personal data
3. What is personal data?
4. Which personal data do we process?
5. What do we use your personal data for?
6. Security and processors
7. Rights and contact

Privacy statement

1. The Controller

The Louwman Museum is responsible for processing your personal data. The Louwman Museum aims to provide high quality services. Reliability is an important factor in this. We regard respect for the privacy of our customers and careful handling of their personal data as an important part of the reliability of our services. In this privacy statement you will find general information about how we handle your personal data.

2. Our goal: protection of personal data

The Louwman Museum respects the personal privacy of its customers. In carrying out its activities, the protection of personal data is therefore very important to the Louwman Museum. Personal data is handled and secured with the greatest possible care. The Louwman Museum makes every effort to secure the collection, transmission and storage of personal data, in accordance with the nature of such information. The Louwman Museum has implemented technological solutions with the aim of protecting your personal data against unauthorized access and use of this data. If necessary, we will adjust these measures when new, generally accepted security standards or technology become available.

3. What are personal data?

As soon as data can identify you as a person, this data is called personal data. Examples of personal data are your name, address, date of birth and bank account number. Your IP address or username can also be regarded as personal data. To be able to use our services, we need your personal data.

4. Which personal data do we process?

We want to provide you with good service, just as you are used to from us. To make sure you can use our services, we sometimes need your personal data. Depending on how you order tickets for the Louwman Museum, we may ask you for the following personal data, among other things:

• First and last name
• Gender
• Email address
• IP address
• Usage logs
• Language

We will only use the personal data you provide for the purposes we have communicated to you in advance. You can find more information about some of these purposes in this privacy statement.

5. What do we use your personal data for?

No sale of personal data to third parties
We want to remain honest and transparent about how we use your personal data. The personal data you have provided to us in order to use the services of the Louwman Museum will only be used for the purposes listed below. We will never sell your personal data to third parties.

Purpose and use of personal data
The processing of your personal data always takes place on the basis of a legal ground, namely:

• Performance of an agreement with you;
• Legitimate interest of the Louwman Museum or a third party, such as marketing, advertising, security, (crime) prevention, IT management, research and analysis of its own products or services, business operations, legal affairs, internal management;
• Permission from you;
• A legal obligation; or
• Performance of a task carried out in the public interest.

We are happy to explain the above in more detail below.

We collect and use the personal data you have entrusted to us in order to serve you or keep you informed. When you purchase a service or contact the Louwman Museum, the Louwman Museum records personal data. The Louwman Museum processes this personal data for entering into and carrying out our services, as well as for the purposes listed below.

Preventing fraud and abuse
Unfortunately, companies, including the Louwman Museum, are sometimes confronted with claims or declarations that are submitted without justification. This does not benefit the Louwman Museum or its customers. Personal data can also be used to prevent this kind of abuse.

Sharing with third parties
For a number of services, we use external parties that support us in delivering the product or service you requested, and for that reason your personal data is shared with these third parties. Naturally, we make clear agreements with these external parties about the careful handling of your personal data.

Improving our services
We use your personal data that we collect through our services to serve you properly and to develop new products and services.

Improving website and applications
To be able to continuously improve our website, the Louwman Museum records (personal) data about the use of our website by means of cookies, web beacons and other similar technologies for storing information. Our aim is to personalize advertising messages and to provide a better, faster and safer customer experience.

We may share this data, which under certain circumstances may qualify as personal data, with third parties that perform analyses for us. For information about cookies, or if you do not want cookies, please refer to our cookie statement.

Relationship management and marketing
We process personal data for our relationship management and to carry out targeted marketing activities. Based on data from internal and external sources and your visits to our web pages, we can make you suitable and targeted commercial offers, for example by post, telephone or via the internet.

Legal obligations
There is a possibility that we may be required to provide personal data to authorities or other third parties. For example, if this is necessary in connection with a legal obligation or for the performance of a public law task.

Retention period
We do not retain your personal data longer than necessary, unless we are legally required to keep personal data for a longer period. We need your personal data in order to provide you with proper service. This also primarily determines the period we use for storing your personal data. Our basic principle is that we only store personal data for as long as needed to provide you with the service or for as long as there is a legitimate interest in doing so. After this, we will delete, restrict, or anonymize your personal data.

To meet contractual obligations, data collected from you may be retained for as long as the contract is in force and—depending on the nature and scope of the contract—thereafter in order to comply with legal retention requirements and to be able to answer any questions or resolve any complaints after the contract has ended.

Data that we consider necessary to assess and prevent claims against us or to initiate criminal proceedings, or to prevent claims against you, us, or third parties, may be retained by us for as long as the relevant proceedings could be initiated.

6. Security and processors

We protect your personal data that is stored with us. Naturally, we do everything we can to secure your personal data as well as possible against unauthorized access, loss, or theft. To this end, we have established an internal policy to ensure that our products and services are designed in such a way that an appropriate level of security is applied by default. Employees of the Louwman Museum only have access to your personal data when this is necessary for the performance of their duties.

We make agreements about the security of your personal data that we have processed by an external party. If we engage an external party for our services that processes personal data on our behalf, we ensure that this party also meets our security requirements. We do this by concluding a so-called data processing agreement in which we set out, among other things, the security measures to be taken and the rules for the use of the personal data.

7. Rights and contact

You have the right to access the personal data that we process about you. In addition, in some cases you have the right to have the processing of personal data corrected, blocked or deleted. You also have the right to withdraw your consent, insofar as our processing of your personal data is based on it, the right to lodge a complaint with the Dutch Data Protection Authority, the right to restriction of the processing relating to you and the right to data portability. The latter means that you can have your personal data transferred. If you wish to exercise your rights, please contact the Louwman Museum. If you have any questions about the way in which the Louwman Museum handles your personal data, or if you wish to exercise one of your privacy rights, you can contact the Louwman Museum via info@louwmanmuseum.nl, stating "Privacy Louwman Museum". If the Louwman Museum cannot, or cannot fully, determine which personal data your request for access, amendment or deletion relates to, the Louwman Museum may ask you to (further) specify your request. The Louwman Museum will suspend the implementation of your request until you have provided the (further) specification.

We last updated our privacy statement on 22 May 2018. The Louwman Museum reserves the right to amend its privacy policy. The Louwman Museum therefore advises you to check this page regularly to see whether any changes have been made. We will inform you in the event of material changes to our privacy policy.