Privacy declaration

Privacy statement Museum Boijmans Van Beuningen


Museum Boijmans Van Beuningen (“we”, “us” or “the museum”) is self-employed
non-profit foundation, which manages the art collection on behalf of the municipality
Rotterdam, manages, preserves and displays many donors and lenders. We want
that everyone who visits us, purchases our services or products and our website
looks to provide the best experience. In order to do that, we process
personal data. What data we store and why is stated here
privacy declaration.

We handle your personal data with the same care as we handle ours
art collection. This concerns all personal data that we process as you
works for us, communicates with us, uses our website, orders tickets, a
visits, makes purchases, participates in activities, makes a donation, Friend
sponsors the museum or uses one of our other services.

Personal data is data that allows us to identify you as an individual.
In some cases we collaborate with other organizations or companies.
This data is therefore carefully processed and secured by us. Thereby
we adhere to the requirements of the privacy legislation, the so-called General
Data Protection Regulation. This means that we:
• Clearly state for what purposes we use personal data
process. We do this via this privacy statement;
• Limit the collection of personal data to only the personal data necessary for the purposes for which it is processed;
• You must first ask for explicit permission to process your personal data in cases where your permission is required;
• Do not pass on your data to third parties, unless this is necessary to provide the requested service or when we are legally required to do so
be obliged to;
• When we share your data, we make agreements with third parties to ensure, among other things, that they are not used for other purposes;
• Take appropriate security measures to protect your personal data and also require parties that process personal data on our behalf;
• Respect your rights to provide access to, correct or delete your personal data upon your request.

In this privacy statement we provide you with more information about the type of personal data
that we collect and why we do it, how we protect it and for how long
collect these. You can also read more about your rights and how you can contact us
to withdraw. We want to explain this as clearly and simply as possible.
If you have any questions or comments regarding this privacy statement, please
you can contact us using the details below:

By telephone: 010 44.19.400
Foundation for the Management of Museum Boijmans Van Beuningen
PO Box 2277
3000 CG Rotterdam

Explanation of privacy statement

Type of data

When purchasing products, purchasing services or making donations
(such as a Friends membership) you leave certain information with us. We
do not always process all the data below, because that depends on the
purpose for which we need the data. This is how we store your bank account
only if you make a continuous donation, but not if you buy an e-ticket.

Personal data
Depending on your relationship with Museum Boijmans Van Beuningen, we can
process the following data about you:
• Name and address details
• Name and address details of your partner
• E-mail address
• Phone number
• Company details
• Function
• Date of birth
• Sex
• Interests and hobbies
• Membership number
• Curriculum vitae
• Motivation letter
• Educational attainment
• Household composition
• Photos
• The content of your communication with us, for example when you email us, telephone or otherwise contact us, including in the form of notes
• Data about your use of services and products that you purchase
• Data needed for contracts
• Information about donations made and works of art donated, including the financial value of the donation
• Information about your relationship with the museum, for example which newsletters you receive, how often you have purchased an e-ticket and whether you have donated anything in the past
• Information about your relationship with other contacts of the museum
• Data about participation in events
• Data from publicly accessible websites about your career
• Data about your involvement in the museum's social media channels
• Technical measurement data from the equipment such as IP address and your surfing behavior on our websites such as the contents of your shopping cart

Purpose of processing

We only process data for the purposes set out below,
based on a legal basis. To the extent that we already collect personal data
in our possession, they will be used for the same purposes.

Basis: Necessary for the execution of an agreement
• To offer you the opportunity to order items via our websites and use all functionalities and services on the websites;
• To process your order and inform you about its progress;
• To process your registration as a Friend, donor, sponsor or beneficiary in another way and to carry out the associated relationship management.
• Without processing your personal data, we may not be able to conclude or execute an agreement with you.

Basis: necessary for the representation of Museum Boijmans Van Beuningen's legitimate interest in maintaining the relationship with you, improving our services, products, communication and fundraising.
• To communicate with you by sending electronic newsletters and/or mail about matters for which no separate permission is required in advance - for example, if you are a friend, informing you about friend activities. You can always unsubscribe from this communication;
• To answer your questions or handle your complaints via social media, e-mail, by post or by telephone;
NB: by using the FAQ you grant the museum permission to post your question and first name online.
• To process your application;
• To analyze who our visitors are and what they do, what happens to them
plays and what they consider important with which we use our products, services and
be able to improve communication and continue to do business successfully;
• To map relationships and the museum's network
improving fundraising, important for its survival
museum (exhibitions, restorations, educational projects and more
possible thanks to financial support from third parties);
• To improve our websites.

Basis: Based on permission
To the extent necessary, we will ask your permission, for example for
send our monthly newsletter or to send you marketing material
can send via email. You can give your consent for this at any time
withdraw moment via the sent messages.

Basis: Necessary to comply with a legal obligation
We may process your personal data in accordance with applicable law
to comply with, to comply with requests from public authorities and
government agencies or to cooperate with law enforcement.

Disclosure to third parties and transfer

We pass on the information you provide to third parties, if so
is necessary for the delivery of the products you ordered, or
requested services. For example, we use a third party for the
processing iDeal payments in our webshop and we pass on your details
to the postman to deliver the order to you. If you are logged in to
a Facebook or Instagram account while you visit our website, these will
social media channels also show you information about the museum. We share and receive
However, no data from you via these social media channels other than that you have been to our site.

When we provide your data to a third party, we ensure that:
agreement, among other things, ensures that your data is not used for other purposes
are used. We also agree that your data will be
deleted as soon as they are no longer needed.

Furthermore, we will not share the information you provide with other parties
unless this is legally required or permitted. That's how it is, for example
It is possible that the police may request data from us in the context of fraud investigations.
In that case, we are legally obliged to provide this information.

Unless otherwise stated, we process and store your personal data in the
European Union. Our service providers may disclose your personal data
the European Economic Area ("EEA") to a country under the
European law does not provide the same level of protection as the country you live in
normally use your products and/or services. We will then make the necessary arrangements
take steps to ensure that your personal data is sufficient
are protected, such as drawing up EU standard contracts with parties that
are outside the EEA.

Profiling and cookies

We combine your personal data from different sources (such as the
data from your account and your purchases in our webshop) with each other, to give you the
to provide the best experience.

By combining your data we can create personalized offers and
personalized content that matches your interests and
purchase history. We can also send you our newsletter in this way
personalize. This way we can make better and more targeted offers.
This prevents you from posting content or offers on the various websites
see that are less interesting to you. We can also do this by combining
of data to prevent you from being contacted twice by us and better insight
understand who our visitors are.

We do not use this when collecting and combining your data

Automated decision making

We do not make decisions on matters that could have (significant) consequences for people based on automated processing.
Protect and store

We take appropriate security measures to prevent misuse and unauthorized
prevent access to your personal data. This way we ensure that only the
necessary persons have access to the data, that access to the
data is protected and that our security measures are taken regularly
be checked.

We do not store the data for longer than is necessary. This means that we have the
retain data for as long as necessary for the purposes described herein
privacy declaration. Excepted from this are the data that we need longer
save because the law requires us to do so. If we no longer need the information
We delete the data or anonymize it so that we no longer have access to it
can identify. We do this, for example, for an ongoing analysis of
our visitors on an annual basis.

Your rights

You have various rights based on applicable laws and regulations
with regard to your personal data, including:
Right of access. At your request we will provide you with information free of charge
regarding the personal data that we process about you.
Right to rectification . At your request we will process your personal data
correct, supplement, block or delete if this is in fact the case
be incorrect, incomplete or irrelevant to the purpose or purposes of the
processing, or when they are processed in any other way
infringes a legal provision.
Withdraw your consent. You can withdraw your consent at any time
withdraw your personal data for future processing by us,
for example at the bottom of each newsletter.
Right to object. You have the right to object to the processing of
your relevant personal data for marketing purposes.
Right to restriction . If applicable, you have the right from us
restriction of the processing of your personal data. This
means that your personal data is (temporarily) not processed and not changed
may be.
Right to erasure . If applicable, we will contact you
erase personal data without unreasonable delay (right to
Right to object . If applicable, you have the right to object
object to the processing of your personal data
based on, among other things, the Museum's 'legitimate interest' basis
Boijmans Van Beuningen.
Right to data portability . If applicable we will
provide you with an overview of the personal data you have provided to us
provided so that this data can be transferred to a
other controller, insofar as this is technical
is possible (data portability).
Right to file a complaint . Finally, you have the right to file a complaint
with the supervisory authority if you believe that your
personal data is processed in violation of this privacy statement.

Inspecting and changing your data

If you would like to contact us regarding this privacy statement or
If you would like to exercise one of your rights, you can do so via the details below:

By telephone: 010 44.19.400
Foundation for the Management of Museum Boijmans Van Beuningen
PO Box 2277
3000 CG Rotterdam

To prevent abuse, we may ask you, in the event of a written request for access, to:
adequately identified by bringing a copy of a valid ID
to steer. Don't forget to shield your BSN and your passport photo on the copy. You
For example, you can use the 'KopieID' app for this.

Changes to this privacy statement

We may change this privacy statement from time to time. Changes will occur
our website are published. We never use your data without it
consent for other purposes.

It is therefore advisable to consult this privacy statement regularly
you are aware of these changes.

Dutch Data Protection Authority

Of course we are happy to help you if you have any complaints about the processing of your data
personal data. If you still cannot reach an agreement with us, then...
you also have the right under privacy legislation to file a complaint with
the privacy regulator. You can contact the Authority for this
Personal data.

Entry into force

This (renewed) privacy statement came into effect on May 23, 2018.