Van Gogh Museum Privacy Policy

This Privacy Policy describes how the Van Gogh Museum ("we," "us," or "our") collects, uses, and shares personal information of visitors to our museum in Amsterdam, Netherlands, and users of our website, www.vangoghmuseum.nl (the "Site"). The Van Gogh Museum is committed to protecting your privacy and ensuring the security of your personal information.

1. Information We Collect

We collect several types of information from and about users of our Site and visitors to our museum, including:

• Personal Information: This includes information that can be used to identify you, such as your name, email address, postal address, phone number, date of birth, and payment information when you purchase tickets, memberships, or merchandise.
• Demographic Information: This includes information such as your age, gender, interests, and preferences. We collect this information through surveys, contests, and other promotional activities.
• Technical Information: This includes information about your device and internet connection, such as your IP address, browser type, operating system, device identifiers, and browsing behavior on our Site. We collect this information through cookies, web beacons, and other tracking technologies. See our Cookies Policy for more details.
• Location Information: We may collect information about your location when you use our mobile app or visit our museum, with your consent where required by applicable law.
• Audio-Visual Information: Security cameras are used within the museum for security and safety purposes. If you visit the museum, your image may be captured.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing Services: To process your ticket purchases, membership applications, online orders, and other transactions. We also use your information to provide you with customer support and respond to your inquiries.
• Improving Our Site and Museum: To analyze trends and usage patterns, personalize your experience on our Site, and improve the content and functionality of our Site and museum exhibits.
• Marketing and Communications: To send you newsletters, promotional emails, and other communications about our exhibits, events, programs, and products. You can opt out of receiving these communications at any time by following the unsubscribe instructions in the email.
• Security and Safety: To protect the security and integrity of our Site, museum, and visitor data, and to prevent fraud and other illegal activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Research and Analysis: To conduct research and analysis to understand our visitors better and improve our offerings. For instance, we might analyze demographic data to tailor exhibits to different audience segments.

3. Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. These measures include:

• Encryption: We use encryption to protect sensitive information transmitted online, such as your payment information.
• Firewalls: We use firewalls to protect our servers from unauthorized access.
• Access Controls: We restrict access to personal information to authorized personnel who need it to perform their job duties.
• Regular Security Assessments: We conduct regular security assessments to identify and address potential vulnerabilities.

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your personal information.

4. Your Rights

You have certain rights regarding your personal information, including:

• Access: You have the right to access the personal information we hold about you.
• Correction: You have the right to correct any inaccurate or incomplete personal information we hold about you.
• Deletion: You have the right to request that we delete your personal information, subject to certain exceptions.
• Objection: You have the right to object to the processing of your personal information for certain purposes, such as marketing.
• Restriction: You have the right to restrict the processing of your personal information in certain circumstances.
• Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us using the contact information provided below.

5. Sharing Your Information

We may share your personal information with the following categories of recipients:

• Service Providers: We may share your information with third-party service providers who provide services on our behalf, such as payment processing, email marketing, website hosting, and data analytics.
• Business Partners: We may share your information with business partners who offer products or services that may be of interest to you.
• Legal Authorities: We may disclose your information to legal authorities if required by law or legal process.
• Affiliates: We may share your information with our affiliates and subsidiaries.
• Third Parties in connection with a business transaction: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We require these recipients to protect your personal information in accordance with this Privacy Policy and applicable law.

6. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We consider the following criteria when determining retention periods:

• The length of our relationship with you;
• The type of personal information concerned;
• Whether there is a legal obligation to retain the data;
• Whether retention is advisable considering applicable statutes of limitations, litigation or regulatory investigations.

7. International Data Transfers

Your personal information may be transferred to and processed in countries outside of the European Economic Area (EEA) that may not have equivalent data protection laws as the EEA. We will take appropriate safeguards to ensure that your personal information is protected in accordance with this Privacy Policy and applicable law, such as implementing standard contractual clauses approved by the European Commission.

8. Children's Privacy

Our Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete the information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any changes to this Privacy Policy on our Site and update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.

10. Contact Information

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Van Gogh Museum
Museumplein 6
1071 DJ Amsterdam
Netherlands
Email: privacy@vangoghmuseum.nl
Phone: +31 36 942 5692

Our Data Protection Officer is Dr. Annelies de Vries, who can be reached at the email address provided above.

Last Updated: October 26, 2023

We hope you find this privacy policy helpful and reassuring. At the Van Gogh Museum, we are dedicated to safeguarding your privacy while providing you with an enriching and unforgettable experience exploring the life and art of Vincent van Gogh.