Privacy Statement

FRANS HALS MUSEUM

Stichting Frans Hals Museum processes personal data and uses cookies. This Privacy Statement aims to inform you of the purposes of us processing your personal data, how to exercise your privacy rights and any other information that could be of interest. The Frans Hals Museum places great importance on handling the personal data belonging to visitors, users and stakeholders with the utmost care and keeping that data safe. The Frans Hals Museum is diligent in its handling of personal data and it operates in accordance with applicable laws such as the Dutch Personal Data Protection Act (Wet beschermingpersoonsgegevens, Wbp) and the General Data Protection Regulation (GDPR). We aim to be transparent in the way we process your data. Furthermore, you have the right to request access to and rectification of any personal data that we have stored at any time. In this Privacy Statement, we have outlined the most relevant information by subject. This Privacy Statement applies to all activities undertaken by the Frans Hals Museum.

DATA CONTROLLER

Stichting Frans Hals Museum, registered with the Kamer van Koophandel (Dutch chamber of commerce) under number 34303231, acts as the data controller within the meaning of the Wbp and GDPR. The Frans Hals Museum is located at Groot Heiligland 62 and Grote Markt 16 in Haarlem.

OUR PURPOSES FOR PROCESSING YOUR DATA

The Frans Hals Museum collects and processes personal data for clear and predetermined purposes, namely the following:

• organising exhibitions and other public activities;
• ensuring the safety of our collection and the people in our museum buildings;
• maintaining company records;
• communicating with (potential) visitors and users of our website;
• informing the press;
• carrying out marketing and audience research;
• recruiting patrons, interacting with other stakeholders and managing relations;
• registering and responding to questions and complaints from visitors;
• entering into employment agreements and temporary employment relations, such as internships and traineeships;
• complying with legal obligations;
• complying with archiving obligations and purposes, where data are used only in legal procedures or for historical, statistical or scientific purposes.

The Frans Hals Museum processes personal data through the website, any services related to the website (newsletters) and supported software. Our processing of personal data is based on consent, an agreement or Stichting Frans Hals Museum’s legitimate interests. The Frans Hals Museum does not process any personal data for any purposes other than those stated above.

WHAT PERSONAL DATA DOES THE FRANS HALS MUSEUM COLLECT?

The Frans Hals Museum collects multiple categories of personal data, including the following:

• name and address details;
• email address;
• phone number;
• sex;
• date of birth;
• payment information;
• social media profiles;
• relation to the museum;
• family and work relations;
• occupation;
• Frans Hals Museum engagement metrics.

The Frans Hals Museum collects personal data provided directly by visitors, users and other stakeholders. Where appropriate, the Frans Hals Museum may also receive personal data through third parties or public sources, where this is in accordance with the law.

HOW DOES THE FRANS HALS MUSEUM ENSURE PERSONAL DATA ARE HANDLED CONFIDENTIALLY?

The Frans Hals Museum handles personal data confidentially. The Frans Hals Museum takes the appropriate technical and organisational measures to ensure personal data are kept secure. These measures have been laid down in the Service Level Agreement(SLA) between the museum and the IT support company, a data breach protocol and internal procedures.

The Frans Hals Museum shares personal data only after obtaining agreement with this Privacy Statement; personal data are shared only with third parties where this is permitted, done with sufficient care and/or required by law. On instructions from the Frans Hals Museum, business service providers may deliver certain elements of a service for the performance of an agreement. The Frans Hals Museum comes to an agreement with these processors in advance to guarantee that personal data are handled confidentially and diligently. These agreements are laid down in data processing agreements.

The Frans Hals Museum does not share your data outside of the EU. In exceptional cases where your data are shared, it will be contractually agreed that the third party will comply with and respect EU privacy laws.

DATA RETENTION PERIOD OF THE FRANS HALS MUSEUM

The Frans Hals Museum retains your personal data in accordance with the Wbp, GDPR and Dutch Public Records Act. Data are retained for as long as is considered necessary to fulfil the purposes for which the data were collected. The retention periods are laid down in the Basic Selection Document (BSD) (October 2016 version) available in Dutch only.

HOW CAN I ACCESS OR DELETE MY DATA?

It is possible to submit a request to the Frans Hals Museum for access or correction. Please clearly state that it concerns a request for access or correction pursuant to the GDPR. You can withdraw consent that you have given to certain processing operations involving your personal data at any time. You can also submit a request for deletion of your data. However, this is possible only insofar as the Frans Hals Museum is able tocomply with its legal obligations.

Remember that attaching a copy of an identity document to verify your identity is required when submitting a request for access, correction or deletion. When providing a copy of an identity document, it is important to obscure your ID number, document number and any machine-readable zone.