Privacy policy

This Privacy Policy applies to all personal data that Museum MORE collects and uses when you visit our website, participate in one of our events, purchase tickets through our ticket shop, subscribe or have subscribed to our newsletter, or otherwise purchase our products or use our services.

The personal data we collect and process depends on the services you use or the products you purchase and may include:

• Your contact details, such as your name, email address, postal address, and telephone number
• Other (electronic) (contact) details, such as your IP address (anonymised), including information you add yourself to your account (for example via our email service)
• Information relating to products and services you purchase from us, such as dietary requirements and whether you have used a specific product or service
• The content of your communication with us, for example when you contact us by email, telephone, or other means
• Images taken during Museum MORE events
• For applicants: nationality, date of birth, availability, curriculum vitae, employment history, education history, and motivation letter as provided by the applicant
• For suppliers: information required for placing orders, purchasing services, calculating and recording fees and expenses, making payments, and collecting receivables, including the bank account number provided by the supplier
• Other supplier information where processing is required by or necessary to comply with applicable laws and regulations

1.1 Use of cookies

Our website and applications use cookies to improve user-friendliness, effectiveness, and security, as well as for marketing purposes. Cookies are small text files stored on your computer by your browser. For more information about cookies and the use of cookies by Museum MORE, please refer to our Cookie Policy.

We process your personal data on the basis of one or more of the following legal grounds:

• When processing is necessary for the performance of a contract to which you are a party, or for taking pre-contractual steps at your request;
• When processing is necessary to comply with a legal obligation;
• When processing is necessary for the purposes of our legitimate interests or the interests of a third party;
• With your consent.

Purposes and corresponding legal grounds:

• To provide the requested services and deliver products, such as (online) tickets and events (grounds 1, 2 and 3: to provide and improve our products and services);
• To handle any requests, complaints, or questions (grounds 1, 2 and 3: to protect our rights, maintain and improve existing relationships through effective complaint handling, and improve the quality of our services and products);
• To provide you with access to our websites, improve our websites, display our websites in the language of your choice, ensure security, and maintain user statistics for our websites (ground 3: our legitimate interest in providing you with secure and optimised websites);
• To stay in contact with you and communicate with you, for example by sending newsletters and personal invitations to events (grounds 1, 2 and 3: our interest in bringing our products, services, and events to the attention of existing customers; ground 4: your consent);
• To process your job application (grounds 1, 2 and 3: our legitimate interest in assessing whether you are suitable for the vacancy; ground 4: your consent if you wish to remain in our recruitment database for a longer period, see “How long do we retain your personal data?”);
• To comply with our legal and regulatory obligations (grounds 2 and 3: our interest in being able to fulfil these obligations).

2.1 Who receives your personal data?

Only authorised employees of Museum MORE have access to your personal data where this is necessary for the performance of their duties at Museum MORE.

We do not provide your personal data to third parties (“recipients” within the meaning of privacy legislation), unless this is necessary for the proper fulfilment of the purposes described in this Privacy Policy, when required by law, or when you have given your consent. Third parties to whom personal data is made available are required to treat your personal data confidentially. If these parties qualify as “processors” within the meaning of privacy legislation, we ensure that a data processing agreement is concluded with them that meets the requirements of the GDPR. Third parties engaged by us who provide services as independent controllers are themselves responsible for complying with applicable privacy legislation when processing your personal data.

For the purpose of providing our services, we may transfer personal data to recipients in countries outside the European Economic Area that provide a lower level of protection for personal data than European legislation. In such cases, we will ensure that any transfer of personal data complies with applicable laws and regulations, for example by entering into standard contractual clauses prepared and approved by the European Commission and assessing whether additional measures are required to ensure an appropriate level of protection for your personal data.

2.2 How long do we retain your personal data?

We do not retain your personal data in an identifiable form for longer than is necessary to achieve the purposes described in this Privacy Policy.

2.3 What rights do you have regarding your personal data and how can you exercise them?

Under applicable laws and regulations, you have various rights regarding your personal data, including:

• the right to request confirmation as to whether we process personal data about you and, if so, to access your personal data and certain information about how we process it;
• the right to have your personal data corrected if it is inaccurate or incomplete;
• the right to have your personal data deleted (“right to erasure” or “right to be forgotten”);
• the right to object to the processing of your personal data or request restriction of processing;
• the right to withdraw your consent to the processing of your personal data where processing is based on your consent;
• the right to receive your personal data or have it transferred to a third party designated by you in a structured, commonly used, and machine-readable format (“right to data portability”).

If you wish to exercise any of these rights, you can do so by contacting us using the contact details provided above. To prevent us from providing information to the wrong person, we may request additional information to verify your identity. In principle, we will inform you within one month of receiving your request whether we can comply with it. In specific cases, for example where a request is complex, this period may be extended by a further two months. We will inform you of such an extension within one month of receiving your request. Under privacy legislation, we may refuse your request in certain circumstances. If this is the case, we will explain why. More information about your privacy rights can be found, among other places, on the website of the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

2.4 Security

We take appropriate and reasonable security measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or misuse, and to safeguard the accuracy and integrity of your personal data. To ensure a level of security appropriate to the risks involved, we implement technical and organisational measures, including measures relating to access security for our systems.

If you believe that your data is not adequately protected, or if there are indications of misuse, or if you would like more information about the security of personal data collected by Museum MORE, please contact Museum MORE using the contact details provided at the top of this page.

2.5 Complaints

If you have a complaint about the processing of your personal data by Museum MORE, we will be happy to work with you to find a solution. If this does not lead to the desired result, you have the right to submit a complaint to the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If you live or work in another country within the European Union, you may submit a complaint to the supervisory authority in that country.

2.6 Changes

This Privacy Policy was last updated on 16 September 2024. Museum MORE reserves the right to amend this Privacy Policy. The most recent version of this Privacy Policy will always be published on our websites (such as www.moregorssel.nl). If substantial changes are made that may significantly affect one or more individuals concerned, we aim to inform those individuals directly.