Type of personal data processed

Acting in the capacity of data controller in accordance with the General Data Protection Regulation (GDPR), the Stedelijk Museum Amsterdam is authorised to process your personal data because you make use of the services of the Stedelijk Museum Amsterdam and/or because you have provided the data by filling in a form on the website of the Stedelijk Museum Amsterdam. The Stedelijk Museum Amsterdam respects your privacy when processing your personal data. This page gives information about the type of personal data we collect when you use our services, why we collect these data and how we process it.  

Personal data refers to all information about an identified or identifiable natural person. We are entitled to process the following personal data:

  • Basic information such as your title, first and last names together with any prefix;
  • Contact information such as your email address, postal address and telephone number;
  • Information about the device you use to visit our website, such as an IP address;
  • Your bank account number;
  • Personal data that you provide to us in the context of attending any gatherings or events; 
  • Personal data that you provide in connection with a job application, such as your first and last name, date of birth, address, telephone number, nationality, marital status and any other personal data mentioned in your application;
  • All other personal data that you provide us with or that we may obtain in connection with the purposes and in accordance with legal bases outlined below.

We collect the above-mentioned personal data because you have provided us with the data. In addition, we may also obtain your personal data from other sources, for example, when you apply via a temporary employment agency or a recruitment and selection agency.

Our website uses cookies. We do this to ensure that the website functions properly and to collect data to improve the website. For more information, please refer to our Cookie Statement.

Visiting the website

We process your IP address when you visit the website. This item of personal data is processed in order to place cookies, with the purpose of generating statistics related to the use of the website and/or for analysing and improving the website. The legal basis for processing this item of personal data is our legitimate interest in generating these website statistics. The website statistics are generated by Google Analytics. Google may receive your personal data in this context. The information is transferred to and stored by Google on servers in the United States. Google undertakes to abide by the Privacy Shield principles and is affiliated to the Privacy Shield programme of the US Department of Commerce. This implies that there is an appropriate level of protection for the processing of personal data within the meaning of Article 45 of the General Data Protection Regulation (GDPR).

Ticket sales

We collect the following data in connection with ticket sales: title (not mandatory), name, email address, postal address and payment details per payment method. We process these personal data for the purpose of implementing the purchase agreement concluded with you. The legal basis for processing this personal data may be the performance of the contract concluded with you, or compliance with a legal obligation, or a combination of both. The ticket payments take place via Adyen, an online payment platform. Adyen may receive your personal data in this context. 

Subscription to the newsletter

When you subscribe to the newsletter, we collect the following data: name and email address. We process this personal data for the purpose of sending you our newsletter. The legal basis for processing this personal data is your consent to such processing. The newsletter is sent via Spotler, an email marketing software supplier. Spotler may receive your personal data in this context.

Booking a guided tour

When a guided tour is booked, we collect the following data: company/school name (not mandatory), title (not mandatory), name, postal address and email address. We process this personal data for the purpose of (i) giving you a tour of our museum and (ii) contacting you by phone if you so request and/or in writing (via email and/or by post) if we are unable to reach you by phone. The legal basis for processing this personal data may be our legitimate interests, or the performance of the contract concluded with you, or compliance with a legal obligation, or a combination of these. Payments for the guided tours take place via Adyen, an online payment platform. Adyen may receive your personal data in this context.

Memberships

When you become a member of the Stedelijk Museum Amsterdam, we collect the following data: name, postal address, telephone number (not mandatory), email address and date of birth. We process this personal data for the purpose of (i) offering you membership, (ii) contacting you by phone if you so request and/or in writing (via email and/or by post) if we are unable to reach you by phone, and (iii) marketing and business development activities such as sending you newsletters, invitations to our events and other marketing communications that may be of interest to you. The legal basis for processing this personal data may be the performance of the contract concluded with you, or your consent, or compliance with a legal obligation, or a combination of these. The transfer of personal data and distribution of the newsletter takes place via Spotler, an email marketing software supplier. Spotler may receive your personal data in this context.

Job applications

When you apply for a vacancy at the Stedelijk Museum Amsterdam, we collect the following data: name, town or city, email address, telephone number, gender and other personal data included in your LinkedIn profile, CV and/or letter of motivation. We process this personal data for the purpose of handling your job application. The legal basis for processing this personal data is our legitimate interest in finding suitable candidates. The transfer of personal data takes place via tool2match. Tool2match may receive your personal data in this context. 

Camera surveillance

The Stedelijk Museum Amsterdam uses camera surveillance for security purposes. The images produced by this camera surveillance are retained for a maximum of four weeks, unless the data is required in the context of an investigation by the police or other authorities. The images are not shared with third parties, unless the police or other authorities request certain images. The legal basis for camera surveillance may be our legitimate interests, or compliance with a legal obligation, or a combination of both.

For how long does the Stedelijk Museum Amsterdam store data?

The Stedelijk Museum Amsterdam does not store your personal data longer than is strictly necessary to fulfil the purposes for which your data is collected. For more information about this, please contact the Stedelijk Museum Amsterdam via info@stedelijk.nl.

Sharing with others

The Stedelijk Museum Amsterdam may provide your personal data to employees of the Stedelijk Museum Amsterdam and other third parties who provide services to the Stedelijk Museum Amsterdam, for example, for processing payments, distributing newsletters and handling memberships.

Transfer of your personal data to the above-mentioned third parties takes place only for the purposes mentioned in this Privacy Statement and only on the legal bases stated in this Privacy Statement.

Insofar as a third party processes your personal data in the capacity of a data processor for the Stedelijk Museum Amsterdam, this is done based on a data processing agreement concluded between the Stedelijk Museum Amsterdam and the third party that meets the requirements of the GDPR.

Your rights

You have the right to request the Stedelijk Museum Amsterdam to view, correct or delete your personal data. You also have the right to request the Stedelijk Museum Amsterdam to limit the processing of your personal data or to transfer your personal data to you or to another company. If you have given permission for the processing of your personal data, you are also entitled to withdraw this consent at any time whatsoever. You may send a request for exercising these rights to info@stedelijk.nl. The Stedelijk Museum Amsterdam will respond to your request as soon as possible and will observe the statutory deadlines. You are also entitled to object to the processing of your personal data by the Stedelijk Museum Amsterdam and to submit a complaint regarding this to the Dutch Data Protection Authority.

Changes to this Privacy Statement

The Stedelijk Museum Amsterdam may unilaterally modify this Privacy Statement. In case of any material changes to this Privacy Statement, we will inform you about this clearly on our website.

Do you have any questions or complaints?

If you have any questions about this Privacy Statement, you may contact the Stedelijk Museum Amsterdam via info@stedelijk.nl. If you believe that your rights have been violated, you may also submit a complaint to the Dutch Data Protection Authority (PO Box 93374, 2509 AJ Den Haag, Tel.: +31 (0)88 1805 250). 

Stedelijk.nl is a website of the Stedelijk Museum Amsterdam. The Stedelijk Museum Amsterdam can be reached as follows:

Visiting address

Main entrance:
Museumplein 10
1071 DJ Amsterdam

Postal address

Stedelijk Museum
PO Box 75082
1070 AB Amsterdam

Telephone

T +31 (0)20 5732 911
F +31 (0)20 6752 716
M info@stedelijk.nl