Below we provide you with information regarding our privacy and cookie policy. This policy applies to personal data that we collect and use from you in the context of our website www.refresh.amsterdam (incl. The English version), (thereafter: the platform) and the Refresh Amsterdam project.

Contact details:
Amsterdam Museum Foundation
Nieuwezijds Voorburgwal 359
1012 RM Amsterdam
T 020 5231 822
E info@amsterdammuseum.nl

Privacy
We respect your privacy, and treat any personal data you provide in accordance with the General Data Protection Regulation and other relevant laws.

What is personal data, and what data do we process?
Personal data is information that identifies you as an individual. Depending on the situation, we may collect the following:

– Your postal address, telephone number, email address, and social media account names. If you subscribe to our newsletter, for example, we will ask you to provide us with your name and email address.
– Personal data (including pictures) that you provide as part of a contribution to the site
– Other personal information you provide in communications with us
– Electronic identification and interaction data (including your IP address, surfing and click behaviour, and location data)

Parental consent
If you are under 16, you must obtain permission from a parent or legal representative before providing us with your personal data. We therefore ask you not to contribute to the site or otherwise provide us with this type of data (e.g. by email) before you have obtained consent.

Cookies
When you visit the site, cookies are placed on your device for various purposes. They may be functional or analytical, and some track your surfing behaviour. When these are placed, personal data such as your IP address is processed, and you will be asked for explicit permission before they are placed. More information is given under Cookies below.

We collect and use your personal data for the following purposes, as permitted by law:

– To enter into an agreement
– To fulfil an agreement
– Where necessary for the representation of a legitimate interest
– In order to comply with legislative and other legal obligations, or in response to requests from government bodies
– Where you have given your consent. You may revoke this at any time. You can find out more about how to do this, and what it means, later in this statement.

Duration of processing
We do not retain personal data for any longer than necessary or permitted by the purposes for which it was obtained. For example, if you send us an email, the data will be retained for as long as is necessary to administer your contribution or to answer and/or process your email.

Who receives your personal data?
Your data will not be passed on to third parties, unless this is necessary for the provision of our services or the protection of a legitimate interest, we have a legal obligation to do so (e.g. a request from a judicial authority) and/or you have given us your express prior consent. We will do this only if permitted under current legislation. We may provide data to our IT suppliers and service providers, cookie suppliers (see Cookies below).

We try to process personal data within the European Economic Area where possible, but we and our service providers sometimes also use services from outside the EEA. We do this only if there is an adequate level of protection for personal data. This means, for example, that we use a standard agreement from the European Commission.

Security
We take appropriate and reasonable measures to prevent abuse, loss, unauthorised access and other undesirable use of data. Only necessary persons within the company are granted access, and our security measures are organisationally and technically appropriate and are checked regularly. Our websites have an SSL security certificate and are hosted from a secure server accessible only by persons known to us.

Access, modification, correction, restriction, deletion, objections, and data portability
You have the right to view your personal data and request its correction, addition, limitation, or full or partial deletion. You can also object to its use.

It is also possible to receive personal data that we have processed. This is possible only in the case of digital data, where you have given us permission to process it or we have used it to carry out an agreement with you. You can exercise your right to data portability, meaning that we will provide your details in a form in which you can easily pass them on to another organisation if you wish.

Withdrawing permission
If we have obtained your information with your consent for a particular purpose, you can withdraw consent in principle at any time. This will not affect any information that we process before you do so.

Contact
If you wish to know what data we have processed, or to invoke any of the above rights, you should send a written request to

Amsterdam Museum
Nieuwezijds Voorburgwal 359
1012 RM  Amsterdam
E info@amsterdammuseum.nl
Quoting “GDPR access request”.

In order to prevent abuse, we will ask you to provide a copy of your passport, identity card, or driving licence. Please make all photographs and ID numbers unreadable. Details of how to do this are given in the central government website. Once we have established your identity, we will destroy the copy immediately. If the data is available, we can provide it only to the person to whom it relates.

We will send you an acknowledgement of receipt, and then process your request within four weeks. If the request is very complex, we may not have a complete answer at that time, in which case we will inform you accordingly and provide a final response within three months.

If you wish to access data linked to a cookie, you must send us a copy of the cookie, for example in the form of a screenshot. You can find this in the settings of your browser. If your details are incorrect, incomplete or irrelevant, you can ask to have them changed.

Complaints
If you have a complaint about how we handle your personal data, you can contact us at the above email address. You can also file a complaint with the Personal Data Authority at www.autoriteitpersoonsgegevens.nl if you suspect that your data has been used in violation of the General Data Protection Regulation.

Links to other websites
Our sites sometimes contain links to other organisations’ sites. We are not responsible for their use of your personal data, and you should read their privacy statements, if any.

Cookies
We, and third parties, use cookies on the site to make it easier to use. A cookie is a small file that is placed on your device when you visit the site, and which stores information such as your IP and email addresses that the site can read if you visit again. When we talk about cookies in this privacy and cookie statement, we also mean similar tracking and other techniques such as pixels.

Functional and analytical cookies
We have placed functional cookies on the site in order to provide the services you request and allow them to function properly. In order to optimise the site, we also use analytical cookies which slightly infringe your privacy. We do this with the help of Google Analytics, which we have set up in accordance with the Personal Data Authority’s Google Analytics privacy-friendly manual. To this end, we have concluded a processing agreement with Google and opted to mask the last octet of your IP address. We have disabled data parts. Google is not allowed to use Analytics information for other services it provides, and we do not use other Google services in combination with Google Analytics.

Because these functional and analytical cookies have very little impact on your privacy, we do not need to ask permission to place them.

Marketing (tracking) cookies
We and third parties (including Google and Facebook) also use marketing cookies on the site, allowing visitors to track other websites while surfing and display advertisements tailored to the individual user. This makes advertisements more valuable for publishers and external advertisers. Please also read these third parties’ privacy statements if you want to see what they do with the personal data they process via their cookies.

When you visit the site for the first time, you can use our cookie pop-up to indicate whether you agree to the placing of marketing cookies.

Refusing and deleting cookies
You can choose to refuse certain cookies by using your browser’s instructions and/or the Help function. However, this may mean that you have to reset your preferences each time you visit the site, and some parts of it may not work properly. If you would like to know more about cookies and how you can control, manage and/or delete them, please visit https://allaboutcookies.org/manage-cookies/.

We reserve the right to amend this privacy and cookie statement. Changes will be published on this page, and we recommend that you regularly review it.

If you have any questions about cookies, or come across one not listed in the above table, please contact us at address given in this privacy statement.

The sttatement was last amended on 11 September 2020.