1. Who is responsible for your data?

Responsibility for the processing of personal data lies with:

Stichting Amsterdam Museum
Herengracht 603
1017 CE Amsterdam
Chamber of Commerce number: 34315763
info@amsterdammuseum.nl

This foundation manages and operates the Amsterdam Museum and acts as the controller as referred to in the GDPR.

2. What personal data do we collect?

Depending on your interaction with us, we may collect different types of personal data. For example:

• When you visit our website, we register your IP address and your behavior on the website (such as pages visited and click behavior) using cookies.
• When you purchase a ticket, request a newsletter, or register for an activity, we process data such as your name, email address, telephone number, and payment information.

• When participating in educational or participation programs, additional data may be requested, such as age or school details, if necessary and always with appropriate consent.

   

3. Why do we process your data?

We process personal data for a number of purposes:

• To give you access to the museum or to participate in events (for example, when selling tickets or registration forms).
• To keep you informed of our program via newsletters, provided you have given your consent.
• To improve our services, for example by analyzing website usage or visitor flows.
• To comply with administrative or legal obligations.

We only do this if there is a valid basis for doing so, such as your consent, an agreement, a legal obligation, or a legitimate interest of the museum.

4. Sharing data with third parties

In certain cases, we engage third parties to support us in our services, for example in processing payments or sending newsletters. These parties may only use your data to provide services on our behalf. We enter into processing agreements with them to safeguard your privacy.

Your data will not be sold or shared with commercial parties who use it for their own purposes.

5. Cookies and website use

Our website uses cookies and similar techniques to analyze the use of the site and make it more user-friendly. Examples include cookies that remember your preferences, or analytical cookies that help us understand how visitors use the website. For more information about this, please refer to our cookie statement on the website.

6. How do we protect your data?

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Only employees who need your data to perform their work are granted access. Our systems are regularly updated and secured in accordance with current standards.

7. How long do we retain your data?

We do not retain personal data longer than is necessary for the purpose for which it was collected. In some cases, we are legally obliged to retain data for longer, for example for our financial administration. Once data is no longer needed, it is securely deleted or anonymized. 

8. Camera surveillance

The Amsterdam Museum uses camera surveillance for security purposes. The images from this camera surveillance are stored for a maximum of four weeks and are not shared with third parties, unless the data is required in the context of an investigation by the police or other authorities. The legal basis for camera surveillance is legitimate interest and/or compliance with a legal obligation.

9. Photos and video recordings

Photographs and video recordings are regularly made in the Amsterdam Museum for commercial and journalistic purposes. The legal basis for this processing of personal data is our legitimate interest and/or your consent. If you object to this processing, you can invoke one of your rights under the GDPR, which are set out later in this privacy statement.

If you would like to have photographic material removed from the site, please send an email to our data protection officer at fg@amsterdammuseum.nl.

10. Your rights

You have the right to:

• Access the personal data we hold about you.
• Have your data corrected or deleted.
• Request restriction of processing.
• Object to certain uses of your data.
• Withdraw your consent when the processing is based on it.
• Lodge a complaint with the Dutch Data Protection Authority if you believe we are not handling your data correctly.

You can contact us at  info@amsterdammuseum.nl.

11. Changes to this privacy statement

We may amend this privacy statement from time to time, for example when our services change or when required by law. The most current version can always be found at www.amsterdammuseum.nl.

Last update: April 2025