Privacy

Museumkids privacy

Are you using the Museumkids app and would you like to read the privacy statement of Museumkids? You can find it here.

Who we are

The goal of Stichting Museumkaart, the trade association of over 500 museums in The Netherlands, is to strengthen the public interests of museums. The trade association is the publisher of the Museumkaart of which the operation is managed by Stichting Museumkaart. For this purpose Stichting Museumkaart processes personal data.

On behalf of the Museumvereniging and the Stichting Museumkaart, we aim to engage as broad an audience as possible with museum collections covering history, visual arts, natural history, economics, science, technology, and ethnology. Each collection showcases a part of a magnificent cultural capital that belongs to all of us – it opens your world!

On our website, we prominently feature the museum collections of Dutch museums. In doing so, we process personal data. In this privacy statement, you can read what personal data is and how we process it. Of course, we comply with the applicable rules regarding the processing of personal data and privacy in The Netherlands. For more information on these regulations. Please refer to the website of the Autoriteit Persoonsgegevens.

What is personal data?

Personal data is information that can be used to identify you, such as your name, address, appearance or contact details. Examples include your name, address, phone number, email address, profile picture and Museumkaartnumber.

Who is responsible for the processing of your personal data?

Stichting Museumkaart, incorporated at Piet Heinkade 181F, 1000 CZ Amsterdam, is responsible for the processing of personal data of Museumkaart holders as well as individuals who do not have a Museumkaart but have, for example, subscribed to the newsletter.

Visit the website www.museum.nl

On the website www.museum.nl, you will find information about museums and events, which you can use to plan your museum visit or other activities. You can search specifically, for example, by a particular theme or for your entire family. You can also select your favourite museums and share this information with others. The website is managed by the Museumverening.

For general use of www.museum.nl, we do not request personal data, unless you sign up for the newsletter (see newsletters) or send us an email with a question or a comment. We will only use your data to the extent necessary to respond to your question, maintain contact with you, or for the purpose for which you provided us with your personal data.

To optimize the website and its usage, we use cookies. Cookies are small information files that are stored on the device you use to visit our website, such as a computer, laptop, tablet or smartphone. You can read more about this in the cookie statement.

Museumkaart

With a Museumkaart, you have access to the permanent collections of over 500 museums in The Netherlands and you have access to various special offers. You can purchase a Museumkaart through the website and our Museumkaart app (iOS from version 16 and Android from version 10), or buy a temporary Museumkaart at a museum and register it via the website. If you already have a Museumkaart, you can extend it on the website and make changes via My Museumkaart. Additionally, it is possible to convert your physical Museumkaart into a digital Museumkaart through the Museumkaart app. When purchasing a Museumkaart, you must agree to the Museumkaart Terms and Conditions. When purchasing, registering, or renewing your Museumkaart or changing any personal details, you will enter a secured environment where your personal data will be processed. Below, we will explain how we process your personal data.

What personal data do we process and why?

These are the details we ask from you, receive or that you can add yourself if you wish to do so:

• First and last name, email address, residential address, phone number, Museumkaart number and possibly the name of (your) business: we use this information to register your Museumkaart account, to fulfill the option of sending you a physical Museumkaart, to create a digital Museumkaart in de Museumkaart app, to enable business billing, and to contact you if necessary, for example, about your order or to notify you about an expiring Museumkaart (via email and/or post). If there are any changes of this information, you can update the information in the secure environment of My Museumkaart or contact us via customer service. If a digital Museumkaart (via the Museumkaart app) is involved, we also process the aforementioned personal data to issue a digital Museumkaart through the Museumkaart app and for the reasons mentioned above.
• Date of birth: we use your date of birth to determine which type of Museumkaart you are eligible for and to verify that your Museumkaart actually belongs to you. Since the Museumkaart app allows you to add the digital Museumkaarten of children for whom you are a parent or guardian, we may verify the date of birth of these children to determine if these digital Museumkaarten can be added to the parent or guardian’s Museumkaart app.
• Bank account number (IBAN): when a payment is made via the website, we automatically receive your payment details.
• Profile picture: a Museumkaart is personal. The profile picture on your Museumkaart makes it even more personal and ensures that museum staff can verify that the Museumkaart actually belongs to you. You are responsible for providing a profile photo and linking it to your Museumkaart. A profile picture is always required when you purchase or register a Museumkaart. An automatic check is performed to verify if the photo meets the technical requirements to be used on a Museumkaart, without enabling any software-based unique identification of authentication of an individual.
• Preferences: you can indicate whether or not you wish to receive the digital newsletter Museumtips from us, which includes information about various exhibitions, activities in museums, services and products related to the Museumkaart. We tailor this newsletter to your preferences to the best of our ability. You can subscribe to Museumtips via our website. For more information about our newsletter, please see the section “Newsletter”.
• Visiting: if you have created an account in My Museumkaart, we link the museums where your Museumkaart has been scanned to check the validity of the card in order to register the visit. We record these visits to ensure that the museum receives a reimbursement based on the entrance fee for your visit.

On what ground are we allowed to process your personal data?

Stichting Museumkaart must be able to base the usage of your personal data on legal grounds. For instance, the necessity of this personal data in order to enter into and fulfil an agreement with you. This applies both when purchasing the Museumkaart and when registering or renewing it. It also applies if you are using any offers or wish to participate in events.

Additionally, we may use your personal data if we have a legitimate interest in doing so. In the context of this legitimate interest, we request your name, place of residence, email address and residential address. These details may be used to identify you as an individual, to send service messages regarding your Museumkaart by both mail and email, to offer Museumkaart holders the option to have the costs of the Museumkaart billed to a business, and to easily switch between a digital and physical Museumkaart (if a cardholder wishes to change their ‘type’ of Museumkaart). Furthermore, we analyse your data to improve our services.

Based on our legitimate marketing interest, we create profiles so that we can personalize our newsletter, offers on our website, and offers on third-party websites for you. We do this by combining personal data from various sources, such as your data from the secure environment of My Museumkaart, your browsing behaviour on our website, your clicking behaviour in our emails, your favourite selections, your bookings, reservations and information requests. We do not process sensitive data, such as location data, in this context. You can also always object to this profiling based on our legitimate interest (see under “Objection”).

The last legal ground we can invoke is that of consent. For example, we only send you our electronic newsletter if you have explicitly indicated that you wish to receive it (see under “Newsletter”). You also determine whether your consent to the use of tracking cookies and, thereby, whether you see personalized advertising (please refer to our cookie statement for more details).

Finally, not all the data we process can be traced back to you. For example, for research into museum visits over a specific period we use anonymized data.

Newsletter

Lots of interesting information and offers can be found in our newsletter, Museumtips. We try to tailor the content of the newsletter as much as possible to your interests based on your profile and we also aim to inspire you for your next museum visit. To send the newsletter, we use your first and last name, email address, and (optionally) Museumkaart number, if you have given consent for this.

If you no longer wish to receive the Museumtips newsletter, you can unsubscribe free of charge using the link at the bottom of each newsletter.

How long do we store your personal data?

We store your data for at least as long as you are a Museumkaart holder or have subscribed to the newsletter. After that, we will delete your data within one and a half years (1.5 years) after the card has expired and you have not purchased a new card, or after you have unsubscribed from the newsletter.

Exceptions to this are the data we are required to retain for a longer period due to legal obligations. For example, tax laws and regulations require us to retain certain financial data for 7 years.

With who do we share your personal data?

We will not share your personal data with third parties without your consent, unless we are legally obligated to do so. There are a few exceptions.

Several parties are involved in the operations of Stichting Museumkaart, and for that reason, they play a role in the processing of personal data. These are the so-called “data processors”. A data-processing agreement has been concluded with these data processors, which specifies exactly which personal data may be processed for which purposes. For individuals whose personal data is processed (the “data subjects”), Stichting Museumkaart always acts as the point of contact regarding the processing of personal data.

We also share the data processed by or on behalf of the Stichting Museumkaart with the Museumvereniging, the publisher of the Museumkaart, and the operator of the website www.museum.nl. The Museumvereniging uses this data in the same way as Stichting Museumkaart: to inform visitors and users about activities, services, and products from the museums associated with the Museumkaart. It is hereby stated that data is also shared with these parties for statistical purposes, but this is done in a fully anonymized manner in accordance with the rules of the GDPR.

Finally, it is possible that you have granted us permission to share your browsing behaviour and preferences with third parties. In such cases, we may provide you with information or make offers when you visit a third-party website. We will not share any personal data other than your IP address.

How do we protect your personal data?

In order to minimize the risk of misuse and unauthorized access to your personal data, we take appropriate security measures. We ensure that only authorized individuals have access to the data, that access to the data is restricted, and that we regularly assess our security measures.

The information on My Museumkaart is not directly accessible, neither to employees of Stichting Museumkaart nor to museums where your Museumkaart has been used. The data of your Museumkaart is not publicly visible and is only accessible to you within your profile, which is the secure environment of my Museumkaart after you have logged in.

Assessments are generally conducted once every two years, unless significant adjustments or developments require an earlier or different assessment.

Would you like to view, transfer, modify or delete your personal data?

As a data subject you have the following rights:

• the right to request information regarding the processing of your personal data;
• the right to have your personal data transferred to another party (data portability);
• the right to modify your personal data;
• the right to withdraw your consent, if the processing is based on consent;
• the right to have your data deleted i fit is no longer necessary for the purposes for which it was obtained or when you withdraw your consent. The right to deletion may not always apply; exceptions may be relevant; and
• the right to restrict the processing of your data.

If you are in possession of a valid Museumkaart, your personal data is visible to you – and you alone – in My Museumkaart. You can view it at any time and, if it is no longer accurate, you can modify it yourself.

If you wish to modify or delete your personal data, you can request this via our customer service by email or phone. In the email or phone call, please provide the card number of your Museumkaart. To verify that you are indeed the cardholder, we will send a special form to the residential address linked to the Museumkaart (two-factor authentication). You can complete the request on this form. The signed form should then be returned to Klantenservice Stichting Museumkaart, Postbus 5020, 2900 EA Capelle aan den IJssel. Upon receipt of the form, we will remove the data as soon as possible.

If you have not created a profile in My Museumkaart, for example because you do not have a Museumkaart and have only subscribed to the newsletter, you can request the customer service to access or correct your data.

We will process requests related to these rights within one month, but we have the right to extend this period to two months. If we do so, we will inform you in a timely manner. Please be aware that a request may not always be granted. If we have a reason for not being able to fulfil your request, we will, of course, inform you about this.

Objection to the processing and complaints about the manner of processing

You also have the right to object the processing of your personal data. You can indicate this on our website by modifying our standard cookie policy (see our cookie statement), within My Museumkaart, or via a specially designed form that we can send you by post upon request. The completed form should be returned to us signed at Klantenservice Stichting Museumkaart, Postbus 5020, 2900 EA Capelle aan den IJssel.

If you have complaints about the processing of your personal data, we are happy to assist you. You can reach us by email or by mail at Stichting Museumkaart, Postbus 5020, 2900 EA Capelle aan den IJssel. In the event that we cannot reach an agreement, you may file a complaint with our Data Protection Officer mr. Els Doornhein (edoornhein@devos.nl) and/or the supervisory authority, the Autoriteit Persoonsgegevens. On the wbesite of the Autoriteit Persoonsgegevens you will find more information regarding this matter.

Third-party websites

This privacy statement applies to this website and the Museumkaart App. It does not apply to websites, apps, and/or (social) media platforms of third parties that link our website or to which we refer on our website. We cannot guarantee that these other websites, apps, and/or platforms process your data in a reliable and secure manner. Therefore, we always recommend that you carefully review the applicable privacy policy of those sites.

Data Protection Officer

To ensure compliance with the obligations set out in the General Data protection Regulation and the policy of the Autoriteit Persoonsgegevens, Stichting Museumkaart has appointed an external Data Protection Officer: mr. Els Doornhein of De Vos & Partners Advocaten, Van Miereveldstraat 13, 1071 DW Amsterdam. Mrs. Doornhein can be contacted at: edoornhein@devos.nl.

Updates

We recommend that you review this privacy statement regularly, as we update it from time to time. This way, you will remain informed of the most current information regarding how we use and protect your personal data.

Suggestions

We trust that the information above has provided you with a greater insight into how we process your data. We would be pleased to receive any suggestions you may have to improve our diligence at: Stichting Museumkaart, Postbus 5020, 2900 EA Capelle aan den IJssel, or via our contactpage.

Latest version: 11 February 2025.