Privacy statement

Stichting Jan van der Togt, established at Dorpsstraat 50, 1182 JE Amstelveen, is responsible for the processing of personal data as stated in this privacy statement.

Contact details

Foundation Jan van der Togt
Dorpsstraat 50
1182 JE Amstelveen
Tel.: +31 20 641 57 54

Sem van Riel is the Privacy Officer of the Jan van der Togt Foundation. He can be reached via sem.van.riel@museumjan.nl.

Personal data we process

Jan van der Togt Foundation processes your personal data because you use our services and/or because you provide them to us yourself. Below you will find an overview of the personal data we process:

  • First name and surname

  • Address details

  • Telephone number

  • E-mail address

For what purpose and on what basis do we process personal data?

Jan van der Togt Foundation processes your personal data for the following purposes:

  • Handling your payment;

  • Sending our newsletter and/or advertising brochure;

  • To contact you;

  • In order to comply with our legal obligations, such as under tax law.

Jan van der Togt Foundation processes your personal data on the basis of:

  • Your permission;

  • Preparing and executing an agreement;

  • Legal obligations

  • Our justified interest

If we process your personal data on the basis of your consent, such as when sending newsletters, you can always revoke this consent. We may be legally or contractually obliged to process your personal data, for example under tax law. In addition, the processing of your personal data may be a necessary condition for entering into an agreement with you. In these cases, we can only help you if you provide us with the necessary personal data. We may use your personal data for the purpose of evaluating and investigating our services.

For the safety and security of Museum Jan van der Togt, the staff, the visitors and all the works of art present in the museum, we have installed cameras in the museum. In case of (suspected) theft or another incident, the images can be viewed back.

How we secure personal data?

Stichting Jan van der Togt takes the protection of your personal data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification.

Processing of personal data of minors

Our website and/or service has no intention of collecting information about website visitors under the age of 16, unless they have parental or guardian permission. However, we cannot check whether a visitor is over 16 years of age. We encourage parents to be involved in their children's online activities in order to prevent information about children from being collected without parental consent.

How long we retain personal data?

The Jan van der Togt Foundation does not retain your personal data longer than is necessary to achieve the purposes stated in this privacy statement. If we process your personal data on the basis of your consent, your personal data will be stored until you withdraw your consent. The personal data you provide to us as part of the preparation and execution of an agreement with you will not be retained for longer than five years after our last service to you.

If we process personal data on the basis of a legal obligation, we will use the retention period stipulated in that law. Personal data that we collect by means of cookies is stored for a maximum of two years. Please refer to our cookie policy. We save camera images for two weeks, unless we have to keep the images longer to deal with an incident.

Sharing personal data with third parties

Jan van der Togt Foundation will not sell your information to third parties and will only provide your information if this is necessary for the execution of our agreement with you or to comply with a legal obligation or court ruling. We enter into a processing agreement with companies that process your data on our behalf in order to ensure the same level of security and confidentiality of your data. We engage processors to send our
newsletter and perform our e-mail and website hosting. The Jan van der Togt Foundation remains responsible for these processing operations.

Social media

On our website social media buttons refer to Facebook, Twitter, Google Plus and Pinterest. You can use these buttons to promote us or share information about us on these social media. We are not responsible for the privacy policies of Facebook, Twitter, Google Plus and Pinterest, as they determine how these social media buttons function. By using a social media button, these
parties will place a "social media cookie" so that they will recognize you when you want to share something.

The privacy policies of these social media providers change regularly. You can read the privacy policies of Facebook, Twitter, Google Plus and Pinterest on their websites.

Your rights

You have the right to view, correct or delete your personal data. You can do this yourself via the newsletter by clicking on 'Change your details' or 'Unsubscribe to the newsletter'. In addition, you have the right to withdraw your possible consent to the data processing or to object to the processing of your personal data, to limit the data processing and you have the right to data transfer (data portability). The latter means that you can submit a request to us to send the personal data that we hold about you in a computer file to you or to another organisation named by you.

Right of inspection

You have the right to access your personal data. Upon request, we will provide you with an overview of the personal data we process about you, on what basis we process it, the retention periods, the organisational and technical measures we have taken and whether we provide your information to third parties.

Right of rectification

You have the right to request us to rectify your incorrect or incomplete personal data. If necessary, we will rectify and complete your personal data.

Right to delete your data

You have the right to request us to remove your personal data. We are only obliged to execute your request in one of the following situations:

  • Your personal data are no longer needed for the purposes for which they were originally collected and processed;

  • You revoke your consent and we have no other legal basis to process your personal data;

  • You object to the processing and we have no legitimate grounds for processing;

  • Your personal data has been processed unlawfully by us;

  • Your personal data must be deleted in order to comply with a legal obligation incumbent on us.

Right to Restriction

You have the right to request us to limit the processing of your personal data in any of the following situations:

  • You contest the accuracy of your personal data, for a period of time that allows us to verify the accuracy of your personal data;

  • The processing is unlawful and you oppose the deletion of your personal data and instead request limitation of the processing;

  • We no longer need your personal data for the purpose of our processing, but you need your personal data to institute, exercise or substantiate a legal claim;

  • You have objected to our processing of your personal data and we are considering whether our legitimate grounds outweigh your legitimate grounds.

Right of objection

You have the right to object to the processing of your personal data in any of the following situations:

  • The processing is based on our legitimate interests;

  • We use your personal data for direct marketing;

  • We use your personal data for statistical or scientific/historical purposes.

However, we may reject your request if we have compelling legitimate grounds outweighing your interests, or if the processing takes place for the purpose of bringing, exercising or substantiating a legal action.

Right to data portability

You have the right to obtain the personal data you provide to us in a structured, common and machine-readable form and to transfer the personal data to another processor. On request, we can transfer the personal data for you, if this is technically possible. The right to data portability can only be exercised if the following two grounds are met:

  • the processing is based on your consent or on the performance of an agreement; and

  • the processing is carried out by means of automated processes.

You can send a request to exercise one of your rights to sem.van.riel@museumjan.nl. In your request, please state which right you wish to exercise and on what grounds.

To make sure that the request has been made by you, we ask that you enclose a copy of your proof of identity with the request. In this copy, make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Burgerservicenummer (BSN) black. This is to protect your privacy. Jan van der Togt Foundation will respond to your request as soon as possible, but in any case within four weeks. If we need more than four weeks to process your request we will inform you.

Complaints

Stichting Jan van der Togt would also like to draw your attention to the fact that you have the possibility to file a complaint with the national supervisor, the Personal Data Authority. However, we would appreciate it if you would first come to us with your complaint, in order to reach a joint solution.

Amendments Privacy Statement

We reserve the right to modify this Privacy Statement. Modifications will be announced on our website. Our privacy statement was last updated on 30 August 2018.