This Privacy statement describes how the University of Amsterdam (hereinafter ‘UvA’, ‘we’ or ‘us’) processes personal data for the purpose of contact with museum visitors and participants in events of the Allard Pierson, hereinafter the AP (formerly Allard Pierson Museum and Special Collections of the UvA).
In the general UvA Privacy Statement, you will find information about the purposes and method of processing personal data obtained via the UvA website(s).
We may amend the privacy statement from time to time. This privacy statement was last amended on 11 August 2020.
1. What personal data do we process?
This Privacy Statement provides information about the processing of personal data for the purpose of contacting museum visitors and participants in AP events. For this purpose, we use the following data:
- name, address, place of residence
- telephone number, e-mail address
- for conferences: function and organisation
Among other things, we process the following personal data of visitors to our websites:
- website visit and click behaviour
- IP address
- duration and time of website visit
- use of social media
2. What do we process personal data for?
The processing of personal data relates to the following purposes:
- keeping in touch with our museum visitors and event participants
- sending newsletters and invitations to upcoming events; each newsletter and invitation provides an unsubscribe option
Personal data provided by visitors to our websites are processed for the following purposes:
- compiling user statistics
- securing and improving our websites
- improving our services
3. On what basis is the processing based?
In order to process your personal data, the processing must be based on one of the bases in the AVG. In the case of contact with museum visitors and participants of our events, this is the ‘legitimate interest’ basis.
4. Newsletters
We would like to keep you informed about exhibitions at the museum, activities and new developments related to the AP. Furthermore, we would like to invite you to events we organise. We do this by e-mail. Each e-mail contains an unsubscribe option.
5. To whom does the UvA provide personal data?
In order to be of service to you and to carry out our work, we engage other parties to process personal data on our behalf. A third party we engage is, for example, a party that handles online ticket sales for us.
If we have personal data processed by a third party and we have and retain control over the processing, we conclude a written processor agreement with these so-called processors. In this, we make agreements on, among other things, the purpose, duration and scope of the processing, retention periods and security measures for the personal data. For some other transfers, we request your prior consent.
6. How do we secure your personal data?
We take security measures to limit misuse of and unauthorised access to personal data. For example, we ensure that only the necessary persons have access to your data, that access to the data is protected and that our security measures are checked regularly.
7. How long do we keep your personal data?
We will retain your personal data no longer than necessary for the purposes for which we use the personal data. We will retain your personal data until you indicate that you no longer wish us to do so.
8. Your rights in relation to personal data
You have the following rights for which you can make a request:
- access to the personal data we record and process about you
- to have errors corrected
- to have personal data deleted
To make a request to us in this regard, please contact us at:
- secr-bc@uva.nl (when it comes to your personal data processed at the Allard Pierson)
- avg@uva.nl (when it comes to your personal data processed at the UvA)
9. Complaints
If you believe that your personal data are being processed in violation of the AVG, you can submit a complaint to the UvA's Data Protection Officer (FG) via fg@uva.nl. The FG is the link between the UvA and the external regulator (the Authority for Personal Data). The FG acts independently and can consult or seek advice from the Authority for Personal Data on your complaint.
If you disagree with the FG's handling of your complaint, you can lodge a complaint directly with the Personal Data Authority. The Personal Data Authority handles the complaint or request and takes a decision on it