Privacy Statement

In this privacy statement, we describe who we are, how and for which purposes we process your data, how you can exercise your privacy rights and all other information that may be important to you.

We have done our best to write down all information clearly and comprehensibly. If you do have any questions about the use of your personal data after reading this privacy statement, you can contact us via the contact information at the end of this privacy statement.

For information on how we use cookies and similar technologies, we would like to refer you to our cookie statement.

At Muiderslot, we are continuously improving and developing our services. If this leads to changes in the way we process your personal data, this will be adjusted in this privacy statement. For this reason, we advise you to regularly check this privacy statement for any changes. At the end of this privacy statement, you can check when this privacy statement has last been changed.

The Muiderslot processes your personal data for the following purposes:

Communication and marketing
We process your personal data in order to perform marketing activities.

• Via this website or when purchasing an e-ticket, you can subscribe to the online Muiderslot newsletter, which you will then receive up to 4x per year via email.
• We also ask the four numbers of your postcode or country of origin at the cash register in order to know where our visitors come from.
• This website uses Google Analytics Cookies. We collect data and do not share this with Google. Your complete IP address cannot be traced (anonymised IP tracking). The Google Analytics cookies are automatically deleted after 14 months.
• We also answer your questions about our services on social media.

Collaborating parties process your data for the following purposes:

e-ticket sales
For the purchase of e-tickets for entrance to the Muiderslot, you will be redirected to Gantner’s online environment. Gantner is the controller for this data processing and for questions concerning this we would like to refer you to their website.

Audience research
We are off course interested in the opinions of our visitors. You may be asked to be part of our online audience research during your visit to Muiderslot. This research is conducted by Hendrik Beerda Brand Consultancy (HBBC) for Muiderslot. HBBC is the controller for this data processing and for questions concerning this we would like to refer you to their general terms and conditions. Muiderslot only receives aggregated reports from Hendrik Beerda Consultancy on the results of the audience research. These do not contain personal data.

Muiderslot processes the following categories of your personal data, which you supply yourself during your visit to our website, leave or provide when contacting us:

• Contact details (name, email address, numbers of your postcode, etc.)
• Marketing and Communication data (social media data etc.)
• Data obtained via cookies (geographic data, etc.)

We can disclose your personal data to third parties if this is in agreement with this privacy statement and for as far as legally allowed.

In some cases there is a legal obligation to share your personal data with the police or other governmental parties. For example, if we need to comply with a judicial order or if it is necessary in order to detect punishable offences.

These parties only process your data following our instructions and for the purposes we indicate. The processors are contractually bound not to use your personal data for other purposes.

Your personal data may be processed outside the European Economic Area. We have taken measures to ensure secure transfer and meet all legal requirements when doing so.

Your personal data are processed in the following countries:

• United States

In order to safeguard an appropriate level of data protection for the transfer to the above mentioned countries, we have taken the following measures:

The parties that process our data:

• have joined the EU-US Privacy Shield, or
• have agreed to the standard agreement provisions as determined by the European Committee.

You can always withdraw your given consent. However, this withdrawal does not work retroactively.

If you no longer wish to receive our newsletter, you can opt out at the end of the newsletter.

If you want to withdraw consent for other processing, please contact us via the contact information at the end of this privacy statement.

If you have a complaint about the way we treat your personal data, you can lodge a complaint with us via the contact information at the end of this privacy statement.

You can also lodge a complaint on how we deal with your personal data with the privacy supervisor, the Data Protection Authority. Address: Bezuidenhoutseweg 30, 2594 AV, The Hague, the Netherlands or via www.autoriteitspersoonsgegevens.nl.

If you have questions about the use of your personal data by Muiderslot that are not answered by this privacy statement or you wish to exercise your privacy rights, contact us via the following information:

Stichting Rijksmuseum Muiderslot
Mrs. S. Heldens
Herengracht 1
1298 AA Muiden, The Netherlands
info@muiderslot.nl