Privacy and Security

You provide us with your personal data when you sign up for a course, lesson, or workshop. This also applies to anyone who purchases an entrance ticket online, rents a space, or comes to work with us. Those who are not customers but still wish to receive our newsletter can sign up and also provide personal data. You can trust that we handle personal data carefully and securely. Therefore, we are happy to explain why we need this data, what we do with your data, and how we secure that data.

Practical Implementation

Whose personal data do we process?
We process the personal data of our students (if they are minors, also from their legal representatives and those liable for payment), customers who book/purchase a ticket for the museum or theater online, interested parties, participants in projects and workshops, contact persons at schools or other institutions, tenants, our own staff, and self-employed workers with whom we collaborate.

What is the purpose of processing personal data?
We always process personal data based on a legitimate basis. Often we process personal data because it is necessary for the execution of an agreement with a customer, supplier, staff member, self-employed person, or tenant. This includes data necessary for invoicing, communication about lessons, performances, and subscriptions (scheduling, etc.), and improving our services. We also use data for newsletter mailings, fundraising requests, and events. Furthermore, we process some personal data due to a legal obligation, such as in the case of underage students. We use images for documentation of our activities and for promoting our services. For image material, we ask for your consent unless the images are taken in public spaces. To prevent theft and protect customers and employees, surveillance cameras are used.

What means do we use to process personal data?
We use reputable administrative systems to process personal data. Processor agreements have been concluded with the suppliers of the systems we use.
To handle payments for online ticket sales, we use the iDEAL payment platform. iDEAL processes your name, address, place of residence, and payment details such as your bank account number. iDEAL has taken appropriate technical and organizational measures to protect your personal data.
Teachers use WhatsApp groups and email to stay in contact with their students.  Additionally, channels are utilized where personal data (usually in the form of photos or videos and sometimes names) are used. This includes our own website, social media, and also print.
Cameras are used to capture security footage.

Cookies
We collect data for research to gain better insights into our customers, so we can tailor our services accordingly. The website uses "cookies" (text files placed on your computer) to help analyze how users use the site. The information generated by the cookie about your use of the website is transferred to secure servers. We use this anonymized information to track how the website is used, prepare reports on website activity, and offer other services related to website activity and internet usage.

What data is processed? 
You can request a table via info@museumschokland.nl.

When do we ask for extra or specific consent? 
If we use your images for the cover of printed materials, banners on the premises, or social media, we will ask for your consent.

How long are your data retained?
The data of customers and suppliers are retained for up to 7 years after the last transaction based on legal obligations. Personal data pertaining to services (lessons, visits) are kept for up to 2 years after the last customer interaction (such as a visit, order, or traceable website visit), unless you request to have your data deleted sooner. Your personal data will not be kept longer than necessary for proper administration. The law may prescribe a different retention period. If so, Cultural Company Noordoostpolder will comply with the prescribed legal retention period. Personnel data are retained as long as the employment relationship lasts. After termination of employment, this data is kept for another 2 years. CVs and application letters (not from staff) are retained for a maximum of 1 year unless the applicant requests their earlier deletion. We store image material in our image bank. For our archives, we select image material that is valuable for reflecting on the history of our organization; this material is stored indefinitely. Other image material is retained for a maximum of 5 years unless you request to have your data deleted sooner. The footage from security cameras is retained for a maximum of 4 weeks, unless incidents occur, in which case the footage is retained until the incident is resolved.

Who has access to the personal data?
Only the staff tasked with processing personal data have access to the personal data. Furthermore, our software package suppliers have access. Processor agreements have been concluded with them. Everyone who works with personal data is subject to a confidentiality obligation.

How is personal data secured?
Our network and systems are all secured with personal logins combined with passwords (which are changed regularly). Additionally, cabinets and offices are physically locked. Encryption is applied to hardware and in the communication between servers/clients/office365.

What rights do you have as a data subject?
As a data subject, you have rights under the GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, the right to object, and the right not to be subject to automated individual decision-making (profiling). If you have created a profile via the website of Theater 't Voorhuys and Museum Schokland, you have the option to manage the above yourself through the website. For digital mailings, you can unsubscribe at any time or with every received mailing (see link at the bottom of the received newsletter).  If you wish to exercise your rights with one of the other components, you can contact info@muzischcentrum.nl