The website www.mskgent.be, (hereinafter “the Website”) is the property of AGB Kunsten en Design – Museum voor Schone Kunsten Gent (the Museum of Fine Arts Ghent; hereinafter “the Museum”).
Contact details
Name: Museum voor Schone Kunsten Gent (MSK)
Address: Hofbouwlaan 28, 9000 Ghent, Belgium
Telephone: +32 9 323 6700
Email: museum.msk@stad.gent
Chamber of Commerce registration: BE 0537.520.055
1. The purpose of this privacy statement
Every visitor (hereinafter “User” and “You”) to the Website provides specific personal data which enables the Museum to identify the User as a private individual, whether or not the Museum does so. The User becomes identifiable as soon as any of this data establishes a direct or indirect link with the User as a private individual.
The Museum uses personal data in accordance with Belgian privacy legislation and other relevant legislation. For the purposes of this document, references to ‘privacy legislation’ are understood to concern the Belgian Act for the protection of personal privacy with regard to the processing of personal data (8 December 1992). References to ‘the Regulation’ are understood to refer to the EU General Data Protection Regulation (GDPR) of 27 April 2016, which governs the processing of personal data and the free flow of information.
By visiting the Website, Users implicitly grant permission for the processing of their personal information as defined in this document. The Museum reserves the right to amend this Privacy Statement at any time. Users will be informed of substantial amendments to the document. Nevertheless, the Museum advises Users to consult this document at regular intervals.
2. Processing of personal data
2.1. Responsibility for processing of data
The Museum bears responsibility for the processing of personal data, and decides, either alone or in consultation with third parties, which data to collect and for what purpose, as well as how to process any personal data it collects.
2.2. Processing entities
The Museum is free in its choice of processing entities. A processing entity is defined as the individual or legal person contracted to process personal data on behalf of or at the request of the party managing the data. The processing entity is required to ensure the security and confidentiality of the data and to adhere at all times to the instructions issued by the managing party.
3. Legal basis for processing of personal data
In line with privacy legislation and the GDPR, the legal basis for the Museum’s collection of personal data is as follows:
- Compliance with an agreement entered into with a User, and/or the enabling of any pre-contractual activity deemed necessary for this purpose; and
- Compliance with legal and regulatory requirements with regard to the management of contractual relationships; and
- Receipt of User’s permission to provide promotional materials (direct marketing).
4. The personal data that we process
Het Museum limits its collection and processing of data to that which is directly relevant and necessary for a specific purpose. The data collected may include, but is not limited to, the following:
• IP address
• First name, surname
• Address
• Email address
• Gender
• Location
• Profession
- Banking details
5. Use of personal data
The Museum collects personal data in order to ensure the safe, efficient and personalised functioning of the Website. Increased use of the Website and the Museum’s online services results in a proportionately increased degree of collection.
Data collection is an essential to ensuring a properly functioning platform and services. Processing is carried out solely for the following purposes:
- Management of contractual relationships between Users and the Museum;
- Provision and enhancement of general and/or personalised services, such as invoicing; the provision of information, newsletters and special offers which are essential or may be of use to Users; collection and processing of reviews by Users;
- Provision of support for Users;
- Provision and improvement of products on offer; provision of general and personalised and/or specific services based on information and data provided by Users;
- Detection of and protection against fraud and/or criminal activity or errors;
- Marketing activities.
When a User visits the Website, the Museum collects only limited data for statistical purposes, which is needed to ensure optimal functioning of the Website. The following data is collected for this purpose: IP address, probable location at time of visit, date and time of visit, and pages viewed. By visiting the Website Users implicitly give their permission for the collection of this data for statistical purposes.
As Users provide their personal data to the Museum of their own accord, they retain control of which data they provide. In the event that a User provides incomplete or apparently incorrect data, the Museum reserves the right to suspend its corresponding services to the User either temporarily or permanently.
In principle, personal data is processed only for use by the Museum itself. The Museum assures Users that no personal data will be sold, transferred to or shared with any third party, and that, insofar as can reasonably be expected, it has emplaced all necessary legal and technical measures to prevent and avoid misuse of and/or improper access to personal data.
6. Access to personal data
The personal data of Users is processed for use solely by the Museum itself. Personal data will not be sold, transferred to or communicated to any third party without the User’s explicit prior permission.
Insofar as can reasonably be expected, the Museum has emplaced all necessary legal and technical measures to prevent and avoid the use of and/or access to personal data by third parties without its permission.
7. Time limit for storage of personal data
Personal data is stored only as long as is necessary for the purpose for which it is collected. Data is erased as soon as it is deemed no longer relevant for the purpose for which it was collected, or at the User’s request.
8. Rights and obligations
8.1. Proper and safe processing of personal data
The Museum uses personal data exclusively for the purposes as described in section 5. Data is collected and processed in an appropriate, relevant and proportionate manner, and retained only as long as necessary for the specific purpose for which it is collected.
8.2. Access to personal data collected by the museum
Upon presentation of proof of identification, Users are entitled to receive information about the processing of their personal data, including the following: purpose of collection; categories of data collected; categories of third parties with whom information is shared; criteria pertaining to the duration of storage; and the User’s legal rights with regard to the use of their of personal data.
8.3. Amendment of personal data
Users retain the right to correct and/or supplement inaccurate and/or incomplete data Users bear responsibility for the accuracy and completeness of their data as shown in the ‘User Space’, and may request amendment of inaccurate and/or incomplete data. Users may ask the Museum to amend their data.
8.4. Erasure of personal data
In the following situations, Users may request that the Museum erase their personal data:
• The personal data is no longer necessary or relevant for the purpose for which it was collected;
• The User has withdrawn permission for the processing of personal data, and no other legal basis exists for its processing;
• The User is exercising a legal right to be forgotten;
• Personal data has been improperly processed;
• Erasure of personal data is required for other legal reasons not specified above.
Generally speaking, erasure of personal data pertains to the accessibility of the data; in some cases, erased data may continue to be stored temporarily.
8.5. Limitations on the processing of personal data
In some cases, the User may limit the the use of their personal data. This is always the case in the following situations: when the accuracy of the data is disputed; when the data is required for a legal procedure; and for as long as it takes the Museum to confirm that a User is entitled to exercise their legal right to request erasure of their data.
8.6. Objection to use of personal data
At all times, the User retains the right to refuse permission for the processing of personal data for direct marketing purposes. In the absence of compelling legal reasons to do otherwise, the Museum is required to refrain from using data for this purpose if requested to do so.
8.7. Readability of data
The User is entitled to receive a summary of their personal data in a conventional, comprehensible manner which also enables digital readout. The User retains the right to transfer personal data to a third party for processing insofar as this is technically possible.
8.8. Withdrawal of permission
Users retain the right to withdraw permission for use of personal data at any time, for example in order to prevent its use for direct marketing purposes.
9. Exercising rights with regard to personal data
To exercise their rights with regard to personal data, Users must submit a request in writing to the Museum voor Schone Kunsten Gent, Hofbouwlaan 28, 9000 Ghent, Belgium; museum.msk@stad.gent. The Museum will respond to such requests as quickly as possible, but at any rate within one month of receipt of the request.
10. Complaints
In the event of objections to the collection and/or processing of their personal data by the Museum, Users may submit a complaint to the competent authority via https://www.privacycommission.....