We process personal data to serve our visitors and contacts as well as possible and treat this data with care. This privacy statement explains how we handle personal data.

a. Data Controller

The organization responsible for processing your personal data is Villa Westergas BV, located at Haarlemmerweg 4, 1014 BE Amsterdam, registered with the Dutch Chamber of Commerce under number 94968810.

b. Processed Personal Data and Purposes

When visiting our location(s), participating in an event, making a purchase via the ticket shop or webshop, subscribing to the newsletter, or otherwise contacting us, we may process the following personal data:

• Identification data: name, title, date of birth, address, city, country.

• Contact data: phone number, email address.

• Payment data: bank account number, credit card payments.

• Interest data: visit history, interests, or discount cards.

• Online data: IP address, marketing opt-in.

• Other data: contact history, appointments, notes about the nature of the relationship.

These data are processed for the following purposes:

• Processing ticket or webshop orders, reservations and other (online) activities.

• Communicating about your visit, reservation, or other activities.

• Security purposes, including camera surveillance.

• Providing services in the desired language.

• Informing you about our activities via email and social media.

• Sending invitations to events.

• Answering questions and handling complaints.

• Analyzing and improving our services and communication (anonymized where possible).

Personal data are processed based on:

• Consent: e.g., for newsletters, cookies, or publication of visual material.

• Contract: for the execution of a purchase or reservation.

• Legal obligation: such as the legal retention of payment data.

• Legitimate interest: such as camera surveillance and website analysis.

c. Specific Processing Activities

Visiting our location(s)

• Camera surveillance: Footage is used exclusively for security purposes and may be accessed by authorities. More information is available in our camera protocol.

• Free Wi-Fi: When using our network, the device’s MAC address may be visible, but this data is not stored or shared.

• Photos and videos: Visual material may be used for ambiance or reporting. This falls under the journalistic exception as described in the GDPR. Prior consent will be requested for commercial use.

Website visits, online services and marketing

Visitors and contacts who have provided their email address and have either given consent or not objected to receiving our communications, will be kept informed about our organization, for example via email or social media. We also use features provided by social media platforms for targeted advertising, such as LinkedIn, Meta and TikTok custom audiences. This allows us to use our advertising budget more efficiently.

Our websites and apps use cookies and other technologies to enhance the user experience and ensure functionality. We distinguish between functional cookies (necessary for tasks such as online ticket sales), cookies for analytical purposes and marketing cookies. On your first visit to our website, a cookie banner allows you to indicate your preferences. Detailed information about the cookies used is available in this banner and settings can be changed at any time. If consent is given, we place marketing cookies from providers such as Google Ads, Meta and TikTok.

Ticket sales, reservations and rentals

When purchasing tickets, reserving an activity, or renting a space, personal data are processed to handle the request. The same set of data as mentioned under point b is used.

Contacts, friends and donors

Personal data of press contacts, suppliers, friends, donors and other contacts are processed for communication and administrative purposes. The same set of data as mentioned under point b is used.

Interest profiles

Based on interactions and provided data, we may create interest profiles. This allows us to improve our services and communication and provide more relevant information and offers.

d. Data Retention

Personal data are not kept longer than necessary for the purposes for which they were collected, taking legal retention periods into account. Camera footage is kept for a maximum of four weeks, unless needed for an investigation. Data for which consent has been given will be retained until that consent is withdrawn.

e. Your Rights

You have the right to access, correct and delete your personal data. You may also object to processing, request restriction of processing, or request data portability. Consent can be withdrawn at any time. You can exercise these rights by contacting us using the information below.

f. Data Security

We implement physical, technical and organizational measures to protect personal data. Data entered online is transmitted encrypted. Data processing takes place in principle within the European Union or under appropriate safeguards when transferred outside the EU.

g. Questions or Complaints

For questions or complaints, you can contact Villa Westergas BV, located at Haarlemmerweg 4, 1014 BE Amsterdam, via info@museumvilla.com.

h. Changes to the Privacy Statement

This privacy statement may be updated. The most recent version is shown below.

Last modified: June 2025