Privacy statement
We process personal data to serve our visitors and contacts as well as possible and treat this data with care. This privacy statement explains how we handle personal data.
a. Data Controller
The organization responsible for processing your personal data is Villa Westergas BV, located at Haarlemmerweg 4, 1014 BE Amsterdam, registered with the Dutch Chamber of Commerce under number 94968810.
b. Processed Personal Data and Purposes
When visiting our location(s), participating in an event, making a purchase via the ticket shop or webshop, subscribing to the newsletter, or otherwise contacting us, we may process the following personal data:
Identification data: name, title, date of birth, address, city, country.
Contact data: phone number, email address.
Payment data: bank account number, credit card payments.
Interest data: visit history, interests, or discount cards.
Online data: IP address, marketing opt-in.
Other data: contact history, appointments, notes about the nature of the relationship.
These data are processed for the following purposes:
Processing ticket or webshop orders, reservations and other (online) activities.
Communicating about your visit, reservation, or other activities.
Security purposes, including camera surveillance.
Providing services in the desired language.
Informing you about our activities via email and social media.
Sending invitations to events.
Answering questions and handling complaints.
Analyzing and improving our services and communication (anonymized where possible).
Personal data are processed based on:
Consent: e.g., for newsletters, cookies, or publication of visual material.
Contract: for the execution of a purchase or reservation.
Legal obligation: such as the legal retention of payment data.
Legitimate interest: such as camera surveillance and website analysis.
c. Specific Processing Activities
Visiting our location(s)
Camera surveillance: Footage is used exclusively for security purposes and may be accessed by authorities. More information is available in our camera protocol.
Free Wi-Fi: When using our network, the device’s MAC address may be visible, but this data is not stored or shared.
Photos and videos: Visual material may be used for ambiance or reporting. This falls under the journalistic exception as described in the GDPR. Prior consent will be requested for commercial use.
Website visits, online services and marketing
Visitors and contacts who have provided their email address and have either given consent or not objected to receiving our communications, will be kept informed about our organization, for example via email or social media. We also use features provided by social media platforms for targeted advertising, such as LinkedIn, Meta and TikTok custom audiences. This allows us to use our advertising budget more efficiently.
Our websites and apps use cookies and other technologies to enhance the user experience and ensure functionality. We distinguish between functional cookies (necessary for tasks such as online ticket sales), cookies for analytical purposes and marketing cookies. On your first visit to our website, a cookie banner allows you to indicate your preferences. Detailed information about the cookies used is available in this banner and settings can be changed at any time. If consent is given, we place marketing cookies from providers such as Google Ads, Meta and TikTok.
Ticket sales, reservations and rentals
When purchasing tickets, reserving an activity, or renting a space, personal data are processed to handle the request. The same set of data as mentioned under point b is used.
For subscription products, customers will be asked to upload a profile picture. These products are intended for personal use only. Based on the uploaded picture, a digital pass (digi-pass) will be created and issued to the customer.
Contacts, friends and donors
Personal data of press contacts, suppliers, friends, donors and other contacts are processed for communication and administrative purposes. The same set of data as mentioned under point b is used.
Interest profiles
Based on interactions and provided data, we may create interest profiles. This allows us to improve our services and communication and provide more relevant information and offers.
d. Use of cookies and similar technologies
Our websites and apps use cookies and similar technologies to improve the user experience and ensure functionality. We distinguish between functional cookies (necessary for online ticket sales, among other things), analytical cookies, and marketing cookies.
On your first visit to our website, we display a cookie banner where you can indicate your preferences. You can change these settings at any time. The banner also provides detailed information about the cookies used.
If you give your consent, we will place marketing cookies from Google Ads (including YouTube), Meta (Facebook and Instagram), and TikTok, among others. These cookies allow us to reach visitors who have previously visited our website with relevant ads (retargeting) and measure the effectiveness of our campaigns. For this purpose, we may process your IP address, cookie ID, and browsing behavior, among other things.
The data collected through these cookies may be shared with the aforementioned parties. These parties may also use the data for their own purposes. The legal basis for this processing is your consent (Article 6, paragraph 1, subparagraph a GDPR).
You can withdraw your consent at any time through our cookie settings or through the advertising settings of the relevant platforms, such as:
e. Use of YouTube videos
Our website uses embedded videos from YouTube, a service provided by Google Ireland Limited. When playing these videos, Google may collect personal data, such as your IP address and user behavior. We use the privacy-enhanced mode ( youtube-nocookie.com ) to limit this impact.
- Purpose: To display video content and improve the user experience.
- Legal basis: this processing takes place on the basis of your consent (Article 6 paragraph 1 sub a GDPR).
- Withdrawal: You can withdraw your consent at any time via our cookie settings.
- More information can be found in Google's privacy policy.
f. Data Retention
Personal data are not kept longer than necessary for the purposes for which they were collected, taking legal retention periods into account. Camera footage is kept for a maximum of four weeks, unless needed for an investigation. Data for which consent has been given will be retained until that consent is withdrawn.
g. Your Rights
You have the right to access, correct and delete your personal data. You may also object to processing, request restriction of processing, or request data portability. Consent can be withdrawn at any time. You can exercise these rights by contacting us using the information below.
h. Data Security
We implement physical, technical and organizational measures to protect personal data. Data entered online is transmitted encrypted. Data processing takes place in principle within the European Union or under appropriate safeguards when transferred outside the EU.
i. Questions or Complaints
For questions or complaints, you can contact Villa Westergas BV, located at Haarlemmerweg 4, 1014 BE Amsterdam, via info@museumvilla.com.
j. Changes to the Privacy Statement
This privacy statement may be updated. The most recent version is shown below.
Last modified: June 2025