2. Personal data processed by us
Depending on the type of Services you use, or Products you purchase, the personal data we collect and process about you include:
3. The purposes and legal basis for processing your personal data
The Diamond Museum collects and uses your personal data for the purposes set out below, based on the law. Insofar as the Diamond Museum already holds your personal data, these personal data will be used for the same purposes and on the same legal basis.
Your personal data are collected and processed to handle your purchase of Products and your request to provide Services. In addition, we process your personal data to handle any requests, complaints or questions from you.
We may use the aforementioned personal data to improve our Products and Services and to better understand and approach our visitors and relations, both on an aggregate and an individual level. This means that we analyze your use of our Products and Services and that we use this information to improve our Products and Services in order to provide you with an improved user experience.
To the extent necessary, we will ask for your consent to keep you informed about news or offers related to our Products and Services.
You can withdraw your consent at any time. How you can do this is described below.
We may use your personal data to comply with applicable laws, to comply with requests from public bodies and authorities, or to cooperate with law enforcement.
5. Who receives your personal data?
Only authorized employees of the Diamond Museum have access to your personal data to the extent necessary for the performance of their work at the Diamond Museum.
We will not disclose the personal data you have provided to us to third parties without your express prior consent, unless we are required to do so for the purposes set out under section 3. For example, we may pass on your personal data to suppliers/service providers for the execution of agreements we have concluded with you, such as payment processing. In addition, we may disclose your personal data to public authorities to comply with applicable legal obligations.
6. Transfer of your personal data
Unless otherwise stated, we process and store your personal data within the European Union. It may be that our service providers transfer your personal data to a country outside the European Economic Area (“EEA”) that does not offer the same level of protection under European law as the country where you normally use your products and/or services. In that case, we will take the necessary steps to ensure that your personal data are adequately protected, such as drafting standard EU contracts with parties outside the EEA.
We take appropriate and reasonable security measures to protect your personal data against unauthorized access, modifications, disclosure, loss or improper use, and to protect the accuracy and integrity of your personal data. In order to ensure a risk-adapted level of security, we implement technical and organizational measures, including security with regard to access to our systems.
8. How long do we keep your personal data?
9. What rights do you have with regard to your personal data and how can you exercise these rights?
Under the applicable laws and regulations, you have a number of rights with regard to your personal data, including:
If you wish to exercise one of your rights, you can do so by using the contact information set out below.
10. Contact information
Paulus Potterstraat 8
1071 CZ AMSTERDAM