Introduction
Museum Vrolik is part of the Academic Medical Center (hereinafter Amsterdam UMC). Museum Vrolik is located at Meibergdreef 15, 1105 AZ in Amsterdam (The Netherlands). The AMC, to which Museum Vrolik belongs, is a legal entity under public law, trading under the name Amsterdam UMC and registered with the Chamber of Commerce under number 34362777. Museum Vrolik is engaged in the following services:

• Providing education on medical history and anatomy to medical students and other interested parties.
• Offering public exhibitions relating to its collection and field of expertise.
• Organizing events (lectures, workshops, tours, etc. on (medical) history, anatomy and other related topics).
• Offering a newsletter with information about the museum and its activities.

In this privacy statement, Museum Vrolik informs you about how it collects, uses, shares and protects personal data, what your rights are and how you can exercise them.

If you use Museum Vrolik’s services or visit this Museum Vrolik website, you may provide Museum Vrolik with your Personal Data in order for Museum Vrolik to provide the aforementioned services to you. Personal data are data traceable to you as an individual.
Examples of personal data are: your name, e-mail address, telephone number and the date on which you will use the services of Museum Vrolik.

Museum Vrolik handles these personal data with care. This means that if you provide your personal data to Museum Vrolik when using the services mentioned above, Museum Vrolik will handle your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy and health regulations. Museum Vrolik will endeavour to protect your privacy. As part of the AMC, Museum Vrolik has appointed a Data Protection Officer whose contact details are given at the bottom of this online privacy statement.

Personal data, purposes and retention periods
Museum Vrolik only collects personal data via this website if that is necessary to allow you to use this website and the services offered via this website. Your personal data will not be used for any purpose other than the purpose for which you provided it to us, unless we obtain your specific consent to use it for a different purpose, or if we need the personal data to protect the legitimate interests of Museum Vrolik. Museum Vrolik collects the following personal data through this website for the purposes indicated below:

Legitimate basis – in principle, Museum Vrolik only collects and processes your personal data through this website:

1. if you voluntarily consent to it, by visiting the website and/or using Museum Vrolik’s services through the website;
2. if we are obliged to do so by law; or
3. to protect the legitimate interests of the AMC, including Museum Vrolik.

If you do not want Museum Vrolik to process your personal data for a longer period, you can withdraw your permission. We will then stop processing your personal data unless prohibited to do so by law or by a legitimate interest of Museum Vrolik as part of the AMC or a third party. If we stop processing your personal data at your request, this may result in you no longer being able to use this website and its services.

Retention periods: Museum Vrolik will not retain your personal data longer than is necessary for the purpose for which you provided the data, namely 5 years counted from the date you submitted an application to Museum Vrolik – unless longer retention is necessary to comply with a legal obligation or to serve a legitimate interest of the AMC.
Special personal data: in principle we do not collect any special personal data via the website. Special personal data includes, among other things, personal data regarding race, political affiliation, religion, philosophy of life, sexual life or health, biometric data and genetic data.

Your rights
You have the following rights with respect to your personal data that we collect through this website:

1. Inspection: you can ask Museum Vrolik to inspect the personal data we process about you and to obtain a copy;
2. Correction: if personal data that Museum Vrolik processes about you is incorrect, you can ask us to correct it;
3. Erasure: if you no longer agree with the processing of your personal data by Museum Vrolik or if you are of the opinion that the processing of your personal data by us is no longer necessary for the purpose for which you provided it to us, or is being processed unlawfully, you can ask Museum Vrolik to erase the personal data in question;
4. Restriction: if you dispute the accuracy of the processing of your personal data or have objected to it, you may request Museum Vrolik not to do anything with the data during the period of dispute or objection other than to store it only;
5. Objection: if you have any doubt as to whether your data is being processed lawfully by Museum Vrolik, you may object to the processing of your personal data;
6. Data portability: if you have provided personal data to Museum Vrolik and we process these personal data digitally, you can request that we make these personal data available to you in digital form.
7. To exercise the aforementioned rights you can submit a written request to the Amsterdam UMC via fg@amc.uva.nl. We will process your request within the statutory time limit and comply with your request if and to the extent that you are entitled to do so in the case in question.

Sharing and passing on of your personal data
Museum Vrolik will ensure that the disclosure of your personal data to third parties or the granting of access to your personal data to third parties does not occur without your prior consent unless:

1. this is necessary for the provision of a service that you purchase from us;
2. this is necessary in order to promote a legitimate interest of the AMC, including Museum Vrolik, in which case you will be informed in advance;
3. we are obliged to do so by law;
4. it concerns a supplier of Museum Vrolik and only if and insofar as this is necessary in the context of the support services provided to us by the supplier in question.

In the latter case, Museum Vrolik will ensure that it concludes a processing agreement with the supplier in question to guarantee that, with respect to your personal data, the supplier applies the same level of security and confidentiality as that applied by Museum Vrolik. If, in the context of your use of this website or the provision of services to you via this website, personal data is transferred to parties in countries outside the European Economic Area (EEA) – which do not offer adequate protection for the processing of your personal data – we will take the necessary measures to ensure that your personal data is processed in accordance with the requirements of European privacy legislation.

Confidentiality and security
Museum Vrolik has taken appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, or any form of unlawful processing. However, despite our extensive efforts, we cannot guarantee protection against all threats. To the best of our ability, access to your personal data will be strictly limited to those who are involved in providing services to you on behalf of Museum Vrolik and who are otherwise authorized to do so within the frameworks of privacy and health regulations. The individuals who have access to the personal data are obliged to treat your personal data confidentially.

Cookies
A “cookie” is a small piece of text that a website places in the browser of the device you use to access the website (e.g. computer or smartphone). The cookie allows the website to recognize your device and is used for various purposes. Some cookies are necessary for the proper functioning of the website. Such ‘functional’ cookies are not blocked by the use of a cookie banner. Although internet browsers usually accept cookies automatically, you can set your browser to warn you when you receive a cookie or to refuse cookies. However, please note that if you do not accept cookies you may not be able to experience the full functionality of websites. Museum Vrolik only uses functional cookies.

Links to other websites
Please be aware that our website may link to other websites, including websites maintained by other entities that are not governed by this online privacy statement, but by other privacy statements that may have different content. We encourage you to review the privacy policy of any website you visit before providing any personal information.

Valid version?
Museum Vrolik may amend this privacy statement if we deems it necessary. On our website, the latest version of our online privacy statement is always published, indicating the date of the last change at the top of the page. We recommend that you consult our website regularly, so that you are aware of any changes.

Questions, complaints, comments and objections
If you have any questions, complaints or comments about this privacy statement or object to the processing of your personal data, you can notify us at the Data Protection Officer, who can be reached at fg@amc.uva.nl. We will endeavour to provide you with the best possible service. Furthermore, we hereby inform you that you have the right to lodge a complaint with the Personal Data Authority if you believe that the AMC, including Museum Vrolik, is not processing your personal data in accordance with the applicable privacy regulations.