PRIVACY POLICY
Information on the Processing of Personal Data
Version 2, October 18, 2018
On behalf of the FUNDACIÓN PALACIO DE VILLALÓN (MUSEO CARMEN THYSSEN), in order to guarantee maximum respect regarding the processing of personal data, in accordance with the current Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), as well as the applicable national regulations, we provide detailed information about all personal data processing activities. This information complements the initial layer of information provided at the time of collection of personal data.
DATA CONTROLLER
The Data Controller for personal data collected on this website, as well as on other media whose information is referred to in this Privacy Policy, is FUNDACIÓN PALACIO DE VILLALÓN, hereinafter referred to as MUSEO CARMEN THYSSEN, with tax ID: G93003150, address:
C/ Compañía, 10, 29008, Málaga; phone: 902303131 / 952217511; and email: protecciondedatos@carmenthyssenmalaga.org
PERSONAL DATA PROCESSING ACTIVITIES
We detail each of the processing activities carried out by MUSEO CARMEN THYSSEN:
- TICKET SALES
You can purchase your tickets online. In this regard, we will collect certain personal data for the following purposes:
1. Manage your Ticket Purchase Request.
We will initiate internal procedures to manage the purchase of your ticket(s) to visit our collection, as well as issue the corresponding invoice.
2. Statistics
We will retain your personal data, anonymized, to be able to generate statistics on our visitors.
3. Newsletter
If you provide your express consent, we will keep you informed via email about MUSEO CARMEN THYSSEN news, events, activities, and other information that may be of interest.
4. Manage your rights
We will address the rights you are entitled to regarding the protection of your personal data.
You may withdraw your consent at any time.
We will use your personal data until the completion of the ticket purchase transaction, after which personal data will be retained until legal liability actions regarding the transaction expire.
If you have requested information about MUSEO CARMEN THYSSEN by electronic means, your data will be processed until you indicate otherwise.
Your personal data will be accessed by SICOMORO SERVICIOS INTEGRALES S.L. (IACPOS), located at C/ Pasaje del Vado, nº2, 50014, Zaragoza, CIF B-99020547, as a consequence of providing MUSEO CARMEN THYSSEN with the electronic ticket sales service.
- CONTACT REQUEST
Personal data is collected according to your request for information about various aspects related to MUSEO CARMEN THYSSEN. This data will be used for the following purposes:
1. Respond to your information request.
We will manage your specific request regarding tickets, activities, educational and/or cultural events, services, and products offered in our Store related to MUSEO CARMEN THYSSEN.
2. Newsletter
If you provide your express consent, we will keep you informed via email about MUSEO CARMEN THYSSEN news, events, activities, and other information that may be of interest.
3. Manage your rights
We will address the rights you are entitled to regarding the protection of your personal data.
You may withdraw your consent at any time.
We will retain your personal data to manage and respond to your request, and if requested, to send you information about MUSEO CARMEN THYSSEN via electronic means until you indicate otherwise.
- EVENTS, ACTIVITIES, CYCLES, AND CONFERENCES
If you participate in events, activities, cycles, and conferences organized by MUSEO CARMEN THYSSEN, we will process your data for the following purposes:
1. Manage your participation
We will handle your participation request and provide relevant information. We will also monitor your participation and/or attendance.
2. Manage your rights
We will address your rights regarding personal data protection.
3. Send Information
If you provide your express consent, we will keep you informed via email about MUSEO CARMEN THYSSEN news, events, activities, and other information that may be of interest.
You may withdraw your consent for these purposes at any time.
We will process your personal data while the specific event is managed. Once completed, data will only be retained during the applicable legal liability period.
Regarding electronic communications, if requested, we will continue processing your data until you indicate otherwise.
- MUSEUM FRIENDS
Personal data collected for joining the “Friends of the Museum” program will be used for the following purposes:
1. Manage your membership request
We will handle your request to join the “Friends of the Museum” program and provide access to the associated benefits, promotions, events, and rights.
2. Contributions
We will process your payment to MUSEO CARMEN THYSSEN to validate your membership in the program.
3. Friends of the Museum Information
We will periodically send you information about privileges and conditions related to the program.
4. Newsletter
We will inform you via email about events, news, and updates related to MUSEO CARMEN THYSSEN, if requested.
5. Manage your rights
We will address your rights regarding the protection of your personal data.
You may withdraw your consent at any time.
We will retain your personal data while you are part of the “Friends of the Museum” program, and if requested, for sending information via email until you indicate otherwise.
- MUSEUM SHOP
If you wish to purchase products from our online store, we will collect certain personal data for the following purposes:
1. Manage your purchase request
We will collect your personal data to facilitate your purchase and manage your order appropriately.
2. Newsletter
If you provide your express consent, we will keep you informed via email about news, updates, and promotions related to our Store.
3. Manage your rights
We will address your rights regarding personal data protection.
You may withdraw your consent at any time.
We will use your personal data until the completion of your purchase, and then retain it until legal liability actions expire.
If you requested electronic communications about the online store, your data will be processed until you indicate otherwise.
- WIFI CONNECTION SERVICE
If you request to use the Internet via the WIFI service provided to visitors, we will collect certain personal data for the following purposes:
1. Manage WIFI access
Your data will be used to allow connection to the service and identify you at login.
2. Newsletter
If you provide your express consent, we will keep you informed via email about MUSEO CARMEN THYSSEN news, events, activities, and other information.
3. Manage your rights
We will address your rights regarding personal data protection.
You may withdraw your consent at any time.
As per the WIFI Terms of Use, your data may be communicated to State Security Forces or judicial authorities if required.
Your data will be retained for ONE MONTH after using the service for judicial purposes.
If you requested the newsletter, your data will be processed until you indicate otherwise.
- ACCESS CONTROL
To maintain security of our facilities, if you access them, we will collect certain personal data for the following purposes:
1. Maintain security
Your data will be used to keep a record of access and ensure security.
2. Manage your rights
We will address your rights regarding personal data protection.
You may withdraw your consent at any time.
As a visitor, your data may be communicated to State Security Forces or judicial authorities if required.
Access data will be retained for five years for judicial purposes.
If you requested the newsletter, your data will be processed until you indicate otherwise.
RIGHTS RELATED TO PERSONAL DATA
Under the GDPR, you have the following rights, which you can exercise with MUSEO CARMEN THYSSEN at: C/ Compañía, 10, 29008, Málaga; phone: 902 303 131; email: protecciondedatos@carmenthyssenmalaga.org
Right of access
You can obtain information on whether MUSEO CARMEN THYSSEN processes your personal data and learn its content and purpose.
Right of rectification
You can request the correction of inaccurate or incomplete personal data.
Right to erasure / right to be forgotten
You can request deletion of your personal data.
Right to restriction of processing
You can request to limit the purposes for which we process your personal data.
Right to data portability
You can request that your personal data be transmitted to another data controller other than MUSEO CARMEN THYSSEN.
Right to object
You can object to processing when it is based on public or legitimate interest pursued by MUSEO CARMEN THYSSEN.
If you believe your rights have been violated or limited, you can contact the Spanish Data Protection Agency: www.agpd.es
RESPONSIBILITY FOR INFORMATION
It is not permitted to provide personal data on behalf of third parties. If requested by a third party, we will indicate that the data was provided by you.
It is also prohibited to provide excessive or “sensitive” personal data under GDPR. Only required data must be provided.
All personal data and information provided must be accurate and truthful. You are responsible for any harm caused to MUSEO CARMEN THYSSEN or third parties.
SECURITY MEASURES
All processing operations by MUSEO CARMEN THYSSEN comply with strict security conditions to ensure confidentiality, integrity, and availability, in accordance with applicable data protection regulations.
Data will always be processed within the European Union (EU).