In this privacy statement, we will set out how we handle your personal data.
The Anne Frank House (hereinafter referred to as the 'Anne Frank House' or 'we') attaches great importance to the careful handling of personal data. For this reason, we take great care in processing and securing personal data. In processing your personal data (any information relating to an identified or identifiable natural person) we comply with the requirements laid down in the General Data Protection Regulation ('GDPR').
The Anne Frank House may process different types of personal data, varying from direct identification details such as names, to contact details such as email addresses, and personal characteristics, such as age category. We process only those personal data that are required for the performance of our services.
In addition, we use cookies on our website(s) to optimise your user experience. For a detailed explanation of the cookies we use on our website(s), please refer to our cookie policy.
The Anne Frank House collects, uses, and manages the personal data provided by you or collected by the Anne Frank House for all purposes required to provide the relevant services of the Anne Frank House and to ensure the proper (technical) operation of the website(s). These purposes include but are not limited to the (online) sale of tickets, mailings, providing services and supplying goods through the webshop, and providing access to the website(s).
We will not retain your personal data any longer than required for the purposes for which they were collected or for further processing. The retention of specific personal data may be subject to a statutory retention period under other legislation by which the Anne Frank House is bound.
Your personal data will not be sold, transferred, or in any other way made known to third parties without your explicit prior consent, unless this is necessary for the purpose(s) set out in our data protection policy, or unless we are legally obliged to do so.
The Anne Frank House may store your personal data in countries outside of the EU, in Iceland, Liechtenstein, or Norway, or transfer them to these countries. Should this be the case, we will ensure that the transfer complies with the relevant legal obligations and that the party involved can guarantee an adequate level of protection of your personal data. Where necessary, we will use the standard contractual clauses drawn up by the European Committee and conclude appropriate data transfer agreements.
We will process your personal data in a lawful, fair, and transparent manner, which entails that the personal data obtained by us will only be processed for the legitimate purposes mentioned above, which have been described explicitly in our comprehensive data protection policy. We will do our best to ensure that the processed data are accurate and, where necessary, kept up to date, adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed. As a data subject, you have rights with regard to the personal data you have shared with us. You have the following rights:
- The right to information;
- The right of access;
- The right to rectification;
- The right to erasure ('right to be forgotten');
- The right to restriction of processing;
- The right to object;
- The right to data portability;
- The right not to be subjected to automated individual decision-making, including profiling.
For more detailed information about the rights mentioned about, please refer to our comprehensive data protection policy. If you want to exercise one of the rights mentioned above or if you have any questions about your privacy, please send your signed question by post to Anne Frank House, P.O. Box 730, 1000 AS Amsterdam, or by email to privacy@annefrank.nl, or use the contact form.
The Controller:
Anne Frank House
P.O. Box 730
1000 AS Amsterdam
Date of last revision:
24 May 2018