Privacy Disclaimer
Disclaimer
This website is managed by vzw Z33 – Huis voor Contuele Kunst, Design en Architectuur. The use of this website is subject to the following conditions and restrictions. The use of this website means that the user agrees to the disclaimer below. The information you find on this website, such as texts, images and other applications, may only be used subject to prior approval. Unless otherwise stated, all images used originate from Z33’s image archive. With regard to images from other collections, Z33 has tried to trace, inform and clarify all rights holders. If, despite this, certain information about the owner, rights holder or copyright is incorrect or incomplete, please contact privacy@z33.be. Z33 is not liable for damages as a result of inaccuracies or problems inherent in the dissemination of information via the Internet, as well as technical malfunctions. Z33 cannot be held liable for any damage resulting from clicking through to websites or other sources of information to which this website refers.
1. General
This privacy policy (“Privacy Policy”) governs the processing of your personal data as part of your use of our website (the “Website”) and the services related to it (collectively, the “Services”). Such processing is carried out by Z33 as controller, having its registered office at Bonnefantenstraat 1, 3500 Hasselt (“we”, “us”, “Z33”), registered in the KBO under number 0682.600.975, in accordance with applicable legislation on the protection of personal data. In short, whenever you provide your personal information, Z33 will treat it in accordance with the policy described below. Please read the privacy statement carefully because it contains your rights and obligations towards Z33.
Why this Privacy Statement?
In the context of carrying out our activities, Z33 may process personal data about you. For example, in cases when you visit Z33 or our website, contact us, request more information about our collection or depository, visit one of our meetings, exhibitions or other events, or sign up for one of our newsletters or as a Friend. We are aware of how important the protection of your personal data is. Careful handling of personal data is of great importance to Z33 and all affiliated legal entities. We act in accordance with applicable laws and regulations such as the General Data Protection Ordinance (AVG). We will only collect and process your personal data where permitted by the GTC. Your personal data will be treated confidentially and processed only for the purpose for which it was collected. We will ensure that your data is secured in an appropriate technical and organizational manner. In this Privacy Statement you can read which personal information we (may) collect from you and why (for what purposes) we do so. You can also find more information about the rights you have as a data subject.
For whom?
This Privacy Statement applies to visitors to all websites made under Z33’s management, including all subdomains. Furthermore, this Privacy Statement applies to all persons whose personal data we process in the context of our activities, services and activities. We hope that all information is clearly stated below. If you have any questions about this, please contact us. Our contact person for the Privacy Statement and related topics can be reached via the contact details above.
2. What personal information do we collect?
Z33 will only process your personal data when this is necessary for the performance of our activities, services or work. This also applies if you yourself have provided Z33 with your contact information. For example, because you would like to get or stay in contact with us, want more information, have signed up for one of the newsletters and/or want to support us as a sponsor or benefactor. Below you will find a list of personal data that we process more generally. Which personal information is collected from you, depends on our relationship with you. It can be the following personal data:
First and last name, initials;
address information;
telephone number;
date of birth;
gender;
e-mail addresses;
bank account number or card details;
function, profession or education;
photo and/or video images;
interaction data, such as IP address, surfing behavior on our website, click behavior and location data;
area of interest;
visited activities/rental.
3. General purpose and principles of the processing of personal data
Below is a list of the general purposes for which we process your personal data and the legal basis on which we do so. Paragraph 4 specifies and explains that information for specific activities or per group of data subjects. Z33 will only process your personal data when necessary for the purpose of the business:
Information and service purposes, such as maintaining contact, improving the quality of our operations or handling a request for information, question or complaint;
The creation and execution of agreements between you and Z33, such as the purchase and payment of online tickets, (digital) (image) material, in the delivery of products or services by you as a supplier, employee, volunteer or self-employed person, the renting of Z33 as an event location, in gifts, loan and donation agreements and in the settlement of a bequest;
complying with legal obligations in which we are obliged to pass on your personal data to the government, such as the tax authorities;
Promotional purposes such as sending newsletters and displaying messages or messages on social media channels such as Facebook, Instagram, Twitter, LinkedIn and Flickr and online advertising (remarketing);
Development and analysis purposes to further develop, maintain and improve our website;
Statistical analysis and market research, such as measuring the response to our online promotional campaigns and sending or conducting (online) surveys; – Marketing purposes to better understand your preferences and wishes;
Security and the prevention and detection of damage, theft or fraud;
Scientific and historical research, archiving in the public interest;
Educational, academic, journalistic and artistic purposes.
Our processing for the above purposes is based on the legal bases set forth in the AVG “performance of contracts”, “compliance with legal obligations”, “public interest task”, our “legitimate interest” and/or because you have consented to the processing and have given us your consent. These legal bases also apply to the purposes of specific processing operations listed below in Section 4. If you choose not to provide the personal data requested by Z33, we may not be able to provide you with the information and/or agreements or services you have requested and/or we may not be able to fulfil the purpose(s) for which we have requested and processed the personal data.
4. Purpose and principles of specific processing of personal data
Online or by phone contact with Z33
Z33 collects your personal information when you contact us, whether via social media, email, phone or mail. We need to use that personal information to respond to your inquiries and/or to provide services and/or information or products that you have requested. The personal information requested includes your name and contact information (such as e-mail address, telephone number or address) depending on how you would like us to respond (by e-mail, telephone or mail) and your personal choices and requests.
Processing for journalistic purposes for educational, academic, artistic or literary expression
Within Z33, there may be objects or documents that contain personal data of living persons such as name, image, date of birth or, for example, place of residence. These `carriers` could be exhibited or published for journalistic purposes. These could be educational, academic, artistic or literary forms of expression. This falls within the justified interest of Z33 as an art institute and because of our position as a center of knowledge and expertise. Of course, Z33 will always weigh up this justified interest on a case-by-case basis against the privacy rights of those whose personal data play a role. In connection with these specific processing purposes, the rights of data subjects as mentioned in paragraph 8 are limited in these cases with regard to access, modification or deletion of the personal data.
Visitors to the art institute
When you visit Z33, personal data may be collected from you as a visitor. We will only process your personal data if it is necessary to grant you access to our museum, for example, if you purchase an admission ticket for our museum online or if it is necessary to check whether you are on a guest list of visitors in the case of an event.
Video surveillance system
We use a video surveillance system to make sure a visit to Z33 is good, safe and responsible, for the protection and safety of Z33, the temporary collections, the visitors and the staff. The purpose of this system is to let our security staff monitor Z33 through this surveillance system. The monitoring system is used to check for violations such as theft, vandalism or other undesirable behavior. By visiting our museum, visitors agree that they can appear in the images of the video surveillance system. The obtained images will only be viewed and used internally, except in case of a violation of the mentioned conditions or other calamities. In that case, Z33 has the right to provide the images to the police and investigation services or the damage insurance company.
Events in Z33
At most events we process the personal data of guests and visitors on lists. These lists are viewed by the Communications Department in connection with providing access. The list may be further shared with Z33 employees and Z33 management, who have a legitimate marketing interest in knowing the attendees, in part to further define and develop our business and marketing objectives. When we organize an activity or event together with another party, the relevant contact information of persons can be shared. Photos and video recordings at events During events it is possible that photographs and/or film footage of the event, the participants and the visitors are made by a photographer engaged by Z33. Z33 has a justified marketing interest in making and publishing those recordings in which people can appear recognizably on its website and/or on social media, while of course respecting the privacy of those involved.
Visits in the context of education and educational programs
In the case of a visit by (school) children, a school or educational institution for educational purposes (such as workshops or guided tours), the visiting regulations apply. The personal data of the individual participants in the visit will not be processed. The name and contact details of the contact person of the group as well as the bookings per school are recorded in our booking system. Based on your personal data, we may approach you in the future for other visits as part of our educational program. If you indicate that you do not appreciate this, we will remove your information and no longer use it.
Online visitors of our website
Z33 provides information about its activities via its website www.z33.be. When you visit Z33’s website, we process your IP address. This may be personal data. We do this to analyze how often our website is visited. We also measure visitor flows on our website and may collect information about your activities during your visit. We do this to personalize your experience of the website. Among other things, we record your preferences and settings and we collect statistical data that helps us to improve and further develop our website. We have included additional information about this in paragraph 9 of this Privacy Statement, and detailed in our Extended Cookie Statement, which can be found on this website.
Newsletter
Z33 periodically sends several newsletters by e-mail to amaze and inform interested parties about Z33 and its activities and events. You can subscribe via the website. When you register, you provide us with your e-mail address, possibly also your (first) name, and you give us permission to process your personal data. You have the right at any time and free of charge to unsubscribe from receiving our newsletters by contacting our data protection officer using the contact details in paragraph 1 of this Privacy Statement. You can also use the ‘unsubscribe’ function that is mentioned in every newsletter you receive from us. The processing of personal data in connection with our marketing purposes Z33 may collect, store and use personal data in its CRM system as part of its marketing interests. For example, if you provide one of Z33’s employees with your contact information, if you have met with him, or if you have entered into an agreement with Z33 as a contact person. We may contact you by phone, email or post for marketing purposes regarding our activities, events and opportunities to support our institution. If you let us know that you do not wish to receive that form of marketing, we will respect that. We will only contact you for such marketing purposes electronically, by email, if you have consented to us doing so. If you do not wish to receive this type of processing, you can notify our data protection officer or use the unsubscribe function which is included in every newsletter you receive from us. Friends (Benefactors) of Z33 and gifts, donations, legacies and loans As part of the administrative processing and settlement of gifts, donations, legacies and incoming and outgoing loans received by us from Friends and other Benefactors, Z33 will process personal data from you, such as your first and last name, e-mail address, telephone number, address details and payment details, in order to fulfil legal obligations. In connection with the status as ANBI, a public utility institution, we may be under a legal obligation to provide your personal data to the tax authorities. We will ask you whether you, or the testator, wish to remain anonymous when (exhibiting) the donated, borrowed or obtained object, publications or publicity about it, or whether you grant us permission to mention your name or that of the testator at the exhibition of the object and in any publication or publicity about it. You have the right to revoke this consent by sending a letter and/or e-mail. Z33 reserves the right to refuse such a request if, for example, it can invoke article 85 paragraph 2 of the AVG because that right does not apply, for example, to processing for journalistic or academic purposes.
Research
In carrying out its activities for the benefit of the institution and in the context of research activities, Z33 processes personal data. We will only use the data collected for this purpose within the scope of the agency’s function and research and business development activities.
Hall rental in Z33
In the case of room hire in Z33 by third parties, the organiser of the event is responsible for processing the personal data of the participants in the event in question. Z33 processes the personal data necessary for the execution of this agreement together with the visitors list for the event that will be shared with the employees of Z33 for whom the visitors information is important for safety reasons.
Applications at Z33
During an application process, we will process personal data, such as your name, address, e-mail address, telephone number, date of birth and gender. In addition, Z33 will ask for information about your education and employment history. In that context, Z33 may also view a (business) social media profile such as LinkedIn. Z33 will only process the data insofar as it has a legitimate interest in the processing thereof and if the processing is necessary for the purpose of finding the right candidate for the position.
5. How long do we store data?
Z33 does not retain personal data longer than is necessary for the purpose for which the personal data was obtained, unless the retention of this data is necessary for us to comply with a legal obligation. Or, because we have a legitimate interest in doing so. Or because this data is stored at your request and with your permission. Your personal data will be removed if it appears that your contact details are no longer correct, your personal data will be processed on the basis of your consent and you withdraw your consent, the legitimate interest on the basis of which we process personal data will lapse, and after the expiry of the specific periods stated below:
Security / Camera surveillance
The images taken for security and camera surveillance purposes will in principle be stored for a maximum of 4 weeks. In the event of an incident, the images relating to that incident will be stored until the incident has been (fully) dealt with. Settlement of complaints Information about the settlement of questions or complaints will be stored for a maximum of 2 years after settlement.
Photos and film recordings at events
Z33 will keep photo and/or video material of events for a maximum of 15 years after the event. Unless there is a justified interest (legal basis) in connection with our archive function to store certain photos for an indefinite period of time.
Donors, Friends, Members, Funds, Benefactors, Contacts
The contact details of persons who support Z33 (for example as a Friend) or who are (have been) a partner or member of Z33, will – also taking into account the marketing interest in this and the function of our (sponsor) network – be kept for a maximum of 7 years after termination of the agreement, gift, donation or cooperation. The personal data of persons who purchase products and/or services (such as tickets or (image) material), act as contact person during educational visits or rent a room at Z33, will be kept for a maximum of 5 years after the termination of the last agreement.
Data of applicants
Personal data processed as part of the application procedure will be retained for a maximum of 4 weeks after completion of the application procedure. If Z33 wishes to keep the personal data for a longer period, it will ask the applicant for permission, after which the data will be kept for a maximum of one year.
6. Who is involved in the processing of your personal data and with whom do we share such data?
Z33 employees may have access to your personal data during the performance of their duties. Access to personal data is only possible if this is necessary for the specific employee to perform his or her work. We may use third parties to support our organization, whereby these third parties process personal data. If Z33 engages such “processors”, Z33 has entered into an agreement in which, among other things, it agrees on the obligations of such third party and, for example, that your personal data will be adequately secured. Unless there is a legitimate interest of our museum or a legal obligation, Z33 will not provide your personal data to third parties for commercial purposes. Except with your explicit consent. In that case you have the right to revoke your consent, see section 8 below. Your personal data may be processed within the countries of the European Economic Area (EEA). Your personal data will not be processed outside the EEA.
7. What security measures do we take and how do we report data breaches?
Z33 has taken appropriate technical and organizational measures to protect your personal data against loss or any form of unlawful processing (hacking), unauthorized access and disclosure. Persons who have access to your data on behalf of Z33 are bound to secrecy and careful handling of your data. Our employees are bound by an internal privacy policy. When Z33 engages third parties as processors, we require the same technical and organizational measures from our processors and have set this down with them in a processor agreement. In the unlikely event of a data leak, we will – in cases where this is necessary according to the GTC (GDPR) and/or other legislation – report this (in a timely manner) to the Personal Data Authority and where necessary also to you personally.
8. What are your rights?
On the basis of the GDPR you have the following rights as a person involved:
The right to request information about the processing of your personal data;
The right to have your personal data transferred to another party (data portability);
The right to change your personal data;
The right to revoke your consent;
The right to have your personal information removed if it is no longer necessary for the purposes for which it was obtained or if you withdraw your consent. You do not always have the right to have your data removed, exceptions may apply;
The right to limit the processing;
The right to object to the processing;
The right to file a complaint with the Personal Data Authority if you are of the opinion that Z33 would act in violation of the applicable privacy rules.
Z33 considers it important to inform you that the rights described above are not absolute rights, and that under certain circumstances, Z33 is not required to comply with a particular request. We will evaluate each request separately based on the specific circumstances and applicable laws. If we are unable to comply with a particular request, we will always motivate our decision to you. If you do not agree with our decision, you can lodge a complaint with the competent data protection authority, the Belgian Privacy Commission. You can send your (privacy) requests to Z33 by e-mail to privacy@z33.be and/or by post at the following address: Z33, Bonnefantenstraat 1, 3500 Hasselt, for the attention of our data protection officer. In connection with these specific processing purposes, the rights of data subjects as set out in paragraph 8 (with regard to accessing, amending or deleting the personal data) are limited.
9. Use of cookies/hyperlinks
Our website uses so-called cookies, scripts, beacons/tags and pixels (hereinafter: cookies). Cookies are small pieces of information that your browser stores on your computer and contain (limited) information about you as a user. Z33 uses and places cookies to collect information about the use of our services and to improve and adapt these to the wishes of our visitors. Cookies are also used for our own marketing purposes, including online advertisements. These cookies may be placed by Z33 or third parties. You can (partially) choose not to accept these cookies by configuring your internet browser accordingly. The cookies used by Z33 can be divided into different categories:
Functional cookies
Functional cookies are cookies that are necessary for the proper functioning of the Z33 website.
Analytical cookies
These cookies are used for analytical purposes. This allows Z33 to monitor the flow of visitors to the website.
Marketing cookies
The tracking cookies consist of cookies (from third parties) that monitor the Internet behavior of visitors in order to provide advertising tailored to the Internet behavior of visitors.
Other cookies
This category includes cookies that are not directly classifiable in the previous categories, but do have tracking or profiling features. For a complete and comprehensive overview of all cookies used by Z33, please refer to our cookie statement.
Hyperlinks
To the extent that we provide links to third party websites on our website, it is important to note that when visiting such third party websites, the Privacy Statement of the website in question applies, and not that of Z33.
10. Modification of this Privacy Statement
Our Privacy Statement may change from time to time. You can find the current version on our website. The latest version was updated on 20.01.2020.