This website uses different types of cookies. You can read more about this in our Cookie Statement. You can indicate your cookie preferences via the "Change settings" button.

Vleeshal

Center for Contemporary Art

Privacy Statement

Vleeshal's statutory name is Stichting Beeldende Kunst Middelburg, abbreviated SBKM. In this privacy statement, we use the abbreviation of our statutory name. SBKM is committed to protecting your personal data. Personal data means any information, which can be traced back to you directly or indirectly. Through this Privacy Statement, we inform you about the processing of your personal data by SBKM. SBKM qualifies as the data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (GDPR) for the processing of your personal data.

Contact details

Office postal and visiting address
Kantoor Vleeshal / Stichting Beeldende Kunst Middelburg
Simpelhuisstraat 7
4331 PH Middelburg
The Netherlands

Exhibition space (NOT a postal address)
Vleeshal
Markt 1
4331 LJ Middelburg
The Netherlands

Personal data we process

SBKM processes your personal data because you use our services and/or because you provide it to us yourself. Below is an overview of the personal data we process:

  • When visiting our website: internet browser and device type, IP address, cookie identifiers, device identifiers, client identifiers.
  • When you subscribe to our newsletter: name and e-mail address, open and click rate, operating system.
  • When you sign up for our activities such as Vleeshal Friends, our public program, education, openings: name and address details, e-mail address, phone number and the activity you are signing up for.
  • For Vleeshal Friends membership: name and address details, names of partner and children if they also sign up as a Vleeshal Friend, e-mail address, telephone number and if you use direct debit payment: your account number and the name of the account.
  • For invitations to exhibitions and other activities by post: name and address details.
  • If you visit us and have a Netherlands Museum Pass (Museum Jaarkaart): your Netherlands Museum Pass number.
  • For applications to the Grants Committee: name and address details, e-mail address, telephone number.
  • If you apply to us: name and address details (name, first names, surname, initials, titles, gender, address, postal code, place of residence, country), other contact details (telephone number, e-mail address and similar details required for communication), date of birth, availability, CV with the information it contains, employment history, educational history (copies of diplomas, certificates, testimonials), content of your motivation, references, data concerning the position applied for, interview notes, assessment and competency test results and written communication with you.
  • From lender(s), borrower(s): name and address, e-mail address, telephone number.
  • Of (contact) persons at cooperating partners and companies and suppliers: name and address details, company name, email address, telephone number, bank account number, Chamber of Commerce number, VAT number.
  • Of invitees to openings, activities and our press list: name, company name website, e-mail address, phone number.
  • From (contact) persons at funds and grant institutions: name and address, company name, e-mail address, phone number.

Personal data of minors

SBKM does not intend to collect data on persons under the age of 16 unless they have permission from their parents or guardian. If you believe that we have collected personal data about a minor without such consent, please contact us at: office@vleeshal.nl.

Photographs

During our activities, we may take photos for our website and social media channels. We take atmospheric photos in which persons are not recognizable in the picture or indicate in which places photos are taken and/or ask consent to take photos. This consent may be withdrawn at any time. If you appear recognizably in a photo on our website or our social media channels, you can always contact us to have this photo removed by us.

On the basis of which legal processing grounds and for which purposes does SBKM process your personal data?

SBKM processes your personal data on the basis of one or more of the following legal processing grounds:

  1. If this is necessary for the performance of an agreement to which you are a party or to perform precontractual acts at your request;
  2. If this is necessary to comply with statutory obligations;
  3. If this is necessary to justify our legitimate interests or the interests of a third party;
  4. Your consent.

If SBKM processes your personal data on the basis of your consent, SBKM will ask you for it separately. You may withdraw your consent at any time. SBKM draws your attention to the fact that the withdrawal of your consent does not affect the lawfulness of the processing of your personal data prior to the withdrawal of your consent.

SBKM uses the above personal data for the purposes stated below, in respect of which we have indicated for each purpose on the basis of which of the abovementioned legal processing grounds (a through d) SBKM does so. If the processing is based on the principle of ‘legitimate interest’, we briefly explain this interest. If you have any specific questions in this respect, please do not hesitate to contact us.

SBKM processes your personal data for the following purposes:

  • In order to optimize our website using website statistics (see also our Cookie Statement): (c: our interest in providing an optimized website environment);
  • To send our digital newsletter: (d);
  • To process your registrations for activities such as Vleeshal Friends, our public programme, education and openings and to contact you about them (a and c: our and your interest in being able to communicate with you about them);
  • To execute the Vleeshal Friends membership, including to keep you informed about our activities, to provide personal membership cards and to carry out your annual direct debit if you choose this payment option (a and c: our legitimate interest to keep you informed about your Vleeshal Friends membership);
  • Marketing purposes (c: our legitimate interest to keep you informed about our activities, d);
  • To pass on your Netherlands Museum Pass to the Museum Association: (a and c: our legitimate interest to fulfil our obligations to the Museum Association);
  • To contact you about your grant application, assessment of degree of professionalism and quality of work (a, b, c: our legitimate interest to adequately assess grant applications);
  • For application purposes, more specifically: recruitment and selection, assessing suitability for a position that is or may become vacant with us, improving the application process (a, b, c: our legitimate interest to assess your suitability for the vacant position and d: consent if you wish to remain in portfolio for a longer period of time, see: "How long do we keep personal data?");
  • For our collection records (a and c: the interest to have an accurate overview of our collection including pieces on loan or given);
  • For fundraising purposes (a and c: our legitimate interest to raise funds);
  • For the administration of SBKM, including the calculation or recording of fees or benefits, income and expenses, the payment and collection of claims (including the use of collection agencies or bailiffs) (a, b, c: the importance of keeping proper records);
  • To be able to deal with any complaints and disputes about the service (a, b and c: to defend rights, to maintain and improve existing relationships by means of proper handling of complaints);
  • To maintain contact and communicate with you; (a, b, c: the importance of keeping in touch with our target groups, suppliers, etc.);
  • For placing orders or purchasing services (a, b, c: our interest in being able to keep proper records);
  • For conducting audits and other internal controls (a, b, c: our interest in being able to keep proper records);
  • To comply with our legal and statutory obligations (b and c: the interest of being able to meet these obligations).

How long do we keep personal data?

SBKM does not retain your personal data in an identifiable form for longer than is necessary to achieve the purposes included in this Privacy Statement. More specifically, SBKM applies the following retention periods:

  • Personal data that must be kept on the basis of Article 52 of the Dutch State Taxes Act will be kept for 7 years (from the end of the year in which the data in question have lost their current value for the (tax-) related business operations) in connection with the tax retention obligation incumbent on SBKM pursuant to Article 52(4) of the Dutch State Taxes Act.
  • We keep an e-mail address for sending the digital newsletter until you indicate that you no longer wish to receive the newsletter.
  • The personal data that are processed in the context of the handling of complaints will be removed no later than two years after the complaint and/or the legal proceedings arising from it have been dealt with.
  • The personal data you provide for your application will be kept for four weeks after the end of the application procedure. If you give your consent, we will keep your personal data on file for one year after the end of the application procedure. This allows us to approach you for any future vacancies. If you join SBKM, we will include the data processed by us as part of your application in your personnel file.

For the retention periods of information obtained through cookies on our website, please refer to our Cookie Statement.

The abovementioned specific retention periods can be extended if statutory retention obligations apply or will become applicable. SBKM may also retain the personal data for a longer period of time if this is necessary in light of SBKM’s legitimate interests, e.g. for the handling of incidents and/or legal disputes.

Sharing of personal data with third parties

SBKM does not provide your personal data to third parties (‘recipients’ within the meaning of the applicable privacy legislation), unless this is necessary for the proper performance of the purposes set out in this Privacy Statement, if the law requires us to do so or if you have provided your consent to this end. The third parties to whom the personal data are made available are obliged to handle your personal data confidentially. If these parties qualify as a ‘data processor’ within the meaning of the applicable privacy legislation, SBKM will ensure that a data processing agreement is concluded with these parties, which complies with the requirements included in the GDPR.

SBKM can share your personal data if and when necessary with:

  • Employees of SBKM and our internal bodies such as the Supervisory Board and the Grants Committee;
  • Suppliers (e.g. software suppliers, bailiffs, our mail service provider MailChimp from The Rocket Science Group LLC for sending the newsletter, our print shop for sending invitations by post, translation agencies, accountants, legal advisors, our website builder and the like);
  • With SBKM’s legal successors if SBKM is acquired by or merged with another company, for example through bankruptcy and also with third parties involved in such proposed or actual business transaction;
  • Courts and government institutions;
  • Other parties, such as regulators and other authorities where required by law or with your consent.

In order to provide our services, SBKM might need to transfer your personal data to a recipient in a country outside the European Economic Area with a lower degree of protection of personal data than the European law offers. In that case, SBKM will ensure that such a transfer of personal data is in accordance with the applicable laws and regulations, for example by concluding a model contract prepared and approved for that purpose by the European Commission and will assess whether any additional measures are necessary to guarantee an appropriate level of protection of your personal data. Please do not hesitate to reach out to SBKM if you wish to receive more information about the appropriate or suitable safeguards in place for data transfers outside of the European Economic Area or if you would like to obtain a copy of them.

How we secure your personal data

SBKM takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. For questions about the security of your personal data, or if you suspect or have evidence of misuse, please contact us at office@vleeshal.nl.

Your privacy rights

You have the following rights in respect of the processing of your personal data by SBKM:

  • the right to request whether SBKM processes your personal data and if so, the right to access your personal data and to receive information about the processing of your personal data;
  • the right to rectification of your personal data if these are incorrect or incomplete;
  • the right to have your personal data deleted (‘right to be forgotten’);
  • the right to object to the processing of your personal data or to limit the processing of your personal data;
  • the right to withdraw your consent for the processing of your personal data, if the processing is based on your consent;
  • the right to receive or surrender your personal data to a third party appointed by you in a structured, customary and machine-readable form (‘right to data portability’).

SBKM does not use automated decision-making within the meaning of Article 22 GDPR.

To exercise your rights, you can contact Vleeshal via office@vleeshal.nl or by post via:

Vleeshal
Simpelhuisstraat 7
4331 PH Middelburg
The Netherlands

In order to prevent that SBKM discloses information to the wrong person, SBKM can ask you for additional information to verify your identity. In principle, SBKM will inform you whether SBKM can comply with your request, within one month after receipt. In specific cases, for example when it concerns a complex request, this term may be extended by two months. SBKM will inform you of such an extension within one month after receiving your request. On the basis of the applicable privacy legislation, SBKM can refuse your request under certain circumstances. If this is the case, SBKM will explain to you why. You can find more information about your privacy rights on the website of the Dutch Data Protection Authority.

Complaints

If you have a complaint about the processing of your personal data by SBKM, we will be happy to work together to find a solution. If this does not lead to the desired result, you will have the right to file a complaint with the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority. If you live or work in another country of the European Union, you can file a complaint with the supervisory authority of that country.

Amendments

SBKM may make changes to this Privacy Statement. Changes will be published on this website.

Date of last modification: 27 December 2022