Personal Data Protection Policy
The protection of the privacy and individual rights of visitors to the National Gallery – Alexandros Soutsos Museum (‘National Gallery’) is our priority. When you visit our website, we collect your personal data, which may be processed for research and statistical purposes, as well as for reasons related to the violation of intellectual property rights. With this information regarding data protection, we wish to emphasise our commitment to managing your data in a safe and reliable way, and clarify how we use your personal data in accordance with data protection legislation.
Scope
This Personal Data Protection Policy applies to natural persons, visitors to the National Gallery, who either use our official website for browsing and downloading files or our electronic services, or visit our physical facilities and participate in various activities or events, or make purchases from our online shop, or purchase tickets online.
Definition of Personal Data
‘Personal data’ means any information relating to an identified or identifiable natural person. This information includes, for example, your name, address, email address, telephone number, and financial information (such as credit/debit card details). Additionally, further data are automatically collected for technical reasons during each visit to our website, such as the IP address provided by your internet service provider for your internet connection.
Purpose and Use of Personal Data
We collect your personal data directly from you when you express interest in our services. We always ensure that the personal data collected are strictly necessary for the purpose for which they are collected. We use these personal data to improve our Services and to better understand and service visitors. This means that we analyse your use of our Services and use this information to improve our services, so as to provide you with an improved visitor experience (for example, we analyse which services interest you by creating your personal profile and evaluating what might interest you and to provide recommendations to you when using our services).
Furthermore, we use your personal data to comply with applicable law and prevent the violation of legal order or to cooperate with law enforcement authorities.
Regarding our electronic services, personal data are collected, particularly when you register on our website and you create a personal account to gain access and download an audio guide file. The audio guide is an audio file of a guide through the National Gallery exhibits of your choice during your visit to our physical facilities. The personal data collected and processed in this case are your full name, email address, postal address, contact telephone number (landline and/or mobile). For you to access the audio guide, we collect your personal data to prevent the storage, reproduction, republication, transmission, or distribution of the audio material by third parties and the violation of the intellectual property rights of the National Gallery.
Use of Your Personal Data by Third Parties
Only authorised employees of the National Gallery have access to your personal data, to the extent necessary for performing their duties at the National Gallery.
We will not disclose to third parties the personal data you have provided to us without your express prior consent, unless required to do so for accounting/tax reasons. For example, we may transmit your personal data to suppliers/service providers for the implementation of agreements we have concluded with you, such as payment processing. However, we may transfer your personal data if required by law, or if such disclosure is required by competent governmental bodies, administrative authorities, or law enforcement agencies.
Provided that the same level of data protection is ensured as that provided in Greece, the transfer of your personal data to a third country outside the European Economic Area (EEA) is permitted, if necessary. We will always ensure that an adequate level of protection is provided for processing your data, contractually binding our counterparty or partner to whom we disclose your personal data.
Duration of Data Storage
Your data will be stored for the period required by the processing purpose.
Use of Cookies
Cookies are text files that help our website to deliver functionality. We use cookies to better understand how our website is used and to offer better navigation. These cookies are temporarily stored on your computer and transmitted only to our server when you visit our website. More information can be found in the documentation of your browser.
Personal Data Security
The security of your personal data is a high priority for us. Therefore, we protect your data stored with us through technical and organisational measures to effectively prevent loss or misuse by third parties, such as leakage, alteration, transmission, or any other unauthorised processing. Specifically, our employees who process personal data are bound by confidentiality.
Children and Youth
Personal data related to children and youth are accessible only by our staff, when it is absolutely necessary.
Especially in the case of individuals under the age of 18, we will not use their personal data for the promotion of services and products.
Links to Other Websites
Our website contains links to external websites of third parties over whose contents we have no influence. Therefore, we cannot assume any liability for the contents of these external links. Please refer to these external websites regarding your data protection.
Your Rights Regarding Personal Data
According to applicable laws and regulations, you have certain rights regarding your personal data, such as:
• Right of access. Upon your request, we will provide information regarding your personal data.
• Right to rectification of your personal data, in case of inaccuracies, or if you wish to update your data.
• Right to object. You have the right to object to our processing of your personal data for the purposes of promoting our services and products.
• Right to restrict processing. In some cases, you have the right to request the restriction of the processing of your personal data by the National Gallery. If you dispute the accuracy of the data, have objections to their processing, or there is any other reason set forth in the provisions regarding Personal Data Protection.
• Right to erasure. In some cases, we will erase your personal data without undue delay for compliance with a legal obligation.
• Right to data portability. In some cases, we will provide you with a report of your personal data kept in our file, so that these data may be transmitted to another data processing controller, directly from one controller to another where technically feasible.
Newsletter subscription
Upon your subscription as a recipient of the “Museum” newsletter and your consent to use your email address, for as long as it is valid and not revoked, you agree to receive updates via electronic messages from the “Museum”.
The “Museum” processes the personal data you provide during your subscription as a recipient of the newsletter, based on legitimate reasons for their processing which are:
- providing information to you about all kinds of actions, collaborations and the operation of the “Museum” or museum-related issues of interest related to the purposes of the “Museum”,
- preservation and protection of the lawful interests of both the “Museum” and yours (e.g., detection and prevention of malicious actions),
- consent you provide during your subscription as a recipient of the newsletter.
By declaring that you wish to receive the newsletter in your email, you accept that the “Museum” (employees and associates) collects relevant personal data for this purpose and takes appropriate protection measures to protect these personal data that it processes and to ensure that their processing is carried out in accordance with the obligations set by legislation, and the same applies to third parties who process personal data on behalf of the “Museum” for this purpose.
Contact Information
This Personal Data Protection Policy provides detailed information about the type of personal data we collect and explains how the National Gallery processes your personal data, as well as how you can manage and control the use of your information, in accordance with the provisions of Greek law and European legislation on the protection of personal data, including the General Data Protection Regulation (2016/679/EU), which came into effect on May 25, 2018.
Modification of this Data Protection Policy
This Personal Data Protection Policy may be amended. Please check our website to be informed of any amendments.
If you have any queries about this Personal Data Protection Policy, the manner in which we process your personal data, or if you want to exercise any of the above rights, please contact the National Gallery using the contact details below: [email protected]
