Privacy Policy

Privacy Statement Art Rotterdam BV

Art Rotterdam values the privacy of all users of our services, website (https://artrotterdam.com, including subdomains), and the Art Rotterdam Portal. In line with the General Data Protection Regulation (GDPR), we process personal data in a careful and transparent manner. This privacy statement explains which data we collect, for what purpose, and how we protect it.

Contact Details

Art Rotterdam BV
Keizersgracht 241
1016EA Amsterdam

Data Protection Officer

privacy@artrotterdam.com
+31 (0) 10 7420258

Personal Data We Collect and Process

We process your data to inform you about and register you for our event. This includes:

• Your IP address and information about your activities on our website.
• Contact details, including your email address, first and last name, and company name.
• Interactions with our emails, such as open and click behavior.
• Event participation details, such as registrations for program components.

Purpose and Legal Basis for Processing Personal Data

Art Rotterdam BV processes your personal data solely for legitimate purposes:

• Registration for activities related to the Art Rotterdam event.
• Issuing e-tickets.
• Communication and updates regarding the Art Rotterdam event.
• Analysis and optimization.

Third Parties with Whom Data Is Shared

Art Rotterdam does not sell your data to third parties and only shares it when necessary to execute our agreement with you or to comply with a legal obligation. We enter into data processing agreements with companies that process your data on our behalf to ensure the same level of security and confidentiality. Art Rotterdam remains responsible for these processing activities.

To provide our services, we work with sub-processors who meet strict security standards:

• Google Analytics: Statistical analysis. GDPR compliant.
• Cloudflare: Network services. GDPR compliant.
• Mailersend: Email processing. GDPR compliant.
• Bubble Group: Cloud services. GDPR compliant.

Security Measures

Art Rotterdam takes the protection of your data seriously and implements appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized changes. If you believe your data is not properly secured or there are signs of misuse, please contact us at privacy@artrotterdam.com.

Art Rotterdam has implemented the following measures to secure your personal data:

• Security software, such as antivirus and firewall.
• Encryption and firewall: All our websites are secured with 256-bit SSL, and MS Bitlocker is used on computers.
• Monitoring and oversight: Logs are regularly reviewed, and backups are made daily.
• Data protection: Employees primarily use web-based software without local storage of personal data.
• DKIM, SPF, and DMARC: These internet standards are used to prevent emails sent in our name from containing viruses, spam, or phishing attempts.
• TLS (formerly SSL): Your data is transmitted via a secure internet connection. You can recognize this by the ‘https’ and the padlock in the address bar.
• Privacy by default: Our web applications are developed with privacy as a core principle and comply with OWASP Top 10 security guidelines.

Retention Period

Personal data collected in connection with event participation will not be retained longer than necessary for the purpose for which it was collected. After the event, the data will be deleted or returned within three months unless legal obligations require a longer retention period.

Personal data used for marketing purposes, for which you have given explicit consent, will be retained for a maximum of 2 years. With each interaction with us, this retention period is extended by 2 years.

Access, Modify, or Delete Data

You have the right to access, correct, or delete your personal data. Additionally, you have the right to withdraw your consent for data processing or object to the processing of your personal data by Art Rotterdam. You also have the right to data portability. This means you can request that we send the personal data we have about you in a computer file to you or another organization specified by you.

You can send a request for access, correction, deletion, data transfer of your personal data, or a request to withdraw your consent or object to the processing of your personal data to privacy@artrotterdam.com.

To ensure the request for access is made by you, we ask you to send a copy of your ID with the request. In this copy, black out your photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN) to protect your privacy. We will respond to your request as quickly as possible, but within four weeks.

Art Rotterdam also wishes to inform you that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority. This can be done via the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Changes to the Privacy Statement

We reserve the right to make changes to this privacy statement. Please regularly consult our website for the most current version of this document.