Utrecht, 30 mei 2022
This is the privacy and cookie statement of Stichting DOMunder (KVK 30213532), located at Domplein 4, 3512 JC Utrecht on behalf of the historical attractions DOMunder and Lofen Palace.
Data collected during registration
When you register to buy tickets or place a booking for group visits or events we will collect personal data such as your name, address, contact and communication information such as telephone number and email address, and, if necessary, payment details.
We will only use your personal data for the purposes of allowing you to access those of our services that require registration and/or payment, or to provide and invoice for services. As such, your personal data will only be requested and processed to the extent required for the purposes of the contract. We will process personal data if necessary to comply to our legal obligations.
CCTV – camera systems
Our security camera’s may register your presence in our location and at the shop. We have a legitimate interest for the registration. We have cctv cameras for the safety of our visitors, personnel and buildings. No personal data will be connected to the video images.
Shared information with third parties
Your personal data will only be shared with third parties when:
• You have given us explicit permission
• The shared information has no link to you personally or is anonymized
• We are obliged by law
• It is required to complete a contract with you
• There is a justifiable reason.
Our third parties are our booking system supplier and the supplier of our continuous visitor survey. Without your consent your personal data will not be shared with third parties for marketing purposes. We use several software programs. The suppliers have access to personal data. DOMunder makes sure the data exchange is within the legal framework and we have processor agreements with all third parties. The agreements certify that all organizational and technical measures are made to ensure the safety of your personal data.
Duration of data storage
We will store your personal data no longer as necessary to achieve the respective purpose or for as long as specified in the various storage periods provided for under the applicable legislation. Personal data used for financial or fiscal purposes is stored for 7 years. The cctv footage is stored for 2 weeks and automatically deleted (unless there is a calamity in a certain period. The images may be stored for a longer period of time).
The EU General Data Protection Regulation was introduced on 25 May 2018. If there is no need to store your personal data by DOMunder you have the right to request the deletion of your personal data. There are some exceptions. For example the personal data we need to provide to the tax authorities.
If you want your personal data removed please contact us.
Other rights you have, based on the EU General Data Protection Regulation, are the right to see or alter your personal data and the right to object to the use of your personal data. If you want to exercise your rights please contact us.
In case you have the opinion that we do not comply to the legislation we will help you to find a solution. In case this doesn’t work out you have the right to file a complaint with the Autoriteit Persoonsgegevens.
This Privacy Statement came into effect on 30 May 2022. DOMunder has the right to change and update this statement.
Questions, requests and complaints
Do you have a question, request or complaint about this privacy statement or the processing of personal data by DOMunder? Please contact us.
This process helps us to analyse how our website is used so that we can optimise our content overall, and enables us to personalise content specifically for you, for example by recognising you as a return visitor to our website. The process also ensures that you do not need to re-register every time you use our personalised services.
The legal basis for this is Article 6 Para. 1 f) of the EU General Data Protection Regulation.