Brussels Museums

General Privacy policy Brussels Museums

1. GENERAL WARNING

1.1. The asbl Brussels Museums (hereinafter, « Brussels Museums ») respects the privacy of its users (hereinafter, the ​“Users”).

1.2. Brussels Museums processes the personal data transmitted to it in accordance with the legislation in force, and, in particular, Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, applicable from 25 May 2018 (hereinafter the ​“General Data Protection Regulation”) and the law of 30th July 2018 on protection of persons with regards to the processing of their personal data.

1.3. Access to the websites like www​.brus​selscard​.be, www​.brus​selsmu​se​ums​.be, www​.muse​um​night​fever​.be (hereinafter, the ​“Website”) and the purchase and use of products such as the Brussels Card implies the User’s full and unreserved acceptance of this Privacy Policy (hereinafter the ​“Policy”), as well as its general terms of use (hereinafter the ​“Terms”) and the Privacy Policy specific for the site (hereinafter, the ​“Privacy Policy Site”).

1.4. The User acknowledges having read the information below and authorizes Brussels Museums to process, in accordance with the provisions of the Policy, the personal data that he/​she communicates on the Website or are collected through museums or other sales channels as part of the service made available by Brussels Museums on its Website (hereinafter the ​“Service”).

1.5. By providing information to Users, Brussels Museums may be required to amend and adapt the Charter, in order to comply with any new applicable legislation and / or regulations (such as the adoption of the new European regulation in dealing with th– personal data - Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data - of 14 April 2016, and applicable as from 25 May 2018), the law of 30th July 2018 on protection of persons with regards to the processing of their personal data, the recommendations of the Belgian Privacy Commission, the guidelines, recommendations and good practice of the European Data Protection Committee and the decisions of courts and tribunals in this field.

1.6. The Policy is valid for all pages hosted on the Website and for the registrations of this Website, as well as all company pages managed by Brussels Museums on social networks, who is jointly responsible with the social network for the processing of data of visitors to the page. It is not valid for the pages hosted by third parties to which Brussels Museums may refer and whose privacy policies may differ. Brussels Museums cannot therefore be held responsible for any data processed on these websites or by them.

1.7. The communication of personal data is sometimes necessary in order to access to certain parts of the Website (for example for the booking of the Tram Experience or for taking part in a competition). Without communication by the User to Brussels Museums of these data, access may be denied.

2. DATA CONTROLLER AND DATA PROTECTION OFFICER

2.1. Simply visiting the Website shall take place without having to provide any personal data, such as first name, surname, postal address, e-mail address, etc.

2.2. As part of the Service, the User may be required to provide certain personal data. In this case, the data controller is:

Brussels Museums asbl, Galerie du Roi, 15, 1000 Bruxelles, Belgian business registry (BCE) number: 0457.816.640

2.3. Any question regarding the processing of this data may be sent to the following address: privacy@​brusselsmuseums.​be

3. DATA COLLECTED

3.1. By completing the order form on the Website or through museums or other sales channels such as webshops or visit.brussels and using the Service, the User allows, in particular, Brussels Museums to record and store, for the purposes mentioned in point 4, the following information:

  • identifying data, such as the first name and surname, marital status, e-mail address, date of birth and delivery address;
  • the banking information necessary for the Service, such as bank account numbers, IBAN and BIC/SWIFT;
  • invoicing information;
  • communications between the User and Brussels Museums;

3.2. The User also authorizes Brussels Museums to record and store the following data for the purposes mentioned in point 4:

  • information voluntarily provided by the User for a purpose specified in the Policy, the general terms of use, the Cookie Policy, on the Website or on any other medium of communication used by Brussels Museums;
  • additional information requested by Brussels Museums to the User in order to identify him or to prevent him from violating any of the provisions of the Policy;

4. PURPOSES OF PROCESSING THE DATA

4.1. We process your data for various purposes. For each purpose, only the data relevant to the pursuit of the purpose in question are processed. The processing consists of any operation (manual or automated) on a personal data Brussels Museums collects, stores and uses its Users’ data for the following purposes, in particular:

  • for the User to participate in games / contests / quiz and, in general, to provide the Service;
  • to analyze, adapt and improve the content of the Website;
  • to carry out internal statistical surveys and market surveys and to deploy various statistical systems and studies;
  • to carry out satisfaction surveys of the events to which the User subscribes
  • to allow the User to receive messages;
  • to detect and / or prevent fraud or similar activities of an illegal nature; - to verify credit cards and other types of payment cards;
  • to facilitate the provision and use of the Website and improve the Services offered by Brussels Museums, in line with the stated objectives, as well as the experience of the Users;
  • to respond to requests for information;
  • for any marketing and promotions actions offered by Brussels Museums to Subscribers to the Newsletter;
  • to inform them about the evolutions of the Website and its functionalities and ;
  • for any other purpose for which the User has expressly consented.

4.2. The legal basis of the processing of your personal data is based on:

  • your consent (e.g. newsletter registration, without purchase) ;
  • the execution of our contract with you or any request from you (e.g. a purchase of tickets or a Brussels Card, …) ;

We do need to collect some of your data to answer any request from you. If you choose not to share this data with us, it may render the performance of the contract impossible.

  • a legal obligation imposed on the controller ;

We do need to collect and store some of your data to meet various legal requirements, including tax and accounting.

  • our legitimate interest, provided that it is in accordance with your interests, freedoms and fundamental rights.

We have a legitimate interest in providing you with this information and interacting with you, especially to respond to your requests or improve our services, prevent abuse and fraud, control the regularity of our operations, exercise, defend and preserve our rights, for example in litigation, as well as evidence of a possible violation of our rights, manage and improve our relations with you, continually improve our website and our products/​services, unless such interests are supplanted by your interests or your fundamental rights and freedoms requiring the protection of your personal data. We take care in any case to maintain a proportionate balance between our legitimate interest and respect for your privacy.

If the legal basis of our treatment is your consent, you have the right to withdraw it at any time without prejudice to the lawfulness of the processing performed prior to withdrawal.

In the context of direct marketing, this means that you can unsubscribe at any time from newsletters and other commercial communications from us. You will be put in ​“opt-out”.

You can unsubscribe by sending us an email at the following address: privacy@​brusselsmuseums.​be or by clicking on the unsubscribe link at the bottom of each mail.

5. RIGHTS OF THE DATA SUBJECT

5.1. According to the regulations on the processing of personal data, the User has the following rights:

  • Right to be informed about the purposes of the processing (see above) and the identity of the data controller.
  • Right of access: the User may at any time have access to the data that Brussels Museums has on him or check if it is included in the database of Brussels Museums.
  • Right to rectification : we take all reasonable steps to ensure that the data we hold is up to date. We encourage you from time to time to access your account (if applicable) or to consult us to check that your data is up to date. If you find that your data is inaccurate or incomplete, you have the right to ask us to correct it.
  • Right to object: the User may, at any time, object to the use of his data by Brussels Museums
  • Right to erasure: the user may, at any time request the deletion of his personal data, except those which Brussels Museums has a legal obligation to keep on record.
  • Right of limitation of processing: the User may, in particular, obtain a limitation of processing when he has objected to the processing, when he disputes the accuracy of the data, or when he considers that the processing is illegal.
  • Right of portability: The User has the right to receive the personal data that he has communicated to Brussels Museums and may also ask said company to send this data to another data controller.

5.2. In order to exercise his rights, the User sends a written request, accompanied by a copy of his identity card or his passport, to the data controller:

  • by e-mail: privacy@​brusselsmuseums.​be
  • by mail: Brussels Museums asbl, Galerie du Roi, 15, 1000 Bruxelles

5.3. Brussels Museums will then take the necessary steps to satisfy this request as soon as possible and in any case within one month of receipt of the application. If necessary, this period can be extended by two months, given the complexity and the number of requests.

6. PERIODE OF STORAGE

Brussels Museums will keep the personal data of its Users for the duration necessary to achieve the objectives pursued (see point 4).

Brussels Museums may also continue to keep personal data concerning the de-registered User, including all correspondence or request for assistance sent to Brussels Museums in order to be in a position to reply to all questions or complaints that may be sent to it, and in order to comply with all applicable laws, namely in tax matters or as part of other legal requirements, in particular the conservation of information on payments made.

7. COMPLAINT WITH THE SUPERVISORY AUTHORITY

The User is informed that he has the right to lodge a complaint with the Data Protection Authority at the following address :

Data Protection Authority

Rue de la Presse 35

1000 Brussels

Tel : +32 (0)2 274 48 00

contact@​apd-​gba.​be

8. SECURITY

8.1. Brussels Museums has taken the appropriate organizational and technical measures to ensure a level of security adapted to the risk and that, to the extent possible, the servers hosting the personal data processed prevent:

  • unauthorized access to or modification of this data;
  • improper use or disclosure of such data;
  • unlawful destruction or accidental loss of such data.

8.2. In this respect, employees of Brussels Museums who have access to this data are subject to a strict confidentiality obligation. Nevertheless, Brussels Museums may in no way be held liable in the event that this data is stolen or hijacked by a third party despite the security measures adopted.

8.3. Users undertake not to commit acts that may be contrary to this Policy, the Terms, the Cookie Policy or, in general, the law. Violations of confidentiality, integrity and availability of information systems and data which are stored, processed or transmitted by these systems, or the attempt to commit one of these violations, shall be punishable by imprisonment of between three months and five years and a fine of between twenty-six euros and two hundred thousand euros, or one of these penalties only

9. COMMUNICATION TO THIRD PARTIES

9.1. Brussels Museums treats personal data as confidential information. It will not communicate them to third parties under any condition other than those specified in the Policy, such as to achieve the objectives set out and defined in point 4, or under the conditions in which the law requires it to do so.

9.2. Access to data, apart from that of the person responsible for data processing and their employees as indicated in Article 8 above, may, in certain cases, be granted to certain types of external parties, such as technical and email service providers, accommodation providers, IT companies, legal advisors, marketing services and our partners. This will always be done according to the stated purposes, e.g. in the context of our service and to inform, to enable the purchase of a ticket on an external channel.

9.3. Are considered as partners of Brussels Museums ; visit.brussels and all administrations, museums and bodies in the performance of their duties (hereinafter the ​“Partners”). In this context, Brussels Museums may communicate to its Partners, the personal information of its Users, for the purpose of accomplishing the purposes defined in paragraph 4.1.

9.4. Brussels Museums may communicate its Users’ personal information to third parties to the extent that such information is necessary for the performance of a contract with its Users. In such case, these third parties will not communicate this information to other third parties, except in one of the two following situations:

  • the communication of this information by such third parties to their suppliers or subcontractors to the extent necessary for the performance of the contract;
  • where such third parties are obliged by the regulations in force to communicate certain information or documents to the competent authorities in the field of combating money laundering, as well as, in general, to any competent public authority.

9.5. The communication of this information to the aforementioned persons shall, in all circumstances, be limited to what is strictly necessary, as a function of our services and the stated purposes of the processing, or required by the applicable regulations.

9.6. In the interest of helping its potential Users to discover new products and piquing their interest, Brussels Museums may also communicate personal information about its Users to third parties, provided the Users have explicitly consented to this.

10. TRANSFER TO A COUNTRY OUTSIDE OF THE EUROPEAN ECONOMIC AREA

Brussels Museums transfers data to a country outside the European Economic Area only when that country ensures an adequate level of protection within the meaning of the legislation in force and, in particular, within the meaning of the General Data Protection Regulation (for more information on the countries offering an adequate level of protection, see: : or within the limits permitted by the legislation in force, for example by ensuring the protection of data by appropriate contractual provisions validated by the European Commission

The information processed by Brussels Museums will be transferred or transmitted, or stored and processed, in the United States or other countries other than the country in which you live, for the purposes described in this Policy.

These data transfers are necessary to provide the services or processing set forth in the Policy, and to operate and provide you with our Products worldwide.

We use Standard Contractual clauses approved by the European Commission and we rely on the European Commission’s adequacy decisions concerning certain countries, where appropriate, for data transfers from the European Economic Area to the United States and other countries. If you have any questions in this regard, do not hesitate to contact us at the following address: privacy@​brusselsmuseums.​be

11. DIRECT MARKETING

The personal data will not be used for direct marketing purposes for articles or services that would not be identical or similar to those to which the User has already subscribed, unless the User has previously explicitly consented to such use by ticking the boxes provided for this purpose (“opt-in”).

When the User has given his consent to the use of this information for direct marketing purposes, the latter retains the right to object to such use at any time, upon request and free of charge. The User may simply communicate his request by writing to the following address: privacy@​brusselsmuseums.​be.

The user is responsible for the personal data that he provides and commits to inform visit of all changes to his personal data

12. NOTE CONCERNING MINORS

Persons under the age of 18 and persons who do not have full legal capacity are not allowed to use the Website. Brussels Museums asks them not to provide their personal data. Any infringement found in this provision must be reported without delay to the following address: privacy@​brusselsmuseums.​be

13. UPDATES AND CHANGES TO THE POLICY

If it informs its Users via the Site, by email or in any other manner, Brussels Museums may modify and adapt its Privacy Policy, particularly in order to respect any applicable new legislation and/​or regulations, recommendations from the Data Protection Authority in Belgium, guidelines, good practice recommendations by the European Data Protection Committee and decisions by the courts and tribunals on the subject. We recommend you regularly consult the Privacy Policy while referring to the most recent modification date indicated in the header of this document.

If a User opposes any modification of the Privacy Policy, they must immediately stop using the Site and can request that the data processor erases their personal data while respecting the legal provisions and conditions indicated in Article 5. 

14. VALIDITY OF THE CONTRACTUAL CLAUSES

14.1. Failure by Brussels Museums to invoke - at any given time - a provision of this Policy, may not be interpreted as a waiver to subsequently make use of its rights under the said provision.

14.2. The invalidity, expiration or the unenforceable nature of all or part of one of the above or below mentioned provisions shall not give rise to the invalidity of all the Policy.

Any fully or partially invalid, lapsed or unenforceable provision shall be deemed not to have been written. Brussels Museums undertakes to substitute this provision with another which, to the extent possible, fulfils the same objective.

15. APPLICABLE LAW AND COMPETENT COURT

15.1. The validity, interpretation and/​or implementation of the Policy are subject to Belgian law, to the extent permitted by the provisions of applicable private international law.

15.2. In the event of a dispute relating to the validity, interpretation or implementation of the Policy, the courts and tribunals of Brussels have exclusive jurisdiction, to the extent permitted by the provisions of applicable private international law.

15.3. Before taking any step towards the judicial resolution of a dispute, the User and it.brussels undertake to attempt to resolve it amicably. To this end, they shall first contact each other before resorting, where appropriate, to mediation, arbitration, or any other alternative method of dispute resolution.

Version Privacy Policy published 2023/02/22.