Last updated: February 2026
1. About this privacy policy
This privacy policy applies to the website of Museumnacht010 (hereinafter: "we", "us" or "our"). We respect the privacy of our visitors and users and handle personal data with care. This policy explains what data we collect, why we collect it, and how we handle it.
Responsible organisation:
Stichting tot beheer Museum Boijmans Van Beuningen
Postbus 2277
NL-3000 CG Rotterdam
Info@museumnacht010.nl
2. What data do we collect?
Account and login details
When you create an account on our website, we collect and process the following data:
- Email address — required to create your account and log in.
- Login method — you can log in with an email address and password, or via Google Login. When you log in via Google, we only receive your email address. We do not gain access to any other data from your Google account.
- Password — if you choose to log in with email and password, your password is stored in encrypted (hashed) form. We cannot view your password.
We do not store any personal information beyond your email address, such as your name, address, or phone number.
Favourites
With an account, you can save programme items as favourites. These favourites are linked to your account. You can share a unique link to your favourites list with others. Anyone who opens this link can view the favourites you have saved, but they cannot see your email address or other account details.
Cookies and analytics
We use Google Analytics to gain insight into how visitors use our website. Google Analytics places cookies on your device. Through our cookie banner, you can indicate whether you consent to this. We only use this data in aggregated, anonymised form to improve our website.
The following types of cookies are used:
- Essential cookies — necessary for the website to function and for logging into your account.
- Analytical cookies — from Google Analytics, only with your consent. These help us understand how the website is used.
3. Why do we use your data?
We process your data for the following purposes:
- Creating and managing your account.
- Saving and displaying your favourite programme items.
- Enabling you to share your favourites list via a unique link.
- Analysing website usage to improve our services (via Google Analytics, with your consent).
4. Legal basis for processing
We process your personal data based on the following legal grounds under the GDPR:
- Performance of a contract (Article 6(1)(b) GDPR) — processing your email address is necessary to provide you with an account and its associated functionalities.
- Consent (Article 6(1)(a) GDPR) — for placing analytical cookies via Google Analytics.
5. Sharing with third parties
We do not share your personal data with third parties, except in the following cases:
- Google — when you log in via Google Login, authentication is handled by Google. Google's privacy policy applies to their services. Additionally, we use Google Analytics; for this we refer to Google's privacy policy.
- Legal obligation — if we are legally required to do so.
We do not sell your data to third parties.
6. Storage and security
Your data is stored on servers within the European Union. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Passwords are stored in encrypted form.
7. Retention period
We retain your data for as long as your account is active. When you delete your account, your email address and saved favourites will be removed.
8. Your rights
Under the GDPR, you have the following rights:
- Access — you can request to see what data we process about you.
- Rectification — you can request the correction of inaccurate data.
- Erasure — you can request the deletion of your data.
- Objection — you can object to the processing of your data.
- Data portability — you can request to receive your data in a commonly used format.
- Withdrawal of consent — you can withdraw previously given consent (such as for cookies) at any time.
To exercise these rights, please contact us at Info@museumnacht010.nl
9. Complaints
If you have a complaint about how we handle your data, we would like to hear from you. Additionally, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
10. Changes
We may update this privacy policy from time to time. The most recent version is always available on our website. In case of substantial changes, we will inform you accordingly.
This privacy policy was last updated in February 2026.