Terms of Use & Privacy Policy
Nicholas and Dolly Goulandris Foundation – Museum of Cycladic Art (the “Museum”), is committed to respect and protect your personal data. We understand and take into serious consideration the fact that you are aware of and interested in your personal data and the respective processing carried out with respect to such data.
This Privacy Policy applies to natural persons, such as the Museum’s clients, visitors, friends (supporters, young patrons, subscribers, donors, sponsors) and any other person who maintains any kind of relationship with the Museum, or who uses the Museum’s official website or other digital channels thereof (such as social media), or who visits the Museum’s premises and participates in the various activities and/or events it organizes.
This Privacy Policy provides detailed information about the type of personal data we collect and explains how the Museum processes your personal data as well as how you can manage and control the use and processing of your personal data, in accordance with the provisions of Greek and European data protection law including the General Data Protection Regulation (2016/679/ΕU), widely known as “GDPR”, which came into force on 25 May 2018.
[1] Who is the Controller of your Personal Data and how can you communicate with it?
Controller for the retention, collection, storage and further processing of your personal data is the:
“Nicholas and Dolly Goulandris Foundation – Museum of Cycladic Art”
Registered seat: 4 Neophytou Douka str., PC 106 74, Athens, Greece
Τ. +30 210 72 28 321-3 | Ε. museum@cycladic.gr
The purpose of this Privacy Policy is to provide you with information concerning the retention, storage, use and processing of your personal data and about exercising your respective data protection rights.
The Museum in compliance with the applicable legal framework, has taken all the steps required by implementing the appropriate technical and organizational measures for the lawful retention and further processing and safe storage of your personal data, while it is committed to ensure and protect by all means, the processing and safe storage of your personal data, in particular from the risk of accidental or unlawful loss, breach of security, alteration, unauthorized disclosure of or their otherwise unlawful processing.
For more information, you may contact the Data Protection Officer of the Museum, either via email at: dpo@cycladic.gr or in writing, at the address: 4 Neophytou Douka str., PC 106 74, Athens, Greece.
[2] What type of personal data we process and for which purposes?
Personal Data is all information that identifies you, such as your name, address or email address or your telephone number. The Museum processes the following personal data and for the below purposes:
Personal Data we collect and process on your behalf
• When you register in our website in order to create a personal account
Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number).
• During your participation in the kids contest
Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number).
• During your participation in the online exhibition for kids of the Museum of Cycladic Art
Your name and surnamePurposes of processing
The Museum only collects, retains and processes those personal data which is limited to what is necessary in relation to the purposes for which the processing is undergone.
[3] How we collect your personal data
We collect your personal data, directly from you, when you express your interest in the services, events and products of the Museum, when you participate in our workshops, courses or other programmes, when you purchase our products through our e-shop or by the Museum Shop, when you register your data online in our website or when you subscribe in our newsletter, as well as when you decide to help us by contributing to our work.
[4] To whom we disclose your personal data
We do not transfer your personal data to third parties, except to those with whom we cooperate and as required to facilitate the provision of our services to you, always under conditions that ensure that your personal data is not subject to unlawful processing, meaning other than the purpose of the transmission thereof in accordance with the above. For instance, we may transfer your personal data to credit card providers for the processing of a payment made by you following your order through the e-shop or by the Museum Shop, to third parties – natural persons or legal entities- that may provide promotional and marketing services on our behalf, to companies responsible for the management and maintenance of our website and to other providers as well as to companies for the provision of legal and accounting/tax services. We inform you that the above categories of recipients of your personal data do not process your data beyond the above mentioned purposes. In any case, the Museum guarantees that it will not transfer, disclose, provide etc. your personal data to third parties, without your consent, for any purpose or use. However, we reserve the right to disclose information related to you, if we are obliged to do so by the applicable legislation or if such disclosure is required by the competent governmental authorities, administrative authorities or other law enforcement bodies.
Please note that any unauthorized access to your personal data by any person, including our employees, is strictly forbidden.
In case the transfer of your personal data to a third country outside the European Economic Area (EEA) is necessary, we will always ensure the provision of an adequate level of protection for the processing thereof, by contractually binding our counterparty or partner to whom we disclose your data in order to ensure the same level of protection as that provided in Greece.
[5] What are your rights with respect to your personal data
You may exercise the rights referenced below, pursuant to the terms and specific provisions of GDPR:
• Right to access your personal data that we process, as well as other information in relation to the processing thereof.
• Right to rectification of your personal data, in case of inaccurate personal data concerning you or in case you want to update your information.
• Right to object to the processing of your personal data when there is a legitimate interest, including your right to object to the processing of your personal data for promotional purposes.
• Right to obtain restriction of processing of your personal data, which means you may request the restriction of the particular processing, provided that the accuracy of your personal data is contested by you or you have objections for the processing carried out or there is another reason provided for in the relevant Greek or European Legislation on the Protection of Personal Data.
• Right to data portability of your personal data, in order to receive your data and use it wherever you may wish, provided that the respective processing is based on your consent and is carried out by automated means and subject to the obligations and rights of the Museum to retain such data to fulfill its duty carried out in the public interest.
• Right to erasure of your personal data without undue delay and subject to your relevant request pursuant to the provisions of the applicable Greek and European Legislation on the Protection of Personal Data.
• Consent withdrawal. Where we process your personal data based on your consent, you also have the right to withdraw such consent at any time and without affecting the legitimacy of processing for the period before the withdrawal of your consent.
• Right to be informed in cases of security breach incidents, where applicable.
Please note that the exercise of these rights is not absolute and may be subject to limitations by law. In any case you have the right to lodge a complaint at the competent Greek independent authority, which is the Data Protection Authority (http://www.dpa.gr/), in case you have further queries on the processing of your personal data or in case of unlawful processing thereof.
For all the above cases, as well as for any further information you may send us an email with your relevant request, at: dpo@cycladic.gr.
[6] Security of personal data
We have implemented technical and organizational measures to ensure the lawful collection, processing and effective protection of your data from loss, alteration or unauthorized access thereto. We have, inter alias, implemented the following technical and organizational measures and procedures to protect your personal data:
• access to your personal data is restricted to the authorized persons
• IT systems used to process the data are only accessible by authorized persons
• access to above IT systems is monitored to detect and prevent any unauthorized access
• adoption of specific procedures for the retention of your personal data and the safe deletion/ destruction thereof
Our procedures and security measures we implement are being constantly improved to pace with technological developments.
[7] Updates and amendments to this Privacy Policy
The Museum reserves the right to modify/ update individual parts of this Privacy Policy without prior notice. Please always read the Privacy Policy before using our website as well as our services and products, to be informed about the current version of the Policy.
Last update of this Privacy Policy: 25.05.2018
