This Personal Data Protection Policy regulates the storage and processing of the personal information entered by Users when logging in and using Guggenheim-bilbao.eus by the Guggenheim Museum Bilbao Foundation (GMBF).
1. PERSONAL DATA
In accordance with Organic Law 15/1999, of 13 December, on the Protection of Personal Data, its Implementing Regulation 1720/2007, of 21 December, and with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, all information concerning identified or identifiable physical individuals voluntarily provided by the User to FMGB will be considered as “Personal Data”, and as such will be processed under the responsibility of FMGB and added to its automated files.
FMGB is a foundation with Tax Identification number G-48832240 entered in the Basque Country Register of Foundations with register number F-17. Its contact data are:
- Address: Abandoibarra Etorbidea, 2, 48009 Bilbao;
- E-mail address: firstname.lastname@example.org;
- Telephone number: +(34) 944359000;
- Fax number: +(34) 944359010.
FMGB will provide the User with all of the information they require to give their prior consent for FMGB to proceed with the processing of their personal data.
Unless otherwise stated in the data collection forms available at Guggenheim-bilbao.eus, personal information shall only be stored and processed to manage Users’ requests at Guggenheim-bilbao.eus and to send information to them about GMBF activities, products and services.
In particular, said purposes may be:
(ii) to carry out User satisfaction surveys, update information, announce competition or prize draw winners or publish images of activities with Community Members.
(iii) to manage the User’s publicity preferences; and
(iv) to comply with the legal obligations which correspond to FMGB.
Personal Data requested from the User in the forms will be mandatory unless otherwise indicated in the corresponding form. In the event of the User failing to provide the mandatory data, FMGB will be unable to process the form in question. When entering Personal Data, the User guarantees FMGB that said data is correct, complete and truthful and that it refers only to the User and not to third parties. The User accepts that they hold sole liability for any failure to provide information or for its lack of correctness, truthfulness, and for any damage potentially caused to FMGB or third parties due to failure to comply with these obligations.
FMGB does not sell, lease or make Personal Data provided by Users available to third parties. Facilitating access by third parties to Personal Data by persons responsible for its processing when necessary for FMGB to provide a service does not constitute its transfer or communication, always within the limits permitted by applicable legislation.
Personal information shall not be used for direct marketing purposes, unless the User has been informed and given their consent. The User can change their preferences in this regard at any time on the website, going to Store > My Account, or they can write to any of the addresses in section 1 of this Personal Data Protection Policy with the subject ‘About advertising communications’.
In general, and unless otherwise stated in the corresponding application, FMGB does not process Personal Data relating to minors. Information on minors collected at Guggenheim-bilbao.eus is highly restricted and does not disclose their identity, having as its sole purpose development of the Services on offer.
3. THIRD PARTY DATA
Generally speaking, to use Guggenheim-Bilbao.eus it is not necessary to provide the Personal Data of third parties. It is therefore prohibited, unless expressly requested, for Users to provide any kind of Third Party Data to FMGB or through Guggenheim-bilbao.eus.
Exceptionally, Users can provide Third Party Data if allowed by the form being completed and always provided that prior consent has been obtained and that the third party in question has been informed. In particular, in order for it to be understood that consent has been given, third parties must have been informed by the User and have accepted the General and Particular Conditions, as well as this Data Protection Policy. The User holds sole responsibility for managing and obtaining prior consent from third parties and will be held answerable for any damages caused due to not complying with said obligation.
4. THE EXERCISING OF RIGHTS BY THE USER
To exercise their rights of access, rectification, cancellation of their data and their opposition to the processing of said data in accordance with applicable regulations, the User must write, indicating as the subject “Communication related to Personal Data”, to any of the addresses indicated previously in section 1 of this Data Protection Policy, providing proof of the applicant’s identity.