This personal data protection policy (the “Data Protection Policy”) forms part of the General Conditions of the website hosted under the www.guggenheim-bilbao.eus (“Guggenheim-Bilbao.es”) domain name. Any term used which is not expressly defined in the Data Protection Policy will have the meaning attributed to it in the General Conditions.
This Data Protection Policy regulates the collection and subsequent handling by Fundación del Museo Guggenheim Bilbao (“FMGB”) of Users’ personal data obtained as a result of accessing and using Guggenheim-Bilbao.es.
1. PERSONAL DATA
In accordance with Organic Law 15/1999, of 13 December, on the Protection of Personal Data, its Implementing Regulation 1720/2007, of 21 December, and with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, all information concerning identified or identifiable physical individuals voluntarily provided by the User to FMGB will be considered as “Personal Data”, and as such will be processed under the responsibility of FMGB and added to its automated files.
FMGB is a foundation with Tax Identification number G-48832240 entered in the Basque Country Register of Foundations with register number F-17. Its contact data are:
- Address: Abandoibarra Etorbidea, 2, 48009 Bilbao;
- E-mail address: email@example.com;
- Telephone number: +(34) 944359000;
- Fax number: +(34) 944359010.
FMGB will provide the User with all of the information they require to give their prior consent for FMGB to proceed with the processing of their personal data.
Unless otherwise stated in the data collection forms contained in Guggenheim-Bilbao.es, Personal Data will be collected and processed for the sole purposes of attending to and managing, in each case, requests made by the User through Guggenheim-Bilbao.es, and for sending information by means of ordinary and electronic channels on the Guggenheim Museum Bilbao activities, products and services.
In particular, said purposes may be:
(I) to manage the Contractual Relationship and its compliance, and verify the compliance of the General and Special Conditions that the User has accepted at each moment in relation with his/her use of Guggenheim-Bilbao.es (for example, to purchase products at our Online Shop, etc.);
(II) to attend to applications, queries or suggestions the User presents to FMGB through Guggenheim-Bilbao.es;
(III) to manage the User’s publicity preferences; and
(IV) to comply with the legal obligations which correspond to FMGB.
Personal Data requested from the User in the forms will be mandatory unless otherwise indicated in the corresponding form. In the event of the User failing to provide the mandatory data, FMGB will be unable to process the form in question. When entering Personal Data, the User guarantees FMGB that said data is correct, complete and truthful and that it refers only to the User and not to third parties. The User accepts that they hold sole liability for any failure to provide information or for its lack of correctness, truthfulness, and for any damage potentially caused to FMGB or third parties due to failure to comply with these obligations.
FMGB does not sell, lease or make Personal Data provided by Users available to third parties. Facilitating access by third parties to Personal Data by persons responsible for its processing when necessary for FMGB to provide a service does not constitute its transfer or communication, always within the limits permitted by applicable legislation.
Personal Data will not be used for direct marketing actions unless the User has been previously informed of this possibility and has given their express consent for its use. The User can change their preferences in relation to the distribution of said advertising communications by accessing the section Buy > User Account or by writing indicating as the subject “Communication related to advertising”, to any of the addresses found at the beginning of this section 1 of the Data Protection Policy.
In accordance with Organic Law 15/1999, of 13 December, on the Protection of Personal Data, its Implementing Regulation 1720/2007, of 21 December, and with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, all information provided for the purposes of incorporation to the Members Program will be added to automated files owned by FMGB. FMGB will therefore be authorized to process said data in order to manage your participation in the Program, including your membership and its annual renewal; to send out information, by ordinary and electronic channels, on FMGB activities, products and services; to proceed with satisfaction surveys and data updates; and to publish the results of draws using the different publication formats, including the Internet and social media. FMGB will also be authorized to process data you provide during your Program membership, including the use of images that may be obtained during your participation in activities organized for Museum Members.
FMGB guarantees your rights to access, rectification, cancellation and opposition. These can be exercised by writing to firstname.lastname@example.org or in person at the offices of the Guggenheim Museum Bilbao, Abandoibarra Etorbidea, 2, 48009 Bilbao.
In general, and unless otherwise stated in the corresponding application, FMGB does not process Personal Data relating to minors. Information on minors collected at Guggenheim-Bilbao.es is highly restricted and does not disclose their identity, having as its sole purpose development of the Services on offer.
3. THIRD PARTY DATA
Generally speaking, to use Guggenheim-Bilbao.es it is not necessary to provide the Personal Data of third parties. It is therefore prohibited, unless expressly requested, for Users to provide any kind of Third Party Data to FMGB or through Guggenheim-Bilbao.es.
Exceptionally, Users can provide Third Party Data if allowed by the form being completed and always provided that prior consent has been obtained and that the third party in question has been informed. In particular, in order for it to be understood that consent has been given, third parties must have been informed by the User and have accepted the General and Particular Conditions, as well as this Data Protection Policy. The User holds sole responsibility for managing and obtaining prior consent from third parties and will be held answerable for any damages caused due to not complying with said obligation.
4. THE EXERCISING OF RIGHTS BY THE USER
To exercise their rights of access, rectification, cancellation of their data and their opposition to the processing of said data in accordance with applicable regulations, the User must write, indicating as the subject “Communication related to Personal Data”, to any of the addresses indicated previously in section 1 of this Data Protection Policy, providing proof of the applicant’s identity.