Privacy statement

1. About this privacy statement

The Mauritshuis is home to the best of Dutch painting from the Golden Age. We aim to share our knowledge and the stories about our collection with you and with many others, both inside the museum and beyond. In order to do this, we may need to collect some personal information. This privacy statement outlines what information we may request from you and explain how we will protect your data. We also want to tell you about your rights and options for managing your personal information and protecting your privacy. We will update this privacy statement as required to ensure that it remains up-to-date. If we make any substantial changes, we will inform you by way of a notification on our website, where we will also post an updated version of this privacy statement.

2. Use of our products and services

The Royal Picture Gallery Mauritshuis (hereafter: Mauritshuis) manages personal information collected through transactions (ticket purchases, bookings for talks etc) and marketing cookies on the Mauritshuis website and apps. We use this personal information that you have shared to keep in touch. We also use your information online to improve your browsing experience on our website.

3. How do we use your personal information?

We use and analyse personal information for the following: 

1. To improve our products and services: we use your personal information to learn how you use our products and services. This allows us to develop new products and services, to improve our website and to personalise these for you.

2. To process your order: we use relevant personal information (including your name, e-mail address and payment details) to process and supply your order.

3. Marketing: if you subscribe to Mauritshuis newsletters, use a Mauritshuis app, purchase online products or services, provide feedback on these or use our website, we will use your personal information to keep you informed about our activities.

4. To improve our data: if we have received your personal information through various points of contact, we will in certain instances consolidate this data in order to improve our understanding of your preferences in relation to our products and activities.

5. For research and statistical purposes: We process your data for research and statistical purposes, using the information you provide when placing an order. If we issue surveys, polls, requests for interview etc., the data processed is the information you provide in response.

6. We will ask your permission if we want to use your personal data for purposes other than those outlined in this privacy statement, as required by current legislation. We will not use your personal data for any other purposes until this permission has been obtained.

4. How do we share your personal information?

We handle your personal information carefully and confidentially and do not share it with third parties other than those listed below:

4.1 With service providers

We will only share personal information that you have shared with us with our suppliers if this is necessary to provide our service. These suppliers may be involved in hosting, transport, payment and fraud, credit rating agencies, analysis platforms or shipment. We require these third parties to adhere to strict rules when handling your personal information, including the use of your personal information only in accordance with Mauritshuis instructions and current legislation. We will not share your personal information outside of the EU or with any international organisations.

4.2 With social networks

In certain situations our websites and apps may offer you plug-ins from various social networks. If you choose to communicate with a social network, such as Facebook or Twitter, your activity on our website or apps will also be made available to that social network. If you are signed in to one of these social networks while visiting our website or using one of our apps, or if you are communicating through one of the social media plug-ins, the social media network can add this information to your social network profile based on your account settings. If you do not wish to share your information in this way, you will need to sign out of your social network before visiting any of our websites or using one of our apps. In some instances it is also possible to change the settings in the app itself. Be sure to read these social networks’ privacy policies with regard to the collection and transfer of personal information, your rights, and how to set up your privacy settings according to your preferences.

4.3 With legal and law enforcement agencies

We will release personal data if this is required by legislation or legal proceedings, for the purpose of the administration of justice, to protect your interests, for investigation by law enforcement or regulatory authorities, to protect and defend the ownership and legal rights of the Mauritshuis, to safeguard the personal security of Mauritshuis website and (mobile) app users, or by the issue of a valid order by a court or law enforcement authority.

4.4 With The Hague & Partners

We process data in collaboration with The Hague & Partners personal data (postal code and house number) to generate and collect statistics on our visitors (incl. segmentation based on the cultural target groups model). The results of analysis cannot be linked to natural persons. We use the anonymous data in the context of accountability to our funding bodies, and as input for our programming and marketing policies.

5. How do we safeguard and store your personal information?

We are committed to protecting your personal data and to taking the appropriate technical and organisational security measures to safeguard your personal information against unauthorised or illegal handling and inadvertent loss, destruction or damage. We store your personal information for as long as is necessary to maintain our relationship with you, and comply with all legally defined storage periods.

6. What are your rights regarding your personal information?

We are open about the personal information we collect and made arrangements so that you can exercise all your rights in connection with your personal information.

6.1 Withdrawing authorisation

If we have received authorisation to use your personal information (for example to receive newsletters or to place cookies on your device), you can withdraw this authorisation at any time by contacting us or by changing your cookie preferences.

6.2 Accessing, deleting and correcting personal information

You can submit a request to access the personal information we have collected about you free of charge. Our contact details are provided in point 10 of this privacy statement. Once we have received your request and sufficient information to confirm your identity, we will supply you with a copy of the personal data that we hold on you and to which you have the right in accordance with current legislation. We will provide this information no later than a month after we receive your request. You can also ask us to make changes to your personal information at any time. You can always block, delete or otherwise remove your personal information. You can also write to us if you want to make a complaint about how your personal information is being used, wish to restrict the use of your information or want to ask us to provide your personal data in an accessible digital format to a third party (right to data portability). If, despite our best efforts, you are not satisfied with our response, you can make a complaint to the Dutch Data Protection Authority: Autoriteit Persoonsgegevens. 

6.3 Unsubscribing from marketing messages 

All of our marketing communications contain a simple way to unsubscribe and stop receiving further messages. You can also unsubscribe from particular channels (email, for example) by following the instructions contained in messages you receive through that channel. If you want to stop receiving marketing messages from the Mauritshuis, you can do so by using the unsubscribe link in the message you have received. You can also contact the Marketing Department at mail@mauritshuis.nl.

7. CCTV in the museum

CCTV is in operation in the museum. We keep CCTV recordings for a maximum of seven days. This surveillance is managed by the Mauritshuis security team. We carry out surveillance for the following reasons:

• We use our CCTV to monitor and protect our visitors, staff, the works of art and the building. This contributes to the sense of security felt by all our visitors. We also want to deter possible offenders and troublemakers with the use of CCTV.

• Video surveillance helps us to monitor everything that goes on in the museum. It is also used to assist the security team and in conflict and crisis management. Additionally, it helps us to provide assistance as effectively as possible during emergencies.

• CCTV images are also very important for law enforcement. They can help us detect criminal offences.

8. WiFi

If you use the free WiFi network at the Mauritshuis, your mobile device’s MAC address (WiFi address) will be recorded. See our website for the full terms and conditions related to the use of our WiFi network.

9. Information that we automatically collect, including cookies

We collect information about the pages that you visit on our website, as well as how long you stay on a particular page. When you visit our website, the details of your browser are sent to our servers. In this way we collect personal information, such as your IP address, the date and time of your visit, how long you stayed on our website, the referring URL (the URL of the web page that provided the link to our website), the pages you visited and information about your device and the browser. We use various technologies to collect and store your information during your visit to our website and use of our apps. This includes sending one or more cookies or other similar technologies to your device.

9.1 Our cookie policy

Cookies are small text files that are saved on your computer or mobile device when you visit a website. In this privacy statement, we use ‘cookies’ as an umbrella term for technologies such as cookies, flash cookies and tracking pixels. These do not use up much space and are automatically deleted when they are no longer valid. Some cookies expire at the end of your internet session, while others are saved for a certain amount of time. We mainly use cookies to ensure that your visit to our website is as enjoyable as possible. 

9.2 What are the different kinds of cookies that we use?

The cookies delivered by the Mauritshuis are known as ‘first-party cookies’. Cookies delivered by external parties are known as ‘third-party cookies’. Third-party cookies ensure that functions and functionality offered by third parties can be offered on or through the website (such as interactive content and analyses). This means that the parties placing these third-party cookies are able recognise your computer or smartphone, both during your visit to the website in question as well as to certain other websites. 

The most important cookies are the functional cookies. These are essential for the proper operation of the website and help you to navigate the website and use basic features, such as media plug-ins. We use performance and analytical cookies to improve our website.

Google Analytics
The Mauritshuis uses cookies to keep web statistics (Google Analytics) up to date. This information includes how many users visit the website, which pages they visit, how they came to the site, what they click on and what browser and screen resolution they are using. This information cannot be traced back to an individual user.

Blocking cookies
Most internet browsers can be configured to block cookies or to notify you whenever you receive a cookie. How you do this depends on the browser you are using. Please be aware that certain parts of the website will not, or not optimally, function if you block cookies. The process for disabling cookies is different for each browser.

Deleting cookies at a later stage
After visiting the website, you can choose to remove the cookies from your computer. The process for doing this is different for each browser.

9.3 What if you don’t want to accept cookies?

You can configure your browser settings to remove certain cookies or prevent them being stored on your computer or mobile device without your explicit consent. You can find more information about managing your cookie settings through the ‘Help’ option in your browser.

10. Our contact details

Do you have any questions about our use of your personal information, how to exercise your rights or our privacy statement? Then contact us at mail@mauritshuis.nl. If you prefer to get in touch by post, write to us at the following address: Mauritshuis, P.O. Box 536, 2501 CM The Hague, The Netherlands.


© Mauritshuis, The Hague May 2018. Subject to modifications.