Privacy policy

We process personal data to provide the best possible service to our visitors and relations and handle this data with care. This privacy statement explains how we manage personal data.

a. Data controller

The organisation responsible for the processing of your personal data is Stichting de Fenix, with its registered office at Paul Nijghkade 9, 3072 AT in Rotterdam, registered with the Chamber of Commerce under number 73931152.

b. Categories of personal data and purpose(s) of processing

When visiting our location(s), participating in an event, making a purchase via the ticket shop or webshop, subscribing to the newsletter, or otherwise contacting us, we may process the following personal data:

• Identification data: name, title, date of birth, address, place of residence, country.
• Contact details: telephone number, email address.
• Payment details: bank account number, credit card payments.
• Preferences and interest: purchase history, areas of interests, possession of a museum card or discount passes.
• Online data: IP address, marketing opt-in.
• Other data: contact history, commitments ad agreements, information about the nature of the relationship.

This data is processed for the following purposes:

• Handling ticket or webshop orders, reservations and other (online) activities.
• Communication about your visit, reservation or other activities.
• Security purposes, including camera surveillance.
• Offering services in the desired language.
• Providing information about our activities via e-mail and social media.
• Invitations to events.
• Answering questions and handling complaints.
• Analysis and improvement of our services and communication (anonymized where possible).

The processing of personal data is based on one of the following legal grounds as defined in the General Data Protection Regulation (GDPR):

• Consent: For example, for the newsletter, cookies, or the publication of visual materials.
• Contractual necessity: For the purpose of executing purchase or handling a reservation.
• Legal obligation: Such as to meet the statutory data retention period retention for transactional payment data imposed by tax law.
• Legitimate interest: Including security surveillance and website analytics.

c. Specific processing

When visiting our location(s)

• Camera surveillance: CCTV is used exclusively for security purposes and can be requested by authorities. More information is available in our camera protocol.
• Free Wi-Fi: When using our network, the MAC address of the device may be visible, but this data is not stored or shared.
• Photo and audio video material: (audio) visual material can be used for atmospheric impressions or reporting. These publications are allowed under the journalistic exception as described in the GDPR. When we use audiovisual material for (other) commercial purposes we will ask your consent.

Website use, online services and marketing

Visitors and contacts who have provided their email address to us and given consent, or have not objected to receiving our communications, will be kept informed about our organization, for example, via email or social media. Additionally, we use the targeting capabilities offered by social media platforms to advertise, such as LinkedIn and Meta custom audiences. This allows us to allocate our advertising budget more efficiently.

Our websites and apps use cookies and other technologies to enhance the user experience and ensure functionality. We distinguish between functional cookies, which are necessary for activities such as online ticket sales, cookies for analytical purposes, and marketing cookies. Upon the first visit to our website, a cookie banner is displayed, where you can specify your preferences. Detailed information about the cookies used is available in this banner, and your settings can be changed at any time. If consent is given, we place marketing cookies from Google Ads, Meta, and TikTok, among others.

Ticket Sales, Reservations, and Rentals

When purchasing tickets, reserving an activity, or renting a space, personal data is processed to handle the request. The same set of data is used as mentioned under point b.

Relations, Friends, and Donors

Personal data of press contacts, suppliers, friends, donors, and other contacts are processed for communication and administrative purposes. The same set of data is used as mentioned under point b.

Interest Profiles

Based on interactions and provided data, we may create interest profiles. This allows us to improve our services and communication, and provide more relevant information and offers.

d. Retention periods

Personal data will not be kept longer than necessary for the purposes for which they were collected, taking into account legal retention periods. Camera footage is stored for a maximum of four weeks, unless it is needed for an investigation. Data for which consent has been given will be retained until consent is withdrawn.

e. Your privacy rights

You have the right to access, correct, and delete your personal data. Additionally, you can object to processing, request restriction of processing, or ask for data portability. Consent can be withdrawn at any time. You can exercise these rights by contacting us using the details below.

f. Security of personal data

We implement physical, technical, and organizational measures to protect personal data. Data entered online is transmitted in an encrypted form. Data processing takes place within the European Union or with appropriate safeguards when transferred outside the EU.

g. Questions or complaints

For questions or complaints, please contact Stichting de Fenix, Paul Nijghkade 9, 3072 AT Rotterdam, info@Fenix.nl. You also have the right to submit a complaint to the Dutch Data Protection Authority.

h. Changes to the privacy statement

This privacy statement is subject to change. The most recent version is shown below.

Last modified: February 2025