PRIVACY POLICY

Who is responsible for the processing of personal data?

In accordance with current legislation, we inform you that any personal data you may provide while using the website https://tienda.museothyssen.org/(hereinafter "the Website") will be processed by Fundación Colección Thyssen-Bornemisza, F.S.P. (hereinafter, the "FUNDACIÓN"), C. I.F G-79015251, registered on March 3, 1989 in the Registro de Fundaciones Culturales Privadas del Ministerio de Educación, Cultura y Deporte under number 225, folio 24, with address at Paseo del Prado 8, 28014 Madrid, contact email address mtb[at]museothyssen.org and telephone number (+34) 914 203 944.

Are you required to provide personal data?

Visiting the Website does not imply that the user is required to provide any information about himself/herself. However, the use of some of the services available on the Website depends on the completion of personal information forms.

The data requested in the different forms of the Website are those necessary to provide the requested services. The refusal to provide the data indicated as necessary may result in the impossibility of adequately providing such services. Likewise, you may provide data on a voluntary basis in order to provide these services in an optimal way.

Likewise, certain functionalities of the Website depend on your authorization for the processing of your personal data.

For what purpose will the FUNDACIÓN process the user's personal data and for how long?

The personal data you provide for the provision of the various services made available through the Website will be processed by the FUNDACIÓN in accordance with the following purposes:

For the use of the online store, the purpose is to manage the sale of articles and publications in the Museum's store.
In case that you provide information through the contact forms, we will use your data to respond to your request and provide you with the information or resolve the issues presented.
In case of giving your consent, sending you information related to products, activities and campaigns carried out by the Museum and its Store.

Likewise, we inform you that certain features of the Website depend on the use of COOKIES, so that, in the event that you have not rejected the possibility of its use, we will proceed to the processing of certain information related to your use of the Website. You can see the conditions for its use in the "Cookies Policy" text.

At the time of requesting any of the services or making use of the indicated functionalities, you will be offered more detailed information about the specific treatments.

For how long will the FUNDACIÓN process personal data?

The User's data will be kept for as long as necessary for the provision of the requested services and, once such provision has been completed, your data will be kept for the legally required periods for any possible liabilities arising from the service provided.

In the case of registered users, the processing of the data will be kept until the request for cancellation of the account created.

What categories of user data will the FUNDACIÓN process?

The personal data necessary for the provision of the different services available on the Website will be those indicated in the corresponding form provided for the purpose of requesting such data.

What is the legitimacy of the processing of user data?

The processing of the User's data by the FUNDACIÓN is based on the User's request for the services made available through the Website or, where appropriate, on the consent requested for specific purposes, which may be withdrawn at any time. However, in the event of revocation of consent, this shall not affect the lawfulness of the processing of personal information previously carried out.

To which third parties will the user's data be communicated?

The personal information provided by the user will not be communicated to third parties, unless it is necessary for the provision of the requested services or when the user has expressly accepted its communication. In these cases, the user will be duly informed of this possibility before when requesting such personal information.

What is the user's responsibility?

The user shall be responsible for ensuring that the information provided to the FUNDACIÓN is true, accurate, complete and up to date. To this effect, the user will be responsible for the veracity of all the information provided and must keep the information duly updated, in such a way that it corresponds to his or her real situation.

Likewise, you will be liable for any false or inaccurate information you provide through the Website and for any damages, direct or indirect, that this may cause to the FUNDACIÓN or third parties.

What rights does the user have?

You may exercise your rights of access, rectification, deletion and portability of your data, of limitation and opposition to its processing, as well as not to be subject to decisions based solely on the automated processing of your data, where appropriate, before the Fundación Colección Thyssen-Bornemisza, F.S.P, Paseo del Prado núm. 8, - Madrid, Spain, or at the e-mail address rgpd@museothyssen.org. You also have the right to file a complaint with the corresponding supervisory authority.

Is data processing secure?

The FUNDACIÓN is committed to storing your personal data securely, taking into account all the precautions established by the RGPD and the Law.

Contracting with third parties that handle personal data requires the signing of confidentiality clauses when handling such data.

In order to guarantee the security of personal data the FUNDACIÓN follows the principles established by the Esquema Nacional de Seguridad (ENS), regulated by Real Decreto 3/2010, of January 8, which determines the security policy to be applied in the use of electronic media.

The Fundación's Websites and digital applications may contain links to and from the websites of our partner networks and sponsors. If you follow a link to any of these websites, please note that they have their own privacy policies and that the FUNDACIÓN is not responsible for these policies or any incidents that may occur as a result of your use of third party websites. Please check the policies of each website before submitting or posting personal data.

Can you change the privacy policy?

The FUNDACIÓN has the right to modify this Privacy Policy in order to adapt it to new legislation.

Last update: November 22, 2021

	Register as a user in the Foundation's online shop.
Data Controller	Fundación Colección Thyssen-Bornemisza, F.S.P
Purpose	Manage your account in the Museum's online store, as well as the sale of products and the resolution of inquiries or issues. If you give your consent, to send you information related to products, activities and campaigns carried out by the Museum and its Store.
Legitimacy	RGPD: 6.1.b) Data processing necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures. RGPD: 6.1.a) Consent of the data subject.
Recipients	No communications are planned.
Rights	To access, rectification, deletion and portability of your data, of limitation and opposition to its processing, as well as not being subject to decisions based solely on the automated processing of your data, where appropriate. The right to submit a complaint to the corresponding supervisory authority.
More information here	Private policy