VanEcho is committed to protecting your privacy and ensuring transparency in how we handle your personal data. This Privacy Policy outlines the types of information we collect, how we use it, your rights, and how to contact us regarding your data.
1. Who We Are
VanEcho is a museum-focused project based in Amsterdam, Netherlands, dedicated to the life and art of Vincent van Gogh.
Contact Details:
VanEcho
Johannes Poststraat 27, 1063 TK Amsterdam, Netherlands
Phone: +31 20 613 1016
Email: [email protected]
2. What Data We Collect
We collect and process personal data in the following categories:
a) Information you provide directly:
Full name
Email address
Phone number (optional)
Content of your message (when submitting a contact form or emailing us)
b) Automatically collected data:
When you access our website, certain technical data is collected automatically:
IP address (anonymized if using Google Analytics)
Device type and browser
Pages visited and time spent
Referring websites
Language settings
We do not collect sensitive personal data (such as racial origin, political opinions, or health data).
3. How We Use Your Data
Your personal data is used only for clearly defined purposes:
To respond to your inquiries or messages submitted through contact forms
To provide requested information or support
To analyze website performance and user engagement (e.g., via Google Analytics)
To maintain the security and functionality of the website
To comply with legal obligations
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your data under the following lawful bases, as defined in the General Data Protection Regulation (GDPR):
Consent – when you voluntarily provide information via our forms
Legitimate interest – for security and analytics (with minimal privacy impact)
Legal obligation – to comply with applicable laws (e.g., for data protection compliance)
5. Data Retention
We retain your personal data only for as long as necessary:
Contact form submissions are stored for a maximum of 12 months
Technical analytics data is retained by third-party tools (e.g., Google Analytics) per their policy, typically 14 months
We regularly review and securely delete data that is no longer needed
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
SSL encryption for all traffic
Access restrictions to stored data
Secure backups and server environments
Despite these efforts, no digital transmission is 100% secure. We cannot guarantee absolute security, but we work to minimize risks.
7. Data Sharing and Third Parties
We do not sell or rent your personal data to any third parties.
However, we may share data with trusted service providers under strict agreements, such as:
Hosting providers (for secure storage)
Analytics services (e.g., Google Analytics – anonymized usage data)
Email infrastructure providers (e.g., mail servers to send/receive communication)
These parties only access data when required for service delivery and are obligated to comply with GDPR.
8. International Transfers
We aim to keep data within the European Economic Area (EEA). If data is transferred outside the EEA (e.g., via Google services), it is done under recognized safeguards such as Standard Contractual Clauses (SCCs).
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of access – request a copy of your data
Right to rectification – correct inaccurate or incomplete data
Right to erasure – request deletion of your data ("right to be forgotten")
Right to restrict processing – limit how your data is used
Right to data portability – request transfer of your data to another service
Right to object – oppose processing based on legitimate interest
Right to withdraw consent – applicable when consent was the basis for processing
You may exercise your rights by contacting us at [email protected].
10. Cookies and Tracking Technologies
We use cookies for functionality and performance analytics.
Full details are available in our Cookie Policy. You can manage your preferences at any time through browser settings or our cookie banner.
11. Children’s Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect data from minors. If you believe we have collected such data, please contact us immediately for removal.
12. Updates to This Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The “Last Updated” date will be revised accordingly. Please review this page periodically for the latest information.
13. Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or your data, please contact:
VanEcho
Johannes Poststraat 27, 1063 TK Amsterdam, Netherlands
Phone: +31 20 613 1016
Email: [email protected]