Privacy policy

1.- General provisions:

We inform you that any personal data that you provide via this website will be processed by the PRIVATE FOUNDATION OF THE PUBLIC SECTOR ANDORRA MUSEUM (hereinafter “MUSEAND”) as the party responsible for processing. MUSEAND is the owner of this website and has its registered address at Carrer Prat de la Creu, 62-64, AD 500 Andorra la Vella (Principality of Andorra), registered in Section II of the Foundations Registry of the Principality of Andorra with number 6/2015 and with Tax Registration Number U-801663-B. MUSEAND informs you that for any queries related to Data Protection, you may contact our Data Protection Delegate according to letter b) of section 2 of this Privacy Policy.

The contact and electronic contracting of products and services offered on this website by MUSEAND may only be carried out by persons of 18 years of age and over, and not by any persons under this age. In accordance with this, if you provide your personal data through this website, you do so under the premise that your are older than 18 years of age. In the event that MUSEAND verifies that, in contravention of the aforementioned rule, the personal data has been provided by a person under the age of 18 years of age, it will be deleted immediately.

Personal Data of third parties, other than the interested party, should not be provided through this website. Nevertheless, in the event that it is essential to carry out a request that justifies the provision of personal data, the person doing so assumes responsibility for informing the owner of the personal data in advance of the contents of article 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and regarding the free movement of such data (hereinafter “GDPR”) within the conditions established in this provision.

In the event that, in order to duly carry out a request, you must provide personal data about persons younger than 18 years of age, you guarantee MUSEAND that you do so in your capacity as father, mother or legal guardian of the owner of the personal data, also granting your express consent to the processing of the same. In this case, you must also accredit your parental relationship or guardianship by providing an official document, for example, a scanned copy of your Family Book.

2.- File declared according to Andorran law before the Data Protection Agency of the Principality of Andorra:

In accordance with the requirements of Law 15/2003, of 18 December, on Personal Data Protection (hereinafter “LCDP”), and with the regulations issued under it, we inform the users of this website that any type of personal data provided to MUSEAND will form part of a file owned by MUSEAND, duly registered in the Data Protection Agency of the Principality of Andorra.

3.- Party responsible for the processing of your personal data, representative in the European Union and data protection delegate:

a) Party responsible for processing:

The party responsible for processing is MUSEAND, whose identifying data and contact details are set out in section 1 of this Privacy Policy.

b) Data Protection Delegate:

Contact is via the following email address dpo@museucarmenthyssenandorra.ad

4.- Purposes of the processing, legal basis of the processing and the conservation period of the personal data:

MUSEAND may process your personal data for the purposes described below:

a) Using the contact form the MUSEAND provides on this website for you to make requests for information, queries or claims, this entity will collect and process your personal data to be able to manage your request, as well as to carry out all processes and/or procedures necessary to deal with said request. The legal basis for the processing of personal data is the consent that you demonstrate when ticking the box that accompanies the sentence “I have read and accept the privacy policy” that appears on the form provided by MUSEAND on this website. The provision of your personal data through this form is, therefore, voluntary, although if you do not provide us with your personal data, your request, query or claim may not be processed. You may withdraw your consent at any time, although doing so will make any processing of your request, query or claim impossible.

MUSEAND will store your personal data until your request for information, query or claim has been managed. In case of any legislation that obliges MUSEAND to store your personal data relating to this request for any longer, or if MUSEAND considers that it must do so, for example to attend to possible claims on your part, MUSEAND shall store your personal data for said additional period of time. Once these periods have ended, the personal data will be eliminated.

b) via the “Buy Tickets” section provided by MUSEAND on this website to reserve and/or purchase its products and/or services online, MUSEAND will collect and process your personal data in order to manage the reservation, purchase, sending, delivery and payment processes related to the reservation and/or purchase made. The legal basis for this processing of your personal data is the corresponding contract, through which you acquire the products and/or services. The provision of your personal data for this purpose is voluntary, although, if you do not provide your personal data, you will not be able to acquire the corresponding product or service via this website.

MUSEAND will store your personal data until the reservation, purchase, sending, delivery and payment processes related to the reservation and/or purchase made have been completed. Subsequently, the personal data will be stored for the whole time taken to prescribe the legal responsibilities arising from the formalised contract, in accordance with the applicable legislation.

If your personal data is used for several purposes that oblige MUSEAND to store it for different periods of time, MUSEAND will apply the longest of the storage periods.

5. Categories of recipients, including service providers:

If it is necessary to carry out the aforementioned purposes, your personal data may be transmitted to the following categories of recipient:

Travel agencies, hotels and other similar entities which have provided MUSEAND with their personal data;

MUSEAND service providers who must process your personal data in relation to the purpose in question, which they will carry out according to the instructions of this entity and in accordance with their privacy policy and any appropriate security and confidentiality measures established by MUSEAND;

Third parties which have no relation to MUSEAND, if they identifies in good faith, the need to carry out the corresponding communication in order to: (1) comply with any applicable law, regulation, legal procedure or governmental requirement or executive force; (2) comply with the terms and conditions of the product and/or service acquired, including the investigation of possible breaches; and/or (3), detect, prevent or address in another way any fraud, security or technical problems;

Competent Public Administrations, in the cases set out in the Law and for the purposes it defines.

Financial entities through which payments are handled.

6.- Rights relating to your personal data:

In accordance with the LCPD and the regulations it issues, MUSEAND informs you that to exercise your rights of access, rectification, suppression and opposition of your personal data, recognised in the aforementioned regulation, you must send a written and signed letter to the email address administracio@mcta.ad, to which you should also attach a copy of your passport or other national identity document.

On the other hand, according to the GDPR, within the European Union you have the right to obtain confirmation regarding whether MUSEAND is processing personal data that concerns you, or not, to access your personal data, as well as to request the correction of incorrect data or, as the case may be, request that it be deleted when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Within the conditions set out in the GDPR, the interested parties may also request the limitation of the processing or portability of their personal data, in which case MUSEAND will only store it for the exercise or the defence of claims.

In specific circumstances and for reasons related to the specific circumstances, the interested parties will be able to oppose the processing of their personal data. If you have granted consent for any specific purpose, you have the right to withdraw it at any time, without this affecting the legality of the processing based on the consent prior to its withdrawal. In this case MUSEAND will stop processing the personal data or, as the case may be, stop processing it for this particular purpose, except for urgent legitimate reasons, or for the exercise or defence of possible claims.

All aforementioned rights can be exercised by sending a written and signed letter to the email address administracio@mcta.ad, to which you should also attach a copy of your passport or other national identity document.

In the case of any breach of your rights, especially if you are not satisfied with their execution, you may make a claim before any controlling authority within the European Union regarding data protection. You may also obtain more information on your rights by contacting any of these organisations.

7.- Security:

MUSEAND guarantees that the processing of your personal data is submitted to the strictest duty of confidentiality, and that the necessary measures, both technical and organisational, have been established to guarantee the security of your personal data and to avoid its alteration, misuse, loss, theft and unauthorised processing and/or access.

8.- Changes to the Privacy Policy:

This Privacy Policy is subject to possible changes according to the applicable legislation at any time. In all events, you will be notified of any modification to this Privacy Policy so that you are informed of the changes made and, as the case may be, so that you may grant your express consent to these changes.

Last updated: 25 May 2018