Welcome to https://tickets.nationalgallery.gr (hereinafter referred to as the “Website”)
The Website has been created by National Gallery Alexandros Soutsos Museum (the “Museum”).
“Museum” is responsible for the processing of your personal data, which it receives through the use of the Website, in accordance with the General Data Protection Regulation 2016/679 of the European Union (hereinafter referred to as “GDPR”) and Law 4624/2019. In the present notice we provide you with information regarding the type of personal data we collect about you, the way and the purposes for which we process is, the third parties with whom we share this data, as well as the rights you have.
What personal data do we process?
The personal data that we collect and process further while browsing the Website and using our services, are the following:
Full Name
Contact details, such as telephone number, email address, postal address
Other ticket booking details, such as date / time of scheduled visit, age category, discount coupon and payment amount
Technical information when visiting the Website, such as IP address, date and time of the visit, type of browser and operating system, device model, but also other information collected through cookies and similar technologies and related to the analysis of your browsing on the Website.
Why do we process your personal data?
In the context of using the Website, AOM processes your data in accordance with the following purposes and legal bases:
Α. Contract
In case you purchase tickets online, AOM processes the above personal data as absolutely necessary for issuing your tickets and sending them to your e-mail.
- Obligation by law
The processing of your personal data following the online purchase of tickets, includes our compliance with our tax obligations arising from this sale.
We are also required under personal data protection legislation, to process any relevant request of yours.
- Legal interest
It is in AOM’s legal interest to process your data in order to ensure the smooth, proper and secure operation of the Website and the electronic transactions carried out, to keep backup copies of the data and to ensure general business continuity issues.
It is also in our legal interest to manage any general communication we receive from you, in order to answer your questions about the Museum and the operation of the Website.
Also, in our legal interest and the special legal framework for electronic communications to inform you about the news and activities of the Museum, we will send informative communication to the e-mail address you have stated to us during the online ticket purchase. You can oppose this processing, either by selecting the relevant option at the time of the online purchase, or by clicking the “unsubscribe” link in our e-mails.
- Consent
In case you do not use our services, but you wish to receive a newsletter from us, following your consent through a special field on the Website, you can register in the relevant service and we will process the email address you provided to us for informational and promotional purposes regarding the Museum. You can revoke this consent at any time, either by selecting the “unsubscribe” link in our emails, or by sending us a request to the contact details mentioned in the relevant section below.
In addition, if you consent to the use of technologies such as cookies and local storage on your device, information about you is automatically collected in accordance with the Cookies Policy of the Website, for analysis, personalization and / or advertising purposes. You can at any time change or withdraw your consent from the Cookie Policy on our website.
Who do we share your data with?
For the best possible fulfillment of the above processing purposes, the Museum discloses your personal data to the following categories of associates:
Website support and management companies,
Online ticketing companies, such as MTI Systems,
Museum’s social media management companies,
Payment service providers when buying tickets online, such as National Bank,
as well as any other administrative, judicial or public authority or generally legal or natural person to whom it may, by law or court decision, derive a relevant obligation or right of the Museum to disclose such data.
The Museum has taken all necessary measures so that its staff and associates have been specifically authorized for these purposes and be fully bound by the professional secrecy and the obligations provided in the legislation regarding the collection and further processing of your above-mentioned data.
How does the Museum protect your data?
Our Museum has taken all appropriate organizational and technical measures, in accordance with technological standards and applicable laws and regulations, in order to ensure that the processing of your personal data, either by itself or by third parties on its behalf, is lawful, appropriate and has the appropriate level of security to prevent any unauthorized or accidental access, processing, deletion, alteration or other use thereof.
How long will your data be kept?
The personal data processed by the Museum are kept for the entire period that is necessary for the fulfillment of the purpose of each processing. Upon its expiration, the data will be deleted, unless otherwise provided by law or if this is required for the establishment, exercise or support of legal claims of the Museum.
Specifically, your data collected by subscribing to our newsletter is kept until you withdraw your consent, while the data collected during the online ticket purchase are kept for a period of 5 years from the purchase.
What are your rights?
In any case, we would like to inform you that, according to the current legislation, you have and can exercise after confirming your identity, the following rights:
the right to access to your personal data, as well as information related to the processing,
the right to correct inaccuracies and to supplement any incomplete data,
the right of deletion (“right to be forgotten”),
the right to restrict the processing of your data in cases expressly provided by law,
the right to data portability, to receive your data in a structured, commonly used and machine-readable format (for example USB), either to you or to another controller,
your right to object to processing of personal data in our legitimate interest as mentioned above,
the right to revoke any consent immediately and free of charge.
For each of the above rights you exercise by submitting your written request to our Museum, the Museum will respond within one (1) month from the receipt of your request. This deadline may be extended for an additional two (2) months taking into account the complexity of your request, as well as the number of requests received in general.
Contact details
For any queries, clarifications or requests with regards to your personal data, in the context of the operation of the Website, you may contact us at tickets@nationalgallery.gr.
In any case, if you feel that the protection of your personal data is violated in any way whatsoever, you reserve the right to lodge a complaint with the Hellenic Data Protection Authority, using the following contact details: complaints@dpa.gr | 1-3 Kifissias Avenue, PC 115 23, Athens | 0030 210 6475600 | www.dpa.gr.
What about third party websites?
The website provides access to third party websites through appropriate links. These links have been placed solely for the convenience of the Website Users, while the websites to which they are redirected are subject to the respective terms of use and Privacy Statements. The placement of the links is not an indication of approval or acceptance of the content of the respective websites by the Website Controller, who bears no liability for the content of these websites, or for privacy practices applied or the accuracy of the materials contained therein. AOM exercises no control over the websites owned by third parties or their content, which are visited or linked through this website and therefore AOM does not endorse, fund, consult or otherwise accept no liability for these websites or their content. In case the User decides to make any use, through the links of the Website, one of the third party websites, s/he shall be solely liable for this action.
