You may provide us with personal data when you purchase tickets, register for an event, subscribe to a newsletter, purchase a membership, make a donation, buy a product in our webshop, request marketing materials, give us feedback, or submit work to Foam. Depending on the activity, this information may include your name, email address, postal address, billing address, telephone number, payment details, and details relating to your order, booking, donation, or submission.

If you purchase a membership for another person, a joint membership, or a gift membership, we may also ask you to provide the relevant personal details of the intended recipient. If you make a donation or become a member, we may store supporting declarations where required for tax or administrative purposes in our CRM system and financial administration.

When you submit work to Foam for exhibitions or related activities, we may ask for information about the submitted material and its authorship. Submitted materials may be stored for research and review purposes and may be periodically removed from our database when no longer relevant to Foam’s programming.

When you visit our website, we may automatically collect technical and behavioural information about your device, browser, and interactions with the site. This may include information about pages visited, navigation patterns, and other analytical data. We use cookies and similar technologies, including Google Analytics, to help us understand how visitors use our website, improve its usability, support internal reporting, and, where permitted, support advertising and retargeting campaigns on platforms such as Google, Facebook, Instagram, and other relevant channels. 

Google Analytics on our website is configured in line with GDPR requirements, including anonymisation measures where applicable. If you choose not to accept non essential cookies, the website will remain available to you, but the related analytics and marketing data will not be collected for those purposes.

A detailed and automatically updated overview of the cookies we use can be found in the cookie declaration at the bottom of this page.

In some cases, we may receive information about you from third parties. This may include analytics providers such as Google, advertising networks such as Meta platforms, search advertising providers such as Google Ads, and partners working with Foam in relation to invitations, events, or complimentary products. Where Foam processes personal data together with a partner or on behalf of a partner, appropriate agreements are put in place where required.

Foam uses personal data only where necessary and for clearly defined purposes.

We use your personal data to process and administer ticket bookings, event registrations, memberships, donations, webshop orders, subscriptions, and other services you request from us. This includes storing relevant information in Foam’s website systems, CMS, CRM, and financial administration where necessary for operational and administrative purposes.

We also use personal data to communicate with you. Email is our primary means of communication. If you subscribe to our newsletter or other mailings, we may send you updates about current and upcoming exhibitions, events, talks, videos, editorial content, and, where relevant, reciprocal marketing or partner related content connected to Foam. You can choose which newsletters you would like to receive, in Dutch and or English, and you may update your preferences or unsubscribe at any time through the link included in every mailing.

We use data collected through our website to improve the performance, usability, and relevance of our digital services, to understand how visitors use our platforms, and to support internal analysis and reporting. Where permitted, this data may also be used to inform online advertising and retargeting campaigns.

Where relevant, we use personal data to comply with legal and administrative obligations, including accounting, tax, fraud prevention, and security related obligations.

We may also process personal data to protect the safety of visitors, staff, collections, and property, including through CCTV and event photography or filming, as explained below.

Tickets and events

When you book tickets for a museum visit or a museum related event, we ask for the information necessary to process and administer your reservation. This may include your name, email address, postal address, and, where applicable, payment details. If external providers are involved, such as payment service providers appointed by Foam, those providers process data in accordance with applicable data protection laws. Booking information is stored centrally within Foam’s website systems, CMS, and CRM only for the purpose of administering the reservation and related communications.

Memberships and donations

When you purchase a membership or make a donation, we collect the information necessary to manage the membership or donation and any related communication, administration, invoicing, or renewal. If you choose automatic renewal or payment by invoice, the relevant payment or invoicing details may be recorded in our CRM system. Where applicable, we may also retain declarations or records needed for tax or gift related administrative purposes.

Webshop purchases and subscriptions

When you buy a product in our webshop, we collect the personal data required to process your order, arrange payment, and deliver the product. This may include your name, email address, billing address, and delivery address. For subscription based products, we may also store subscription dates and relevant payment or invoice information. External suppliers or payment service providers appointed by Foam may be involved in fulfilling these services and are required to process personal data in accordance with the GDPR.

CCTV in the museum

Foam uses CCTV in the museum to help ensure the safety of visitors and the security of exhibited works and other property. CCTV footage is retained for a maximum of 14 working days and is then automatically deleted, unless it is required for evidential purposes. In such cases, Foam may need to provide footage to competent authorities, such as the police. Where possible, individuals concerned will be informed accordingly.

Photography and filming during visits and events

During visits, events, and openings at Foam in Amsterdam or at other Foam locations, photographs or video recordings may be made for promotional, editorial, or archival purposes. If you appear in an image or recording and object to its use, you may contact us at online@foam.org. Where possible, Foam will adjust the publication and confirm that the original file will no longer be used in future publications.

Foam processes personal data on one or more of the following legal grounds:

• Contractual necessity: Where processing is necessary to enter into or perform a contract with you, for example when you purchase tickets, place an order, make a booking, or buy a membership.

• Legitimate interests: Where processing is necessary for Foam’s legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include improving our services, maintaining our relationship with visitors and supporters, securing our premises, and carrying out limited marketing activities where permitted.

• Legal obligation: Where processing is necessary for Foam to comply with a legal or regulatory obligation.

• Consent: Where you have given us clear consent to process your personal data for a specific purpose, such as receiving newsletters or accepting certain categories of cookies. Where we rely on your consent, you may withdraw it at any time.

Foam may share personal data with third parties where this is necessary for the purposes described in this Privacy Policy. This includes service providers who process personal data on our behalf and under our instructions, such as providers of ticketing systems, mailing software, CRM systems, webshop infrastructure, payment services, and mailing or fulfilment services.

Where we send physical mailings, we may share the relevant contact details with a mailing provider acting as a data processor on our behalf. Such providers are assessed to ensure that they process personal data in compliance with the GDPR.

Foam does not allow third party service providers to use your personal data for their own purposes. They may only process personal data for specified purposes and in accordance with our instructions and applicable data protection laws.

Foam does not keep personal data for longer than necessary. The retention period depends on the type of data, the purpose for which it was collected, and any legal or administrative obligations that apply. Where appropriate, data is deleted, anonymised, or securely archived once it is no longer required.

If you would like more information about the retention period for a specific type of personal data, you may contact us using the details below.

Under data protection laws, you have a number of rights in relation to your personal data. Depending on the circumstances, these may include:

• the right to be informed about how your personal data is processed

• the right to request access to your personal data

• the right to have inaccurate personal data corrected and incomplete data completed

• the right to object to the processing of your personal data

• the right to request that processing be restricted

• the right to request erasure of your personal data

• the right to receive your personal data in a portable format, where applicable

• the right to withdraw your consent at any time where processing is based on consent
  
  

These rights do not apply in every situation, and in some cases Foam may be legally entitled or required to refuse or limit a request. If you contact us about one of these rights, we will explain how it applies in your case.

If you wish to change or remove your personal details, or if you would like to exercise any of your rights, please contact online@foam.org.

Foam is committed to protecting your personal data. To prevent unauthorised access, misuse, alteration, loss, or disclosure, we have implemented appropriate physical, technical, and organisational measures to safeguard the information we collect, both online and offline.