Privacy Policy

This personal data protection policy is part of the general conditions of use of the website with its home page in the domains guggenheim-bilbao.eus and guggenheim-bilbao-corp.eus (“Guggenheim-Bilbao”). Any term that is not defined in this data protection policy shall have the meaning given to it in the general conditions of use.

This personal data protection policy is concerned with the storage and management by the Guggenheim Museum Bilbao Foundation (GMBF) of the personal data entered by the User when accessing and using Guggenheim-Bilbao.

Pursuant to Organic Law 3/2018 from December 5 on Personal Data Protection and guarantee of digital rights, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and with Spanish Act 34/2002 11 July of Information Society Services and Electronic Commerce, “Personal Data” is all the information about identified or identifiable natural persons provided to GMBF by the User on a voluntary basis and being managed by GMBF.

GMBF is a private foundation with tax identification number G-48832240, entered in the Foundation Registry of the Basque Country under number F-17. The GMBF contact details are as follows:

• Address: Abandoibarra Etorbidea, 2, 48009 Bilbao, Spain.
• Email address: informacion@guggenheim-bilbao.eus
• Phone number:  +34 94 435 90 00
• Fax number: +34 94 435 90 10

GMBF shall give the User all the necessary information for them to agree to GMBF’s management of their personal data.

Unless otherwise indicated, the data collection forms included in Guggenheim-Bilbao shall only be used to meet the User’s demands at Guggenheim-Bilbao, including the sending of electronic communications on GMBF’s activities, products and services.

The aforementioned general purpose could translate into the following specifics:

(i) managing the contractual relationship with the User and checking compliance with the general and special conditions of use they might have agreed to at any given time when using Guggenheim-Bilbao (e.g. when shopping at the Online Store, etc.);

(ii) carrying out customer satisfaction surveys, updating personal data and/or publishing the names of draw winners or images of activities for Community Members.

(iii) consider the User’s requests or suggestions and/or answer their questions at Guggenheim-Bilbao.

(iv) managing the User’s advertising preferences.

(v) fulfilling GMBF’s legal obligations.

Unless otherwise indicated, the personal data required in the data collection forms included in Guggenheim-Bilbao shall be considered mandatory. If the User fails to provide required data, GMBF may not be able to process the relevant form(s). By entering their personal information, the User states all personal data are truthful, accurate, complete and up to date, and that they do not belong to third parties. Furthermore, the User shall be held responsible for incomplete, untruthful, inaccurate or outdated information, and for the damages this and/or other unfulfilled obligations may cause GMBF and/or other parties.

GMBF shall not sell, rent or disclose the personal data provided by the User to third parties. This does not include access to said data by the staff in charge of data management when required for a service provided to GMBF, as far as permitted by law.

The personal data provided by the User shall not be used for direct marketing actions unless the User has been informed of this use and given their consent in advance. The User shall be able to change their preferences regarding GMBF’s communications by sending a written notification to any of the email addresses indicated at www.guggenheim-bilbao.eus/ or to GMBF’s postal address at Abandoibarra Etorbidea 2, 48009 Bilbao, using the subject “Advertising Communications.”

As the party involved in data management and committed to the confidentiality and security of information, GMBF has taken all the necessary measures to prevent the alteration, loss, unwanted handling and/or unauthorized access to personal data.

As a general rule and unless otherwise indicated in the relevant form(s), GMBF shall not store and manage personal data of users under age. The personal information required of minors at Guggenheim-Bilbao is highly restricted, not making it possible to identify them and only enabling for adequate website functioning.

As a general rule, no personal data belonging to third parties are required to use Guggenheim-Bilbao. Therefore, unless otherwise indicated, no third-party information shall be disclosed by the User to GMBF at Guggenheim-Bilbao.

On an exceptional basis, the User may enter third-party data in a data collection form after getting an informed consent from the party in question. For the consent to be informed, the party must agree to the general and special conditions of use of Guggenheim-Bilbao and to this data protection policy. The User shall be held responsible for third-party consent, as well as for the damages caused by the failure to fulfill this obligation.

Anybody can request and get information on the use of personal data belonging to them by GMBF. Likewise, interested parties can exercise their right to access their personal information and request the correction or update of their personal data, as well as their deletion when they are no longer necessary for the purpose they were provided for. In the same way, they can oppose to GMBF sending commercial information.

Under certain circumstances, interested parties can request a restricted use of their personal data, which means they shall only be stored on compelling legitimate grounds, or in exercise of the right of self-defense against potential claims.

Interested parties can exercise their right to access their personal data by writing to the email addresse dpo@guggenheim-bilbao.eus or to GMBF’s postal address at Abandoibarra Etorbidea, 2, 48009 Bilbao, Spain, attaching a copy of their ID card. If they are not satisfied with the way their rights have been dealt with by GMBF, they can file a claim with the Spanish Data Protection Agency (http://www.aepd.es).