Privacy statement

1. Who we are

infotainment.guide is a product of GuideXpresse, Edisonstraat 3E, 2723 RS Zoetermeer, the Netherlands (Chamber of Commerce 53478614). Questions about privacy: aanvragen@guidexpresse.com.

2. Two roles

This website and orders. For the website infotainment.guide, enquiries and orders, GuideXpresse decides what happens to your data. We are the controller.

The museum app. The app on a museum's own address (for example museum.infotainment.guide) and signing up for access on a museum's page are offered by that museum. The museum is the controller; we process the data on its behalf, under a processing agreement. You can contact the museum or us with questions; we will help or pass your question on.

3. On this website

Enquiry form ("I'm interested")

Your name, email address, phone number (optional), your message and any package you chose. We use this to answer your question (basis: your request). We keep it as long as needed to follow up; if you become a customer, it becomes part of our customer records.

Ordering a package

Organisation, contact person, email address, phone number, address, VAT number, package, dates, remarks and language. We need this to deliver and invoice (basis: the contract and our legal obligations). Payments run through Mollie; we do not see your bank or card details. We keep order data for 7 years, the statutory retention period for financial records.

Server logs

Like every web server, ours records technical data per request (IP address, page, time, browser) to detect faults and misuse (basis: legitimate interest). These logs are deleted after 14 days.

4. Visitor statistics (Google Analytics)

On this website we use Google Analytics to see how visitors find and use the site, so we can improve it (basis: legitimate interest). We have set it up to be as privacy-friendly as possible: data sharing with Google is switched off, Google signals and detailed location and device data are off, there is no advertising, and Google Analytics does not store IP addresses. Event data is deleted after 2 months, user-level data after at most 14 months. Google may process data in the United States; Google is certified under the EU-US Data Privacy Framework.

Google Analytics places the cookies _ga and _ga_*. You can block them in your browser, or use Google's opt-out add-on. The museum app itself does not use Google Analytics.

5. In the museum app (on behalf of the museum)

Access

To give you access we use your email address, first name (optional), phone number (only if the museum asks for it), language and the number of children without their own email address. You log in with a code we email to you.

Your visit

The app records which tours and stops you open, whether you play audio or video, your language choice and quiz answers (right or wrong), plus your favourites, any survey answers and any suggestions you send. The museum uses this to improve its tours. Statistics are shown to the museum as totals.

Access register

For every access we record the museum, your email address and the period of access. This is the basis for our invoice to the museum and is therefore kept for 7 years.

Only if you choose so

An email about new tours, or a summary of your visit: only when you tick that box. Every such email contains an unsubscribe link.

Location and your phone

Outdoor tours can use your phone's location (GPS) to show when a stop is near. That location stays on your phone and is never sent to us. The app stores tour content, preferences and earned badges on your phone so it works without signal; that data stays on your device.

Retention

We keep visitor data for as long as the museum uses the app with us; the museum can have it deleted sooner. The access register is kept for 7 years (see above).

6. Cookies and similar techniques

Necessary: a session cookie that keeps you logged in to the museum app, and local storage on your device for your theme (light/dark), app preferences and offline content. Statistics: the Google Analytics cookies on this website (see above). We use no advertising or tracking cookies.

7. Who we share data with

We never sell personal data. We only use these service providers, each under a processing agreement or their own terms as an independent party:

• TransIP (the Netherlands): our server and the sending of email.
• Mollie (the Netherlands): payments for orders.
• Google: Google Analytics on this website (see above).
• The museum whose app you use: the data of its own visitors.

All other code, fonts and images on this website and in the app are served from our own server.

8. Security

All traffic is encrypted (HTTPS). The platform runs on our own server in the Netherlands, not on a shared platform. Access to data is limited to people who need it for their work.

9. Your rights

You may ask to see, correct or delete your data, to restrict its use, to receive it in a usable format, and you may object to processing based on legitimate interest. Email aanvragen@guidexpresse.com; we respond within one month. For data in a museum app we involve the museum. Some data we must keep by law, such as order and invoice data. Not satisfied with how we handle your question? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes

If we change how we handle personal data, we update this page. The date at the top shows the latest version.