Privacy Policy
Last updated:
October, 2026
1.- Data Controller
Musealia Exhibitions & Museums, S.L. (“Musealia”, “we”, “us” or “our”) is responsible for the processing of personal data collected through this website, subject to the applicable data protection rules.
Data controller details
- Company name:
Musealia Exhibitions & Museums, S.L. - Registered office:
Paseo de los Fueros 1, 1.º H, 20005 San Sebastián, Spain. - Tax Identification Number (NIF):
B17618745. - Email:
info@musealia.net. - Telephone:
+34 943 44 55 79.
Data Protection Officer (DPO):
- Company name:
Musealia Exhibitions & Museums, S.L. - Registered office:
Paseo de los Fueros 1, 1.º H, 20005 San Sebastián, Spain.
2. Scope of This Policy
This Privacy Policy explains how Musealia processes personal data when users visit this website, contact us, subscribe to our newsletter or interact with embedded videos and social media content.
It should be read together with the website’s Cookie Policy, which explains the use of cookies and similar technologies.
3. What Personal Data Do We Collect?
Depending on how users interact with the website, Musealia may process the following categories of personal data:
3.1. Contact enquiries
When users contact Musealia through the website’s contact form, we collect the information requested in that form:
• Name.
• Email address.
• Message or enquiry.
Users should avoid including sensitive personal information in their messages unless it is strictly necessary for their enquiry.
3.2. Newsletter subscriptions and marketing communications
If users subscribe to the newsletter or otherwise agree to receive marketing communications, Musealia may process the personal data collected through the relevant subscription or consent mechanism.
The exact information collected, the subscription process and the applicable legal basis must be confirmed before publication.
3.3. Website usage and analytics
The website may use analytics tools to understand how visitors interact with its content and to improve its performance and usability.
The specific tools in use, the data collected and the applicable cookie or consent requirements have not yet been confirmed. These details should be added once the website’s analytics configuration has been verified.
3.4. Embedded videos and social media
The website may display videos and social media content provided by third-party platforms. Depending on how these integrations are configured, the relevant providers may collect technical information or information about users’ interactions with their services.
Please refer to the relevant third-party privacy policies and our Cookie Policy for further details.
4. Purposes and Legal Bases for Processing
Musealia processes personal data only where an applicable legal basis exists under data protection law.
Purpose
Legal basis
Responding to enquiries submitted through the contact form
Legitimate interests in responding to business enquiries, or steps taken at the user’s request before entering into a contract, where applicable.
Sending newsletters and marketing communications
Consent, where required by applicable data protection and electronic communications law, or another specifically applicable legal basis where permitted.
Understanding website usage and improving the website
To be confirmed once the analytics tools and cookie configuration have been identified. Where consent is required, analytics technologies will be used on that basis.
Operating embedded videos and social media features
The applicable legal basis and consent requirements depend on the integration and its configuration and must be verified.
Complying with legal obligations or responding to legal claims
Compliance with a legal obligation or another applicable legal basis, depending on the circumstances.
Where processing is based on consent, users may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Where processing is based on legitimate interests, Musealia will consider the rights and interests of the individuals concerned in accordance with applicable law.
5. Marketing Communications
Where users have subscribed to the newsletter or otherwise provided the required authorisation, Musealia may send them communications about its exhibitions, projects, activities, services and other relevant company news.
Users may unsubscribe at any time by following the instructions included in the relevant communication or by contacting info@musealia.net.mailto:info@musealia.net
The final version of this section must reflect the actual subscription mechanism, the types of communications sent and the legal basis relied upon. Any exception allowing marketing to existing customers must be assessed against the applicable requirements before it is used.
6. How Long Do We Retain Personal Data?
Musealia retains personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal requirements and the need to establish, exercise or defend legal claims.
The specific retention periods or criteria for each category of data must be confirmed before publication, including:
• Contact enquiries and related correspondence.
• Newsletter subscriptions and marketing preferences.
• Analytics data, according to the tools and settings in use.
• Records that must be retained to comply with legal obligations or establish, exercise or defend legal claims.
Where processing is based on consent, the withdrawal of consent will be taken into account as required by applicable law. Unsubscribing from marketing communications may require retaining limited information to record and respect the user’s preference.
7. Sharing of Personal Data
Musealia does not sell personal data.
Personal data may be accessed by service providers acting on Musealia’s behalf where this is necessary to operate the website or provide relevant services. These may include providers of website hosting, email, newsletter distribution, customer relationship management, analytics or technical support.
The actual providers and their roles have not yet been confirmed. The final policy should identify the relevant categories of recipients accurately and ensure that appropriate contractual and data protection safeguards are in place.
Personal data may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.
8. International Data Transfers
Some third-party services used by a website may process personal data outside the European Economic Area (EEA).
Musealia’s current providers, their processing locations and any international transfers have not yet been verified. Before publication, Musealia should confirm whether such transfers occur and, where applicable, identify the relevant safeguards required under data protection law, such as an adequacy decision or appropriate contractual safeguards.
This section must be updated to reflect the actual technical configuration and providers in use.
9. Data Subject Rights
Subject to the conditions established by applicable law, individuals may have the right to:
• Access their personal data.
• Rectify inaccurate or incomplete data.
• Erase their personal data.
• Restrict the processing of their personal data.
• Object to certain processing activities.
• Request data portability, where applicable.
• Withdraw consent at any time where processing is based on consent.
Individuals may exercise their rights by contacting info@musealia.net and specifying the right they wish to exercise.
Musealia may request additional information where reasonably necessary to verify the identity of the requester. Any such request will be proportionate to the circumstances.
Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) through its official website: https://www.aepd.es/.
10. Cookies and Similar Technologies
This website may use cookies and similar technologies for technical, analytical or third-party content purposes.
The categories of cookies used, their providers, their purposes and their retention periods must be described in the Cookie Policy and reflected in the website’s consent mechanism, as applicable.
Where consent is legally required, non-essential cookies and similar technologies should not be activated before the required consent has been obtained. Users should be able to review or change their preferences through the website’s cookie settings.
The final wording must be checked against the actual cookie inventory, analytics tools, video integrations and social media features.
11. Third-Party Websites and Services
This website may contain links to external websites or embed content from third-party platforms, including video and social media services.
When users interact with these services, the relevant providers may process personal data under their own privacy policies and terms. Musealia does not control the independent data processing activities of those providers.
Users should review the privacy information provided by the relevant third parties.
12. Security
Musealia will implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction, taking into account the nature of the data and the risks associated with its processing.
No method of transmission or storage can be guaranteed to be completely secure.
13. Changes to This Privacy Policy
Musealia may update this Privacy Policy to reflect changes in applicable law, the website’s functionality, the services used or the company’s data processing activities.
The current version will be published on this website, together with its revision date.
14. Contact
For questions about this Privacy Policy or the processing of personal data, please contact:
Musealia Exhibitions & Museums, S.L.
Paseo de los Fueros 1, 1.º H
20005 San Sebastián, Spain
Email: info@musealia.net
Telephone: +34 943 44 55 79