Privacy Policy

Last Updated: June 2025

Introduction

Welcome to annafrank-museum.com (“we”, “us”, or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website annafrank-museum.com (the “Site”). It is designed to comply with Netherlands data privacy laws, including the General Data Protection Regulation (GDPR) and the Dutch Implementation Act of the GDPR. We also follow applicable requirements of major technology and advertising platforms (Google, Meta/Facebook, Amazon, Microsoft/Bing, TikTok, etc.) regarding data use for analytics and marketing. Please read this Policy carefully to understand our practices.

Information We Collect

We may collect the following categories of personal information from you (directly or via automated means) when you use our Site:

• Identifiers: e.g. name, username, email address, account ID, or similar identifiers you provide.
• Contact Information: e.g. email address, telephone number, or mailing address (if you choose to provide them).
• Device and Internet Activity: e.g. IP address, device identifiers, cookie IDs, browser type, operating system, browsing history, and usage information about how you interact with our Site.
• Geolocation Data: general location inferred from your IP address or device settings (we do not collect precise GPS coordinates unless you explicitly allow it).
• Commercial Information: e.g. records of products or services purchased, obtained, or considered, if applicable, and other purchasing or consuming histories or tendencies.
• Preferences and Other Information: any preferences, feedback, or other personal information you provide through our Site (such as through forms or profile settings).
• Sensitive Personal Information: We do not actively collect sensitive personal data (such as Social Security numbers, driver’s license numbers, financial account info, precise health or biometric data, etc.) unless necessary for a specific purpose. If we ever need to collect sensitive information, we will do so only with your consent or as otherwise permitted by law, and we will limit the use and disclosure of that information as required (you also have the right to limit our use of such sensitive data under certain laws).

Note: We do not knowingly collect personal information from children under the age of 16. Our Site is not intended for users under 16, and if you are under 16, please do not provide any information. If we learn that we have collected personal data from a child under 16, we will delete it as required by the Dutch Civil Code and GDPR.

How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing and Improving the Service: To operate the Site and provide you with the features and services you request. We also use data to understand how users interact with our Site, to debug and improve the functionality and performance of our services.
• Communication: To respond to your inquiries, provide customer support, send administrative or account-related messages (e.g. password resets, updates to terms or policies), and send you information about features or offerings if you have subscribed to such communications.
• Personalization: To remember your settings and preferences, personalize your experience on our Site, and present content tailored to your interests.
• Analytics and Development: To analyze usage of our Site (including through the use of third-party analytics tools) so we can understand trends and user needs, and to develop new features, products or services, or improve existing ones.
• Marketing and Advertising: To provide you with marketing communications (where permitted by law) and to serve you advertisements on our Site or on third-party platforms (such as Google, Facebook/Meta, Bing, TikTok) that are tailored to your interests. We may use and share information with advertising partners to deliver personalized ads, as described in the “Cookies and Tracking Technologies” section below.
• Security and Fraud Prevention: To protect our Site, investigate and prevent fraudulent transactions, unauthorized access, hacking, malware, or other illegal activities, and to ensure the physical and digital security of our operations.
• Legal Compliance: To comply with our legal and regulatory obligations, such as responding to valid legal process (subpoenas, court orders), enforcing our Terms of Service, or protecting our rights (or the rights of others) and safety.

How We Share Your Information

We value your privacy and do not sell your personal information to third parties for money. However, we may share or disclose your information in the following situations (in accordance with applicable privacy laws):

• Service Providers: We share personal information with trusted third-party service providers or contractors who perform services on our behalf, such as hosting our website, data analytics, customer support, email delivery, or other technical operations. These service providers are contractually obligated to use your information only for the purposes of providing services to us and to protect your information with appropriate security measures.
• Advertising and Analytics Partners: We use third-party analytics and advertising partners (including, for example, Google Analytics, Google Ads/AdSense, Meta (Facebook) Pixel, Microsoft Advertising/Bing Ads, Amazon Ads, TikTok Pixel, and others) to understand how our Site is used and to assist in our marketing efforts. These partners may collect information via cookies and similar technologies on our Site in order to provide aggregated analytics or to serve you targeted advertisements on our behalf on other platforms. For instance, Google may use cookies to serve ads based on your prior visits to annafrank-museum.com, and its use of advertising cookies enables itself and its partners to serve ads to you based on your visits to this Site and other sites on the Internet. Similarly, we may use the Facebook Pixel which allows Facebook to collect or receive information from our Site and other internet locations to provide measurement services and target ads. As required by Facebook’s terms, we hereby notify you that third parties (including Facebook) may use cookies, web beacons, and similar storage technologies to collect or receive information from our Site and elsewhere on the internet and use that information to provide measurement services and target ads. These third-party companies will have access to certain information about you (such as device identifiers, browsing activity, and usage data) under their own privacy policies. We do not permit these third parties to collect sensitive personal data from our Site, and we contractually require them to comply with privacy laws when handling any personal information obtained from us.
• Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred to a successor or affiliate as part of that transaction.
• Legal and Safety Disclosures: We may disclose personal information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation or respond to lawful requests or legal process, (ii) protect and defend our rights or property, (iii) act in urgent circumstances to protect the personal safety of users of the Site or the public, or (iv) protect against legal liability.
• With Your Consent: We may share your personal information for other purposes not listed here if you have asked us to do so or have given explicit consent.

Note on “Sale” of Personal Information: We do not exchange your personal data for money. However, the definition of “sale” under some laws includes sharing personal information with third parties for targeted advertising or other valuable consideration. In the context of digital advertising on our Site, some data sharing (for example, with advertising partners to serve personalized ads) could be considered a “sale” or “sharing” under those laws. We only engage in such data sharing as permitted by law and as described above, and you have the right to opt out of these practices as described in the next section.

Cookies and Tracking Technologies

We and our partners use cookies, beacons, pixels, and similar tracking technologies (“cookies”) on our Site to provide, personalize, analyze, and improve our services, as well as to deliver relevant advertisements. When you visit annafrank-museum.com, we or our third-party providers may set cookies on your browser that capture information about your activity.

Types of cookies we use include:

• Essential Cookies: These are necessary for the Site to function properly (e.g., to remember your login or preferences). You cannot opt out of these as the Site won’t work properly without them.
• Analytics Cookies: These cookies help us understand how visitors use our Site. For example, we use Google Analytics to collect information about usage of our Site. Google Analytics may collect information such as your IP address, browser type, pages visited, time spent on pages, and referring URLs. Google uses this data to provide us with reports and analysis. We use this information to analyze trends and improve the Site. Google may also use the data it collects to improve its own services. (For more details on how Google collects and processes data when you use sites like ours, see Google’s “How Google uses data from sites or apps that use our services” in Google’s Privacy & Terms.) If you wish, you can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on provided by Google.
• Advertising Cookies: These cookies are used to deliver advertisements relevant to you. They work by uniquely identifying your browser and device. Our advertising partners (such as Google, Facebook/Meta, Bing, Amazon, TikTok, and others) may set advertising cookies to track your browsing activity on our Site and other websites, so that they can show you ads that are more likely to interest you. For example, Google’s advertising cookies allow it and its partners to serve ads to you based on your visit to our Site and other sites on the Internet. These cookies might also be used to limit the number of times you see an ad and to measure the effectiveness of advertising campaigns. We do not serve personalized ads to users where it is not permitted by law (for instance, we do not target or personalize ads based on sensitive personal data or to children under 16).

Your choices: On your first visit to our Site (and periodically thereafter), you may be presented with a cookie consent banner or tool to manage your cookie preferences. You can choose to accept or reject certain cookies (except strictly necessary cookies). You can also control cookies through your browser settings — for example, you can instruct your browser to refuse all cookies or to delete them. However, please note that if you block or delete cookies, some features of our Site may not function correctly. For more information about cookies and how to manage them, you can visit .

Global Privacy Control (GPC): We honor “Do Not Sell or Share” signals, such as the Global Privacy Control (GPC) signal, as required by applicable law. If your browser or device is configured to send a GPC signal, our Site will recognize it as an opt-out request for the sale or sharing of your personal information. See the section below for more on how to exercise your opt-out rights.

Your Privacy Rights and Choices

Depending on your residence, you may have certain rights regarding your personal information. annafrank-museum.com is committed to honoring the rights of consumers as provided by law in the Netherlands and under the GDPR. These rights may include:

• Right to Know/Access: You have the right to know what personal information we have collected about you, and to request access to that information. This includes the right to request that we disclose the categories of personal information we have collected, the categories of sources of that information, the business or commercial purposes for collecting it, the categories of third parties with whom we share it, and specific pieces of personal information we hold about you. Upon verification of your identity, we will provide the required information as mandated by law.
• Right to Delete: You have the right to request deletion of the personal information we have collected from you. Upon receiving and verifying a valid deletion request, we will delete your personal information from our records (and direct our service providers to do the same), unless retaining the information is necessary for us or our service providers to complete a transaction you requested, detect security incidents, comply with a legal obligation, or other limited exceptions allowed by law.
• Right to Correct: You have the right to request that we correct inaccuracies in your personal information. If any personal data we maintain about you is inaccurate or outdated, you may request a correction, and upon verification we will correct it as required.
• Right to Data Portability: You have the right to obtain a copy of the personal information you provided to us, in a portable and (to the extent technically feasible) readily usable format, so that you can transmit it to another entity. In many cases, this right is included as part of your right of access.
• Right to Opt-Out of “Sale” or Sharing of Personal Information: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising (targeted advertising) purposes. This means if we engage in data exchanges that are considered “sales” or “sharing” under the law, you can tell us to stop. To exercise this right, you can use the “Do Not Sell or Share My Personal Information” link on our Site (if available) or contact us as provided below. We also honor browser-based opt-out signals like the Global Privacy Control (GPC) as an opt-out of sales/sharing – if we detect a GPC signal from your device, we will treat it as a valid opt-out request without requiring additional action from you.
• Right to Opt-Out of Targeted Advertising: In the Netherlands, you have the right to opt out of the processing of your personal data for purposes of targeted advertising. We will honor requests from you to opt out of online tracking for advertising purposes. This opt-out can be accomplished by using the same methods as the “Do Not Sell or Share” above (since our use of personal data for personalized ads may be considered a sale or targeted advertising). You can also opt out of targeted ads by adjusting your cookie preferences or using industry opt-out tools (see “Advertising Choices” below).
• Right to Opt-Out of Profiling: You have the right to opt out of any “profiling” in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on consumers. In other words, we do not use your personal data to make solely automated decisions about you that could seriously affect you – such as decisions about financial services, housing, insurance, or employment eligibility – without human involvement. If we ever plan to use personal data for automated decision-making that has significant effects, we will update this Policy and provide the appropriate opt-out or opt-in choices as required.
• Right to Limit Use of Sensitive Personal Information: If we collect any information that is considered “sensitive personal information” under applicable laws, you have the right to request that we limit the use or disclosure of that sensitive information to the purposes authorized by law. We will honor such requests.
• Right to Non-Discrimination/No Retaliation: We will not discriminate against you for exercising any of your privacy rights. This means, for example, we will not deny you goods or services, charge you a different price, or provide a different level of quality of service just because you exercised your rights under a privacy law. In certain situations, we may offer financial incentives (such as discounts or rewards) in exchange for the collection or use of personal information, but we will only do so if the program is permitted by law, we provide you with relevant details, and we obtain your opt-in consent. Even then, you have the right to withdraw from such programs at any time.
• Right to Appeal: If we decline to take action on a request you make in the exercise of the above rights, you have the right to appeal our decision. We will provide instructions in our response if we deny a request, explaining how you can submit an appeal. Typically, this will involve contacting us and providing information about the request you wish to appeal. We will review appeals in a timely manner as required by law.

How to Exercise Your Rights: To exercise any of the applicable rights described above, please contact us by using the contact information available in the website footer. Please specify which right you are seeking to exercise and provide us with enough information to verify your identity (for example, by providing identifying details we may already have, like your email address or account info). We will respond to your request within the timeframe required by law (generally within 30 days, with the possibility of a 60-day extension in certain circumstances). If we need more information to verify your identity or process your request, we will let you know.

Authorized Agents: In the Netherlands, you may designate an authorized agent to make a privacy rights request on your behalf. If you choose to use an authorized agent, we will take steps to verify the agent’s authority (for example, by requiring a signed written permission from you) and also verify your identity directly, unless the agent has a legally sufficient power of attorney. Please have the authorized agent contact us with proof of their authorization and your identity.

Global Privacy Control: As noted above, we treat browser or device signals such as the Global Privacy Control as valid opt-out requests for the sale or sharing of personal data. You do not need to make a separate request to opt out of sale/sharing if you have GPC enabled on your browser; the signal will be processed automatically by our Site.

No Automated Decision-Making

annafrank-museum.com does not use personal information for automated decision-making or profiling that produces legal or similarly significant effects on consumers. In other words, we do not make any purely algorithmic decisions about you that would substantially affect your rights or interests without human review. All important decisions involving your personal information are subject to human intervention. If this practice changes in the future, we will update this Privacy Policy to reflect that and to explain your rights regarding such processing.

Data Security

We implement reasonable and appropriate security measures to protect the personal information we collect from unauthorized access, disclosure, alteration, or destruction. These measures include technical, administrative, and physical safeguards that are designed to protect the integrity and security of data. For example, we use encryption and secure protocols to transmit sensitive data where appropriate, maintain firewalls and access controls on our systems, and limit access to personal data to employees and contractors on a need-to-know basis. However, please be aware that no method of transmitting or storing data is completely secure, and while we strive to protect your information, we cannot guarantee absolute security. You should also take steps to protect your information by, for instance, keeping your account credentials private and logging out of the Site after your sessions.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which we collected it, or to satisfy legal, accounting, or reporting requirements. In determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, and whether we can achieve those purposes through other means. We also consider applicable legal requirements (for example, certain laws may require us to keep transactional records for a certain time). Under the General Data Protection Regulation (GDPR), we are required to state that we do not keep your data longer than is necessary and proportionate to the purpose for which it was collected. When personal information is no longer needed, we will either delete it or anonymize it (so that it can no longer be associated with you), unless we are required by law to keep it for a longer period.

International Data Transfers

annafrank-museum.com is based in the United States. If you are accessing our Site from outside the United States, please be aware that your information will be transferred to and processed in the United States and possibly other countries. These countries may have data protection laws that are different from those in your country of residence (and, in some cases, may not be as protective). We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Policy. This includes implementing standard contractual clauses (SCCs) for data transfers where required and, where applicable, relying on recognized transfer mechanisms to legally transfer data across borders. We also comply with other cross-border data transfer requirements as needed. By using our Site or providing us with information, you acknowledge the transfer of your personal data to the United States or other jurisdictions as described in this Policy.

Third-Party Links and Services

Our Site may contain links to websites, content, or services that are hosted or provided by third parties (for example, links to our pages on services like LinkedIn, Facebook, X (Twitter), or other external websites). If you click on those links or otherwise engage with third-party services, you will be interacting with the third party, not annafrank-museum.com. This Privacy Policy only applies to annafrank-museum.com and our own Site. We are not responsible for the content or privacy practices of third-party websites to which our Site links, and we encourage you to read the privacy policies of those third-party websites before providing any information to them or through them. Inclusion of a link to a third-party site or service is for your convenience and does not imply that we endorse or have reviewed the third party’s policies or practices.

Platform-Specific Disclosures

Additional notices for certain platforms or data practices:

• Google Services: If our Site integrates with Google services (such as Google Analytics, Google Ads, or YouTube embeds), note that Google may collect information as described in their . We adhere to Google’s policies for data protection. For example, Google Analytics data is used only for analytics and is not shared with other Google services unless we have enabled such features. We also utilize Google’s as applicable, and Google has announced that as of July 1, 2023, it operates as a separate business (not a service provider) for certain ad processing, which means certain data transfers for personalized advertising might be considered a “sale” under applicable laws unless restricted. We have configured our use of Google advertising services to comply with state privacy laws (including offering opt-outs and honoring restricted data processing modes when applicable).
• Facebook (Meta) Services: If we use Facebook technologies such as the Facebook Pixel, Custom Audiences, or Facebook Login, please be aware that Meta Platforms, Inc. may collect certain information from our Site (as described above under Advertising Cookies). Facebook’s use of that information is governed by the . We do not provide Facebook with sensitive personal data via these tools. Facebook requires us to ensure that we have a lawful basis for the data collection and that we disclose how users can opt out of the collection and use of information for ad targeting (see “Cookies and Tracking Technologies” and “Your Privacy Rights” sections above for those opt-out options).
• Amazon and Other Advertising Partners: If we participate in Amazon’s advertising programs or other ad networks, those partners may use cookies or similar tools on our Site to track performance of ads and user interactions. We comply with any platform-specific requirements, such as disclosing our use of Amazon’s pixels or scripts if present. Users can opt out of personalized ads from many of these providers via the or the , as well as through the settings provided by those platforms (for example, Amazon’s Advertising Preferences).
• Microsoft/Bing Services: If we utilize Microsoft Advertising (Bing Ads) or Microsoft clarity analytics, Microsoft may collect certain data through our Site via cookies or similar tracking. Such data is subject to Microsoft’s . You can opt out of Microsoft’s personalized ads by visiting their .
• TikTok Pixel: If we use the TikTok Pixel on our Site for advertising or analytics, TikTok Technology Ltd. may collect information (such as pages viewed, clicks, and identifiers) as you use our Site. This information may be used to show you our ads on TikTok or to measure ad effectiveness. See TikTok’s for details on how they handle collected data. You can control personalized ads on TikTok through your TikTok app settings and via .

We are committed to complying with the policies and requirements of all third-party platforms we use, especially regarding the handling of personal data for analytics and advertising. If you have any specific questions about our use of a particular platform or service, you can contact us for more information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last Updated” date at the top of this Policy. If changes are material, we will provide a more prominent notice (such as by posting a notice on our Site or emailing you, if appropriate). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at Contact information is available in the website footer. You may reach out via email or postal mail (or other offered methods) once we provide a dedicated contact address. Please include your name and contact information, and describe the nature of your inquiry or request. We will do our best to respond promptly.

Data Controller Details

The data controller responsible for your personal data is Company Name, located at Company Address. You can contact our Data Protection Officer at: email, postal address, phone number.

Legal Basis for Processing

We process your personal data based on the following legal grounds: consent, contractual necessity, legal obligation, and legitimate interests as outlined in the General Data Protection Regulation (GDPR).

Children's Privacy

We do not knowingly collect personal data from children under the age of 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

How to Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at the contact information provided in the website footer.