Privacy statement
We take your privacy seriously. When we use your personal data, we do so with care. We process personal data in accordance with the requirements of the General Data Protection Regulation (GDPR). In this privacy statement, we explain what data we collect from you, for what purpose, on what legal basis, how long we retain it, and what your rights are. If you have any questions, you can contact us at info@bimhuis.nl
This privacy statement was last updated in June 2026.
Personal data
BIMHUIS collects data from:
- persons who purchase tickets, make reservations or use other products or services at BIMHUIS
- subscribers to the BIMHUIS newsletter
- visitors to the BIMHUIS website
We process the following categories of data:
- Identification data: name, postcode, city of residence, date of birth.
- Online data: IP address, cookie preferences, website behaviour.
- Visit data: your visit history and newsletter preferences.
- Payment data: when purchasing tickets or products.
- Contact details: email address, telephone number.
Purpose and legal basis
We only process data that is necessary for our services. Below we explain, for each purpose, why we use your data and on what legal basis.
Ticket sales and reservations
We process your data to handle your tickets, reservations and orders correctly and to keep you informed about your visit — for example if something changes or a concert is cancelled. This is necessary for the performance of the agreement you enter into with us.
Newsletter
If you have signed up for our newsletter, we keep you informed about our programme, offers and other activities. We do this on the basis of your consent. You can unsubscribe at any time via the unsubscribe link at the bottom of our emails.
Marketing and personalised advertising
We keep you informed about our programme and offering via email, social media and advertising platforms such as Google Ads and Meta (Facebook/Instagram). For marketing cookies and personalised advertising, we do this exclusively on the basis of your consent via the cookie banner. For email marketing to existing relations and visitors, we rely on legitimate interest, to the extent permitted under the Telecommunications Act. We may use profiling in this context, for example to show advertisements to visitors with similar interests. We do this only on the basis of your consent.
Relationship management
BIMHUIS works with many people: visitors, musicians, partners and other relations. To maintain those connections, we process contact details. We do this on the basis of legitimate interest — as an organisation, we have a genuine interest in maintaining these relationships.
Website analytics and improvement
We use Google Analytics 4 to analyse how our website is used, so that we can continue to improve it. We do this only if you have given your consent via the cookie banner. Automated decision-making — where an algorithm makes decisions with legal consequences for you — does not take place at BIMHUIS.
Legal obligations
Some data we are legally required to retain, even if you were to ask us to delete it. This applies to two categories. First, financial data: under Article 52 of the General Tax Act (Algemene wet inzake rijksbelastingen, AWR), we are required to retain invoices, payment records and other administrative records for seven years. Second, BIMHUIS may under certain circumstances be legally required to provide data to authorities, such as the police or public prosecution service. In such cases, we are not always permitted to inform you of this. The retention periods for all other categories of data are set out in the Retention periods section below.
Concert visitors
When purchasing tickets via the BIMHUIS website, we ask for a number of details. Required fields are indicated with an asterisk:
- email address*
- postcode*
- surname*
A number of fields are optional:
- first name
- gender
- date of birth
- telephone number
Your profile also stores:
- concert visit history
- newsletter preferences (yes/no, Dutch/English)
For personal subscriptions such as the BIMHUIS Card, we retain additional data depending on the type of subscription. In the case of the BIMHUIS Card, this includes a postal address.
We sometimes organise concerts or events in collaboration with other parties. In such cases, we may share your contact details with the co-organiser of the event for which you purchased tickets. That party may contact you about the event or make you an offer. The partners with whom we share data are: Muziekgebouw and Orchestre Partout. If you object to this, you can let us know at info@bimhuis.nl.
BIMHUIS relations
For the management of various relations, we retain name and email address, and where applicable organisation, address, city and telephone number.
We retain contact details of relations for as long as the relationship is active, and delete them within one year of the contact ending, unless a legal retention obligation applies.
Newsletter subscribers
When you subscribe to the BIMHUIS newsletter, we retain your email address and language preference (Dutch or English). Every newsletter contains an unsubscribe link. After unsubscribing, we remove your email address from our system.
To improve our newsletter, we analyse how it is used. We process data on email opens, click behaviour and delivery status. We do this on the basis of our legitimate interest in improving our communications.
Website visitors
The BIMHUIS website uses cookies. For our cookie policy, please visit this page on our website.
For the collection of website statistics, BIMHUIS uses Google Analytics 4 (GA4). IP addresses are anonymised by GA4 by default and are not stored. The results give us insight into how our website is used, so that we can improve it. We process this data only after you have given your consent via the cookie banner.
BIMHUIS uses the Meta Pixel (Facebook Pixel) on its website. This allows us to measure the effect of our advertisements on Facebook and Instagram and to show relevant ads to website visitors and similar audiences (Custom Audiences). The Meta Pixel places cookies and processes data about your website behaviour. We do this only after you have given your consent via the cookie banner.
In addition to standard cookie tracking, we also process website data via server-side tracking. This means that information about your website visit is first processed via our own server, before we pass the necessary data to our partners such as Google Analytics and Meta. This helps us to process data more accurately and securely. Your consent choice via the cookie banner applies to both methods.
BIMHUIS and Meta Ireland Limited are joint controllers for processing via the Meta Pixel. Read more in Meta’s privacy policy.
You can install a Google browser extension to prevent Google Analytics from tracking you on our and other websites. You can also update your cookie preferences at any time via the cookie settings on our website.
BIMHUIS Radio player
When you play our 24/7 BIMHUIS Radio stream, your IP address is sent to our radio service provider so that we can monitor listening trends and provide royalty information to rights organisations. As soon as our service provider receives your IP address, it is immediately anonymised and deleted. This data is never sold or passed on to other companies.
Recordings and photography
BIMHUIS reserves the right to make audio and/or visual recordings of events attended by visitors. BIMHUIS acts in accordance with the GDPR by ensuring that visitors are not individually identifiable in recordings. Questions about this can be directed to publicity@bimhuis.nl.
Atmospheric imagery falls under the journalistic exception as described in the GDPR. For commercial use of recognisable images of individual visitors, prior consent is obtained. We retain imagery for as long as it is relevant for our communications purposes.
Sharing data with third parties
We may provide your personal data to BIMHUIS staff and third parties that provide services to us, such as our ticketing provider, the party handling payments and the party responsible for sending our newsletters. We have concluded a data processing agreement with all processors that meets GDPR requirements.
We only transfer personal data outside the European Economic Area to Google in connection with the use of Google Analytics. Google participates in the EU-US Data Privacy Framework (DPF), which entered into force on 10 July 2023. This provides an adequate level of protection for the transfer of personal data to the United States within the meaning of Article 45 GDPR.
Finally, BIMHUIS may under certain circumstances be legally required to provide visitor data to third parties. BIMHUIS is not always permitted to inform the visitor of this.
Third-party websites and apps
This privacy statement does not apply to third-party websites linked to by BIMHUIS, or the social media platforms referenced. For the privacy policies of these third parties, BIMHUIS refers you to the relevant websites and apps.
Retention periods
We do not retain your data for longer than is necessary for the purpose for which it was collected. Ticket data is deleted from our system if you have not purchased anything from us for two years. Newsletter data is retained until you unsubscribe; after that, it is only used in anonymised form for statistical purposes. Relation data is retained for as long as the contact is active and deleted within one year of the contact ending. Website statistics via GA4 are retained for a maximum of fourteen months. Payment data and invoices are retained for seven years, as required by law for financial administration. Imagery is retained for as long as it is relevant for our communications purposes.
Your rights
Under the GDPR, you have the right to request what data we hold about you, to have inaccurate data corrected, and to request deletion if we have no legal obligation to retain it. You can also ask us to temporarily restrict processing or to receive your data in a commonly used format. If you object to processing based on legitimate interest, including for direct marketing, you can make this known. If we process your data on the basis of consent, you can withdraw that consent at any time — this has no retroactive effect.
You can update or delete your data by logging in at www.bimhuis.nl/account. For other requests, please contact us at privacy@bimhuis.nl. We will respond to your request within one month. In exceptional cases, we may extend this period by two months; we will let you know if this is the case.
Filing a complaint
If you feel that we are not handling your data correctly, we ask you to contact us first at privacy@bimhuis.nl. We aim to respond within two weeks. If we are unable to help you adequately, you have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can read how to do this at www.autoriteitpersoonsgegevens.nl.
Changes to this privacy statement
We reserve the right to amend this privacy statement. In the event of material changes, we will inform you via our website. We recommend that you consult this page regularly.
Contact details
BIMHUIS
Piet Heinkade 3
1019 BR Amsterdam
+31 (0) 20 788 21 50