PRIVACY POLICY

N.P. Goulandris Foundation – Museum of Cycladic Art (the “Museum”), is committed to respecting and protecting your personal data. We understand and take into serious consideration the fact that you are aware of and interested in your personal data and the respective processing carried out.

This Privacy Policy applies to natural persons, such as the Museum’s clients, visitors, friends (supporters, young patrons, subscribers, donors, sponsors) and any other person who maintains any kind of relationship with the Museum, or who uses the Museum’s official website or other digital channels thereof (such as social media), or who visits the Museum’s premises and participates in the various activities and/or events it organizes. This Privacy Policy is also addressed to persons who express their interest in getting employed by the Museum.

This Privacy Policy provides detailed information about the type of personal data we collect and explains how the Museum processes your personal data as well as how you can manage and control the use and processing of your personal data, in accordance with the provisions of Greek and European data protection law including the General Data Protection Regulation (2016/679/ΕU), widely known as “GDPR”) and Greek implementing law 4624/2019.

1. Who is the Controller of your Personal Data and how can you communicate with it?

Controller for the retention, collection, storage and further processing of your personal data is the:

“N.P. Goulandris Foundation – Museum of Cycladic Art”

Registered seat: 4 Neophytou Douka str., PC 106 74, Athens, Greece

Tel.: +30 210 72 28 321-3

e-mail: museum@cycladic.gr

The purpose of this Privacy Policy is to provide you with information concerning the retaining, storage, use and processing of your personal data and about exercising your respective data protection rights.

The Museum in compliance with the applicable legal framework, has taken all the steps required by implementing the appropriate technical and organizational measures for the lawful retaining and further processing  and safe storage of your personal data, committed to ensure and protect  by all means, the processing and safe storage of your personal data, in particular from the risk of accidental or unlawful loss, breach of security, alteration, unauthorized disclosure of or their otherwise unlawful processing.

For more information, you may contact the Data Protection Officer of the Museum, either via email at: dpo@cycladic.gr or in writing, at the address: 4 Neophytou Douka str., PC 106 74, Athens, Greece.

2. What type of personal data we process and for which purposes?

Personal Data is all information that identifies you, such as your name, address or email address or your telephone number. The Museum processes the following personal data and for the below purposes:

• Personal Data we collect and process on your behalf
• When you enter the Museum
  Your name and surname and email address, optionally when subscribing to the Museum’s newletter or when you become a Friend of the Museum (member up to 35, member, dual subscription, supporter, young patrons, donors sponsors).
• When you enter the Museum Shop
  Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number), invoicing details, preferences – background feedback in case you make a transaction).
• When you become Friend of the Museum (all types of membership are included)
  Your name and surname, position held (optional), email address, postal address, contact details (fixed-line phone or mobile phone).
• When you register in our website in order to create a personal account
  Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number).
• For the purpose of sending our newsletter, when you subscribe to the relevant service
  Your name and surname, email address.
• When you participate in the various events and programmes organized by the Museum
  Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number).
• When you participate in the various educational programmes of the Musem
  i. For the e-learning for adults programme: Your name and surname, position, information about your studies, email address where appropriate.
  ii. For the adult courses: Your name and surname, contact details (fixed-line or mobile phone number), email address.
  iii. For the school visits: Name and surname and contact details (fixed-line or mobile phone number) of the teacher responsible of the organizational of the educational visit.
  iv. For the Museum Kit borrowing programme: Name and surname and contact details (fixed-line or mobile phone number, email address) of the teacher responsible for the borrowing of the Museum Kit as well as a copy of his or her identity card.
• When you make an order through our e-shop
  Your name and surname, email address, postal address, contact details (fixed-line or mobile phone number), invoicing details, payment details, shipping address, preferences – background information.
• When you subscribe and use the WiFi access service during your stay at the Museum’s premises
  Throughout the Museum’s premises we operate a WiFi system for your free access in the WiFi network and your free web browsing. To use the WiFi you will be asked to enter one of the following, depending on how you sign in, at the WiFi portal:

– Facebook Account
– Gmail account (G+)
– Email

Depending on the connection method, our system may store the following data: device identification number (device mac address), social media and email address (facebook/google/email address) and the respective data related to the above. If you want to access the free wifi network of the Museum, you will be asked to agree to the wifi terms and conditions, which explain how your respective data will be used.

• During your stay at the Museum’s premises and your participation in the various events
  Image data or video recordings generated in relation to our premises and/or our events as well as CCTV recordings collected via the installation of the relevant equipment for security reasons. In particular, the Museum may collect your image data (through taking photographs or videos) in case you participate in events where there is a relevant indication of video recording or taking photographs. In this case, the relevant material may be used to promote the Museum’s activities or for other purposes at the Museum’s absolute discretion. In the event that you do not wish your image to be used by the Museum in accordance with the aforesaid, please inform us accordingly, in accordance with the provisions of Section 7, below.
• When you express interest in getting a position in the Museum
  Data included in your applications where you express your interest in getting employed by the Museum and the CVs you submit, information collected in the context of the procedures for your placement at the Museum, such as information collected from documents or supporting documentation you provide or questionnaires you complete or during interviews or other communications with the Museum. Data of this type are indicatively those related to your education and skills, such as study certificates, participation in educational programs, certifications for knowledge of foreign languages, computers, professional certifications, military status certificates, information on previous professional experience and service, recommendations and contact details for confirmation of those or for obtaining recommendations from previous employers and/or associates, work permits, residence permits, etc.

Personal Data relating to children
The processing of personal data referring to children is being carried out subject to prior consent or authorization by the parents or the holder of parental responsibility over the child, unless otherwise specified by law. The processing of personal data referring to children takes place when the children participate in the various programmes and events organized for children by the Museum. For the purposes of the present, children are considered to be those who have not reached the age of 16 years.

In particular, the Museum carries out the following educational programmes for children:

• Summer Camp:
  For the participation of your children in the meetings and relevant activities, the Museum collects and processes the name and surname as well as the age of the child and the name, surname and contact details (telephone number, postal address and email address) of the holder of parental responsibility.
  On the advice of the holder of parental responsibility, the Museum may collect health data of the child related to its dietary habits, disorders, allergies and injuries, which require special care and attention from the Museum’s personnel.
• Exhibitions for children:
  For the participation of your children in the exhibitions and relevant activities, the Museum collects and processes the name and surname as well as the age of the child and the name, surname and contact details (telephone number, postal address and email address) of the holder of parental responsibility.
• Weekends at the Museum:
  For the participation of your children in the educational programmes and workshops organized during the weekends, the Museum collects the name and surname as well as the age of the child, and the name, surname and contact details (telephone number, postal address and email address) of the holder of parental responsibility.

Please note that in the context of school visits, the Museum does not collect nor processes personal data relating to the students. As aforesaid, the Museum only collects and processes the personal data of the teacher accompanying the students or the personal data of the teacher responsible for the organization of the school visit.

Purposes of processing
The Museum only collects, retains and processes those personal data which is limited to what is necessary in relation to the purposes for which the processing is undergone.

We use your personal data for the purposes referenced below:

• For administrative purposes, such as managing the memberships, subscriptions and orders you make in order to facilitate your choices and optimize our services.
• For the issue of tickets and/or membership cards.
• For the processing and completion of your orders, namely for the provision of our products and services to you, based on the conclusion and performance of contract or – at your express request – in order to take pre-contractual steps.
• For informative purposes in relation to our events, for direct marketing and/or promotional purposes, such as the participation in competitions or in order to send the email that we periodically send to those who have subscribed to our newsletter, as well as for profiling purposes in order to personalize the products and services provided to you and based on your consent.

Please note that when you subscribe to our newsletter, you declare that you agree to be included in the personalized list of recipients and receive our newsletter and all the information contained therein. For this purpose we will contact you only via email. In each newsletter, the recipient is given the option to declare that he or she does not want to receive further emails from us (unsubscribe). To do this, click the “Unsubscribe” option included in each email sent to you

• Where the processing of your personal data is necessary for the purposes of legitimate interests pursued by us or for compliance purposes with national and/or European legislation.
• For evaluating your application where you express your interest in getting employed by the Museum as well as the administrative and financial management of your employment and staffing of the Museum.
• Where the processing is necessary to protect your vital interests or those of another natural person, as well as where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Museum as data controller, such as the management and storage of the various collections hosted at the Museum or with regard to the use of CCTV system for security purposes and for the protection of the visitors, personnel and property of the Museum.

Please note that where the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time, without affecting the legitimacy of the processing based on said consent until the withdrawal thereof. The withdrawal of your consent can be made in writing or via email using the contact details referenced in section 1 above, or if such consent withdrawal relates to the newsletter subscription, via the above-described procedure.

3. How we collect your personal data.
We collect your personal data, directly from you, when you express your interest in the services, events and products of the Museum, when you express your interest in working in the Museum, when you participate in our workshops, courses or other programmes, when you purchase our products through our e-shop or by the Museum Shop, when you register your data online in our website or when you subscribe in our newsletter, as well as when you decide to help us by contributing to our work.

The Museum also processes your personal data that it receives or which is brought to its knowledge by third parties, either natural persons or legal entities, for the performance of corporate events in which you participate or for the organization of which you are responsible, as well as in cases where your data has been disclosed by a Museum’s Friend with whom you hold a joint subscription (Corporate Subscription, Dual Subscription, Gift Subscription).

4. To whom we disclose your personal data.
We do not transfer your personal data to third parties, except to those with whom we cooperate and as required to facilitate the provision of our services to you, always under conditions that ensure that your personal data is not subject to unlawful processing, meaning other than the purpose of the transmission thereof in accordance with the above. For instance, we may transfer your personal data to credit card providers for the processing of a payment made by you following your order through the e-shop or by the Museum Shop, to third parties – natural persons or legal entities- that may provide promotional and marketing services on our behalf, to companies responsible for the management and maintenance of our website and to other providers as well as to companies for the provision of legal and accounting/tax services. We inform you that the above categories of recipients of your personal data do not process your data beyond the above mentioned purposes. In any case, the Museum guarantees that it will not transfer, disclose, provide etc. your personal data to third parties, without your consent, for any purpose or use. However, we reserve the right to disclose information related to you, if we are obliged to do so by the applicable legislation or if such disclosure is required by the competent governmental authorities, administrative authorities or other law enforcement bodies.

Please note that any unauthorized access to your personal data by any person, including our employees, is strictly forbidden.
In case the transfer of your personal data to a third country outside the European Economic Area (EEA) is necessary, we will always ensure the provision of an adequate level of protection for the processing thereof, by contractually binding our counterparty or partner to whom we disclose your data in order to ensure the same level of protection as that provided in Greece.

5. Storage period of your personal data.
We will retain/store the personal data provided by you, only for as long as required to fulfill the purpose pursuant to which you have communicated such information to us and in compliance with the applicable legal provisions or for as long as required by the applicable legal and regulatory framework or in the context of exercising claims or defending the rights and legal interests of the Museum.

In the event of an expression of interest in getting employed by the Museum where an employment contract/employment relationship is concluded, the relevant personal data will be kept in accordance with the terms of the relevant policy of the Museum for the processing of personal data of employees. In the event that an employment contract/employment relationship is not concluded, your data will be kept for six (6) months from the rejection of your application for employment, unless you expressly state that you wish Museum to retain such data for the purpose of evaluating your CV in the event of a future employment opening. In this case, your data will be kept for a period of thirty-six (36) months starting from the completion of the recruitment process in the context of which you submitted your application.

6. Information that is automatically stored on your computer when visiting our website/ Use of cookies
We use “cookies” to facilitate the use of our website. Cookies are small text files that are stored by your browser on your device and are necessary for the use of our website. We use cookies to understand better how our website is used and to improve your website navigation. The cookies we use do not store personal data or personal information that may lead to identification of the person to whom they relate and which has been collected by other means. If you do not wish to collect information via cookies, please set up your internet browser to delete all existing cookies from your computer’s hard drive, block all cookies in the future and receive a warning before saving a cookie. More detailed information can be found in your browser’s operating manual.

7. What are your rights with respect to your personal data.
You may exercise the rights referenced below, pursuant to the terms and specific provisions of GDPR:

• Right to access your personal data that we process, as well as other information in relation to the processing thereof.
• Right to rectification of your personal data, in case of inaccurate personal data concerning you or in case you want to update your information.
• Right to object to the processing of your personal data when there is a legitimate interest, including your right to object to the processing of your personal data for promotional purposes.
• Right to obtain restriction of processing of your personal data, which means you may request the restriction of the particular processing, provided that the accuracy of your personal data is contested by you or you have objections for the processing carried out or there is another reason provided for in the relevant Greek or European Legislation on the Protection of Personal Data.
• Right to data portability of your personal data, in order to receive your data and use it wherever you may wish, provided that the respective processing is based on your consent and is carried out by automated means and subject to the obligations and rights of the Museum to retain such data to fulfill its duty carried out in the public interest.
• Right to erasure of your personal data without undue delay and subject to your relevant request pursuant to the provisions of the applicable Greek and European Legislation on the Protection of Personal Data.
• Consent withdrawal. Where we process your personal data based on your consent, you also have the right to withdraw such consent at any time and without affecting the legitimacy of processing for the period before the withdrawal of your consent.
• Right to be informed in cases of security breach incidents, where applicable.

Please note that the exercise of these rights is not absolute and may be subject to limitations by law. In any case you have the right to lodge a complaint at the competent Greek independent authority, which is the Data Protection Authority (http://www.dpa.gr/), in case you have further queries on the processing of your personal data or in case of unlawful processing thereof.
For all the above cases, as well as for any further information you may send us an email with your relevant request, at: dpo@cycladic.gr.

8. Security of personal data
We have implemented technical and organizational measures to ensure the lawful collection, processing and effective protection of your data from loss, alteration or unauthorized access thereto. We have, inter alia, implemented the following technical and organizational measures and procedures to protect your personal data:
access to your personal data is restricted to the authorized persons

• IT systems used to process the data are only accessible by authorized persons
• access to above IT systems is monitored to detect and prevent any unauthorized access
• adoption of specific procedures for the retention of your personal data and the safe deletion/ destruction thereof

Our procedures and security measures we implement are being constantly improved to pace with technological developments.

9. Updates and amendments to this Privacy Policy

The Museum reserves the right to modify/ update individual parts of this Privacy Policy without prior notice. Please always read the Privacy Policy before using our website as well as our services and products, to be informed about the current version of the Policy. Last update of this Privacy Policy: 24/3/2025

General Terms​ of use Electronic Shop

The electronic Shop of the Museum of Cycladic Art (the “Shop”) is an online outlet for the sale of products, through the Internet, of the non-profit organization named Nicholas P. Goulandris Foundation – Museum of Cycladic Art (the “Museum”) seated in Athens (4, Neophytou Douka Street, Postal Code: 106 74, VAT No 090062281, 4th Tax Office (DOY) of Athens, Telephone No 210-7228 321).

The implementation of purchases through the online outlet of the “Shop” (http://www.cycladic.gr/shop) entails full acceptance on your part of the terms referred to herein.

Security

The “Shop” uses the SSL (Secure Sockets Layer) protocol with a 128-bit encryption (the most powerful system so far) for safe on-line commercial transactions. In this manner all your personal information is encrypted, including the number of your credit card, name and address, so that all this information will not be read out or altered during transmission through the Internet.

The SSL protocol is currently the world standard on the Internet for the accreditation of websites vis-à-vis Internet users and for the encryption of data between Internet users and web servers. An encrypted SSL connection requires all information sent between a client and a server to be encrypted by the sending software and decrypted by the receiving software, thus protecting the personal information while in transit. In addition, all data sent over under the SSL protocol is protected with a mechanism which automatically determines whether the data has been altered in transit.

Personal Data

A necessary prerequisite of the commencement of a transaction between us is the notification on your part of some of your personal data. During the ordering procedure you will be requested to give your full name, your permanent address, the address at which you want the products being sold to be sent, the number of your fixed telephone (or any other telephone you want, that will be used to enhance the level of services provided to you), your e-mail address and, in the event you have chosen for your payments to be effected via a credit card, your credit card number and date of expiry.

The “Museum” and the “Shop” corresponding to the URL http://www.cycladic.gr/shop (the “Site”) in faithful conformity with the principles of personal data protection which are provided for by Greek and European laws and by the relevant international conventions shall not proceed to any unfair use nor to any use not previously authorized by you. The “Shop” of the “Site” will in no way disclose, publish, sell, or exchange your personal data and information entrusted by you with us. Exceptionally, your personal data may be published by the “Museum”, always in conformity with the procedure provided for by law when this is imposed by a Public Authority, a Court, etc.

The users may, at any moment whatsoever, and as long as there is a specific reason, proceed to the change in the personal data that has been communicated by them to the “Shop” (e.g., the credit card number) or even cancel any use thereof by filling in the relevant electronic form.

Modes of Payment

The “Shop” allows the following modes of payment:

1. By credit card VISA
2. By credit card MASTERCARD
3. By credit card EUROLINE
4. By PayPal
5. By Bank Deposit

Terms of Purchase and Return of Products

All transactions made through this website are governed by the special terms of sale, as set out below, by the Terms of Use of this website, which (Terms of Use) form an integral part of the special terms of sale, as well as the provisions of Greek, EU, and international legislation on distance selling. The sales contract between the buyer and the Online Store of the Museum of Cycladic Art must be drawn exclusively through the Order Form available on our website. Only if you receive written confirmation of receipt of your order, is it considered that the sales contract has been drawn up between the buyer and the Online Store of the Museum of Cycladic Art. In the case of any error, you must check the Order Confirmation and inform the Online Store of the Museum of Cycladic Art in writing immediately (no later than 24 hours from the time of receipt of the electronic Order Confirmation notice), otherwise the details mentioned in the Confirmation will be registered as they are. The Museum of Cycladic Art bears no responsibility in case of inability to complete an order because of a mistake, omission, interruption, defect, delay, or system failure.

​Product Availability

When processing your order, we will confirm the availability of the items ordered. In the case of insufficient stock, you will be notified. In this case, if it is possible to replenish the stock of the items ordered, you must let us know if you wish to wait for the additional time required for your order or if you prefer to cancel your order. In the latter case, any payments made will be refunded to the original payment method without undue delay. If you are notified of the unavailability of a product and you do not respond in writing within five (5) days of notice, it is at the discretion of the Online Store of the Museum of Cycladic Art to cancel your order. If the availability or delivery time differs from that indicated on the product’s page, you will receive an update.

Delivery Time & Cost

We make every effort to ship your orders as quickly as possible. Our network of shipping partners delivers your orders by courier as following:

Domestic orders

Deliveries in Greece within 1-7 working days.

International orders

Deliveries outside Greece can take from 1 working day to 2 weeks. In some cases, there may be delays due to the supplier’s inability to provide us with the products at the expected times. In such cases, the supplier will be reminded, and the customer will be informed. The Online Store of the Museum of Cycladic Art is not responsible for any delays or extra charges within post offices and customs outside the Greek Territory. Delivery time and cost depend upon the shipping method selected. Shipments are made daily except Saturdays, Sundays, and holidays. The order form indicates the expected delivery date of the items ordered and relevant cost. You may also pick up the products from our physical store without shipping costs. The Online Store of the Museum of Cycladic Art does not provide a guarantee for third party products (products that are not manufactured and/or assembled by or on behalf of the Museum of Cycladic Art and which the Museum of Cycladic Art simply resells). Online Store prices are subject to change at any time without notice.

Returns

Products purchased from the Online Store of the Museum of Cycladic Art can be returned. You have 30 days from receipt of your order to exchange an item or receive store credit. You have 14 days from receipt of your order to exchange an item or receive a refund either as store credit or back to the original payment method. For refunds you are required to send an email to eshop@cycladic.gr. To withdraw from a purchase, you must provide the order number and state whether you wish for a refund, store credit, or exchange. In case of an exchange, please state in your email the item you wish to exchange your original purchase with. If you request a refund, this will be credited to the original payment method within 14 calendar days of our receipt of the returned product, unless you choose store credit. You may not withdraw from the purchase of any of the following products:

 

• Products tailored to customer needs
• Music CDs/DVDs whose original packaging has been removed
• Sealed products which are not suitable for return for health reasons opened after delivery.

 

The Museum of Cycladic Art will exchange/replace an item and/or issue a refund and/or store credit only after the item has been returned to the Museum at Neophytou Douka 4, Athens 10674, either by you or by courier at your expense. Items must be returned unused, intact, in their original packaging, accompanied by their purchase invoice or retail receipt. If a returned item is damaged, or incomplete, or out of its packaging, or without its purchase invoice or retail receipt, the Online Store of the Museum of Cycladic Art has the right to refuse the returned item, refuse to exchange it (or issue store credit or refund), or, alternatively, withhold the amount necessary for restoring the item to its original state. The cost of restoring the item to its original state will depend on the item’s condition, which the Electronic Shop of the Museum of Cycladic Art is authorized to evaluate. Furthermore, the Online Store of the Museum of Cycladic Art may delay a refund if the returned item is not accompanied by all receipts/invoices and full packaging. The Online Store of the Museum of Cycladic Art bears no responsibility in case a refund is delayed for reasons beyond its control, as in the case of a banking system malfunction. In all cases of return, regardless of the reason, the shipping cost is borne by the customer, who also bears the risk of any damage to the item. We recommend that you keep the shipment receipt until the return process is complete.

Miscellaneous

1. Force Majeure: If for reasons of force majeure it is not possible for us to deliver to you the products within the predetermined period of time we shall advise you of that via e-mail thus enabling you to declare whether you want, under these circumstances, the completion of your order.
2. Fraudulent use of a client’s credit card: The “Shop” assumes the obligation to cover your liability to the Bank that has issued your credit cards (regarding an amount that arises from the contract for the issue of your credit card) in the event that your card is used by a non-authorized person (fraudulent use of a credit card). This liability shall cover only the cases in which the unauthorized / malicious utilization of your credit card for purchase transactions at the “Shop” is not due to your own fault or negligence. For this reason, you are obliged immediately as you notice the loss of your credit card to advise the issuing Bank so that such a card will be cancelled, and its use will not be permitted by unauthorized persons. In the event of any fraudulent use of your credit card, the amount that has been debited in your Bank account will be re-credited or reimbursed to you.
3. Cookies: As with most of the sites on the Internet we, too, use cookies in the “Shop”, which gives us access to certain information each time you navigate through a web browser in our shop. Without the use of cookies, it would be impossible for us to provide important services such as: state of orders, personal settings, storage of items in your basket or in your reminder list between two visits on your part, etc. Cookies are alphanumerical files which we transfer to the hard disk of your computer through the Internet so that we may provide services such as those referred to herein above. In the preferences section of your browser, you may choose to prevent the browser from accepting new cookies or you may oblige the browser to ask you each time a new cookie is about to be installed on your hard disk. Nevertheless, you should know that if you choose to prevent cookies from being stored on your hard disk you will not be able to use some of the services of our shop.
4. Law Applicable: All the transactions you implement through the “Shop” shall be governed by the Greek Law that deals with matters relative to electronic trade and the Courts of competent jurisdiction shall be the Courts in Athens.