１.　Basic Policy

In order to provide the best possible service, the website (hereinafter referred to as “site”) of the National Museum of Modern Art, Tokyo (including the National Museum of Modern Art, Tokyo and the National Crafts Museum) will record information about every visitor to this site. Recorded information will be used appropriately within the scope of the purpose of use.

２．Information Collecting Policy

1. This site automatically records information such as the IP address used when browsing this site.
2. When recruiting participants on this site for specific events, applicants may be asked to fill in name, address, date of birth, school/occupation, email address, and telephone number, etc. as necessary.

３．Purpose of Use

1. Information gathered on this site will be used as a reference to improve the operation of the services it provides.
2. Information on individuals collected in 2.(2) will be used for implementation of said event.

４．Restrictions for Use and Offers

The National Museum of Modern Art, Tokyo will only use the information gathered by the site for the purposes listed in 3. Purpose of Use and will not provide any information to third parties, unless illegal acts such as unauthorized access, intimidation, etc. are committed, or in case of request for disclosure under the laws and regulations or other special reasons. However, for data like the number of site visitors, we may disclose statistical results without revealing personal information.

５．Safety Measures

The National Museum of Modern Art, Tokyo will take the necessary measures to prevent the leaking, loss, or destruction of collected information, and will also take the necessary measures to properly manage the collected information.

６．Scope of Application

This privacy policy applies only to this site. The handling of information with related organizations is the responsibility of each organization.

7．Other

The privacy policy for the website of the National Museum of Modern Art, Tokyo outlined above may be revised as necessary.

We, the National Museum of Modern Art, Tokyo and the National Crafts Museum, take your privacy seriously. As you buy tickets or sign up for our art events via ticket agents and visit our museums or attend our events, we collect and use your personal data. When we do so, we undertake to comply with applicable data protection laws including EU General Data Protection Regulation (the “GDPR”) and Japan’s Act on the Protection of Personal Information. Below is our policy on how we collect, use, and protect your personal data.

We may, from time to time, amend, add to, or delete part of this policy.

Issuing Body

This privacy policy is issued by the Independent Administrative Institution National Museum of Art, which operates and represents the following museums:

The National Museum of Modern Art, Tokyo
The National Museum of Modern Art, Kyoto
The National Film Archive of Japan
The National Museum of Western Art
The National Museum of Art, Osaka
The National Art Center, Tokyo

When one of our museums collects and uses your personal data, we, the Independent Administrative Institution National Museum of Art, are the data controller as defined by the  GDPR and are responsible for protecting our users’ rights with regards to personal data.

Purpose and Lawful Basis (why and on what lawful grounds we use personal data)

As users buy tickets or sign up via ticket agents for our events like exhibitions, workshops, lectures, gallery talks, etc. and visit our museums or attend our events, we collect and use the following categories of personal data:

Name, and in the case of a group, the name of a contact person

Email address, and in the case of a group, email address of a contact person;

Phone number, and in the case of a group, the phone number of a contact person;

Age, and any other categories of personal data we request as relevant for the particular event.

We use the personal data listed above for the following purposes:

Notification of changes in the event schedule, venue or other important information when such notification is convenient or necessary in order to appropriately organize and operate the event; identifying visitors upon arrival at the venue of the event; verifying age and eligibility for the event; and any other purposes consented to in advance.

We collect and use personal data as described above on the lawful ground that it is necessary for the performance of our contract with our visitors regarding providing them with our services.

Sensitive Personal Data

When we collect and use sensitive categories of personal data as defined in Articles 9 and 10 of GDPR, we will obtain prior and explicit consent thereto, unless we are required to do so in order to perform our statutory obligations or to protect vital interests of our users or other people in emergency.

Source (where personal data comes from)

We obtain personal data from our ticket agents that provide ticket booking services for our events.

Retention (how long we keep personal data)

We will keep personal data until the end of each event participated in. In case of serial events, we keep the data until the final installment is concluded. Thereafter we discard or anonymize the data within a reasonable period of time, so that users can no longer be identified.

Disclosure (who we share your personal data with)

We may share personal data with our service providers, which help us organize and operate our events, including outsourced receptionists, couriers, information and communication technology vendors, etc. We protect the rights of our users with regard to personal data by means of data processing agreements in compliance with Article 28 of GDPR with our service providers, which impose data security and confidentiality obligations on them.

We will not disclose your personal data to anybody else without your prior consent, unless we are required to disclose them to competent public authorities by any legal obligations we are subject to.

Transfers to Non-EU Countries

We will not transfer personal data to any third countries without prior consent of the user, unless we are required to do so by any legal obligations we are subject to.

Legal Rights

Provided that certain conditions are met, the user has the legal right to request from us the following:

Access to personal data and to certain supplementary information covered by this notice, correction of personal data if inaccurate or incomplete; erasure of personal data in certain circumstances, suspension of using personal data in certain circumstances, stopping the processing of personal data in certain circumstances, and obtaining personal data in a structured, commonly used, and computer-readable format.

If you wish to exercise your right, please contact us.

Complaints

Complaints can be lodged about our way of processing personal data with data protection supervisory authorities.

Inquiries

For further information, contact:
The National Museum of Modern Art, Tokyo
inquiry@momat.go.jp