Privacy policy

    Last updated: July 2024

    The Brooklyn Museum (the “Museum”) is committed to protecting the privacy of our visitors, online guests, customers, members, donors, and friends. This Privacy Policy governs the way we collect and use information both online and offline, including through the Services (as defined below), and explains the type of information we collect and how we use it. Your use of the Services or provision of personal information to the Museum as described below constitutes your agreement to the terms of this Privacy Policy as it may be modified from time to time.

    This Privacy Policy covers: (a) BrooklynMuseum.org and all corresponding subdomains, web pages, and associated websites (the “Site”), (b) any mobile, web, console, desktop, and other applications provided by or on behalf of the Museum, which may be made available on the iOS, Android, and/or other operating systems and platforms including third party services that may be linked from the Site or other Museum-provided services or where the Museum may maintain an account or other online presence with which you may engage (collectively, “Third Party Services”) including social media platforms such as Facebook, Instagram, X (Twitter), LinkedIn, TikTok, Threads, Spotify, YouTube, Tumblr and Snapchat (collectively, “Apps”), (c) any other content, applications, systems, features, functionality, software, information, products, and services offered by us, including, without limitation, application/device-based features and related technology, and (d) any other offline or in-person services provided by the Museum (collectively, the “Services”). Please review our Terms of Use Agreement, which governs your use of the Services. Any capitalized terms that are not defined in this Privacy Policy have the meaning ascribed in the Terms of Use Agreement.

    1. INTRODUCTION; GENERAL TERMS

    1.1 As described in more detail below, we collect and use the information you provide to personalize the Services so that we can meet your needs, fulfill your online order, facilitate customer service, and inform you of the Museum’s exhibitions, programs, and activities. This Privacy Policy explains what information we collect and use in connection with your use of the Services and how and when we disclose such information. Please take a few minutes to read this Privacy Policy so that you understand how we treat your information. If you do not agree with this Privacy Policy, please do not use any of the Services.

    1.2 This Privacy Policy governs only the information collected by us on or through your use of the Services and any other information collected in any other manner or collected by any other third party to which the Museum has appropriate access. Where you have provided any of your information to third parties, including, without limitation, marketing companies, advertisers, and product/service providers, we may obtain such personal information and combine it with your Information (as defined herein) and, if we do so, our use of the resulting combined Information will be subject to this Privacy Policy. Such information may also be subject to the privacy policies of the third parties, which may differ from this Privacy Policy. You should review and become familiar with any third party privacy policy.

    1.3 For purposes of this Privacy Policy, (a) when we use the term “Personal Information” we mean any information that we collect on or through the Services that would allow someone to identify you or contact you, such as your full name, email address, mailing address, payment card information, telephone number(s), IP address, website cookies and other Tracking Technologies (defined below), and physical location, and (b) when we use the term “Additional Information” we mean any information that we collect about you on or through the Services other than Personal Information such as browser and device information, app usage data and demographic information, other information provided by you that does not reveal your specific identity, and information that has been aggregated so that it no longer reveals your identity (Personal Information and Additional Information shall be collectively referred to herein as “Information”). Information does not include data from which you can no longer be identified due to encryption or anonymity. Information also includes any personal or additional information relating to other people provided by you in connection with the Services, and you represent that you have the authority to provide that Information and to permit the Museum to use it in accordance with this Privacy Policy.

    1.4 The Museum collects Information from you when you engage in online or in-person transactions such as purchases, registrations, making donations, or becoming a member. Additionally, Information may be transmitted as part of a form submission or in connection with other programs, activities, services, or resources available on our Site or Apps.
    For example, we collect Information on our Site and/or Apps when you:

    • Create an account

    • Purchase tickets

    • Purchase a membership

    • Make a donation

    • Purchase merchandise

    • Purchase or redeem a gift membership

    • Fill out a “Contact Us” request

    • Subscribe to a mailing list

    • Request information about exhibitions, programs, and activities

    • Participate in certain education programs

    • Communicate with us through the Site and/or Apps, including by completing online forms

    We also collect Information outside of our Site and Apps:

    • In-person ticket or membership sales

    • By phone

    • Onsite (for example, by completing a form in person with us)

    • Returning mail to us, such as membership renewals

    • Completing a survey mailed to you

    • Completing contact information on forms at local events

    2. INFORMATION WE COLLECT ABOUT YOU

    2.1 Registration, Features, Functionality, and Communications. In order to use the Services and any content, features, and functionality thereof (e.g., communication/networking features, account registration, donation features, promotions, purchases, etc.), we may require that you provide and/or otherwise make available to us certain Information, which may include your legal name, email address, mailing address, physical location, telephone number and other descriptive information, and, in order to conduct fee-based transactions and other activities, your payment data (e.g., payment card data, billing address, PayPal account details, etc.), demographic information, authentication data and other information. In addition, you may be presented with the opportunity to sign up to receive additional newsletters, email communications, other communications, and promotions from us in order for us to provide up-to-date information and other news about the Services, and to publicize and promote certain exhibitions, activities, events, content, initiatives, programs, products, and services offered by us, which may require that you provide certain Information.

    2.2 Automatic Information Collection; Tracking Technologies. When you use the Services, we may automatically collect certain Information, such as a unique device identifier assigned to your Device (“UDID”), anonymous identifiers, your Internet protocol (IP) address, location data (e.g., zip code, GPS-based location information, longitude/latitude, etc.), and other Information regarding your use of the Services, which may assist us in authenticating your usage and/or device, keeping track of your preferences, creating a more tailored user experience, better serving your particular interests and needs, etc. In addition, the Services and/or third parties may use “cookies” (which are small electronic files containing information about you and your activities that are stored on your Device (e.g., html files, Flash files, etc.), “embedded scripts”, web beacons and other similar tracking technologies (collectively, “Tracking Technologies”) to collect Information automatically as you use the Services. Tracking Technologies enable us to track your use of the Services, and target your interests to enhance your experience with the Services, including, without limitation, by making additional features, functionality, products, and services available to you. We may also use Tracking Technologies to collect “clickstream” data, such as your Device type, operating system and platform, the average time spent using the Services, content viewed and searched for, access times, location of usage, and other relevant statistics, and may assign unique identifiers to your Device or other credentials you use to access and/or use the Services for the same purposes. We may associate the information obtained through these Tracking Technologies and your UDID, anonymous identifiers, and other identifiers and data with your Personal Information so we can better customize your experience using the Services and provide tailored recommendations, advertisements, promotions, features, functionality, products, services, and other content related to your specific interests, activities, and/or profile. You may have the ability to set certain privacy options on your Device that limit the provision of certain Information, such as geolocation information, whether by responding to request alerts or notifications that may be presented to you on your Device prior to the collection of the relevant information or by navigating to the settings section of your Device and limiting certain functionality (e.g., location services, etc.). Please be aware that if you limit the collection of certain Information, you may not be able to use certain of the Services, whether as it pertains to some or all of the services, content, features, and/or products made available in connection therewith.

    We may combine Information gathered from the Site and the Apps with Information that we have received, gathered, acquired, or stored from other sources, including Information collected offline by the Museum and Information received from third parties into a single customer record. We also use and/or combine Information that we collect offline or receive from third party sources to edit, enhance, and/or check the accuracy of your customer record.

    2.3 EXPRESS CONSENT AND AGREEMENT. BY USING THE SERVICES YOU EXPRESSLY ACKNOWLEDGE, UNDERSTAND, AND AGREE THAT YOU ARE GIVING US YOUR CONSENT TO TRACK YOUR ACTIVITIES AND YOUR USE OF THE SERVICES AS DESCRIBED IN THIS PRIVACY POLICY.

    3. HOW WE USE INFORMATION

    3.1 We may use your Information for the following purposes:

    • Providing any information, services, or products that you request or purchase on or through the Services;

    • Contacting you regarding the administration of any features or functions of the Services;

    • Sending you marketing, promotional, fundraising, and other emails, messages, correspondence, and notifications;

    • Allowing you to participate in the support and other features of the Services;

    • Responding to your questions or other requests;

    • Tailoring your experience with the Services and/or otherwise customizing what you see when you use the Services;

    • Saving your User Account, registration, and profile data or other Personal Information (so you are not required to have to re-enter it each time you use the Services);

    • Providing and/or otherwise making available the Services and any other information, products, and services of enhanced value to you;

    • Marketing and promoting the Services, including, without limitation, promotions and other initiatives and activities;

    • Where you order information, goods, or services, performing credit checking or other authentication where relevant;

    • For the prevention and detection of fraud or infringement of our or any third party’s rights;

    • Tracking your return visits to and use of the Services;

    • Sharing your Information with third parties as discussed below in Section 5;

    • Complying with legal obligations or legal process; and

    • For any other purposes described in this Privacy Policy or disclosed at the time you provide us with the Information or which are reasonably necessary to provide the Service or other related information, product, and/or service requested.

    4. USER CHOICE, WITHDRAWAL OF CONSENT, AND OPT-OUT

    By using the Services and providing and/or otherwise making available your Information to us, (a) you expressly choose to receive certain communications from us as described in this Privacy Policy, and (b) you expressly agree to the privacy practices described herein.

    If you prefer not to have your Information shared with third parties for marketing purposes, or would like to be removed from our mailing list, please contact us at opt.out@brooklynmuseum.org. The Museum will use reasonable efforts to remove you from shared and marketing lists in a timely manner.

    Other privacy preferences (e.g., limiting location services, etc.), depending on the nature of the specific feature, functionality, or offering, may be designated by modifying your account privacy, permission, and/or account options on your Device (if applicable) and the Services (solely if applicable and in the event we elect to make such settings available).

    If you ask us to stop using your Information, we will honor that request while retaining a record of any Information as necessary to comply with applicable foreign, federal, state, or local law, and/or to conduct legitimate business activities; provided, however, that you may be unable to continue to use certain Services (in whole or in part), if you require us to stop using your Information. You always have the right to review and correct the Information you have provided to us and generally you may update or delete certain Information by contacting us as described in Section 14.

    If for any reason you do not wish to receive further emails from the Museum, please follow the instructions for unsubscribing included within the body of the message that was sent to you, or email a message containing your name and address to opt.out@brooklynmuseum.org. The Museum will use reasonable efforts to remove you from the email list in a timely manner. Please note that we may still send you important administrative messages even if you have opted out of receiving promotional emails.

    5. SHARING AND DISCLOSURE OF PERSONAL INFORMATION AND OTHER INFORMATION

    5.1 Disclosure to Third Parties. We reserve the right to use, share, exchange, and/or disclose to third parties any of your Information (i.e., Personal Information and Additional Information) for any lawful purpose, including, but not limited to, as may otherwise be described in Section 3 above, and your use of the Services shall be deemed your express, affirmative “opt-in” consent. You can choose to opt-out of certain such uses as described in Section 4 above.

    5.2 Disclosure of User Status and Activity Information. In order to access and use the Services, you expressly acknowledge, understand, and agree that the Services will automatically store, host, share, post, disseminate, disclose, and/or publish certain Information concerning your user account and profile (e.g., name, avatar, images, etc.) and your corresponding use of the Services and related conduct, information, and activities associated therewith (e.g., content and text postings, questions regarding exhibits, feedback, ratings, etc.) in connection with the Services including any such information posted on the Museum’s third-party social media channels (collectively, “Status and Activity Information”). Status and Activity Information will be visible (e.g., on post and feed sections, message boards, on-location physical displays, etc.) to all Users of the Services and any other third parties (e.g., visitors to the Brooklyn Museum, users of third party platforms, etc.). Accordingly, you expressly acknowledge, understand, and agree that all Status and Activity Information is public and may be globally viewed by any third parties. We may, from time to time, make certain settings available to limit the sharing, availability, or public nature of certain specific Status and Activity Information, and if we do elect to do so and you properly designate your preferences using such settings, then we will honor the choices you make about who can see certain specific Status and Activity Information after a reasonable period of time to implement such preference. For purposes of clarity, the term “User Posting” shall include Status and Activity Information. Any information you share with the Museum either through a User Posting (including on a third party social media channel) or through email, including any material, business information, ideas, concepts or other information will be treated as non-confidential and non-proprietary.

    5.3 Co-Branded Services and Features. The Services may offer co-branded services and features, such as activities, events, initiatives, promotions, and selected products and services provided by us or other third party collaborators, and that may be made available on the Services and/or our co-branded collaborator’s platform, website, or service. The co-branded collaborator will be identified on the co-branded feature or service, along with the co-branded collaborator’s privacy policy. Please note that the use of such information by co-branded collaborator is subject to co-branded collaborator’s privacy policy. If you wish to opt-out of a co-branded partner's future use of your Personal Information for marketing or other purposes, you will need to do so in accordance with their policies.

    5.4 Service Providers. We will provide and disclose your Information to operators, services providers, and other third parties for the purpose of proving, offering, supporting, administering, and maintaining the Services, and providing the full range of content, activities, services, features, and functions offered on or in connection with the Services.

    5.5 Additional Disclosures. The Museum may also use or disclose your Information if required to do so by law or in the good-faith belief that such action is necessary to (a) comply with applicable law or legal process served on the Museum; (b) protect and defend the Museum’s rights or property, the Site, the Apps, or the Museum’s users or their rights or property; (c) cooperate with governmental authorities; and (c) act under emergency circumstances to protect the personal safety of Museum affiliates, agents, or the users of the Site, the Apps, or the public.

    5.6. Google Analytics. The Museum works with third-party analytics and marketing partners who use technologies such as cookies on behalf of the Museum. Google Analytics uses cookies and similar technologies to collect and analyze information about use of the Services and reports on activities and trends and may also collect information regarding your use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners. You can opt-out of certain practices by downloading the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

    6. MINORS

    The Museum takes special care to protect the safety and privacy of children. We do not knowingly collect information from children under the age of 13 without the express consent of that child’s parent or legal guardian. Children under the age of 18 should always ask parents/guardians for permission before providing personal information to any website or purchasing any products or services online. The Museum urges all parents/guardians to participate in their children’s exploration of the Internet and to teach them about protecting their personal information while online.

    If a parent or legal guardian would like to request that the Museum remove a minor from its lists, please email opt.out@brooklynmuseum.org with the minor’s name and email and/or phone number if previously provided to the Museum.

    7. SECURITY

    The Museum engages third parties to process online transactions conducted on the Site, the Apps, and onsite and such third parties have represented to the Museum that such transactions are protected by security features, including encryption and tokenization, designed to prevent the unauthorized release of your personal financial data. Such third parties have further represented that all credit card information complies with current PCI standards and will be tokenized and held on third party sites. Recovery for any breach of these representations by the third party service providers is limited to any recovery actually received by the Museum.

    While the Museum has endeavored to create secure and reliable Site and Apps, please be advised that the confidentiality of any communication or material transmitted over the Internet cannot be guaranteed. Accordingly, the Museum and its employees, agents, officers, trustees, legal representatives, predecessors, successors, and assigns are only responsible for information after receipt and while in our custody and control. You assume the sole and complete risk for using such Services and must make your own determination as to these matters. If you have reason to believe that your data with us is no longer secure, please immediately notify us using the contact information found in Section 14 below.

    8. YOUR CALIFORNIA PRIVACY RIGHTS
    If you are a resident of the State of California, we provide you with information on how to exercise your disclosure choice options such as your right to opt-out (which we may sometimes refer to as “unsubscribe”) with respect to use of your Personal Information by third parties for marketing purposes. We are not required to maintain or disclose a list of the third parties that received your Personal Information for marketing purposes during the preceding year but may disclose the types of third parties who have received that information. If you wish to request information about how to exercise your third party disclosure choices, please send a request by email to our Privacy Officer at privacy@brooklynmuseum.org detailing your privacy request. All requests must be labeled “Your California Privacy Rights” on the email subject line. For all requests, please clearly state that the request is related to “Your California Privacy Rights”, include your name, street address, city, state, zip code, and email address (your street address is optional if you wish to receive a response to your request via email) and indicate your preference on how our response to your request should be sent (email or postal mail). We will not accept requests via the telephone, postal mail, or by fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete or legible information.

    9. INTEGRATION AND INTERACTION WITH THIRD PARTY PLATFORMS, THIRD PARTY SERVICES AND OPERATORS

    The Services may be linked to, rely on, and/or be integrated with websites, applications, interfaces, services, and platforms operated by other companies, including Third Party Services. The Museum does not control the content or privacy policies of these Third Party Services, and the includes of such links or other references to Third Party Services does not constitute an endorsement of them by the Museum. The Services may also feature advertisements, promotions, and other content, products, and services from other third parties. We are not responsible for the privacy practices of such websites, applications, interfaces, services, and platforms operated by third parties that are linked to, rely on, and/or integrated with the Services or for the privacy practices of third parties. Once you access a third party application, interface, webpage, service, or platform (whether made available within the Services or otherwise) or click on or navigate to an advertisement, promotion, or other opportunity, you should check the applicable privacy policy to determine, among other things, how they will handle any personally identifiable or other information that they may collect from you, which may be different from this Privacy Policy.

    10. PRIVACY POLICY CHANGES
    From time to time, we may modify this Privacy Policy. Please check here often for updates.

    11. ACCURACY

    It is your responsibility to give us current, complete, truthful, and accurate information, including Personal Information, and to keep such information up to date. We cannot and will not be responsible for any problems or liability that may arise if you do not give us accurate, truthful, or complete information or Personal Information or you fail to update such information or Personal Information. We will reject and delete any entry that we believe in good faith to be false, fraudulent, or inconsistent with this Privacy Policy.

    12. INTERNATIONAL USAGE
    Information collected by the Museum will be processed and stored where the Museum’s service providers are located. Your Information may be processed outside of your country and/or state of residence and may be subject to the laws of such other jurisdiction(s) as well as the policies and procedures of the Museum’s service providers.

    13. DATA PROTECTION PRIVACY UNDER THE GENERAL DATA PROTECTION REGULATION (“GDPR”)
    The GDPR protects personal data collected from citizens of European Union Member States. The Museum collects and stores certain personal data through our Site, Apps, in person, or over the phone for the reasons set forth above in this Privacy Policy.

    In order for the Museum to collect this information, you must consent to the collection of your Information. The Museum will only use your Information for the purposes established in this Privacy Policy, unless we discover another purpose that is in line with the Museum’s original purpose for collection. In the event that you do not consent to the collection of your Information, then the Museum may not be able to completely and fully provide you with all of our services. The Museum will store your Information for as long as necessary to fulfill the purpose for which the Information was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period for your Information, we will consider the amount, nature, and sensitivity of the Information, the purposes for which we process your Information and whether we can achieve these purposes through other means, and the applicable legal requirements. Upon expiration of this time frame, the Museum will securely erase and destroy all of your collected Information, in accordance with applicable laws and regulations.

    If the GDPR applies to you, then you have particular rights as an individual under this regulation, including the right to:

    • Request access to your Personal Information stored by the Museum and request certain information related to its processing

    • Request a change and/or update be made to your Personal Information stored by the Museum

    • Request restriction of processing your Personal Information

    • Request erasure of your Personal Information stored by the Museum

    • Object to the processing of your Personal Information

    To exercise one of these rights, please contact the Museum at privacy@brooklynmuseum.org.

    The Museum acknowledges that even though you may initially consent to the processing of your Personal Information, you may wish to withdraw your consent from time to time. You may withdraw your consent from the processing of Personal Information either entirely or in part. To withdraw your consent, please contact privacy@brooklynmuseum.org.

    If you have any questions or concerns regarding the rights established under the GDPR, please feel free to contact the Museum as set forth in Section 14 below.

    14. CONTACT US

    If you have any questions regarding this Privacy Policy, please feel free to contact the Museum’s Privacy Officer:

    Privacy Officer
    Brooklyn Museum
    Attention: Privacy Matters
    200 Eastern Parkway
    Brooklyn, NY 11238
    Email: privacy@brooklynmuseum.org

    15. SOLE STATEMENT
    This document is the sole statement of the Privacy Policy for the Services and no summary, restatement, or other version thereof, or other privacy statement or policy, in any form, including, without limitation, machine-generated, is valid.

    This Privacy Policy was last modified on the date indicated above and is effective immediately.

    Copyright © Brooklyn Museum 2024. All rights reserved.