Personal Data

Information on the protection of your personal data  

Dear Visitors,  

Thank you for visiting our website www.momus.gr .   

We would like to inform you that the controller of the personal data of this website is the Metropolitan Organization of Museums of Visual Arts of Thessaloniki – hereinafter referred to as “MOMus”, based in Stavroupoli, Thessaloniki (Kolokotroni 21, Lazaristes Monastery), email info@momus.gr. For your privacy issues, you can contact the MOMus Data Protection Officer directly at dpo@momus.gr email address.  

For all of us at MOMus, the protection of privacy and personal data is paramount. We want you to feel happy and safe when visiting our website and to consider the application of data protection as a citizen-oriented quality feature. As required by the General Data Protection Regulation (GDPR), with this notice we aim to provide you with any information that interests you in a concise, transparent, understandable and easily accessible format.  

What personal data do we need to collect through our website? 

Our website collects personal data: 

a) when you visit it, automatically, because of the way your device communicates with our server, e.g. IP address, date and time of access, type of browser, type of operating system.   

b) when you register to receive our newsletter, in which case you fill in your name and email address, 

c) when you register as a member in our online store or simply order our products through our e-shop, in which case you fill in your name, delivery address and e-mail. In the case of issuing an invoice, we need the name of your business, VAT number, tax office to which it belongs, object of activity, address of its registered office and telephone number  

d) when you register through our website for our events, guided tours and actions, through the cooperating e-ticketing platform Come Together. You will need to create your Come Together account, which collects your data and processes it in accordance with its own privacy policy which you can read here.     

e) when you book a tour or an event through the booking form on the https://booking.momus.gr/momus website: You can make reservations for guided tours or educational activities from our website. You will be automatically transferred to the OTS booking platform and its dedicated MOMus page. You can also consult the OTS privacy policy, acting in this regard as our subcontractor (processor) on our behalf.  

For the purpose of your booking, you must provide us with your name, email address, telephone number, as well as (in case you are accompanying a group of students) the number of students and the educational institution and level of education to which they belong.   

Your above information is necessary for the performance of the booking service contract with you.  This information will also be used to bill the service you have chosen, to contact you about your booking and to identify you upon arrival.      

Your information will be retained by us, based on our legitimate interest in promoting our actions, for the purpose of sending you newsletters by email, about our news and offers, as long as you do not oppose to receive such messages when filling out the booking form, by deselecting the relevant option, or at any time later, by sending us an email at dpo@momus.gr . You can also unsubscribe at any time from the list of recipients by pressing the “unsubscribe” or “unsubscribe” button at the end of each newsletter. 

We also inform you that as the events, actions and tours of our museums are public, there is a possibility that during the visit/tour/program in which you register to participate, a photograph or video recording will take place, selected material from which is then published on the social media accounts of our museums for the purposes of our legitimate interests for the promotion of MOMus activities. In case you do not wish to be included in the shots, please inform the Reception staff, in order to take care of the photo/video recording and to set a non-photo zone for you.  

The data you send us via the booking form will be kept for 20 days after the day of your booking and then anonymised. None of your data is transferred outside the EEA, and no one has access to it other than the specially authorised employees of MOMus and OTS, that has a contract with us specifically for the protection of your personal data.  

How and why do we use your personal data? 

When the use of your data is necessary for the general performance of a contract to which you are a party, i.e. when you make a purchase from our online store (sale, invoicing, shipping of products, complaint management), when you create a user account in our online store, or when you register for one of our actions (e.g. tour, event, etc.) through our website. We also collect your personal data when its use is necessary to comply with our legal obligation, i.e. we archive it for accounting and tax purposes.  

The automatic collection of data during a visit to our website (e.g. IP address, browser, etc.) for its proper and secure operation does not require your consent. For their preservation and evaluation in order to administer our website and draw conclusions for its efficient operation, we rely on our legitimate interest, but the data retained cannot directly identify you.  

Advertising of our actions and events 

If you have a previous transaction with us (e.g. purchase from our online store, participation in our events through our website, etc.), during which you provide us with your email address, and depending on your personal interests, we will send you e-mail updates related to our activity (e.g. new exhibitions, guided tours, our educational programs, etc.). The legal basis for this processing is our legitimate interest in promoting the purposes of the MOMus Articles of Association and its further development and is in accordance with the provisions of the law (Article 6 (1) f GDPR & Article 11 (3) of Law 3471/2006). You have the right to object to receiving such updates from the outset,  by stating it in the field you will find when filling in your e-mail, as well as at any time in the future, either by using the corresponding unsubscribe link at the end of the message, or by sending an e-mail to dpo@momus.gr.  

Newsletters 

If you have given us your explicit consent, we will send you newsletters by e-mail which will provide information about products, offers, events, exhibitions, workshops, etc. The legal basis for this processing is your consent (Article 6 par. 1 a’ GDPR). You can stop receiving updates from us at any time, either by using the corresponding unsubscribe link at  the end of the newsletter, or by sending an e-mail to dpo@momus.gr. 

Cookies use 

Cookies are small pieces of code that record your movements while navigating our website and are divided into:  

• “Cookies” that are necessary for the recognition and/or retention of content entered by the subscriber or user during a session on a website throughout the specific connection, e.g. when the user fills out an online form or for the registration of the user’s purchases in an online store (e.g. by selecting the “add to cart” button). The same category includes “persistent” “cookies” that are installed for the same purpose and last for a period of a few hours. 
• “Cookies” that are installed for the purpose of the security of the subscriber or user, such as “cookies” that detect repeated failed attempts to log into a user’s account on a particular website. 
• “Cookies” that are necessary for the implementation of the load balancing technique in a connection to an internet website. 
• “Cookies” that “remember” the choices of the subscriber or user regarding the presentation of the website (e.g. “cookies” that concern the choice of language or the presentation of search results on a website). 
• “Cookies” that are installed through additional programs (plug-ins) on social network websites and concern the sharing of content between certified members who have already logged in. 
• “Cookies” that are installed for the purpose of advertising and are installed by the provider of the website visited by the user itself (first party cookies), as well as for “cookies” that are installed by others (e.g. advertising networks) through the website provider (third party cookies). 
• “Cookies” that are installed by others (e.g. advertising networks) through the website provider (third party cookies) and are necessary for other purposes (e.g. market research and analysis, improvement of advertised products, etc.) and are not directly related to user identification. 
• Cookies” that are installed for the purpose of statistical analysis (web analytics). 

By using our website, you must agree to what kind of cookies you allow us to place. By entering the main page of our website, you are informed of a relevant note on the use of cookies and the possibilities of disabling them or not.  

Who has access to your information.  

The information exchanged during your visit or interaction with our website is disclosed only to those of our external partners that are absolutely necessary in order for them to provide the respective service (e.g. website hosting providers, newsletter delivery providers, etc.) who are bound by confidentiality clauses and contracts for the protection of your personal data in accordance with Article 28 of the GDPR. In addition, we may be required to transmit your information to our external partners e.g. shipping companies, couriers, etc. for the delivery of your orders from our online store.    

We do not transfer your personal data to recipients outside the European Union, unless the conditions imposed by the GDPR for such transfer are met and we do not make automated decisions about you.  

Payment Information 

Our online store does not collect your payment information. The payment process is carried out and completed through a secure electronic transaction platform with the maximum possible transaction security.  

How long do we keep your personal data? 

The data we collect is processed only for as long as it is absolutely necessary to achieve the purposes mentioned in this Notice, unless the Law obliges us to retain it longer (e.g. tax documents). 

Your rights under the GDPR 

You can exercise the following rights given to you by the GDPR by sending an email to dpo@momus.gr , by phone at 2310589141 or by sending a letter to Kolokotroni 21-Stavroupoli Thessaloniki: 

1. The right to access how we use your personal data. 
2. The right to rectification, i.e. to correct your personal data, which may be incomplete or inaccurate. 
3. The right to erasure (right to be “forgotten”), i.e. in certain cases to ask us to erase your personal data that we hold (unless there is a legal reason that prohibits us from doing so) 
4.  The right to restrict the processing of your personal data. 
5. The right to data portability, i.e. to request a copy of your personal data in a common file format and to transmit such data to another company if you have provided it to us under a contract or with your consent. 
6. The right to object to the processing of your personal data, e.g. for direct marketing purposes. 
7. The right to withdraw your consent, at any time without retroactive effect.  
8. The right to lodge a complaint with the competent data protection supervisory authority in the Member State in which you have your habitual residence or place of work.  

The above rights are subject to specific conditions regarding when you can exercise them.  

• You can address any question you have regarding the protection of your personal data to dpo@momus.gr . 
• You do not have to pay to access your personal data (or to exercise any of your rights), unless your request is unfounded, repetitive or excessive.  
• We may need to ask you for confirmation of your identity in order to prevent someone else from exercising your rights.   

Last update of this update:  March 2025