Privacy policy
IABR Privacy Statement
Version August 2026
Stichting Internationale Architectuur Biënnale Rotterdam, hereinafter referred to as IABR, respects the privacy of visitors, participants, professional contacts and users of our website. We handle personal data with care and confidentiality.
This Privacy Statement explains which personal data we process, why we process it, with whom we share it, how long we retain it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your personal data?
The data controller is:
Stichting Internationale Architectuur Biënnale Rotterdam
Keilestraat 9 K1
3029 BP Rotterdam
The Netherlands
Chamber of Commerce no. 24317154
info@iabr.nl
www.iabr.nl
If you have any questions about privacy or the processing of personal data, please contact us at info@iabr.nl.
2. What personal data do we process and why?
The personal data we process depends on how you interact with IABR. This may include your name, contact details, postcode, organisation, position, ticket and activity information, payment details, information you provide to us, photographs, video recordings and technical information about your use of our website.
We use personal data for purposes including ticket sales and registrations, communicating with visitors and professional contacts, performing agreements and collaborations, sending out newsletters, conducting audience research and analysing and reporting on our audience reach, recruiting, and carrying out our financial and administrative operations.
We only process personal data that is necessary or relevant for the relevant purpose.
3. On what legal basis do we process personal data?
IABR only processes personal data where there is a valid legal basis under the GDPR. Depending on the circumstances, processing may be necessary for the performance of a contract, to comply with a legal obligation, with your consent or for the purposes of the legitimate interests of IABR.
Legitimate interests may include maintaining our professional network, informing relevant contacts, researching and evaluating our audience reach, improving our activities, and communicating about them.
Where processing is based on consent, you may withdraw your consent at any time.
4. Tickets, registrations and visitors
We use Stager for ticket sales and registrations for activities. When you purchase a ticket or register for an activity, we may process your contact details, postcode, information about tickets purchased and activities, and payment details.
We use this information to process your purchase or registration, and to provide you with relevant information. We may also send you service emails containing practical visitor information, accessibility information, programme changes or cancellations.
5. Newsletter
We use Mailinglijst to manage and distribute our newsletter. We use your email address and, where applicable, your name to keep you informed about IABR and our activities.
Where required, we ask for your consent. You can unsubscribe at any time using the unsubscribe option included in every newsletter.
6. Professional contacts and partners
IABR works with a broad professional network including architects, designers, makers, artists, researchers, partners, funding bodies, public authorities, press, cultural institutions, educational institutions and suppliers.
We use Adrez for relationship management. We may store information such as your name, organisation, position and contact details in order to maintain our professional network, facilitate collaborations and inform relevant contacts about IABR.
If you are involved with IABR as a participant, maker, speaker, freelancer, supplier or other partner, we may also process information necessary for the collaboration, such as contractual information, bank details and invoicing details.
We process this information for the performance of a contract, compliance with a legal obligation or on the basis of IABR’s legitimate interests.
If you no longer wish to be contacted by us, please let us know at info@iabr.nl.
7. Audience research, Whize and the Cultural Target Group Model
IABR conducts research into its audience and audience reach. We may invite visitors to participate voluntarily in surveys or audience research and may ask, for example, about their visitor experience, reasons for visiting, preferences and general background information.
We may also use postcode and visitor data for statistical analysis using Whize and the Cultural Target Group Model. Postcode data is used exclusively for statistical analysis and does not result in information that enables IABR to identify visitors, such as names or contact details.
We use the results for research, evaluation, audience development and reporting to, among others, the Municipality of Rotterdam, funding bodies and funds. The results used and reported by IABR for these purposes cannot be traced back to individual persons.
8. Photography and video recordings
Photographs and video recordings may be made during IABR activities. IABR may use this material for reporting and communications, for example on our website, in newsletters, publications, press materials and on social media.
For general atmospheric images and documentation, IABR may rely on its legitimate interest in communicating about its activities. In doing so, we take the privacy of visitors and participants into account.
If you would prefer not to appear in any photographs or video recordings, please inform a member of the IABR staff, a photographer or a videographer. If you subsequently object to any visual material in which you can be seen, please email us at info@iabr.nl
IABR does not always have control over photographs or videos independently made by visitors, press or other external parties.
9. Website and cookies
Our website uses cookies and similar technologies to function properly and securely, analyse website use and enable external functionality. This may involve the processing of technical information such as your IP address and browser and device information.
We use CookieFirst to manage cookie preferences. With your consent, we use Google Analytics to analyse website use. Google Tag Manager is used to manage tags and scripts, and our website may contain external content, such as videos hosted by Vimeo.
Non-essential cookies and services are only activated after consent has been given. Through the cookie settings on our website, you can see which cookies are used and change your preferences at any time.
10. Job applications
When you apply for a position at IABR, we process information necessary for the recruitment process, such as your contact details, CV, motivation, education and work experience.
We generally retain this information for a maximum of four weeks after completion of the recruitment process. If we wish to retain your information for possible future vacancies, we will first ask for your consent. With your consent, we will retain the information for a maximum of one year.
11. How long do we retain personal data?
IABR does not retain personal data for longer than necessary for the purpose for which it was collected or for as long as required by law.
Financial and tax information is retained for the statutory retention period. Newsletter data is retained until you unsubscribe. Professional contact information is retained for as long as it remains relevant to our activities. Audience research data is retained for as long as necessary for analysis, evaluation and reporting.
When personal data is no longer required, we delete or anonymise it. Anonymised statistical data may be retained for longer for research, evaluation and reporting purposes.
12. With whom do we share personal data?
IABR does not sell personal data to third parties. We use external service providers for our activities, including for ticket sales, newsletters, relationship management, website management and audience research. These include Stager, Mailinglijst and Whooz/Whize.
Where parties process personal data on behalf of IABR, we make appropriate arrangements regarding the protection and security of this data where required.
We may also share data where required by law. Reports on our audience reach provided to public authorities, funding bodies and funds do not contain information that can be traced back to individual persons.
13. Security and processing outside the EEA
IABR takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and other forms of unlawful processing. Personal data is only accessible to persons who need it to perform their work.
Some service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure that the processing complies with the GDPR and that appropriate safeguards are in place.
14. Your rights
Under the GDPR, depending on the circumstances, you may request access to, correction or deletion of your personal data, restriction of processing or transfer of your data. You may object to processing based on a legitimate interest and withdraw previously given consent.
You always have the right to object to the use of your personal data for direct marketing.
If you wish to exercise your rights or have a question about the processing of your personal data, please contact us at info@iabr.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
IABR may amend this Privacy Statement if our activities, working methods or applicable laws and regulations change. The most recent version will be published on our website.