privacy statement

CREA | cultureel studentencentrum > about CREA > privacy statement

Privacy and Cookie Policy stichting CREA

About CREA

Stichting CREA and BV CREA Café have been the arts and cultural centre of the University of Amsterdam and the Amsterdam University of Applied Sciences for more than half a century. CREA is a metropolitan playground where participants, tenants, visitors, employees and volunteers come together for courses, workshops, lectures, debates, concerts, performances and other cultural activities.

When organising our activities, we process personal data. We handle this with great care and act in accordance with the General Data Protection Regulation (GDPR).

1. Who are we?

Stichting CREA and BV CREA Café
Nieuwe Achtergracht 170
1018 WV Amsterdam
The Netherlands

Email: privacy@crea.nl
Telephone: +31 20 399 1212

Chamber of Commerce (KvK) Stichting CREA: 41197078
Chamber of Commerce (KvK) BV CREA Café: 34126117

2. Whose personal data do we process?

We process personal data of:

  • Course participants

  • Tenants of halls and studios

  • Visitors to events and performances

  • Employees and volunteers

  • Newsletter subscribers

  • Friends of CREA and sponsors

  • Suppliers

Hereinafter collectively referred to as data subjects or customers.

3. What personal data do we process?

Depending on your relationship with CREA, we process only the data that is necessary for our services, such as:

  • Name and address details

  • Email address and telephone number

  • Date of birth

  • Gender (if relevant)

  • Educational institution (if relevant)

  • Bank and payment details

  • Information you provide yourself when registering or contacting us

If certain data is not provided, it may be that we cannot (fully) carry out our services.

4. Why do we process this data?

We process personal data for:

  • Registration and execution of courses and activities

  • Rental of studios and halls

  • Administration and invoicing

  • Communication about activities and changes

  • Customer satisfaction research

  • Internal reports and (statistical) analyses

  • Development and improvement of our services

  • Offering relevant activities (where permitted)

  • Compliance with legal obligations

  • Security of our building (CCTV surveillance)

Data may be stored in internal and external systems, such as customer relationship management systems. Only authorised employees have access to this data and use it exclusively for the purposes mentioned above.

5. Legal basis for processing

We process personal data on the basis of:

  • The performance of a contract

  • Legal obligations

  • Consent (for example for newsletters or marketing cookies)

  • Legitimate interest (such as security and improvement of services)

Consent can be withdrawn at any time. This may have consequences for certain services.

6. Sharing personal data with third parties

We share personal data only with parties that support us in our services, such as:

  • Accounting/administration office

  • IT and hosting providers

  • Newsletter software providers

  • Payment providers

We conclude data processing agreements with these parties in order to protect your data.

We do not provide personal data to third parties for commercial purposes.

7. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally obliged to retain the data for a longer period (for example due to tax retention obligations).

8. CCTV surveillance

In and around the CREA building, CCTV surveillance may be used for the security of persons and property. Camera images are stored for a maximum of four weeks, unless an incident requires longer retention.

9. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access.

If, despite these measures, a data breach occurs, we will report this in accordance with legal obligations to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and – if necessary – to the data subjects concerned.

10. Website and cookies

On the CREA website, general visitor data is recorded, such as frequently visited pages. This data is not used to identify individual visitors, but to optimise the website and make it more user-friendly.

What are cookies?

Cookies are small text files that are stored on your device when visiting a website.

Which cookies do we use?

1. Functional cookies

These are necessary for the proper functioning of the website. No consent is required for these.

2. Analytical cookies

We use these to gain insight into the use of our website. If configured in a privacy-friendly way, we do not ask for separate consent.

3. Marketing or tracking cookies

If applicable, we only use these with your prior consent.

IP addresses may be temporarily processed for statistical purposes and to detect technical problems or misuse.

Managing or deleting cookies

You can delete or block cookies through your browser settings. This may affect the functioning of the website.

11. Third-party websites

Our website contains links to external websites. CREA is not responsible for the way in which these third parties handle personal data. We advise you to consult the privacy statements of these websites.

12. Your rights

You have the right to:

  • Access your personal data

  • Have data corrected

  • Have data deleted

  • Restrict the processing of your data

  • Object to the processing of your data (for example for promotional purposes)

  • Withdraw your consent

  • Have your data transferred to another party

Some rights can only be exercised under certain conditions. If we cannot comply with a request, we will explain this.

You can submit your request to:
privacy@crea.nl

You also have the right to file a complaint with the Autoriteit Persoonsgegevens.

13. Changes

This privacy and cookie statement is not an agreement and may be amended by CREA. The most up-to-date version is always available on our website. When changes are made, the date of revision will be updated and the new version will take effect immediately.

2 March 2026