Effective Date: October 1, 2025
Last Updated: October 1, 2025
1. Introduction
MoMAA | Stichting Royalafrican (“we,” “us,” “our”) operates Art Residency Africa (artresidencyafrica.com), a platform connecting artists with residency programs across Africa.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.
Our Commitment: We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Dutch data protection legislation.
Contact Information:
Data Controller: MoMAA | Stichting Royalafrican
Address: Volharding 43, 1068 RE Amsterdam, The Netherlands
Email: info@artresidencyafrica.com
2. Information We Collect
2.1 Information You Provide Directly
Account Registration:
- Name
- Email address
- Password (encrypted)
- Country/location
- Profile information (bio, website, social media)
- Artist discipline or residency type
Residency Listings (for Listing Owners):
- Organization name
- Contact information
- Address and location data
- Residency description and details
- Images and media
- Pricing and availability information
- Verification documents (optional)
Inquiries and Communications:
- Contact form submissions
- Email correspondence
- Messages between users through the Platform
- Customer support interactions
Newsletter Subscriptions:
- Email address
- Subscription preferences
- Name (optional)
Payment Information:
- Billing address
- Payment method (processed by third-party payment processors)
- Transaction history
Note: We do not store full credit card information. Payment processing is handled by secure third-party processors.
2.2 Information Collected Automatically
Usage Data:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages visited and time spent
- Referring website
- Click patterns and navigation paths
- Search queries on the Platform
Cookies and Tracking Technologies:
- Session cookies (essential functionality)
- Preference cookies (remember your settings)
- Analytics cookies (understand usage patterns)
- Marketing cookies (targeted advertising, with consent)
See Section 8 for detailed cookie information.
Location Data:
- Approximate location based on IP address
- Precise location (only with your explicit consent, for map features)
2.3 Information from Third Parties
Social Media: If you connect social media accounts, we may receive:
- Public profile information
- Email address
- Friends list or connections (only with permission)
Payment Processors:
- Transaction confirmation
- Payment status
- Limited payment information for record-keeping
Analytics and Advertising Partners:
- Aggregated usage statistics
- Demographic information
- Interest categories
3. How We Use Your Information
3.1 Core Platform Functions
We use your information to:
- Create and manage your account
- Display and promote residency listings
- Facilitate communication between Artists and Residency Programs
- Process bookings and payments
- Provide customer support
- Send transactional emails (confirmations, updates, responses)
3.2 Service Improvement
- Analyze usage patterns and user behavior
- Identify and fix technical issues
- Develop new features and services
- Conduct research and analysis
- Test new functionality
3.3 Communication and Marketing
With Your Consent:
- Send newsletters and updates about new residencies
- Share application deadline reminders
- Promote featured listings and opportunities
- Send surveys and feedback requests
- Provide artist resources and educational content
Note: You can opt out of marketing communications at any time using unsubscribe links in emails or updating your preferences.
3.4 Legal and Security
- Prevent fraud and abuse
- Enforce our Terms of Use
- Comply with legal obligations
- Protect rights, property, and safety
- Resolve disputes
- Respond to legal requests
3.5 Legitimate Interests
Under GDPR Article 6(1)(f), we may process data for legitimate interests:
- Improving Platform security
- Analyzing aggregate trends
- Preventing spam and abuse
- Maintaining business records
- Protecting intellectual property
4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
Consent (Article 6(1)(a)):
- Marketing communications
- Optional cookies
- Newsletter subscriptions
- Social media integrations
Contractual Necessity (Article 6(1)(b)):
- Account creation and management
- Listing creation and display
- Payment processing
- Communication facilitation
Legal Obligation (Article 6(1)(c)):
- Tax and accounting records
- Response to legal requests
- Fraud prevention requirements
Legitimate Interests (Article 6(1)(f)):
- Platform security and integrity
- Service improvement and analytics
- Direct marketing to existing customers
- Business operations and administration
5. How We Share Your Information
5.1 Public Information
Visible to All Users:
- Residency listings (including contact information provided by Listing Owners)
- Public profile information (if you choose to make it public)
- Reviews and testimonials you submit
- Content you post in public areas
5.2 Between Platform Users
Artists to Residency Programs: When you contact a residency through our Platform, we share:
- Your name and contact information
- Your inquiry message
- Any attachments you include
Residency Programs to Artists: Listing Owners’ contact information is visible to facilitate direct communication.
5.3 Service Providers
We share information with trusted third-party service providers who assist with:
- Payment processing (Stripe, PayPal, etc.)
- Email delivery (Mailchimp, SendGrid, etc.)
- Website hosting and infrastructure
- Analytics (Google Analytics)
- Customer support tools
- Security and fraud prevention
Provider Requirements:
- Process data only on our instructions
- Maintain appropriate security measures
- Comply with GDPR and data protection laws
- Sign data processing agreements
5.4 Business Transfers
If Art Residency Africa is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our Platform before your information becomes subject to a different privacy policy.
5.5 Legal Requirements
We may disclose information when required by law or when we believe in good faith that disclosure is necessary to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms of Use
- Investigate and prevent fraud or security issues
- Protect rights, property, or safety of Art Residency Africa, users, or the public
5.6 Aggregated and Anonymized Data
We may share aggregated, anonymized data that cannot identify you personally:
- Usage statistics and trends
- Research and analysis
- Marketing materials
- Public reports
6. International Data Transfers
Art Residency Africa is based in the Netherlands (European Union). However, some service providers may be located outside the EU/EEA, including in countries that may not provide the same level of data protection.
Safeguards for International Transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- EU-US Data Privacy Framework certification (where applicable)
- Adequacy decisions by the European Commission
- Additional security measures and encryption
By using our Platform, you consent to the transfer of your information to countries outside your country of residence, including countries that may have different data protection rules.
7. Data Retention
7.1 Active Accounts
We retain your information for as long as your account is active or as needed to provide services.
7.2 After Account Deletion
When you delete your account or request data deletion:
- Immediate deletion: Profile information, preferences, and non-essential data
- Retained for legal/business purposes (30-90 days): Transaction records, communications related to disputes
- Retained for legal compliance (7 years): Financial records, tax documents
- Anonymized data: May be retained indefinitely for analytics
7.3 Specific Retention Periods
- Transactional data: 7 years (legal requirement)
- Marketing communications: Until you unsubscribe, plus 1 year
- Customer support tickets: 3 years
- Website logs and analytics: 26 months
- Inactive accounts: We may delete accounts inactive for 3+ years after notice
8. Cookies and Tracking Technologies
8.1 What Are Cookies?
Cookies are small text files stored on your device that help us provide and improve our services.
8.2 Types of Cookies We Use
Essential Cookies (Always Active):
- Session management
- Security and authentication
- Form completion
- Load balancing
Functional Cookies (Require Consent):
- Remember your preferences
- Language selection
- Location settings
- Recently viewed listings
Analytics Cookies (Require Consent):
- Google Analytics
- Usage statistics
- Performance monitoring
- A/B testing
Marketing Cookies (Require Consent):
- Facebook Pixel
- Google Ads remarketing
- Social media integration
- Targeted advertising
8.3 Cookie Management
How to Control Cookies:
- Use our cookie consent banner when you first visit
- Adjust preferences in your browser settings
- Use browser extensions to block cookies
- Visit Your Online Choices (EU)
- Opt out of Google Analytics: Google Analytics Opt-out
Note: Disabling essential cookies may affect Platform functionality.
8.4 Third-Party Cookies
Third-party services may set their own cookies. We do not control these cookies. Please review the privacy policies of:
- Google: https://policies.google.com/privacy
- Facebook: https://www.facebook.com/privacy
- Stripe: https://stripe.com/privacy
9. Your Data Protection Rights (GDPR)
As an EU/EEA resident, you have the following rights:
9.1 Right of Access (Article 15)
Request a copy of the personal data we hold about you.
9.2 Right to Rectification (Article 16)
Request correction of inaccurate or incomplete data.
9.3 Right to Erasure / “Right to Be Forgotten” (Article 17)
Request deletion of your personal data, subject to legal obligations.
9.4 Right to Restriction of Processing (Article 18)
Request that we limit how we use your data in certain circumstances.
9.5 Right to Data Portability (Article 20)
Request a machine-readable copy of your data to transfer to another service.
9.6 Right to Object (Article 21)
Object to processing based on legitimate interests or direct marketing.
9.7 Rights Related to Automated Decision-Making (Article 22)
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
9.8 Right to Withdraw Consent
Withdraw consent for processing based on consent at any time.
9.9 Right to Lodge a Complaint
File a complaint with your national data protection authority:
- Netherlands: Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl)
- EU Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en
How to Exercise Your Rights: Email: info@artresidencyafrica.com
Subject: “Data Protection Rights Request”
Include: Your name, email, account details, and specific request
Response Time: We will respond within 30 days (may be extended to 60 days for complex requests with notice).
10. Security Measures
We implement appropriate technical and organizational measures to protect your data:
Technical Safeguards:
- SSL/TLS encryption for data transmission
- Encrypted password storage (hashed and salted)
- Regular security audits and vulnerability assessments
- Firewall protection
- Secure server infrastructure
- Regular backups with encryption
Organizational Safeguards:
- Access controls and authentication
- Staff training on data protection
- Confidentiality agreements with employees and contractors
- Incident response procedures
- Regular security policy reviews
Limitations: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and account.
11. Children’s Privacy
Art Residency Africa is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
If you believe we have inadvertently collected information from a child under 18, please contact us immediately at info@artresidencyafrica.com, and we will delete the information promptly.
12. Third-Party Websites and Services
Our Platform may contain links to third-party websites, including:
- Residency program websites
- Social media platforms
- Payment processors
- Partner organizations
Important: We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information.
This Privacy Policy applies only to Art Residency Africa.
13. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
13.1 Right to Know
Request information about personal data collected, used, disclosed, or sold in the past 12 months.
13.2 Right to Delete
Request deletion of personal information we have collected, subject to exceptions.
13.3 Right to Opt-Out
We do not sell personal information. If this changes, we will provide an opt-out mechanism.
13.4 Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
How to Exercise CCPA Rights: Email: info@artresidencyafrica.com
Subject: “CCPA Privacy Request”
Verification: We may request information to verify your identity before processing requests.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations.
Notification of Changes:
- Updated “Last Updated” date at the top
- Email notification to registered users for material changes
- Prominent notice on the Platform
Your Continued Use: Continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy.
Material Changes: For significant changes affecting your rights, we may require explicit consent before the changes apply to your data.
15. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices:
Email: info@artresidencyafrica.com
Subject Line: “Privacy Inquiry”
Mail:
Data Protection Officer
MoMAA | Stichting Royalafrican
Volharding 43
1068 RE Amsterdam
The Netherlands
Response Time: We aim to respond to privacy inquiries within 5 business days.
16. Data Protection Officer
For GDPR-related inquiries, you may contact our Data Protection Officer:
Email: info@artresidencyafrica.com
Subject: “Attention: Data Protection Officer”
17. Consent
By using Art Residency Africa, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.
For processing that requires explicit consent (marketing communications, optional cookies), we will request your consent separately.
You can withdraw consent at any time by:
- Updating your account preferences
- Clicking “unsubscribe” in emails
- Contacting us at info@artresidencyafrica.com
- Adjusting cookie settings
Last Updated: October 1, 2025
Version: 1.0