Privacy policy

This privacy policy sets out how Once Upon A Time Amsterdam uses, processes, and applies data on the website. We believe it is important that data are handled with all due care to protect everyone’s privacy. We are aware how important the protection of your personal data is. Careful handling of personal data is of the utmost importance to Once Upon A Time Amsterdam and all its affiliated legal entities. As such, we act in accordance with the applicable legislation and regulations, such as the General Data Protection Regulation (GDPR).

We hope the information we have provided here is sufficiently clear. If you have any question about this information, feel free to contact us via

Who are we?
We are Once Upon a Time Amsterdam, a trading name of WeTeHa BV, and our registered office is at Museumplein 4, 1071 DJ Amsterdam, the Netherlands.

Your data will be handled with all due care, and will be adequately secured. In doing so, we comply with the General Data Protection Regulation (GDPR) and the other applicable regulations.

Which data do we process, and how to we obtain these data?
When you use the website, we process the following personal data:

Your name and e-mail address when you buy a ticket;

Your e-mail address if you sign up to our newsletter.

Why do we process your data?

We use your data:

  • To enable us to provide you with the ticket you purchased, provide you with information about the exhibition prior to your visit, or let you know if there is any news about the exhibition after your visit;
  • When you register, you provide us with your e-mail address, and you give us your consent to process your personal data. To be able to assist you in sending our newsletter, your preferences in this respect will also be recorded in combination with your e-mail address and name. If you no longer wish to receive any newsletters, you can unsubscribe;
  • To comply with the law.

On which grounds do we use your data?
The following legal grounds are applicable to the processing of your personal data for the purposes listed above:

  • Fulfilment of the agreement for buying a ticket online.
  • The newsletter is sent on grounds of consent.

For how long do we retain your data?
We do not retain your data for any longer than necessary and/or legally permitted, or for any longer than we are legally obliged to for the purposes for which your data are processed. As such, the exact retention period of your data depends on the nature of the data, and the purposes they are processed for. In other words, the retention period may differ, but it will in no case exceed the end date of the exhibition. Your data will be destroyed after this point.

Are your data shared with other parties?
We use other companies to send out our newsletter and handle the online payment of your ticket, and we share your data with these companies. To make sure that these companies keep to the rules, we have entered into agreements with them.


Your rights
You have several rights. These are as follows:

  • The right to information and inspection: You can ask us which data we hold on you and use. We would be happy to tell you more about how and why we do so.
  • The right to rectification: do you believe any of the data we hold on you may be incorrect? Feel free to let us know, so we can address this.
  • The right to be forgotten: You can ask us to erase the data we hold on you and use. In most cases, we would be happy to do so, but sometimes, we may be obliged to retain these data. For example, we may be required to retain your data by the Tax and Customs Administration (Belastingdienst) if you are a customer of ours in any other way.
  • The right to restriction: if you believe we are using your data in a way we are not permitted to, you can ask us to stop using these data until we have got to the bottom of the matter.
  • The right to object: you can object to the use or retention of your data. In this case, we will look at whether we can stop using your data or erase them. If we are using your data for marketing purposes, we will stop doing so as soon as possible.
  • The right to portability: You can have any photos and videos you have made transferred.

In addition, you can also:

  • Withdraw your consent at any time, in relation to the newsletter, for example.
  • Submit a complaint to the Dutch Data Protection Authority: If you believe we are not acting in accordance with the rules, we would be more than happy to hear from you. You can contact us to discuss this via You can also submit a complaint in this respect to the Dutch Data Protection Authority.

How are your data secured?
We have taken suitable technical and organizational measures to secure your data against loss and unauthorized use. We constantly stay up to date with the latest developments in relation to the technical security of personal data, and we will do everything we can to prevent personal data from being lost or used in an unauthorized manner.

If you have any questions about our processing of your personal data, or if you would like to exercise one or more of the rights you have under the law, please contact Once Upon A Time Amsterdam using the details below:

Once Upon a Time Amsterdam
Museumplein 4
1071 DJ Amsterdam