Privacy Policy

The types of personal data we may collect may include: 

•  Contact information, such as name, email address, postal address, and phone number. 

• Demographic information, such as date of birth, gender, and zip code. 

• Information to confirm an individual’s student status or affiliation with a research institution. 

• Information in connection with employment, fellowship, or internship applications. 

• Content you make available through social media accounts 

• Billing information, such as credit card details, billing address, and proof of identification. 

• Membership information, such as your name and any information you submit in connection with your member profile 

We may use the information we collect to: 

• Respond to requests, questions, and comments. 

• Manage ticket sales and group reservations. 

• Offer mission-related products and services that we believe may be of interest to visitors and the public. 

• Fulfill, manage, and send you information about your orders. 

• Offer and administer promotions, sweepstakes, auctions, or other contests. 

• Conduct market research and administer surveys. 

• Provide you with newsletters, articles, announcements, invitations, and other information about programs, exhibitions, other third parties, and events. 

• Provide and manage memberships. 

• Collect and process donations. 

• Process requests to access the New York Transit Museum archives. 

• Offer educational and public programs. 

• Analyze and enhance our communications and strategies (including by identifying when emails have been received and read). 

• Tailor the content we display to site users in our communications, and in connection with the use of our site. 

• Generate anonymized data for further data analytics. 

• Process employment, internship and fellowship applications, as further described in the “Employment, Internship and Fellowship Applications” section below. 

• Comply with legal requirements, judicial process, and our policies (including to verify site users’ identity in connection with access or correction requests). 

• Protect against, identify, investigate, and respond to fraud, illegal activity (such as incidents of hacking or misuse of our site), and claims and other liabilities, including by enforcing the terms and conditions that govern the use of the site. 

• We may also aggregate any personal data that we collect in connection with our Services, such that the information is no longer personally identifiable or attributable to you. We may use such aggregated information for our own legitimate business purposes without restriction. 

We may share the information we collect with: 

•  Other third parties who join with the New York Transit Museum in initiatives and projects. 

• Other members or donors in limited circumstances. 

• Other cultural organizations in limited circumstances. 

• Others within our organization. 

• Service providers that perform services on our behalf or others with whom we may collaborate, including: 

• Other third parties with whom we jointly develop or offer programs or events. 

• Marketing organizations. 

• Survey and market research providers. 

• Payment processors. 

• Analytics organizations. 

• Technology providers (including technology support, email and web hosting providers, email and text communications providers, and website and mobile app developers). 

• We may also disclose personal data to comply with a legal or regulatory obligation, protect and defend the Museum’s rights or property, protect the safety of our visitors and site users or the public, or protect against legal liability. 

Unless prohibited by applicable law, we reserve the right to transfer the information we maintain in the event we sell or transfer all or a portion of our organization or assets. If we engage in such a sale or transfer, we will – where required by applicable law – make reasonable efforts to direct the recipient to use your personal data in a manner that is consistent with this Privacy Policy. After such a sale or transfer, you may contact the recipient with any inquiries concerning the processing of your personal data. 

 We process your information given our legitimate interests in providing the public with access to our exhibitions, programs, and membership. We may also process your information given our legitimate interest in undertaking marketing activities and collecting donations to promote and fund activities and programs in furtherance of our mission. 

Some features of our Services allow you to post content on our website or mobile apps, or social media pages, such as product reviews. Content that you provide may be shared publicly or with other users or third parties. 

If you apply for employment or an internship or fellowship with the Museum, we will use the information you provide to process your application, to monitor recruitment statistics, and comply with government reporting requirements. The Museum is headquartered in New York State. If an applicant becomes a Museum employee or intern, the Museum will maintain a record relating to that person’s employment or internship participation (including information collected via the employment or internship application) and may provide additional information about our data practices in connection with employee and intern data to the extent required by law. 

We do not knowingly collect personal data from children under age 13. If you learn that we have unknowingly collected personal data from a child under the age of 13, please contact us and we will delete that information. 

Individuals in certain jurisdictions, such as in the European Union, may have certain rights and choices regarding the Museum’s processing of their personal data. We reserve the right to verify your identity in connection with any requests regarding personal data to help ensure that we provide the information we maintain to the individuals to whom it pertains and allow only those individuals or their authorized representatives to exercise rights with respect to that information. 

If the Museum relies on your consent for the processing of your personal data, we will obtain your consent at the time we collect your personal data. To the extent provided by applicable law, you may withdraw any consent previously provided to us, or object at any time on legitimate grounds, to the processing of your personal data. We will apply these preferences going forward. In some circumstances, withdrawing consent to our use or disclosure of your personal data will mean that the Museum may no longer be able to provide you with services or information about programming or initiatives that may be of interest to you. 

You may access the data we maintain about you by submitting a request to [email protected]. If we grant your request, we will provide you with a copy of the personal data we maintain about you in the ordinary course of business, in a commonly used format. You may request to correct any errors in your personal data. We may reject your request to access or correct personal data, as permitted by applicable law. If we reject your request, we will notify you of the reason(s) for the rejection. 

Under certain conditions, you may request that we transfer your personal data to another entity in the format in which we maintain it in the ordinary course of business. We may reject your request, as permitted by applicable law. If we reject your request, we will notify you of the reason(s) for the rejection. 

Marketing 

You may unsubscribe from receiving marketing or other commercial emails from the Museum by following the instructions included in the email. However, even if you opt out of receiving such communications, we retain the right to send you certain other types of communications (such as information about your purchases or changes to our Privacy Policy or Terms of Use). If you unsubscribe from our mailing list, please note that you will not receive confirmations, receipts, or pertinent information regarding your reservations or purchases.  

 We, our service providers, and other third parties may also collect certain information about the use of our Services by automated means, such as cookies, web beacons and other technologies. 

We, our service providers and other third parties may collect information about users’ online activities over time and across third-party websites and our Services. The information that may be collected by automated means includes: 

• URLs that refer users to our site. 

• Search terms used to reach our site. 

• Details about the devices that are used to access our Services (such as IP address, browser type, and operating system information). 

• Details about users’ interaction with our Services (such as the date, time, frequency, and length of visits, specific content and pages accessed and buttons clicked during the visits, and information provided by you, including email addresses). 

• Web browsers may offer users of our Services the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our Services may not function correctly. For more information on how to disable cookies, please visit your internet browser’s “help” menu or you can visit https://www.aboutcookies.org/how-to-manage-and-delete-cookies. 

 They are also used by services provided by third parties on our site, such as the ‘Like’ or ‘Share’ buttons, in addition to providing the requested functionality. Third parties provide these services in return for recognizing that you (or more accurately your device) have visited a certain website. These third parties put down advertising cookies both when you visit our s and when you use their services and navigate away from our site. These advertisements are sometimes targeted and served to particular users and may come from third-party companies called “ad networks.” Ad networks include third-party ad servers, ad agencies, ad technology vendors, and research firms. We are not responsible for the privacy practices of these ad networks and other parties. Advertisements served through the services may be targeted to users who fit a certain general profile category created by the third party, which may be inferred from information you provide to us, based on your services usage patterns, or based on your activity on Third Party Services (as defined in this Privacy Policy below).  

Some of the third parties that collect information about your activities on our Services may be members of organizations or programs that provide you with choices regarding the use of your browsing behavior for purposes of targeted advertising. For example, you may opt out of receiving targeted advertising on websites through members of the Network Advertising Initiative by clicking here. European users may opt out of receiving targeted advertising on websites through members of the European Interactive Digital Advertising Alliance by clicking here, selecting your country, and then clicking “Choices” (or a similarly-titled link). Mobile app users may opt out of receiving targeted advertising in mobile apps through members of the Digital Advertising Alliance by installing the AppChoices mobile app, available here, and selecting your choices. Please note that we may also work with companies that offer their own opt-out mechanisms and may not participate in the opt-out mechanisms that we linked above. 

Because there is not yet a consensus on how companies should respond to web browser-based do-not-track (“DNT”) mechanisms, we do not respond to web browser-based DNT signals at this time. Please note that not all tracking will stop even if you delete cookies. 

We may provide links to other websites, services, and applications that are not operated or controlled by us (the “Third Party Services”). This Privacy Policy does not apply to the Third Party Services. While we attempt to facilitate access only to those Third Party Services that share our respect for your privacy, we cannot take responsibility for the content, privacy policies, or practices of those Third Party Services. We encourage you to review and understand the privacy practices of any Third Party Services before providing any information to or through them. Your interactions with these features are governed by the privacy policy of the Third Party Service that provides the feature. 

We may transfer your personal data for processing in countries other than the country in which you initially provided the information for the purposes described in this Privacy Policy. For example, if you are located outside of the United States, we typically transfer and process all personal data in the United States, where the Museum is headquartered. The countries to which we transfer personal data may not guarantee the same level of protection for personal data as the one in which you reside. By using the Services, you consent to the transfer of your information to the United States. 

The Museum maintains reasonable administrative, technical, and physical safeguards designed to protect the personal data we maintain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure, or use. 

Despite these efforts, however, no organization, including the Museum, can fully eliminate risks or guarantee the security of personal data. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of information about you at any time, and we bear no liability for uses or disclosures of personal data or other data arising in connection with the theft of the information or other malicious actions. 

We retain personal data for as long as is necessary for the processing purpose(s) for which the data was collected, and any other permissible, related purpose. When we no longer need the personal information we collect, we either anonymize the information or securely destroy the information. 

Customers who reside in California and have provided their personal data to us can request, once per calendar year, information about our sharing of certain categories of personal data to third parties, for their direct marketing purposes. Such requests should be submitted to us at [email protected].  

We may at any time in our sole discretion revise or update this Privacy Policy. We will post any changes on this page and indicate at the bottom of this page the date this Privacy Policy was last revised. You may read a current, effective copy of this Privacy Policy at any time by visiting this page. We will also notify you of any material changes either through a pop-up notice, email or other reasonable means. 

If you have any questions, requests, or complaints regarding this Privacy Policy, please contact us at [email protected] for inquiries relating to the New York Transit Museum.