Museum of Mining and Industry of Asturias (MUMI) At MUMI, we take the privacy of our visitors and users very seriously. Below, we explain transparently how we process your personal data in accordance with current regulations.
1. Who is the Data Controller?
- Entity: Museum of Mining and Industry of Asturias (MUMI)
- Address: Trinchera, s/n, 33930 El Entrego, San Martín del Rey Aurelio, Asturias, Spain.
- Phone: +34 985 66 31 33
- Contact Email: reservas@mumi.es
2. What data do we collect, for what purpose, and why are we allowed to do so?
Depending on how you interact with the museum, we will process different data for specific purposes:
A. Ticket purchase and booking (In-person, Email, or Web)
- Data processed: First name, last name, email address, phone number, and—in the case of group bookings of more than 15 people—billing details or payment receipts.
- Purpose: To manage ticket sales, access control, group reservations, and the issuance of corresponding receipts. Purchased tickets will be valid until December 31 of the current year.
- Legal basis: Performance of a contract or legal relationship (acquisition of the service/ticket).
B. Application of special rates and discounts
- Data processed: Official documentation certifying the status of large family, functional diversity, person over 65 years of age, Youth Card holder, teacher, or group monitor/companion.
- Purpose: To verify compliance with legal requirements in order to apply the corresponding discount at the ticket office.
- Legal basis: Legal obligation and compliance with service conditions.
- Important Note: MUMI does not store copies of these supporting documents; only a visual verification is carried out at the museum reception to justify preferential treatment.
C. Registration and access with pets (Dogs)
- Data processed: Details of the person responsible for the pet, proof of civil liability insurance, vaccination card, and, where applicable, official certification for assistance dogs.
- Purpose: To guarantee safety, compliance with public health regulations, and limited capacity (maximum 5 dogs simultaneously).
- Legal basis: Legitimate interest of the museum to ensure the safety of the facilities and the well-being of visitors, and compliance with Royal Decree 409/2025 and Royal Decree 287/2002.
3. How long will we keep your data?
The personal data provided will be kept for the time strictly necessary to fulfill the purposes for which they were collected:
- Reservation and purchase data will be kept for the statutory periods of tax and administrative limitation.
- Contact details for telephone or email inquiries will be deleted once the query has been resolved, unless they result in a reservation.
4. Who do we share your data with?
MUMI does not transfer your personal data to third parties, unless there is a legal obligation (for example, to competent authorities, security forces, or pursuant to Law 8/2002 on Public Shows of the Principality of Asturias if required for security reasons or public disturbance). No international data transfers are carried out.
5. Security Measures and Limitation of Liability
MUMI applies the technical and organizational measures necessary to guarantee the security of your data. However, users are informed of the following:
- External incidents: The museum is not responsible for the loss of validity, theft, robbery, hacking, or any other type of violation of tickets affecting buyers or third parties due to causes not directly attributable to the museum. In such cases, no refunds or financial compensation will apply.
6. What are your rights?
As a user, you have the right to control your personal data. You can exercise the following rights before MUMI:
- Access: Know what data we hold about you.
- Rectification: Modify data that is incorrect or incomplete.
- Erasure (“Right to be Forgotten”): Request that we delete your data when it is no longer necessary.
- Opposition or Limitation: Request that we do not process your data for certain purposes.
To exercise any of these rights, you can send an email to reservas@mumi.es or a letter by postal mail to the museum’s address, attaching a copy of your identity document (ID/NIE) to verify your identity.
If you consider that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).
