Privacy policy

1. Who is responsible for your personal data?

Buitengast is responsible for the processing of personal data described in this privacy policy.

2. Which personal data do we process?

Buitengast processes personal data when you use our website or services, contact us, or otherwise provide data to us.

Depending on how you use our services, we may process the following personal data:

• first and last name;
• address details;
• telephone number;
• email address;
• information you provide via a contact, request or booking form;
• details of purchases, reservations and payments;
• IP address;
• information about your visit to and use of our website;
• information about your internet browser and the type of device you use;
• cookie data and similar technical data, where applicable.

When we use tracking techniques, data about your online behaviour may also be processed. This only happens when consent is required and you have given that consent.

3. Special categories of personal data and children’s data

Buitengast does not intend to collect special categories of personal data, unless this is necessary for our services, a valid legal basis exists, and you provide these data to us yourself.

Our website and services are not specifically aimed at children under 16. We cannot always verify whether a website visitor is under 16.

Do you think we have collected personal data of a minor without valid consent? Please contact us at welkom@buitengast.nl. We will review the request and delete the data where there is reason to do so.

4. Why do we process personal data?

Buitengast may process your personal data for the following purposes:

• to answer questions and contact requests;
• to perform reservations, orders or agreements;
• to contact you when this is needed for our services;
• to process payments and our administration;
• to comply with legal and tax obligations;
• to send our newsletter or other communications when you have given consent or when this is otherwise legally permitted;
• to improve the operation, security and usability of our website;
• to understand how our website is used;
• to show personalised content or advertisements when you have given consent.

5. On what legal bases do we process personal data?

We only process personal data when a valid legal basis exists.

Depending on the situation, we process personal data on the basis of:

• performance of a contract: for example when you make a reservation or purchase a product or service;
• legal obligation: for example for our financial and tax administration;
• consent: for example for certain newsletters or tracking cookies;
• legitimate interest: for example to improve our services and website, insofar as your privacy interests do not outweigh this.

When processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect processing that took place lawfully before the withdrawal.

6. Automated decision-making

Buitengast does not take decisions that may have significant effects on individuals solely on the basis of automated processing, including profiling, without meaningful human involvement.

7. How long do we keep personal data?

We do not keep personal data longer than necessary for the purpose for which they were collected, unless we are legally required to keep data longer.

In principle we apply the following retention periods:

• contact requests and correspondence: up to 1 year after the contact has been completed, unless there is a reason to keep the data longer;
• data relating to reservations, purchases and services: for as long as needed to perform and complete the agreement;
• financial and administrative data: in principle 7 years, insofar as this is required by tax law;
• newsletter data: until you unsubscribe or withdraw your consent;
• cookie and website data: in accordance with the retention period of the relevant cookie or analytics tool.

When data are no longer necessary and no legal retention obligation remains, we delete or anonymise them.

8. Sharing personal data with third parties

Buitengast does not sell your personal data to third parties.

We only share personal data with other parties when this is necessary for our services, when we have a legal obligation to do so, or when another valid legal basis exists.

We may for example use external parties for:

• hosting and technical management of our website;
• email and communication services;
• administration and accounting;
• payment processing;
• reservation or booking systems;
• website analytics;
• newsletter software.

When an external party processes personal data on our behalf, we make arrangements where needed about security, confidentiality and the processing of personal data, for example by means of a data processing agreement.

9. Transfers outside the European Economic Area

Some service providers may process personal data outside the European Economic Area (EEA).

When personal data are transferred to a country outside the EEA, we ensure that a valid legal basis and appropriate safeguards are in place, insofar as this is required under the GDPR.

10. Cookies and similar technologies

Buitengast may use functional, analytical and, where applicable, marketing or tracking cookies.

A cookie is a small text file that may be stored on your computer, tablet or smartphone when you visit a website.

Functional cookies

Functional cookies are necessary for the website to work properly. These cookies may for example be used to remember settings or preferences.

Analytical cookies

Analytical cookies help us understand how our website is used. We can use this information to improve the website and our services.

When analytical cookies have privacy implications for which consent is required, we only place these cookies after you have given consent.

Marketing and tracking cookies

Marketing and tracking cookies may be used to follow your browsing behaviour and to tailor content or advertisements to your interests.

When consent is required, we only place these cookies after you have given active consent.

On your first visit to our website you can indicate your preferences via our cookie banner. You can change or withdraw previously given consent at any time via the cookie settings on our website.

You can also delete cookies or limit their placement via your browser settings.

A current overview of the cookies and other tracking technologies we use, including purpose, provider and retention period, can be found in our cookie banner or cookie policy.

11. Your privacy rights

Under the GDPR you have various rights in relation to your personal data. You may among other things ask us to:

• access the personal data we process about you;
• correct inaccurate personal data;
• delete personal data;
• restrict the processing of your personal data;
• object to certain processing;
• transfer your personal data to you or another organisation;
• withdraw previously given consent.

You can contact us for this at welkom@buitengast.nl.

To prevent personal data being provided to the wrong person, we may ask you for additional information to verify your identity. We will not ask for more data than necessary.

We generally respond to your request within one month. When a request is complex or we receive many requests, this period may be extended under the GDPR. In that case we will inform you.

12. Lodging a complaint

Do you have a complaint about how we handle your personal data? Please preferably contact us first at welkom@buitengast.nl so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Dutch supervisory authority for privacy.

13. Security of personal data

Buitengast takes the protection of personal data seriously. We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unwanted disclosure and unauthorised alteration.

If you suspect that your personal data are not properly secured, that there is misuse, or that a data breach may have occurred, please contact us at welkom@buitengast.nl.

14. Changes to this privacy policy

Buitengast may update this privacy policy from time to time, for example when our services, website or applicable law change.

The most recent version of this privacy policy is published on our website.