Here at Stadskasteel Oudaen, we consider it very important that your personal data are protected. The aim of this privacy policy is to provide clear and transparent information about how we handle personal data. We do everything in our power to safeguard your privacy, which is why we handle your data with the utmost care. Stadskasteel Oudaen complies with all the relevant laws and regulations in all circumstances, including the General Data Protection Regulation.

This means that, in every case:

Your personal data will be processed in accordance with the purpose for which they were provided – these purposes and types of personal data are set out in this privacy policy.

The use of your personal data will be limited solely to the minimum required for the purpose for which you have made them available.

We will ask for your explicit consent if we need it to process your personal data.

We have taken the appropriate technical and organisational measures to safeguard the security of your personal data.

We do not pass on any personal data to third parties, unless this is unavoidable in fulfilling the purposes for which the data were provided.

We keep up to date on your rights with regard to your personal data, and aim to inform you of these rights and respect them at all times.

As a corporate enterprise, Stadskasteel Oudaen is responsible for the processing of your personal data on Oudaen.nl. If you have any questions about this, or wish to contact us for other reasons after reading our privacy policy – or if you have any general comments or questions – you can contact us using the following contact details:

Stadskasteel Oudaen

Oudegracht 99
3511 AE Utrecht
The Netherlands
T: +31 (0)30 231 18 64
E: info@oudaen.nl

FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?

Your personal data will be processed by Stadskasteel Oudaen for the following purposes:

to respond to requests (including requests that we get back in touch with you) made through the website;

to process bookings;

to send out newsletters;

to send out information about special offers;

to ensure the security of our own website;

to comply with legal administrative obligations;

to collect feedback.

For the purposes listed above, we can request the following personal data from you:

first name;

prefix;

surname;

address details;

company name;

telephone number;

email address;

IP address.

DISCLOSURE TO THIRD PARTIES

We may pass on the data that you provide us to third parties if this is necessary pursuant to any of the purposes listed above.

For example, we use third parties for the following:

taking bookings;

our booking system;

our internal communications via Horeko;

our payroll administration via Cobra;

our administration via Exact;

our financial administration via the Vectron POS system;

the Internet environment for our offices;

our financial and other administration;

newsletters sent out via Mailchimp;

the hosting environment that our website runs on;

our online marketing via Online-Exposure;

management of our website via JijOnline.

We will never make personal data available to any parties with whom we have not entered into a data processing agreement. It goes without saying that these agreements include the required stipulations to safeguard the security of your personal data. In addition, we will not pass on the data provided by you to any other parties unless it is legally mandatory and permissible to do so. One example of this would be the police requesting personal data from us as part of an investigation. In such a situation, we would be obliged to cooperate with their request. We can also share personal data with third parties if you give us written permission to do so.

We do not provide any personal data to parties based outside the EU.

MINORS

Without exception, we only process personal data pertaining to minors (those under the age of 16) if we have obtained written permission from their parent, guardian or legal representative.

RETENTION PERIOD

Stadskasteel Oudaen stores personal data no longer than is necessary for the purposes for which the data were provided, or than is required by law.

SECURITY

We have taken the appropriate technical and organisational measures to protect your personal data from unlawful processing, including the following:

All persons who can access your data on behalf of Stadskasteel Oudaen are bound to confidentiality in this regard.

We require username and password verification on all our systems.

We regularly test and review our security measures.

Our employees have been informed of the importance of protecting personal data.

RIGHTS PERTAINING TO YOUR DATA

You have the right to access, correction and erasure with regard to the personal data we have received from you. You can also object to all or some of your personal data being processed by us or by one of our contracted processors. You also have the right to request that we transfer the personal data we hold back to you, or directly to another party on your behalf. We may ask you to provide identification before we comply with the aforementioned requests.

COMPLAINTS

If you have any complaints about the processing of your personal data, we request that you contact us directly to discuss them. In the regrettable event that we are unable to resolve the issue together, you will always have the right to file a complaint with the Dutch Data Protection Authority, the regulatory authority for privacy protection.