This means that, in every case:
The use of your personal data will be limited solely to the minimum required for the purpose for which you have made them available.
We will ask for your explicit consent if we need it to process your personal data.
We have taken the appropriate technical and organisational measures to safeguard the security of your personal data.
We do not pass on any personal data to third parties, unless this is unavoidable in fulfilling the purposes for which the data were provided.
We keep up to date on your rights with regard to your personal data, and aim to inform you of these rights and respect them at all times.
3511 AE Utrecht
T: +31 (0)30 231 18 64
FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?
Your personal data will be processed by Stadskasteel Oudaen for the following purposes:
to respond to requests (including requests that we get back in touch with you) made through the website;
to process bookings;
to send out newsletters;
to send out information about special offers;
to ensure the security of our own website;
to comply with legal administrative obligations;
to collect feedback.
For the purposes listed above, we can request the following personal data from you:
DISCLOSURE TO THIRD PARTIES
We may pass on the data that you provide us to third parties if this is necessary pursuant to any of the purposes listed above.
For example, we use third parties for the following:
our booking system;
our internal communications via Horeko;
our payroll administration via Cobra;
our administration via Exact;
our financial administration via the Vectron POS system;
the Internet environment for our offices;
our financial and other administration;
newsletters sent out via Mailchimp;
the hosting environment that our website runs on;
our online marketing via Online-Exposure;
management of our website via JijOnline.
We will never make personal data available to any parties with whom we have not entered into a data processing agreement. It goes without saying that these agreements include the required stipulations to safeguard the security of your personal data. In addition, we will not pass on the data provided by you to any other parties unless it is legally mandatory and permissible to do so. One example of this would be the police requesting personal data from us as part of an investigation. In such a situation, we would be obliged to cooperate with their request. We can also share personal data with third parties if you give us written permission to do so.
We do not provide any personal data to parties based outside the EU.
Without exception, we only process personal data pertaining to minors (those under the age of 16) if we have obtained written permission from their parent, guardian or legal representative.
Stadskasteel Oudaen stores personal data no longer than is necessary for the purposes for which the data were provided, or than is required by law.
We have taken the appropriate technical and organisational measures to protect your personal data from unlawful processing, including the following:
All persons who can access your data on behalf of Stadskasteel Oudaen are bound to confidentiality in this regard.
We require username and password verification on all our systems.
We regularly test and review our security measures.
Our employees have been informed of the importance of protecting personal data.
RIGHTS PERTAINING TO YOUR DATA
You have the right to access, correction and erasure with regard to the personal data we have received from you. You can also object to all or some of your personal data being processed by us or by one of our contracted processors. You also have the right to request that we transfer the personal data we hold back to you, or directly to another party on your behalf. We may ask you to provide identification before we comply with the aforementioned requests.
If you have any complaints about the processing of your personal data, we request that you contact us directly to discuss them. In the regrettable event that we are unable to resolve the issue together, you will always have the right to file a complaint with the Dutch Data Protection Authority, the regulatory authority for privacy protection.