privacy & cookies

What personal data does Altenbroek collect and why?

The personal data we may collect from you generally falls into the following categories:

Information you voluntarily provide for certain parts of our services

We may ask you to voluntarily provide us with information; for example, we may ask you to provide your contact details, such as your full name, phone number, email address, and date of birth, to correspond with you or to process and confirm your booking, to register an account with us, to provide the services and information you request from us, to register your emergency contact, to sign you up for our marketing communications, and/or to submit information requests with us. Additionally, you may need to provide us with billing information (such as a credit card number, cardholder name, and expiration date) to make a payment.

Special categories of personal data
In some cases, we may also ask you to provide us with sensitive personal data. Sensitive personal data is a specific type of personal data, such as information about your religion or health. This type of information is considered sensitive and requires extra protection under applicable law. We limit the situations in which we may collect sensitive personal data.

In certain cases, we are required to process sensitive personal data, including:

• Health-related information may be necessary to provide appropriate accommodation and accessibility, or facility needs.
• Government-issued identification numbers, such as a passport or driver's license number, may be required for renting a vehicle or other travel reservations.
• Other data you may choose to provide that may imply or suggest information about religion, health, or other information, such as dietary requirements.

The personal data we ask you to provide and the reason why we ask you will be explained at the time we ask you to provide your personal data. With your data, we can keep you informed of our latest and most attractive offers via our email service.

Information we automatically collect
When you visit our Website, we may automatically collect certain information from the device you use. In some countries, including countries in the European Economic Area, this information may be considered personal data under applicable data protection laws.

In particular, the information we automatically collect may include your IP address, device type, unique device identification number, browser type, broad geographic location (e.g., country or city), and other technical information.

We may also collect information about how your device interacts with our Website, including the pages you have viewed and the links you have clicked. By collecting this information, we gain a better understanding of the visitors to our Website, where they come from, and what content on our Website interests them. We use this information for internal analysis and to improve the quality and relevance of our Website for our visitors. Some of this information may be collected using cookies and similar tracking technologies; more information can be found in the 'Cookies and similar tracking technologies' section below.

Information we obtain from external sources
From time to time, we may receive personal information about you from external parties, but only when we have verified that you have given these external parties your consent or when it is otherwise legally permitted or required to disclose your personal data to us.

In general, we use the personal data we collect from you only for the purposes described in this Privacy Notice or for purposes we explain to you at the time we collect your personal data. However, we may also use your personal data for other purposes that are not incompatible with the purposes we have notified you of (such as for archiving in the public interest, scientific or historical research, or statistical purposes), if and where this is permitted under applicable data protection laws.

Legal basis for processing personal data (only for visitors from the EEA)
If you are a visitor from the European Economic Area, our legal basis for collecting and using the personal data described above depends on the personal data concerned and the specific context in which we collect it.

However, we will normally only collect personal data from you where we have your consent, where we need the personal data to perform a contract with you, or where the processing is in our legitimate interests and these interests are not overridden by your data protection interests or fundamental rights and freedoms.

In some cases, we may also be legally obliged to collect personal data from you, or we may otherwise need the personal data to protect your vital interests or those of another person. If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, we will inform you of this at the relevant time and advise you whether the provision of your personal data is mandatory (as well as the possible consequences if you do not provide your personal data).

Similarly, if we collect and use your personal data relying on our legitimate interests (or those of a third party), we will inform you at the relevant time what those legitimate interests are.

If you have questions about the legal basis for collecting and using your personal data, or if you want to know more, please contact us using the contact details in the 'Questions and feedback' section below.

How do we use your personal information?

We always inform you why we need your personal data and how we are going to use it. Altenbroek will not make this data available to external parties without your explicit consent, except for:

• companies, external service providers, and partners of our group that provide data processing services to us (such as supporting or improving the functionality and security of our Website, or external parties that arrange your accommodation), or that otherwise process personal data for purposes described in this Privacy Policy or that we have informed you about when we collected your personal data. This includes the following partners: Rezlynx, Trust Payments & Lightspeed;
• law enforcement agency, regulatory or government agency, court, or other third party when we believe disclosure is necessary (i) under applicable law or regulation, (ii) to establish, exercise, or defend our legal rights, or (iii) to protect your vital interests or those of another person;
• to a potential buyer (and its representatives and advisors) in connection with any proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer that your personal data may only be used for the purposes described in this Privacy Policy.

How does Altenbroek handle data in the event of contests or promotions?

If you respond to a contest or promotion, we ask for your name, address, and email address. This data is used in relation to the promotion, to inform contest winners of their prize, and to measure the response to the promotion.

How does Altenbroek handle security and quality?

We use applicable technical and organizational measures to protect the quality and integrity of the personal data we collect and process from you. The measures we apply are designed to maintain the appropriate level of security for the processing of your personal data. Specific measures we apply include the use of firewalls and compliance with PCI requirements.

We handle your information with the utmost care. The information you provide us when booking a trip, or when signing up for the newsletter, is securely stored in our database.

Data retention
We retain personal data that we collect from you when there is a continuing legitimate business need to do so (for example, to provide you with a service you have requested, or to comply with applicable legal, tax, or accounting requirements).

When there is no continuing legitimate business need to process your personal data, we either delete or anonymize your data, or, if this is not possible (for example, because your personal data is stored in backup archives), we securely store your personal data and isolate it until deletion is possible.

Cookies

We collect information for research to gain more insight into our customers, so that we can adjust our services accordingly.

We use cookies and similar tracking techniques (collectively “Cookies”) to collect and use personal information about you (for example, for relevant advertisements for you). We use this information to track how you use the site, to compile reports on website activity, and to offer other services related to website activity and internet usage.

Changes
This privacy statement is tailored to the use and options on this site. Adjustments and/or changes to this site may lead to changes in this privacy statement. It is therefore advisable to read this privacy statement regularly.

The newsletter service: adjust or unsubscribe

At the bottom of each email, you will find an option to adjust your details or to unsubscribe from the newsletter.

Communication: adjust or unsubscribe

You can contact us at any time if you want to adjust your details or have them removed from our files. You can use the contact details below for this.

Your data protection rights
You have the following data protection rights:

• You can view, correct, or update your personal data at any time or request its deletion by contacting us via the contact details found in the ‘Questions and feedback’ section below.
• If you are a resident of the European Union, you can also object to the processing of your personal data, ask us to restrict the processing of your personal data, or request the portability of your personal data. You can also exercise these rights by contacting us via the contact details listed under ‘Questions and feedback’.
• You have the right to unsubscribe from the marketing communications we send you at any time. You can exercise this right by clicking the ‘unsubscribe’ link in the marketing emails we send you. To unsubscribe from other forms of marketing (such as postal marketing or telemarketing), you can also contact us via the contact details listed under ‘Questions and feedback’.
• Even if we have collected and processed your personal data with your consent, you can withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of any processing we conducted prior to your withdrawal, nor does it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
• You have the right to file a complaint with a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area can be found here.)

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Updating this privacy notice

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update this Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. If and when required by applicable data protection law, we will seek your consent for any significant changes to the Privacy Policy.