Privacy Policy

Data Controller

haricobcfs B.V. is the data controller for the personal information processed through our website and services. We are a Dutch company registered under number 58421397, with VAT number NL697584213B155, located at Berkenlaan 103, 9741 KS Groningen, Netherlands.

Data Collection

The data we collect includes personal information you provide when booking tours, contacting us, or using our website. This information helps us provide and improve our guided tour services.

We collect the following types of personal data:

• Contact information (name, email address, phone number)
• Booking details (tour preferences, group size, dates)
• Communication records (emails, messages, enquiries)
• Website usage data (IP address, browser information, cookies)
• Payment information (processed securely by third-party providers)

How We Use Your Information

We explain how we use your information to provide our guided tour services and maintain our business operations. Your data is processed fairly and transparently according to GDPR principles.

We use your personal data for the following purposes:

• Processing and managing tour bookings
• Communicating with you about our services
• Providing customer support and responding to enquiries
• Improving our website and services
• Complying with legal and regulatory requirements
• Marketing communications (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: To provide our tour services and fulfil bookings
• Legitimate interests: To operate our business and improve our services
• Consent: For marketing communications and non-essential cookies
• Legal compliance: To meet regulatory and tax obligations

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.

Our retention periods are:

• Booking and customer data: 7 years (for tax and legal compliance)
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months
• Contact enquiries: 3 years

Your Rights

Under GDPR, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@haricobcfs.top.

Your rights include:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing or cookies

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted service providers who help us deliver our services, such as payment processors and email providers.

We may share data with:

• Payment processing services (for secure transactions)
• Email and communication platforms
• Website hosting and analytics providers
• Legal and regulatory authorities (when required by law)

Cookies and Website Analytics

Our website uses cookies to enhance your browsing experience and analyse website traffic. You can control cookie preferences through our cookie banner and browser settings.

For detailed information about our cookie usage, please see our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us using the information below:

Supervisory Authority

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date.