Privacy Statement

This statement is effective as of May 25, 2018.

Introduction

We place great importance on protecting your personal data, which is why we have drafted this Privacy Statement. The purpose of this statement is to describe how the Cave Experience collects and uses personal data.

Unless otherwise specified, The Cave Experience is the data processor for the personal data collected pursuant to this statement. A data processor is a person who processes data on behalf of the visitor. The management of such data processing is legally protected by the data processing agreement entered into between Syx Automations and The Cave Experience.

Regardless of what personal data we process, or when and how we process your personal data, we will always adhere to the following principles:

– Personal data must be processed fairly and in accordance with the law;

– Personal data may only be processed for specific purposes and for no other reason;

– Personal data must be adequate, relevant, and not excessive;

– Personal data must be accurate and up-to-date;

– Personal data may not be retained for longer than necessary;

– Personal data must be processed in accordance with individual rights;

– Personal data must be stored securely;

How We Collect and Process Your Information?
We collect information about you from various sources, including:

– Information we collect directly through your visit to the Municipal Cave.

– Information we collect about you when you visit our website and social media pages or use our services.

What information do we collect?
We may collect the following personal information:

– Contact information such as last name, first name, gender, address, date of birth, phone number, and email address, when you provide it to us and have given us your consent to use it.

– AOther visitor-related information may be collected for specific use at our sports and recreation center
when memberships are purchased;

– When purchasing tickets or products;

– Registration history for classes or activities when you sign up for classes, sports activities, or other events;

– Visitor Information: When you scan your ticket or pass to gain access to the venue;

– Time & attendance information;

– Access information, the time at which you visited a specific piece of infrastructure or space.

Why do we need your information?
We use the data we collect:

– to provide end-to-end leisure services to visitors, to understand who the visitor is and whether he or she has access to a particular area or event;

-to enable more personalized visitor experiences based on personal preferences or past actions;

– to send communications, such as marketing campaigns, promotions, and reminders for expired subscriptions;

– to collect statistical information for anonymous visitor analysis, e.g., to gain insight into the demographic distribution of visitors.

Personal data may, however, only be processed for lawful purposes.

We use and share your personal data with your consent. When the processing is based on your consent, you have the right to withdraw that consent at any time. If you wish to do so, please contact us.

With whom do we share personal information?
All personal data processed by our software products is stored in our product databases and is accessible only to authorized personnel and to authorized service and maintenance personnel.

Visitors can submit a request to the Cave Experience to exchange personal data with other systems via a file or web services. Examples of such integrations include:

– A CRM system that manages all visitor information;

– Eand a marketing or email system to inform visitors about promotions or to encourage them to return;

– Invoicing systems for sending invoices for payment.

In this case, the use of your personal data is always protected by law. You determine how your personal data may or may not be used, subject to compliance with the GDPR.

Where is your data processed and stored?
Personal data collected by us may be stored and processed in our data center.

How long do we store your data?
We will keep your data for as long as necessary to fulfill the purposes described in this statement. We will retain and use your data to the extent necessary to comply with our legal obligations.

How do we protect your data?
Your personal information will be treated as strictly confidential, and we have implemented the necessary technical and organizational security measures. We employ reasonable physical, administrative, and technical measures to help protect your personal information from unauthorized access, use, and disclosure.

What are your rights?
We comply with European and national data protection laws applicable in the Netherlands, which include the following rights:

– If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time with respect to future processing.

– You have the right to request access to and correction of your personal data.

– You have the right to object to the processing of your personal data, including the right to object to direct marketing;

– You have the right to restrict processing;

– You have the right to file a complaint with the data protection authority;

– You have the right to request the deletion of your data, also known as “the right to be forgotten”.

The general principle underlying this right is to enable you to have your personal data deleted, provided there is no compelling reason for its continued processing.

Questions or complaints
If you have any questions about the processing of your personal data, the exercise of your rights, or our privacy policy, please feel free to contact us at info@gemeentegrot.nl.

If you are not satisfied with our response or if you believe that we are not processing your personal data in accordance with applicable law, you may file a complaint with the AP (Dutch Data Protection Authority).

How do we handle updates to this statement?
We may modify or supplement this privacy statement at any time at our discretion. We therefore recommend that you review this statement from time to time to stay informed about how we protect your personal data.