Privacy Policy
Van Rossum Woerden attaches great importance to the protection of your personal data. In this Privacy Policy, we want to provide clear and transparent information about how we handle personal data. We do everything we can to safeguard your privacy and therefore handle personal data with care. Van Rossum Woerden complies in all cases with applicable laws and regulations, including the General Data Protection Regulation (GDPR).
This means that we at least:
- process your personal data in accordance with the purpose for which they were provided; these purposes and the types of personal data are described in this Privacy Policy;
- limit the processing of your personal data to only those data that are strictly necessary for the purposes for which they are processed;
- request your explicit consent if this is required for the processing of your personal data;
- have taken appropriate technical and organisational measures to ensure the security of your personal data;
- do not share personal data with other parties unless this is necessary for the execution of the purposes for which they were provided;
- are aware of your rights regarding your personal data, wish to inform you of these rights, and respect them.
As an organisation, we are responsible for the processing of your personal data on vanrossumwoerden.nl. If, after reviewing this Privacy Policy or in a more general sense, you have any questions about this or wish to contact us, you can do so via the contact details below:
Meulmansweg 33m
3441 AT Woerden
T: +31 (0)348 – 706 500
E: info@vanrossumwoerden.nl
For What Purpose Do We Process Personal Data
Your personal data are processed by Van Rossum for the following purposes:
- To respond to (contact) requests via the website;
- To process reservations;
- To send newsletters;
- To send offers;
- To secure our website;
- To comply with legal administrative obligations;
- To collect feedback.
For the above purposes, we may request the following personal data from you:
- First name;
- Name prefix;
- Last name;
- Address details;
- Company name;
- Telephone number;
- Email address;
- IP address.
Provision to Third Parties
The data you provide to us may be shared with third parties if this is necessary for the execution of the purposes described above.
For this purpose, we make use of third parties for:
- Handling reservations;
- Providing a reservation system, namely Guestplan, Mews, Mice and Bonnie;
- Providing our internal communication via Nostradamus & NMBRS;
- Providing our payroll administration via Cobra & NMBRS;
- Providing our administration via Exact;
- Providing financial administration via the Index cash register system;
- Providing the internet environment for our office;
- Providing our (financial) administration;
- Providing newsletters via Mailchimp and Formitable;
- Providing our hosting environment on which our website operates, Desktoptowork;
- Managing our website via JijOnline;
- Providing gift vouchers via Gifty.
We never share personal data with parties with whom we have not concluded a data processing agreement. With these parties (processors), we naturally make the necessary arrangements to ensure the security of your personal data. Furthermore, we will not provide the data you have supplied to other parties unless this is legally required and permitted. An example of this is when the police request (personal) data from us as part of an investigation. In such cases, we are obliged to cooperate and therefore required to provide this data. We may also share personal data with third parties if you have given us written consent.
We do not provide personal data to parties located outside the European Union.
Minors
We only process personal data of minors (persons under the age of 16) if written consent has been provided by a parent, guardian, or legal representative.
Retention Period
Van Rossum does not retain personal data longer than necessary for the purpose for which they were provided, unless this is required by law.
Security
We have taken appropriate technical and organisational measures to protect your personal data against unlawful processing, including the following measures:
- All persons who may access your data on behalf of Van Rossum are bound by confidentiality;
- We use a username and password policy on all our systems;
- We regularly test and evaluate our security measures;
- Our employees are informed about the importance of protecting personal data.
Rights Regarding Your Data
You have the right to access, correct, or delete the personal data we have received from you. You may also object to the processing of your personal data (or part thereof) by us or by one of our processors. In addition, you have the right to have the data you have provided transferred by us to yourself or, at your request, directly to another party. We may ask you to identify yourself before we can comply with the above requests.
Complaints
If you have a complaint about the processing of your personal data, we kindly ask you to contact us directly. If we are unable to resolve the matter together, you always have the right to submit a complaint to the Autoriteit Persoonsgegevens, the supervisory authority in the field of privacy protection.
Consent for the Use of Cookies
To ensure that our website functions properly, we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to visit our website, and to properly document this, we use a cookie consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, The Netherlands.
When you visit our website, a connection is established with the CookieFirst server to enable us to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser in order to activate only those cookies for which you have given consent and to properly document this. The processed data are stored until the predefined retention period expires or until you request the deletion of the data. Notwithstanding the above, certain mandatory statutory retention periods may apply.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data Processing Agreement
We have concluded a data processing agreement with CookieFirst. This is an agreement required by data protection law, which guarantees that the data of our website visitors are processed solely in accordance with our instructions and in compliance with the GDPR.
Server Log Files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data are collected:
- Your anonymised IP address;
- Information about your browser;
- Information about your device;
- The date and time on which you visited our website;
- The URL of the webpage where you saved or updated your consent preferences;
- The approximate location of the user who saved the consent preferences;
- A universally unique identifier (UUID) of the website visitor who clicked on the cookie banner.
