Privacy policy

The Attraction & Holiday Park Slagharen, hereinafter referred to as "Slagharen", attaches great importance to the protection of your personal data. In this privacy policy, we provide information on how we handle personal data. It is important to us that we are reliable and transparent. We therefore treat your personal data with discretion and care, and we ensure that any processing of your data complies with the applicable laws and regulations. We may amend our privacy policy if required by new developments.

Slagharen complies with applicable privacy legislation in all cases, including the General Data Protection Regulation (GDPR). This means that we:

  • Process your personal data in accordance with the purpose for which said data was provided; these purposes and types of personal data are described in this Privacy Policy;
  • The processing of your personal data is limited to only those details that are minimally necessary for the purposes for which they are processed;
  • Ask for your explicit consent if we need this for the processing of personal data;
  • Have taken appropriate technical and organizational measures so that your personal details are protected;
  • Do not pass on personal data to other parties, unless necessary for the execution of the purposes for which the data was provided;
  • Inform you of your rights regarding the processing of personal data.

What personal data do we process?

We process the personal data that you have provided us, for example in the context of your visit to our attraction and/or holiday park, or that we have obtained through your use of our website, by filling in a contact form, by reporting a complaint or by registering for our newsletter.

The personal data we process may fall into one or more of the following categories:

Contact details

This includes your name, your home address and other contact details, such as your telephone number and email address, but also your date of birth.

Information about subscriptions, bookings, and purchases

When you purchase a season ticket, book a stay or buy a ticket, in addition to your contact details, we also process your bank account number, the type of season ticket, the length of your stay at our park, and the composition of your family unit or travelling companions.

Images

Our park has camera surveillance. Photo cameras are installed at various attractions and take pictures of the visitors. These photos may later be purchased by the person(s) who appear in the photo.

Information from social media

We may receive information from the social media platforms you use, such as Facebook, Instagram, Snapchat, Twitter, etc. If you log in to our network using one of these services, we may receive your profile information from said services. Did you ask a question via social media? Then we combine the data we receive with the data we already have of you. We do this to be able to respond to your question or comment in the best possible way, and to provide you with a more personal service later.

Occasionally, we may link your social media activity to ours. If, for example, you publicly share a photo of an item you purchased at Slagharen with the hashtag #discoverSlagharen via your social media account(s), we may share this photo on our account(s). This does not happen automatically, as we make a manual selection of photos. When reposting, we will always mention your account name; after all, the photo is not ours. Do you want us to remove your photo? Send us a private message to one of our accounts. We will respond as soon as possible.
The use of social media platforms such as Facebook, Instagram, Twitter, or YouTube is not governed by our terms and conditions or privacy policy, but by the terms and conditions, privacy policy, cookie policy and other policies of the respective social media platform. We encourage you to read those policues carefully if you have any questions about them.

Information you provide to us

You may share information with us, for example by participating in a promotional activity such as a competition. We also send out surveys on your Slagharen experience. If the survey is completed, we will process this information and add it to the personal data we already have of you. In addition, this data is shared with our management team. We also process your personal data if you communicate with us directly via email.

Information we obtain through our website, apps, and other digital media

When you visit our website or use one of our apps, we may record your IP address, browser type, operating system, buying behaviour, transactional details, redeemed voucher codes, referring website, surfing behaviour and app usage. We may receive an automatic notification when you open a newsletter or click on a link in said newsletter. Our Cookie Policy explains how we use cookies on our website.

You can leave a review on, for example, Zoover or other portals. We ask you to leave a review after you have made a reservation or placed an order. The review you post is visible to others. You can choose which name/nickname to display. We may contact you in response to the review you have provided.

Purposes of use

We use your personal data for several different purposes. Those purposes are the following.

Execution of an agreement.
If you enter into an agreement with us, we need your contact details. This data may also be used for reservations. When you make a reservation or place an order, we process your data to process the reservation properly. For example, communication regarding your arrival, your visit, or a confirmation from our webshop. We use the personal data you provide with your reservation/order. This personal data will exclusively be used by us for this purpose and will only be accessible to those within Slagharen who are engaged in the services you have ordered.

In addition, we may collect personal data during your visit to our attraction and/or holiday park, such as the photographs taken at certain attractions, which you may purchase.

Maintaining contact
Your contact details are kept in our customer database and may be used for such purposes as sending newsletters, updates, invitations to events and sending information you have requested from us.

Improving our product and service information and performing targeted marketing actions.

We are happy to provide you with relevant information. For this purpose, we analyse the following data:

Interaction data: 
Personal data obtained from contact between Slagharen and you, for instance through our website.

Behavioural data: 
Personal data Slagharen processes about your behaviour, such as your preferences, opinion, wishes, and needs. We can derive this information, for example, from your surfing behaviour on our website, from you reading our newsletter or from your request for information.

Analysing the use of our website: 
The website's user statistics allow us to get an idea of, among other things, the number of visitors, the length of the visit and which pages of the website are viewed. The collected data is generic, without information on individuals. We use the information obtained to improve our website.

Security of people and property: 
We have camera surveillance for safety and security reasons. Surveillance camera images are stored for a limited time before they are deleted. In case of an incident, images may be kept longer, for example until the incident is dealt with.

Legal basis for processing

We only process personal data if there is a legal basis for doing so. The legal grounds on which we process personal data are:

Consent:
If we have asked you for your consent to process your personal data, and you have granted this, you are entitled to withdraw your consent at any time. If you are under 16 years of age, you must first get permission from a parent or legal representative. We therefore ask you not to provide us with any data if you have not received permission to do so.

The conclusion of an agreement or the run-up to the conclusion of an agreement:
If you have concluded an agreement with us, we will process personal data if and to the extent that this is necessary for the execution of the order.

Legitimate interest:
We may also process personal data if we have a legitimate interest and do not disproportionately infringe on your privacy. For instance, we use your contact details to invite you to participate in special offers, such as savings offers, competitions, or promotions in which you can participate.

Provision of personal data to others

The Slagharen head office, Parques Reunidos, processes your personal data in the CRM system. In addition, we may engage service providers (processors) to process your personal data, solely on our behalf. We conclude a processor agreement with these processors. This processor agreement states, among other things, that the processors act solely on our instructions and may not use the personal data for their own purposes. 

We work together with other parties, such as suppliers. Although we have selected these carefully, we are not responsible for the processing of your data via these websites. Our privacy policy does not apply to them. Your personal data will not be shared with third parties for commercial purposes.

Fraud

We carry out anti-fraud investigations. In this way, we want to prevent financial and/or reputational damages as a result of fraud. Your transaction data can be misused by others to commit fraud. Fraud prevention is therefore not only in our interest, but also in yours.
Fraud is a collective term for theft, embezzlement, forgery, deception and swindling, among other terms. Based on our own investigations, we determine whether fraud was committed. If there is indeed (a suspicion of) fraud, this will be discussed, and we will investigate the reservation in detail and carry out additional checks at check-in.
We process the following data, among others, as part of anti-fraud investigations:

  • Your personal data;
  • Data relating to visits to our website, e.g., reservation details;
  • Transaction data;
  • Bank account numbers;
  • Claims.

We may disclose your details in connection with criminal investigations.

Your rights

To ensure that someone sees to it that your data is processed as it should be by law, we have a data protection commission. The activities of this team include monitoring, handling questions and complaints, and advising on the security and processing of your data.

Every person can exercise certain rights under the law in relation to his or her personal data. For example, you have the right to inspect, correct and delete personal data. You also have the right to object to the use of your data or request that its use be restricted. In certain cases, you can request your data to be transferred to another party. For all these questions, please contact our privacy commission at privacy@slagharen.com.

How long do we keep your data?

We keep your personal data for as long as is necessary to execute the services for which we have obtained the data, unless a statutory retention period applies. In general, we do not keep your data longer than necessary to execute the services for which the data was collected. After this, we delete or anonymize the data. Anonymization means that we make sure that the data cannot be traced back to you.

Security

Your privacy is important, and we take the security of your data very seriously. We take various measures to ensure that your data is and remains secure. When securing your data, we consider the possible processing risks of your data: for example, if it is lost or misused. Here are some of our security measures:

  • We make sure your account is secure and that no one from the outside or inside can log in and access your information. Among other things, your password is encrypted and stored with us;
  • We regularly provide our website with automatic security scans;
  • Communication via the website, email, or app is secure;
  • We continuously monitor whether there are (secret) break-in attempts. We repair vulnerabilities and take measures in the event of an intrusion;
  • We use the latest technologies and software;
  • We have many systems that communicate with each other. We ensure that we send data from one system to another in a secure and controlled manner;
  • We protect our systems against malware, viruses, cryptoware and hacking software;
  • Only Slagharen employees who need access to your data as part of their job description can access your data;
  • We log attempted intrusions and the use of your data by our staff so that we can keep track of what happens;

Third parties that need access to your data are obliged to take appropriate technical and organizational security measures, and they must require their employees to maintain confidentiality.

Security incident/data breach

If there is a security incident, for example theft of a laptop or a hack into our systems, we will respond immediately. We investigate whether it is a security breach (weakness in our security) or a data leak (loss or unlawful processing of your data). We will close security and data breaches as quickly as possible. In the event of a data breach, we will notify the Data Protection Authority within 72 hours, unless it is unlikely that the data breach presents a risk to your privacy. What if it concerns a data breach with a high risk for your privacy (for example, if a lot of or sensitive data was leaked)? Then we are obliged to report the leak to you as well. If you have knowledge of a security incident or data breach at Slagharen, please email our privacy commission immediately via privacy@slagharen.com.

Complaints?

If you have any complaints about how we handle your personal data, please contact us by sending an email to privacy@slagharen.com. To ensure that only you have access to your data, we always ask you to send us a copy of your proof of identity.

We will be happy to help you find a solution. Should we not be able to find one, it is always possible to turn to the Data Protection Authority.