Privacy Policy – Camperplaats Nolissenhof

1 1. Who We Are

This privacy policy explains how your personal data is collected, used and protected when you use this camping booking website ("the Platform"). The Platform is operated by Camperplaats Nolissenhof on behalf of the campground you are booking with ("the Campground Operator").

In data-protection terms, the Campground Operator is the controller — it decides why and how your personal data is used. Camperplaats Nolissenhof acts as the processor, handling your data on the Campground Operator's instructions in order to provide the booking service.

We take your privacy seriously. If you have questions about this policy or wish to exercise your rights, you can contact the Campground Operator (the controller) using the details on its website or in your confirmation email, or contact the Platform Operator (the processor) at Camperplaats Nolissenhof.

If you are in the European Economic Area and you are not satisfied with our response, you have the right to complain to your national data-protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

2 2. What Personal Data We Collect

We collect the following categories of personal data, with details of what each includes:

2.1 Account Registration Data

Your first and last name.
Your email address (verified using a confirmation link).
A password for your account (stored securely and never in plain text).
A telephone number, if you choose to provide one.
Confirmation that you are an adult.

2.2 Booking and Reservation Data

The pitch you have selected.
Your arrival and departure dates.
The number of guests in your party.
Any Extras you select (for example a pet charge or an additional tent).
Any comments or notes you provide.
How you made the booking (for example the website or an embedded tool).
The total price of your reservation.

2.3 Payment Data

Payments are handled by Mollie B.V., a payment provider based in the Netherlands.
Your card or bank details are entered directly with Mollie; we never see or store your full card number or bank details.
We keep a reference (such as a customer and, where relevant, a mandate identifier) so that we can manage payments and, where you allow it, recurring payments.
We keep records of transactions, including the type (payment or refund), the amount and any related notes.

2.4 Guest Booking Data (without an account)

If you book without creating an account, we collect your name, email address and telephone number.
A temporary guest profile is created without a password.
You receive a secure link by email that lets you set a password and, if you wish, create a full account.

2.5 Contact Form Data

When you send us a message through the contact form, we collect your name, email address and telephone number.
We collect the subject and content of your message.
To prevent misuse, the number of messages that can be sent is limited.

2.6 Technical Data

Your IP address and limited information about your device and browser.
Your preferred language, stored in a cookie.

2.7 Programmatic Access Data

If you are given programmatic access to our services, we link an access key to your account and record its use.
Access is limited to a fixed number of requests per minute to protect the service.

2.8 Gate Access Logs

Where the Campground uses an electronic gate, we record entries and exits (for example via a QR code or access code).
These records are linked to a reservation rather than to you personally, except as part of that reservation.

2.9 Energy Monitoring Data

Where the Campground uses smart meters to measure electricity use per pitch, we collect that consumption data per pitch.
This data is not linked to you as an individual; it is tied to the pitch, not the guest.

3 3. How We Collect Your Data

Directly from you, when you create an account, make a reservation, send a contact message or otherwise communicate with us.
Automatically, when you use the Platform (for example technical data and cookies).
From the Campground's smart meters, where these are used to measure energy use per pitch.
From our payment provider, Mollie, regarding the status and outcome of payments.

4 4. Why We Use Your Data (Purposes and Legal Bases)

Under the GDPR, we need a valid legal basis to use your personal data. The purposes and legal bases we rely on are:

Making and confirming your reservation — performance of a contract (Art. 6(1)(b) GDPR).
Processing payments and refunds through Mollie — performance of a contract (Art. 6(1)(b) GDPR).
Verifying your identity (your email and that you are an adult) — performance of a contract / legal obligation.
Customer support and managing your reservation — performance of a contract / legitimate interests.
Meeting legal obligations, such as keeping tax and accounting records — legal obligation (Art. 6(1)(c) GDPR).
Preventing fraud and misuse (for example limiting automated requests and detecting abuse) — legitimate interests (Art. 6(1)(f) GDPR).
Improving the Platform by understanding how it is used — legitimate interests (Art. 6(1)(f) GDPR).
Marketing, where you have agreed to receive it — consent (Art. 6(1)(a) GDPR).
Managing gate access and Campground security — legitimate interests (Art. 6(1)(f) GDPR).

5 5. Who We Share Your Data With

We do not sell your personal data. We only share it where necessary to provide the service:

Mollie B.V. (Netherlands) — payment data needed to process your payments. Mollie's privacy policy applies to the payment process.
Our email service provider — your email address, name and booking details, used to send confirmations, verification and password-reset emails.
The Campground Operator (the controller) — all booking and account data, as the Campground you book with is responsible for your data.
The provider of the Campground's energy-monitoring meters — energy-use data per pitch (not linked to you personally).
Public authorities — where required by law.

6 6. International Data Transfers

All personal data is stored and processed on servers in the Netherlands, within the European Economic Area. Our payment provider, Mollie B.V., is also based in the Netherlands. If it ever becomes necessary to transfer data outside the EEA, we will put suitable safeguards in place (such as the European Commission's Standard Contractual Clauses) in line with the GDPR.

7 7. How Long We Keep Your Data

Account data: kept while your account is active.
After an account is deleted: certain data is retained for as long as we are required to by law (for example tax and accounting records, typically for seven years).
Reservation data: retained for as long as needed for legal and accounting purposes, then deleted.
Payment records: retained for as long as required for tax and accounting.
Gate access records: retained for the period needed for Campground security.
Technical and session data: kept only for as long as needed and then removed automatically.
Access keys: remain valid until you or the Campground Operator withdraw them.

8 8. Cookies

The Platform uses the following cookies:

A language cookie — remembers your preferred language. This is a functional cookie that stays on your device.
A session cookie — keeps you logged in while you use the Platform. Essential; deleted when you close your browser.
A security cookie — helps protect the Platform against certain online attacks. Essential; deleted when you close your browser.
Payment cookies — required by our payment provider during the payment process. Essential; last only for the payment session.

We do not use advertising, tracking or analytics cookies. We do not use Google Analytics, Facebook Pixel or any other third-party tracking service.

We record page views and booking-funnel interactions on our own server (first-party, server-side). We store your IP address and browser type for security and bot detection. We do not use tracking cookies or third-party analytics services. Retention is configurable; contact us to request deletion.

9 9. Security Measures

Passwords are stored securely and never in plain text.
All data is sent over an encrypted connection (HTTPS/TLS).
Access to your data is restricted to authorised staff on a need-to-know basis.
Automated protections help prevent misuse, fraud and excessive automated requests.
Accounts and reservations are kept in a way that protects their integrity and allows recovery where needed.

10 10. Children's Privacy

You must be an adult to use the Platform's booking features, and you confirm this when you register. The Platform is not intended for children under 18, and we do not knowingly collect personal data from children.

11 11. Your Rights Under the GDPR

Access (Art. 15 GDPR): you may request a copy of the personal data we hold about you.
Rectification (Art. 16 GDPR): you may ask us to correct inaccurate or incomplete data.
Erasure (Art. 17 GDPR): you may ask us to delete your data ("right to be forgotten"), subject to legal retention duties.
Restriction (Art. 18 GDPR): you may ask us to limit how we use your data in certain cases.
Data portability (Art. 20 GDPR): you may receive your data in a structured, commonly used format.
Objection (Art. 21 GDPR): you may object to use based on legitimate interests, including profiling.
Withdrawal of consent (Art. 7(3) GDPR): where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact the Campground Operator (the controller) using the details on its website or in your confirmation email. We will reply within one month of receiving your request.

12 12. Changes to This Privacy Policy

We may update this privacy policy from time to time. When we make significant changes, we will let you know through the Platform or by email. The version in force when your data was collected applies to that data. If you continue to use the Platform after a change takes effect, this means you accept the updated policy.

Last updated: June 20, 2026