Privacy Policy

At Trails of History, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

1. Data Controller

Trails of History (KvK: 92904300) is the data controller responsible for your personal data. For any questions or concerns regarding your privacy, please contact us at [email protected].

2. Personal Data We Collect

We may collect and process the following types of personal data:

2.1 Information You Provide

• Contact Information: Name, email address, phone number, postal address
• Booking Information: Tour preferences, dates, number of participants, special requirements
• Payment Information: Billing details (processed securely through third-party payment processors)
• Communication: Any information you provide when contacting us via email, phone, or contact forms

2.2 Information Automatically Collected

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, referral sources
• Cookies: See our Cookie Policy for details

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance: To fulfill our obligations when you book a tour
• Legitimate Interest: To improve our services and communicate with you about tours
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with Dutch tax and business regulations

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing and managing tour bookings
• Communicating with you about your bookings and inquiries
• Sending booking confirmations and tour updates
• Processing payments securely
• Improving our website and services
• Sending marketing communications (with your consent)
• Complying with legal and regulatory requirements
• Analyzing website usage to enhance user experience

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

Third Party	Purpose
Payment Processors	To process secure payments
Email Service Providers	To send booking confirmations and communications
Analytics Services	To analyze website usage (anonymized where possible)
Legal Authorities	When required by law or to protect our rights

All third-party service providers are carefully selected and required to maintain the confidentiality and security of your data in compliance with GDPR.

6. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary:

• Booking Data: Retained for 7 years to comply with Dutch tax regulations
• Marketing Data: Until you withdraw consent or we no longer have a legitimate interest
• Website Analytics: Typically retained for 12-26 months

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or cookies at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for data transmission
• Secure payment processing through certified providers
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent. If you believe we have collected data from a child, please contact us immediately.

11. Cookies

We use cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

• Website: autoriteitpersoonsgegevens.nl
• Email: [email protected]

14. Contact Us

For any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us:

• Email: [email protected]
• Company: Trails of History
• KvK Number: 92904300