Zandvoort Pass is managed by Besance and combines a digital guest pass with local offers and information about Zandvoort.

1. Who we are

The controller for your personal data is:

2. Scope of this privacy statement

This privacy statement applies to:

• the Zandvoort Pass website;
• the mobile Zandvoort Pass app for iOS and Android;
• user accounts;
• digital passes;
• use and validation of deals;
• customer support;
• related services offered under the name Zandvoort Pass.

This privacy statement does not apply to third-party websites, apps or services that we may link to, such as local businesses, payment providers, app stores or external websites.

3. Personal information we collect

We only collect personal data that is necessary for offering and improving Zandvoort Pass.

3.1 Account information

When you create or use a Zandvoort Pass account, we may collect the following data:

• first name;
• last name;
• email address;
• preferred language;
• account status;
• date the account was created;
• date of last login.

You can use the public website without an account. The mobile app requires an account to use the pass functionality.

3.2 Pass and purchase details

If you purchase or use a Zandvoort Pass, we may process the following data:

• pass number or pass ID;
• pass status;
• validity period;
• purchase source;
• payment service provider;
• payment ID;
• amount paid;
• currency;
• payment status;
• purchase date.

We do not store full credit card numbers, bank account numbers or other complete payment details. Payments are processed by Stripe or another payment provider shown at checkout.

3.3 Deal usage and redemption data

If you take advantage of a deal in the app, we may process the following data:

• user ID;
• pass ID;
• deal ID;
• partner or company ID;
• redemption code or QR code;
• redemption status;
• date and time the deal was viewed;
• date and time the deal was used;
• redemption expiration date;
• technical device identification, as necessary for fraud prevention and security.

This is necessary to check whether a deal is valid, unused and linked to an active pass.

3.4 Data shown to local companies

When a local company checks or scans a Zandvoort Pass code, the company can see the following data:

• your name;
• your pass number;
• whether the pass or deal is valid;
• relevant deal information.

Local businesses do not receive your email address, payment information or full account details through the validation page.

3.5 Support and communications details

If you contact us, we may process the following data:

• your name;
• email address;
• content of your message;
• all information that you voluntarily provide;
• our responses and support history.

We use this information to answer your questions, troubleshoot problems and provide support.

3.6 Technical and safety data

When you use our website, app or services, we may process limited technical data, such as:

• IP address;
• device type;
• browser type;
• operating system;
• app version;
• server logs;
• date and time of request;
• error logs;
• security logs.

We use this information to keep the service secure, prevent abuse, solve technical problems and ensure the reliability of Zandvoort Pass.

4. Data that we do not collect

Zandvoort Pass does not currently collect or use:

• live location data;
• GPS location data;
• biometrics;
• push notification tokens;
• preferences for newsletters or marketing emails.

If this changes in the future, this privacy statement will be updated as necessary.

5. Cookies and similar technologies

We use necessary technologies for basic functionality, security and storing your cookie choices. The cookie zvp_meta_consent stores your selection for up to 180 days. For consistent display, we also load the Inter and Bowlby One SC fonts through Google Fonts. For technical reasons, this sends your IP address to Google. No marketing consent is required for this.

We load the Meta Pixel from Meta Platforms Ireland Limited only if you explicitly select “Accept all”. Information sent to Meta may include the page visited, time, browser and device details, IP address, page views, deal views, checkout starts and completed purchases. We use this information to measure and improve our advertising.

You can reject the Meta Pixel and still use the website. You can change your choice at any time through the “Cookie settings” button and withdraw your consent for the future. More information is available in the Meta Privacy Policy.

6. How we use your personal data

We use your personal data for the following purposes:

• to create and manage your account;
• for granting access to the Zandvoort Pass app;
• for issuing and managing digital passes;
• to process purchases and payment status;
• to validate deals and prevent duplicate or invalid usage;
• to show local entrepreneurs whether a pass or deal is valid;
• to provide customer support;
• to protect the service against fraud, abuse and security threats;
• for maintaining and improving website, app and backend systems;
• to comply with legal, tax and accounting obligations.

We do not sell your personal data.

7. Legal basis for processing

We process personal data on the basis of the General Data Protection Regulation (GDPR) and use the following legal bases:

7.1 Fulfillment of an agreement

We process account, pass, purchase and redemption data because this is necessary to issue your Zandvoort Pass.

7.2 Legal obligation

We process and store certain payment and administrative data to comply with tax, accounting and other legal obligations.

7.3 Legitimate interests

We process limited technical, security and usage data based on our legitimate interests, including:

• securing the service;
• preventing fraud and abuse;
• solving technical problems;
• ensuring reliable app and website functionality;
• handling support questions.

We weigh these interests against your privacy rights.

7.4 Consent

We use the Meta Pixel and similar optional tracking technologies only on the basis of your prior consent. You can withdraw this consent at any time via the cookie settings. If we introduce further optional features, we will also obtain your prior consent, to the extent required by law.

8. Payments

Payments are processed by Stripe or another payment provider shown at checkout.

We may receive payment-related information, such as:

• payment ID;
• payment status;
• amount;
• currency;
• payment date;
• refund or cancellation status.

We do not store full credit card numbers, bank account numbers or complete payment credentials. Your payment provider processes this data under its own privacy policy and security standards.

9. Maps and external links

Zandvoort Pass may contain map functions, route buttons, addresses or links that open external map services such as Apple Maps or Google Maps.

If you access or use these external services, the relevant third party may process your data in accordance with their own privacy policies. Zandvoort Pass is not responsible for the way in which these external services process your data.

The same applies when you click on links to local businesses, websites, social media pages or other third-party services.

10. App stores

The Zandvoort Pass app can be offered via the Apple App Store and Google Play.

Apple and Google may process personal data when you download, install, purchase or use the app via their platforms. This processing is governed by their own privacy policies, terms and conditions and platform rules.

11. Service providers

We use trusted service providers to manage Zandvoort Pass. These providers may process personal data on our behalf, for example for:

• hosting;
• database storage;
• email delivery;
• payment processing;
• distribution of the app;
• safety;
• technical maintenance;
• customer support systems;
• providing web fonts via Google Fonts;
• advertising measurement, if you have consented.

If necessary, we conclude appropriate processing agreements with service providers who process personal data on our behalf.

For the Meta Pixel, Meta Platforms Ireland Limited is the recipient of the transmitted data. The processing is also subject to Meta's privacy policy and Business Tools terms and conditions.

12. Share personal data with local businesses

If you take advantage of a deal, the local company participating in Zandvoort Pass may need to check whether your pass and the deal are valid.

For this purpose, the company may see limited information such as your name, pass number, deal information and validity status.

This information is only displayed so that the company can validate the deal. Local businesses cannot access your full account, email address, payment information, or account history through the validation page.

13. International transfer

We try, where reasonably possible, to use service providers based in the European Economic Area.

When personal data is transferred outside the European Economic Area, we take appropriate protective measures where required by the GDPR, for example through standard contractual clauses or adequacy decisions.

14. Retention periods

We do not store personal data for longer than necessary.

In general, the following retention periods apply:

• account details: are kept as long as your account is active;
• deleted account data: will be deleted or anonymized within 30 days, unless longer retention is required by law;
• pass and redemption data: will be kept for as long as necessary for the operation of the pass, fraud prevention, dispute resolution and administration;
• payment and billing related data: retained for a maximum of 7 years as required for Dutch tax and accounting obligations;
• support messages: are kept for 2 years after the last contact, unless they are needed longer for a dispute or legal obligation;
• technical and security logs: typically retained for a maximum of 90 days unless longer retention is necessary for security, fraud prevention, or investigation purposes;
• anonymized data: can be kept indefinitely because it can no longer identify you.

If we have to keep certain data for a longer period due to a legal action, dispute, fraud investigation or legal obligation, we only keep the data that is necessary for this.

15. Account deletion

You can request deletion of your account via:

[email protected]

After receiving your request, we will delete or anonymize your personal data where possible. Some data may need to be retained for legal, accounting, security or fraud prevention reasons.

Deleting your account may mean that you can no longer use your Zandvoort Pass, access purchased services or view your pass history.

16. Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction.

These measures may include:

• limited access to personal data;
• secure authentication;
• encrypted connections where necessary;
• protected backend systems;
• logging and monitoring for security purposes;
• regular maintenance and updates.

No digital service is guaranteed to be completely secure. You are responsible for keeping your login access and email account secure.

17. Children and minors

Zandvoort Pass is intended for tourists and visitors who can use the service independently or with the permission of a parent or legal representative.

We do not knowingly target children or knowingly collect personal information from children without appropriate consent. If you believe that a child has provided us with personal information without appropriate consent, please contact us at[email protected].

18. Your privacy rights

Under the GDPR you have the following rights with regard to your personal data:

• the right to access your personal data;
• the right to correction of incorrect personal data;
• the right to request deletion of your personal data;
• the right to restrict processing;
• the right to object to certain processing;
• the right to data portability;
• the right to withdraw consent if the processing is based on consent;
• the right to file a complaint with a supervisory authority.

To exercise your rights, please contact us at:

[email protected]

We may ask you to confirm your identity before we process your request.

19. Complaints

If you believe that we are processing your personal data unlawfully or are not handling your request properly, please first contact us at:

[email protected]

You also have the right to file a complaint with the Dutch Data Protection Authority:

20. Changes to this privacy statement

We may update this privacy statement periodically, for example when we add features, change service providers or have to comply with new legal obligations.

The latest version is always available via the Zandvoort Pass website or app. If the changes are important, we can inform you appropriately, for example via the app, website or by email.

21. Contact

If you have any questions about this privacy statement or the way we process personal data, you can contact: