Personal data we process

We process your personal data because you use our services and/or because you provide these data to us yourself. Below is an overview of the personal data we process:

- First and last name
- Address
- Phone number
- Email address
- Other personal data that you actively provide for example by creating a profile on this website, in correspondence, and by telephone

Special and/or sensitive personal data we process

Our website and/or service does not intend to collect data on website visitors under the age of 16. unless they have obtained permission from their parents or guardian. However, we cannot verify whether or not a visitor is over 16. We therefore encourage parents to be involved in their children's online activities to avoid the collection of data about children without parental consent. If you believe that we have collected personal information about a minor without such consent, please contact us and we will delete this information.

On which basis and for which purpose we process personal data

We process your personal data for the following purposes:

- To be able to call or email you if necessary to carry out our services
- Informing you about changes to our services and products

Automated decision-making

We do not make decisions based on automated processing about things that can (significantly) affect individuals. These are decisions that are made by computer programs or systems, without a person (for example an employee) involved.

How long we store personal data

We do not retain your personal data longer than is strictly necessary to fulfill the purposes for which your data is collected. We use the following retention periods for the following (categories) of personal data:

- First and last name: up to 5 years if no longer legally required or necessary for the performance of the agreement;
- Address information: up to 5 years if no longer legally required or necessary for the performance of the agreement;
- Phone number: up to 5 years if no longer legally required or necessary for the performance of the agreement;
- E-mail address: up to 5 years if no longer legally required or necessary for the performance of the agreement;
- Other personal data that you actively provide for example by creating a profile on this website, in correspondence, and by phone: up to 5 years if no longer legally required or necessary for the performance of the agreement;
- Bank account number: up to 5 years if no longer legally required or necessary for the performance of the agreement;

Sharing personal data with third parties

We do not sell your data to third parties and will only provide it to third parties if this is necessary for the performance of our agreement with you or to comply with a legal obligation. We conclude a processor agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. We remain responsible for this processing.

Cookies, or similar techniques, that we use

We use functional, analytical, and tracking cookies. A cookie is a small text file that is stored in the browser of your computer, tablet, or smartphone the first time you visit this website. We use cookies with purely technical functionality. These ensure that the website works properly and that, for example, your preferences are remembered. These cookies are also used to make sure the website functions properly and to be able to optimize it. We also place cookies that track your browsing behavior so that we can offer customized content and advertisements. During your first visit to our website, we have already informed you about these cookies and asked your permission to place them. You can opt out of cookies by configuring your Internet browser to stop storing cookies. In addition, you can also delete any information previously stored via your browser settings. For an explanation, check: https://veiliginternetten.nl/themes/situatie/cookies-wat-zijn-het-en-wat-doe-ik-ermee/

Accessing, modifying, or removing data

You have the right to view, correct, or delete your personal data. You also have the right to withdraw your possible consent for data processing or object to the processing of your personal data by us and you have the right to data portability. This means that you can request us to send the personal data we have on you in a computer file to you or another organization named by you. You can send us a request to view, correct, delete, or transfer your personal data or a request to withdraw your consent or object to the processing of your personal data. To make sure that the request for inspection is made by you, we ask you to send a copy of your proof of identity along with the request. In this copy, please black out your passport photo, MRZ (machine readable zone, the strip of numbers at the bottom of the passport), passport number, and Social Security Number (BSN). This is to protect your privacy. We will respond to your request as soon as possible, but no later than four weeks. We would also like to point out that you have the possibility to file a complaint with the national regulator, the Dutch Data Protection Authority. You can do so through the link below: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

How we protect personal data

We take the protection of your data seriously and take appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you feel that your data is not properly secured or there are indications of misuse, please contact us.

Camera surveillance protocol

This protocol applies to Vacation Park Molenvelden and Vacation Park Latour (hereinafter also referred to as Molenvelden and Latour). Veldhoven Recreatie B.V., based in Veldhoven, is the data controller.

Purpose of this protocol

The purpose of this protocol is to set out the way in which Molenvelden en Latour record, collect, use, and store camera images from cameras installed or to be installed by Molenvelden en Latour in and around the grounds and/or buildings that Molenvelden and Latour manage.

Purpose of camera surveillance

Molenvelden and Latour use camera surveillance for the purpose of:

• • Access control of Molenvelden and Latour buildings and grounds;
  • Guarding property of Molenvelden and Latour, its guests, its employees, and other visitors against theft;
  • Securing the grounds and buildings of Molenvelden and Latour, its guests, and its employees against unauthorized access and other unwanted activities both in manned and unmanned areas;
  • Being able to record and identify unauthorized people and people performing other undesirable activities.
  • And everything directly related to this.

Camera images shall not be used in a manner inconsistent with the purposes set forth above unless necessary in the interest of preventing, detecting and prosecuting criminal offenses. Camera images may not be used to assess the performance of employees.

Responsible

The management of Molenvelden and Latour is the responsible party. The party responsible shall ensure the proper use of the camera images.

Location of the cameras

When placing the cameras, Molenvelden and Latour shall take the following into account:

• The cameras are placed in places where they are visible to those involved and only in places where camera surveillance has proven necessary.
• Molenvelden and Latour will not use hidden cameras.
• Cameras will not be directed at public areas unless it is unavoidable to secure the property and people under Molenvelden and Latour's supervision.
• Cameras will not be placed in places that are private, such as restrooms, locker rooms, and residences, or in places where Molenvelden and Latour employees are primarily present, such as offices and canteens.
• Only fixed cameras will be placed. No camera surveillance via drones, for example, will be used.

Information disclosure

It is the policy of Molenvelden and Latour to inform data subjects in advance of the processing of personal data. Camera surveillance is made known through signs at the entrance to the grounds or building where the cameras are mounted, through the camera surveillance protocol, and through the privacy statement. All employees will be informed prior to the protocol entering into force. In addition, the protocol is published on the Molenvelden and Latour website.

Legal basis for camera surveillance

The legal basis for the camera surveillance is that it is necessary to protect the legitimate interests of Molenvelden and Latour, namely the security of visitors, employees, and property. It has been established that Molenvelden and Latour have no other less intrusive options than camera surveillance to adequately secure the grounds and/or buildings and that camera surveillance is part of a total package of measures.

Access and security of images.

Molenvelden and Latour have taken adequate measures to secure the camera images. Molenvelden and Latour will ensure appropriate protection of the camera images against loss or any form of unlawful use. The camera images are secured with login codes to ensure only authorized persons have access to the system to prevent misuse or unauthorized inspection of recordings. The camera images are continuously visible live on various monitors and mobile devices and may only be viewed later after an incident has occurred or is suspected to have occurred. Incidents, in this case, are understood to include theft, burglary, vandalism, fraud, damage to property, sabotage, (other) crimes, serious violations (of the house rules), and events as a result of which people have been endangered or otherwise harmed.
Access to the camera images in case of an incident or suspected incident is limited to the following people:

• • The management of Molenvelden and Latour
  • Employees of the security company and/or IT company responsible for ensuring security and/or IT at the park - this company and its employees are obliged to keep the camera images confidential. In principle, no copies of camera images are made. This may be deviated from if disclosure to third parties is necessary based on a legal obligation or if a malfunction or maintenance of camera recording equipment makes this necessary. After use by the third party, the party responsible must ensure that the copy made is destroyed immediately.

Disclosure to authorities

If there is an (alleged) crime, Molenvelden and Latour may be entitled to disclose the camera images to the police and/or judicial authorities. Whether it is truly necessary to provide the camera images will be assessed by the person responsible and the management in joint consultation.

Retention period of images

After recording, the camera images are kept for a maximum of twenty-eight days, unless there has been an incident and the camera images serve as evidence. A longer retention period may also be necessary if further investigation is required. The camera images will then be kept as long as necessary in the context of incidents that have occurred or as long as necessary for further investigation.

Rights of data subjects

Data subjects have the right to inspect images in which they can be recognized and to request the deletion of the data, provided that this does not infringe on the rights and freedoms of others. A request to this effect can be sent to Vacation Park Molenvelden and Latour, Banstraat 25 in Veldhoven (or digitally to the email address: admin@kempenrecreatie.nl). A request for inspection or retrieval of a copy requires a clear indication of the time period in which the person concerned suspects that he or she has been filmed. Molenvelden and Latour will respond to the data subject's request within four weeks.

Complaints

Any complaints about the way Molenvelden and Latour handle personal data can be reported to Vacation Park Molenvelden and Latour, Banstraat 25 in Veldhoven. Complaints can also be filed with the Disputes Committee of the Dutch Data Protection Authority.

Changes

Changes to this protocol will only be made by the management of Molenvelden and Latour.