Privacy policy

Who is responsible

Adventure Paradise, Middenpeelweg 5, 5975 MZ Sevenum, the Netherlands. Phone +31 6 1451 7098, email info@adventureparadise.nl.

What data we process

When you book or send a request we store:

• name, email address and phone number
• company name (business bookings only)
• for a gift card: name and email address of the buyer and, if provided, of the recipient, plus the code and amount
• for an AP Cup registration: team name and the name, email address and phone number of the contact person
• date, activity, number of people and any notes
• payment status and the payment reference from the payment provider
• for airsoft: participants' NABV membership details

Why we need it

To carry out and confirm your booking, to contact you about changes, to process payments and to comply with legal obligations (such as bookkeeping and the age and membership requirements for airsoft).

Cookies and local storage

This website uses functional storage: your cookie notice preference, a temporary booking state and, if you sign in, your login session. Your language preference is stored locally and in a cookie lasting one year. Facebook pixel (Meta Platforms Ireland Ltd.): only if you click "Accept" in the cookie choice (outside the EU/EEA, UK and Switzerland measurement is on by default with the same opt-out) do we load Meta's pixel. It measures page views, viewing the package finder, starting a booking or payment and opening a contact message, and – after a successful payment – from our server the amount paid, your browser data (IP address, browser) and Meta's _fbp/_fbc cookies. Purpose: measuring and improving our ads. We never send your name, email, phone number or booking number to Meta. We store your choice with date and text version. You can change or withdraw it any time via "Cookie settings" at the bottom of every page; measurement then stops immediately. Our hosting environment also measures visit statistics (page views, referrer, browser and country, with a temporary 30-minute session ID) to operate and improve the website.

Who we share data with

Only with the parties needed to make a booking work:

• our hosting and database provider (booking storage)
• Mollie (online payment processing)
• monday.com (internal planning: booking number, name and contact details, company, activity and packages, date and times, group size, amounts and payment status, extras and discounts, customer comments and internal notes; also participant names, phone numbers and NABV numbers if provided)
• Google Calendar (internal planning: for group bookings, name and contact details, booking number, activity and package, date and times, group size, extras, customer comments, internal notes and booking and payment status; for organised playing days, a combined overview with names, booking numbers, group sizes, packages, extras and status)
• Lovable AI (only when supplementary AI translation is used: previously untranslated visible website text is sent for translation and translations are stored; the standard Dutch, English and German pages are already translated and do not use this feature)
• WhatsApp (Meta): if you use the contact form or a WhatsApp button, your name, email, phone, subject and message are sent to WhatsApp. You send the message yourself.
• Google Maps: only opens in a new window when you click the directions button; no map is embedded.
• our email provider (for confirmation and reminder emails; automatic sending is currently disabled)

How long we keep data

Booking and payment data is kept as long as needed for the booking and statutory bookkeeping (7 years for financial records). Operational airsoft details (name, phone, NABV number) remain until the owner manually deletes them. There is no automatic deletion period. You can always request deletion.

Your rights

You may access, correct or delete your data and object to processing. Email info@adventureparadise.nl; we respond within 30 days. If you disagree with how we handled it, you can file a complaint with the Dutch Data Protection Authority.

Security

The website runs over an encrypted connection (HTTPS) only. Access to booking data is limited to staff with a personal account; sign-in attempts are rate limited and logged to prevent abuse.