Privacy Policy

1. Data Controller

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use our services:

• Contact information (name, email address, phone number)
• Booking and reservation details
• Payment information (processed securely by third-party payment providers)
• Communication preferences
• Emergency contact information for safety purposes
• Dietary requirements and medical information relevant to our services

2.2 Technical Information

We automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To provide fishing tours, travel packages, and related services
• Booking Management: To process reservations and manage your bookings
• Communication: To respond to inquiries and provide customer support
• Safety: To ensure your safety during activities and comply with insurance requirements
• Legal Compliance: To meet legal and regulatory obligations
• Marketing: To send promotional materials (with your consent)
• Website Improvement: To analyse and improve our website and services

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfil our service agreements
• Legitimate Interest: For business operations, customer service, and website analytics
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and non-essential cookies
• Vital Interests: For emergency situations and safety purposes

5. Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Third-party vendors who assist in providing our services
• Payment Processors: Secure payment processing companies
• Insurance Companies: For coverage and claims processing
• Legal Authorities: When required by law or to protect our rights
• Emergency Services: In case of emergencies during activities

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal information for the following periods:

• Customer Data: 7 years after last service for legal and tax purposes
• Marketing Consent: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months from collection
• Communication Records: 3 years for customer service purposes

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at privacy@orderoaplx.top.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing systems
• Regular backups and disaster recovery procedures

9. International Data Transfers

We primarily process data within the European Union. If we transfer data outside the EU, we ensure adequate protection through approved mechanisms such as Standard Contractual Clauses or adequacy decisions.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Ensure website functionality
• Analyse website performance
• Personalise your experience
• Provide targeted advertising (with consent)

For detailed information about our cookie usage, please see our Cookie Policy.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

13. Contact Information

For privacy-related questions or concerns, contact us:

14. Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority: