1. Information We Collect

1.1 Personal Information

We may collect several types of information from and about users of our website, including:

• Contact information (such as name, email address, mailing address, and phone number)
• Account information (such as username and password)
• Transaction information (such as payment details, purchase history, and shipping information)
• Profile information (such as preferences, product interests, and demographic information)
• Communications (such as customer service inquiries and survey responses)

1.2 Usage Information

We may automatically collect certain information about your equipment, browsing actions, and patterns when you interact with our website, including:

• Log information (such as IP address, browser type, operating system, referring pages, and access times)
• Device information (such as device identifiers, location information, and mobile network information)
• Usage data (such as traffic data, communication data, and the resources that you access and use on the website)
• Cookies and similar technologies (as described in our Cookie Policy)

2. How We Collect Information

2.1 Direct Collection

We collect information directly from you when you:

• Register for an account
• Place an order
• Subscribe to a newsletter
• Fill out a form
• Participate in a survey or promotion
• Contact customer service

2.2 Automated Collection

We automatically collect certain information when you visit, use, or navigate our website using various tracking technologies like:

• Cookies: Small data files stored on your device to help us remember your preferences and improve your experience
• Web beacons: Electronic files used to track your movements on our website
• Log files: Track actions on our website and collect data like IP address, browser type, and pages visited
• Analytics tools: Third-party services like Google Analytics to track and analyze website usage

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain our services
• Process and complete transactions
• Send transactional emails (such as order confirmations and updates)
• Send marketing and promotional communications (with your consent)
• Respond to inquiries and offer customer support
• Improve our website and services
• Conduct research and analysis
• Prevent fraudulent transactions and monitor against theft
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal bases:

• Performance of a contract: Processing is necessary to fulfill our contractual obligations to you (such as providing tour services you've booked)
• Legitimate interests: Processing is necessary for our legitimate business interests (such as improving our services and preventing fraud)
• Consent: You have given us specific consent to process your data (such as for marketing communications)
• Legal compliance: Processing is necessary to comply with legal obligations

5. Sharing Your Information

We may share your personal information with:

• Service providers: Third parties who provide services on our behalf (such as payment processors, email service providers, and IT service providers)
• Business partners: Trusted partners who help us operate our tours (such as local guides and venue operators)
• Legal authorities: When required by law, court order, or other legal processes
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal requirements, accounting needs, or reporting obligations.

When determining the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal information
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Legal, regulatory, and contractual requirements

7. Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from accidental loss, unauthorized access, use, alteration, and disclosure.

These measures include:

• Encryption of sensitive data
• Secure network infrastructure
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under data protection laws, you have rights regarding your personal information, including:

• Right to access: You can request copies of your personal information
• Right to rectification: You can request that we correct inaccurate or incomplete information
• Right to erasure: You can request that we delete your personal information in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request transfer of your information to another organization
• Right to object: You can object to our processing of your personal data
• Rights related to automated decision-making: You can request human intervention in automated decisions

To exercise any of these rights, please contact us using the details provided below.

9. Cookies Policy

Our website uses cookies and similar technologies to enhance functionality and user experience. You can control cookie settings through your browser preferences.

We use the following types of cookies:

• Essential cookies: Necessary for the website to function properly
• Performance cookies: Collect information about how you use our website
• Functionality cookies: Remember choices you make to improve your experience
• Targeting cookies: Record your visit, the pages you visit, and the links you follow

For more detailed information about the cookies we use, please see our Cookie Policy.

10. International Transfers

We primarily process and store your information within the European Economic Area (EEA). However, some of our service providers may be located outside the EEA. When we transfer your information outside the EEA, we ensure appropriate safeguards are in place, such as:

• Transferring to countries deemed to provide adequate protection by the European Commission
• Using standard contractual clauses approved by the European Commission
• Implementing binding corporate rules for transfers within our corporate group

11. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have collected information from your child, please contact us, and we will take steps to remove such information.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on our website and update the "last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your personal information.

13. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us at:

Nederlands Architectuur Tours
Attn: Privacy Officer
Herengracht 123
1017 BT Amsterdam
Nederland
Tel: +31 20 123 4567
E-mail: [email protected]

14. Complaints

If you are not satisfied with our response to your concern, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another EU data protection authority where you live or work, or where you believe a breach has occurred.