1. Who we are
Quintiljoen B.V. (trading as OplooPark)
Chamber of Commerce: 53888383
Email: info@oploopark.nl
2. What data we collect
We process the following personal data:
- Contact information: name, email address, phone number, and company name for business stays
- Booking information: stay dates, house class or house, number of adults, children and babies, remarks you add, the version of the terms you accepted, and the language of your booking
- Payment details: the amount, payment method, payment status and Mollie's payment reference; card or bank details are entered on Mollie's pages and never reach us
- Invoices and credit notes: your name, email address and, if given, place or country, kept as part of our accounting records
- Access details: the personal access code for the park gate and your house, and the moments the code is used at the gate during your stay
- Technical details on the booking site: your IP address and a bot-check token when you start a payment or sign in, used only to prevent abuse
- Website usage: IP address, browser type and pages visited on oploopark.nl, via cookies where you allow them
3. Why we process your data
- To hold your dates, take your payment and confirm your booking (performance of the contract)
- To send you the confirmation, the invoice, your personal booking link, the access code and practical information about your stay
- To keep the park and our systems safe: limiting automated booking attempts, verifying that a visitor is human, and registering the use of access codes (legitimate interest)
- To keep availability in sync with the platforms we list on; those calendar feeds contain dates only, never your name
- To comply with legal obligations: tax and accounting records, tourist-tax accounting for the municipality, and invoicing rules
- To improve our services
Legal basis: performance of the contract, our legitimate interest in a safe park and reliable systems, and legal obligation. We ask your consent only for optional cookies on oploopark.nl.
4. How long we keep your data
- Booking, payment, invoice and credit-note records: 7 years after the year of your stay (fiscal retention requirement)
- Access codes: they expire at check-out; the record of when a code was used at the gate is kept for 30 days and then deleted automatically
- Technical details used for abuse prevention (IP address, timestamp): 30 days
- Contact details without a booking (an inquiry): up to 2 years after the last contact
- Website analytics on oploopark.nl (Google Analytics 4): 14 months maximum
5. Who we share data with
We use a small number of service providers, each bound by a data-processing agreement, and share only what each one needs:
- Cloudflare: hosting of the booking site and its database, which is stored in the European Union, and the "Turnstile" bot check on the payment step and the staff sign-in
- Mollie: payments and refunds; Mollie is an independent payment institution and processes your payment details under its own privacy statement
- Resend: sending our confirmation, invoice and reminder emails
- Telegram: operational notifications to the owner about bookings, payments and system status; these contain booking references and amounts, not your personal details
- Airbnb, Booking.com and Natuurhuisje, when you book through them: they are independent controllers for the booking on their platform; we receive your booking from them and exchange availability with them
- Accountants and tax advisors, cleaning and maintenance staff (dates and house only), and authorities when legally required
Some of these providers are established in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. We do not sell your data to third parties.
6. Your rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (right to be forgotten)
- Object to processing
- Data portability
- Withdraw consent
To exercise these rights, contact us at info@oploopark.nl .
7. Cookies
The booking site (book.oploopark.nl) sets no tracking cookies. It uses a strictly necessary cookie for the staff sign-in, and Cloudflare's bot check may set a cookie that only serves to distinguish people from automated traffic. oploopark.nl uses cookies for analytics and functionality; you can disable them in your browser settings.
8. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access or loss. Payment details never pass through our systems; payments are completed on Mollie's pages. Access codes are personal, expire at check-out, and are stored in hashed form where technically possible.
9. Questions or complaints
For questions about this privacy policy, contact us at info@oploopark.nl .
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.