Privacy Statement

Family Leisure Company B.V. (hereinafter: FunZone) collects personal data for all companies and brands forming part of the FunZone group: www.funzone.nl. FunZone believes that the protection of personal data is essential. We think it's important that you know exactly what personal information FunZone collects and for what purposes we use these data. We describe this in this privacy statement.

FunZone always processes personal data carefully and in accordance with the Dutch General Data Protection Regulation
Read the basic principles of our privacy policy here.

We will always tell you what we do with your data and how you can, for example, exercise your rights of access and objection.
We will only use the data for the purpose for which we collected it (such as service performance, relationship management, customer administration and marketing).
We do not collect, use and store more data than we need to achieve the purpose for which we obtained the data.
The more privacy-sensitive the information, the less use we make of the data.
We use the data only to the extent that there is a ground stated in the law.
We take appropriate security measures against loss of or unauthorized access to the personal data.
We provide your personal data to third parties only if we obtain sufficient guarantees for the protection of your data.

1. What personal data do we process?
The data of yours processed by us depends on the contact we have with you:
a. If you use one of our services, we ask for the following data for performance: contact information (or the contact information of the legal representative if you are younger than 16 years old) such as first name, last name, company name, title, address, place of residence, telephone number, email address, age, bank account number, credit card information, pin payment information, information of members and/or employees of associations and other users, hirers and relations.

b. If you apply for a job and/or work with us, we ask for your data:
When applying:
First name, last name, address, city, telephone number, email address, resume, LinkedIn profile data if you verify with your LinkedIn account or results of assessments and possibly other personal data. We will store these data, after your consent, for a maximum of 12 months after you have applied for a job with us.

When you join our company:
First name, last name, address, place of residence, telephone number, email address, date of birth, age, nationality, gender, social security number, relationship status, type of ID, ID number and period of validity, pass/profile photo (copy of ID), payment details such as; billing address, bank account number, details of previous employer, previous job details, previous income details, education undertaken, diplomas.

c. We need additional data from you for some services: date of birth, gender and (if necessary) health data, or a passport photo for access passes.

d. If you have requested information or had contact with us, we may collect the following information from you: first name, last name, address, city, email address, telephone number, what service you are interested in, and information on the offer, advice and complaint.

We do not always use all of your information. This is often only limited to some of the above types of data.

2. How do we obtain your personal data?
In most cases, we get the data directly from you. Depending on the service you purchase from us, some data is mandatory and some is optional. When completing the form, we will indicate which data are necessary and which are optional.

Then there are data for which we ask explicit permission from you, such as the use of 'online' techniques: for the creation of videos and/or photos for marketing purposes.

3. Why do we process your personal data?
We process your personal data for the following purposes:

To be able to contact you.
To be able to approach you specifically to participate in one of the specific activities of FunZone.
To send you user information and service messages.
To analyze information obtained (anonymously) through surveys, so that we can improve services and develop new services that better meet your interests.
We like to keep you informed. For example, through personalized offers like emails and newsletters.
To ensure that when you apply for a job, the job search and matching is done in the best possible and tailored way. This is based on the assessment of your availability, suitability, qualifications and skills. Not only with regard to current vacancies, but also for vacancies that we think may be of interest to you in the future. The latter applies, for example, to seasonal employees.
For a correct and mandatory administration to execute the agreement concluded with you.
To comply with laws and regulations.

Do you prefer not to receive personal offers or newsletters? No problem. Every newsletter or personalized offer we send out includes an unsubscribe option that allows you to unsubscribe.

4. Ynder 16 years of age?
If you are under 16 years of age, you may only provide personal information to us if you have received permission to do so from one of your parents or a legal representative who has read this Privacy Policy.

5. Why may we use your personal data?
We process your personal data on the basis of one of the following legal bases:
a. In most cases it is because doing so is necessary for the execution of the agreement concluded with you. For example in light of an entrance ticket, subscription, user rental agreement.

b. Because this is necessary to fulfill a legal obligation*, e.g. your payment details.
c. Because processing is necessary to be able to pursue a legitimate interest, e.g. a business interest. In doing so, we always consider the interests involves, as to whether this interest is greater than your privacy interest. We record this consideration of interests and inform you about it.

d. You have given explicit consent**.

* We are obliged to process data in certain cases. For example, for the Tax and Customs Administration, the Municipal Executive or the Police. As a result of these obligations, we must request this data from you.

**We will only request your consent if it is necessary for the processing of your personal data. If we process your personal data on the basis of your consent, you can withdraw your consent at any time. You can do this by contacting us. This can be done via e-mail [email protected].

6. How do we secure your data?
We do our utmost to secure your personal data as best as possible. We do this by taking technical and organizational security measures* that guarantee an appropriate level of protection given the state of the art. Such as trying to prevent anyone from gaining unauthorized access to your personal data, from modifying it, from disclosing it, or from causing your personal data to be lost.

If we engage processors or deal with subprocessors, we require them to handle your personal data according to our instructions and our (security) standards.

*Technical and organizational security measures

We have taken technical and organizational measures to secure your data against loss or unlawful processing. This includes measures to use our website and IT systems safely and to prevent abuse. But it also applies to the security of physical spaces where data is stored. We have an information security policy and provide training on personal data protection to our employees. Only authorized personnel can view and process your data.

All our employees have a duty of confidentiality. This means that employees promise or declare that they will comply with laws, regulations and/or codes of conduct and act ethically.

7. How long do we store your personal data?
We do not keep your data any longer than necessary. In doing so, it is not possible to have only one retention period. In some cases, the law specifies how long we may or must store data. We store your personal data at least as long as you use our services and, in case of inactivity, for a small period thereafter as well.

We keep financial data from agreements at least 7 years after the end of your relationship with FunZone. If you have any specific questions about this, please let us know via [email protected]

Application data, if you have given explicit permission, will be stored by us for 1 year.

8. Who do we share your data with?
We only provide personal data to others when doing so is permitted by law and necessary for FunZone's business operations.

a. Within FunZone
We may exchange your personal data with one of the other companies and brands within FunZone. In addition, we exchange data between the different departments of FunZone for the processing of your agreement or to get an overview of the services you purchase from us. This allows us to serve you better and also, for example, means you would only have to pass any change of address once.
This means you might receive personal offers for other services from other companies within FunZone.

b. The government
We are sometimes required by law to transfer certain personal data to the government. Think of the Tax and Customs Administration, the Municipal Executive, the Provincial Authorities, the Police, Justice or
regulators such as the NVWA, WhvbZ and the Autoriteit Persoonsgegevens.

c. Service providers and companies we cooperate with

Service providers

We may provide data to other companies is doing so is necessary for the proper performance of the services following from the agreement concluded with you. These include companies that make access cards, collection agencies and insurers. We make agreements with these parties to ensure your privacy.

Processors
We can also outsource the processing of personal data to other parties, so-called processors. For example, we use IT service providers for maintenance and support. These IT service providers should be considered processors because they have no independent control over the personal data made available to the IT service provider in the context of the provision of services by FunZone. FunZoneremains responsible for the careful processing of your data in those situations.

d. Service providers and companies we work with outside the EEA
If we share data with a service provider in a country outside of the European Economic Area (EEA), we will make arrangements with them so that we always abide by the rules agreed for this. We then use the Standard Clauses, a model approved by the European Union, in which it has been agreed that there has to be an adequate level of protection for securing personal data.

9. What are your rights?

a. View or correct data
You have the right to ask us what personal data of yours we process and to have incorrect data corrected. We try to ensure that you can exercise these rights yourself as much as possible by, for example, allowing you to view and correct your data in the profile page on one of our websites ('mijn omgeving', if any).

You can also contact us through the usual channels (including post, email ([email protected]). We ask verification questions or ask for a copy of your ID* to identify you. You will receive a response from us within four weeks.

In some cases, we may choose not to provide data, such as when it concerns your health at or after an incident. In such cases, we will inform you how the information can be shared or requested.

*Identity card
When providing a copy of your identity card, you must obscure your passport photo and Citizen Service Number (BSN). We also recommend that you indicate, on the image produces, that it is a copy for the purpose of exercising your rights with respect to your personal data.

b. Having data deleted and the right to be 'forgotten'
In a number of cases and subject to conditions, you have the right to have the personal data we hold about you deleted. This is the case if:

The personal data are no longer needed for the purposes for which they were collected or otherwise processed.
You have withdrawn the consent to the processing.
You have a justified objection to the processing.
Your personal data have been unlawfully processed by us.
There is a legal obligation to erase the personal data.

If we do not comply with your request to have your personal data erased, we will inform you of the reasons why we will not comply with your request.

c. Restriction of processing
If you believe that we are unlawfully processing your personal data or that the data we are processing is inaccurate, you may request that we restrict processing. This means that the data may no longer be processed by us.

d. Transfer of your data
You have the right to obtain a copy of the personal data you have provided to us for the performance of an agreement you have concluded with us or on the basis of your consent. This only concerns personal data that we have received from you; not data that we have received from others. The purpose of this right is to allow you to easily transfer this data to another party.

e. Right to object
At all times, you have the right to object to the processing of your personal data, which processing is carried out on the basis of our legitimate interest or the legitimate interest of another party. In that case, we will no longer process your data, unless there are compelling legitimate grounds for processing which outweigh this or which are related to the bringing of a lawsuit, or the exercise of substantiation of legal claims.

f. Unsubscribe from other personal messages from FunZone
You have the right to unsubscribe from newsletters or other personal offers about our services and products. We always include an unsubscribe option in personal offers and newsletters.

10. Do you place cookies when I visit your websites?
We use cookies to personalize content and ads, to provide social media features, and to analyze our website traffic. We also share information about your use of our site with our partners for social media, advertising and analytics. These partners may combine this information with other information you have provided to them or that they have collected based on your use of their services. You can set your cookie preferences when visiting our website.

11. Do you do Profiling?
We create anonymized profiles based on the data we collect from your visits to our websites. We do this to analyze this data in order to gain insight into (future) actions and preferences. We can then respond to that.

12. Do you use my data to send newsletters?
FunZone offers a newsletter via which we want to inform you and other interested parties about news in the field of our services and related topics. Your email address will only be added to the list of subscribers or interested parties with your explicit consent. Other customers may receive personalized offers for similar products. Each newsletter contains a link that allows you to unsubscribe. The newsletter subscriber and interested party file is not provided to others.

13. Privacy statement amendments
Privacy laws are in flux. We may therefore amend this privacy statement to stay up to date. We do this in the event of new developments, for example if something changes in our business activities or in (case) law. We therefore recommend that you revisit this privacy statement regularly when visiting one of our websites. We will also actively notify you of changes to this privacy statement through a pop-up banner, email or news release on our websites, through your "mijn omgeving" or by re-soliciting your consent.

14. Questions or complaints?
Do you have questions and/or a complaint about this privacy statement? Please reach out to the contact at Family Leisure Company B.V. by sending an email to [email protected] or a letter to:

Family Leisure Company B.V.
Attn. ‘Afdeling Marketing' (Marketing Department)

Torenstraat 8
5142 ET Waalwijk.

Finally, we would like to draw your attention to the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) tel. 0900-2001201.

The privacy statement was last updated 29-10-2020