Introduction
Van der Valk Hotel Delft A4 processes information about individual persons, on a daily basis. Van der Valk operates in accordance with the law. Van Der Valk respects the privacy of the people about whom it receives information and handles that information in strict confidence. In this privacy statement, we explain which personal data Van der Valk processes, and for what purposes. This privacy statement also applies to all Van der Valk hotels and restaurants subject to the responsibility of Van der Valk Diensten Centrum BV, and all associated businesses. The privacy statement does not apply to the processing of personal data by third parties, such as companies and/or websites offering travel or package travel services. We advise you to read this privacy statement carefully.

Van der Valk Hotel Delft A4, established at Peuldreef 3, 2635 BX, te Den Hoorn, Chamber of Commerce number 68766033 e-mail address: info@hoteldelft.valk.com, is the data controller for the processing and storage of your personal data. If you have any questions about the content of the privacy statement, please contact info@hoteldelft.valk.com. 

Wherever the name 'Van der Valk' is used hereinafter, this should be taken to mean all entities referred to above.

1. Applicability Privacy Statement

This privacy statement also applies to all Van der Valk hotels and restaurants that fall under the responsibility of Van der Valk Diensten Centrum BV, as well as affiliated companies. The Privacy Statement does not apply to the processing of personal data by third parties, such as companies and/or websites offering travel or travel packages. We recommend that you read the Privacy Statement carefully.

The Privacy Statement does not apply to the processing of personal data by parties from which Van der Valk has received your personal data (such as booking organisations, travel agencies, employers, social media companies), nor to the processing by any other third party. We bear no (processing) responsibility for these organisations and we refer to the privacy statement of these organisations with respect to such processing.

2. Acceptance of processing of personal data

By registering for or using our products or services, you confirm that you have taken notice of the contents of the Privacy Statement and that you agree to the manner in which Van der Valk processes personal data as described in the Privacy Statement. If you do not agree with our Privacy Policy, you should discontinue use of our website.

3. Nature, purpose and basis of processing of personal data

Van der Valk processes different types of personal data, for different purposes. What personal data and purposes are explained below.

a. Room and room bookings

To (book or request) a room, meeting room, hall and/or other hotel facility, we need personal data from you (such as your title, name, address, place of residence, date of birth, telephone number, e-mail address, signature, day of departure and arrival and your payment details). If you use a business booking, we will also collect the name and (address) details of your employer and/or client. If necessary, we may collect additional personal data from you that are relevant to our services and that you voluntarily provide to us. We process health data only on the basis of your consent, to better serve you, e.g. providing access for disabled people. In addition, we are required by law to verify your identity. We will do this on site at the hotel on the basis of an identity document shown by you. We will not make a copy of this. This data is only used internally, and is not passed on to other organisations for commercial purposes.

Furthermore, as a hotel, we are obliged to register a number of details (name, place of residence, type of identification document, day of arrival and day of departure) of our guests.

b. Restaurant reservations

If you make a reservation at one of our restaurants, we collect personal data from you (such as title, name, e-mail address, telephone number and language preferences) in order to confirm the reservation and carry out your requirements for your reservation. In addition, we may ask you if we need to take allergies into account.

We process this data in order to implement our restaurant services.

c. Van der Valk account

You can create a Van der Valk account. This makes it easy to make reservations and requests for information when you make a follow-up request, as we do not have to ask you for your details again. To create an account, we ask for your name, place of residence, address, telephone number and e-mail details. These personal data are stored in our database.

d. Security

Our hotels, restaurants car parks and garages are - as far as necessary - equipped with camera security to promote the safety of our guests, employees and property and to prevent theft and other irregularities.

e. License plate registration

For registration and payment of parking fees, various Van der Valk branches use license plate registration. If you use these parking facilities, your license plate number will be registered in order to be able to execute the parking services.

f. Newsletter and mailings

If you use our services, you will be signed up for our hotel newsletters. It is also possible to sign up for newsletters via the websites of Van der Valk hotels and via Valk Verrast. Through these e-mails we keep you informed about exclusive offers and service messages. You can unsubscribe from the newsletter at any time via the newsletter itself and via your Valk Account.

g. Contact form

You can contact us, by filling in our digital contact form. In order to provide you with the best possible service, we ask for the completion of name, e-mail address, telephone number and your message for us.

h. Contests

Van der Valk regularly organises competitions and (win) actions via its website(s) or via social media. If you respond or enter, we ask for your name and contact details. These are used to notify the prize winners, run the promotion and measure the response to the promotion.

We ask for your consent to process this data.

i. (Direct) Marketing

To make offers in line with our services and that interest you, we collect information about individuals if you visit our website, such as demographic data. We do this by setting cookies. We may collect information about you from third parties, including information from our partners and social media sites in accordance with your settings on such websites. We refer to the information on collection of data through cookies under section 7 in the Privacy Statement.

j. Social media

Van der Valk can be found on various social media, such as Facebook. We may use your personal data when you use features on these websites and/or apps, such as a "Facebook like". If such a feature is used by you, we may obtain your personal data through our social media in question.

k. Black and cash list

Van der Valk maintains a blacklist policy to combat nuisance and crime in its hotels and restaurants. Van der Valk also maintains a cash list against fraud and non-payment. Van der Valk therefore has a legitimate interest in this data processing.

Based on this policy, Van der Valk may, in very exceptional cases, decide to refuse a guest access to its hotels or other services, or impose conditions on payment methods. This may be the case, for example, in the event of committing fraud, causing a nuisance, violating house rules, causing damage to property of other guests or employees of Van der Valk, causing injury to other guests and/or employees of Van der Valk or other improper behaviour.

Van der Valk maintains a strict and careful policy around data processing and data security of the blacklist and cashlist. The normal privacy rights of a data subject apply in full.

l. Application procedure

Van der Valk collects and processes data from job applicants through personal contacts, by post, by e-mail and/or by telephone calls. Among other things, we collect the applicant's name, gender, contact details, motivation letters, information on educational level and employment history. This data is relevant for going through the application procedure and will be deleted no later than 4 weeks after the end of the procedure. If you give your consent, Van der Valk may store your personal data longer in its records so that you can be contacted again in the future if necessary.

m. Employees

Van der Valk also processes personal data of employees, within the framework of the employment agreement and on the basis of legal grounds. For information on the processing of personal data of employees, please refer to the personnel manual of the entity of which you are employed.

n. Processing of data of minors

Van der Valk processes personal data of minors (under 16 years of age) if they stay at one of our hotels under the supervision or with the consent of a parent/guardian, such as the name of the minors. Van der Valk does not process any other data of minors unless the personal data on the minors is necessary for the execution of an agreement and the data is provided by a parent or guardian.

5. Transfer and sharing of your data with third parties

5.1 Transfer of your personal data

In principle, we do not share your personal data with companies, organisations and individuals outside our own organisation.

However, in order to be able to provide certain services and meet the expected level of hospitality and service, we may, in specific circumstances, share your personal data within Van der Valk, with our service providers and other third parties. We ensure that sharing of data only takes place if the third party processes the data on the basis of our instructions, takes sufficient appropriate (security) measures and guarantees us to comply with applicable privacy laws and regulations. Below is an overview of (the categories of) recipients.

0.  
1. Van der Valk: Companies belonging to or affiliated with Van der Valk, all active in the hotel sector, which need your data to correctly provide the selected services. The sole purpose of this transfer is the ability to correctly provide services to you.
2. Event organisers/companies: if you visit Van der Valk as part of a group event or meeting, information collected for planning the event or meeting may be shared with the organisers and, where applicable, with the guests organising or participating in the meeting or event.
3. Service providers: we rely on third parties such as IT service providers, software maintenance parties to provide services and products on our behalf and may share your personal information with them as appropriate. We may also use service providers to communicate news and provide promotional and transactional materials to you on our behalf, including personalised online advertising in compliance with your preferences and applicable laws.

In addition, Van der Valk may share personal data with organisations outside Van der Valk in the following circumstances:

1. 1. Performance of an agreement - Provision of your personal data to third-party organisations is permissible Where it is necessary to perform our contractual obligations to you, we may provide your personal data to third-party organisations.
   2. With your consent - With your consent, we may disclose your personal data to other parties. The consent only applies if it is clear what you are giving your consent to and what the consequences are.
   3. For legal reasons - We share your personal data if we believe that disclosure of the data is necessary to comply with applicable laws and regulations, legal procedures or requests from governmental authorities.
   4. Legal obligation - If a legal obligation requires us to do so, we will provide your personal data. Van der Valk will make arrangements with the recipients of your personal data to ensure that the personal data is kept confidential and secured.

5.2 Transfer of personal data outside the EU

Van der Valk may transfer your personal data from the Netherlands to other countries. Countries within the European Economic Area (EEA) have an equivalent level of personal data protection as the Netherlands. Subject to the general requirements of privacy laws and regulations, we may transfer your personal data to countries within the EEA. Our hotels in the Caribbean also fall within the European Economic Area. We may do this, for example, within our group for the purpose of proper business operations.

Outside the EEA, we will only transfer your personal data if there is an adequate level of protection. Van der Valk uses model contracts approved by the European Commission for this purpose.

5.3 Retention period

We will not retain your personal data for longer than necessary, unless we have a legal duty to retain your personal data for longer. Our basic principle is that we keep personal data only as long as necessary to provide you with our products and/or services. After this, we will delete your personal data to the extent possible. For example, you can create a Van der Valk account, as explained above in section 3. We will delete inactive accounts after a period of 2 years. If you have provided your e-mail address (possibly via your account) so that we can keep you informed of our services, we will still retain your data for this purpose.

6. Security and measures

We maintain a high level of guest data security. Guest data are stored encrypted. Access to data by employees of Van der Valk takes place on the basis of necessity given the position of the employees concerned (need to know principle). Van der Valk periodically tests the security of its data processing and underlying IT systems. In case of outsourcing data-processing processes to third parties, we make agreements with these parties on adequate security of personal data. The measures taken are in line with applicable privacy laws and regulations. If, despite the security measures taken, a security incident occurs, we will take measures to limit the consequences for your privacy as much as possible.

7. Cookies

Van der Valk makes use of cookies. For our cookie statement, please refer to our cookies page, which can be found in the footer of the website.

8. Liability

Van der Valk is not responsible or liable for unauthorized, unauthorized or unwanted processing and/or access to personal data that cannot be attributed to Van der Valk. We are also not responsible for the acts or omissions of third party(ies) with whom we cooperate or to whom we refer on our website(s) or otherwise. These third parties are not covered by this Privacy Statement and we recommend that you read the privacy statements of these third parties on their websites carefully. In all the aforementioned cases, Van der Valk does not accept any liability and there is no right to compensation, performance or any other claim against Van der Valk.

Despite the care and attention devoted to the management of this website, it is possible that it may contain incorrect information. Van der Valk cannot be held liable for technical or editorial errors contained in this website, nor for any consequential damage resulting from the use or temporary unavailability of this website or the links to third party websites.

9. Your rights

As a guest of Van der Valk or a visitor to one of our websites, you may request access, correction, deletion, objection, restriction or transfer of personal data. In addition, you have the right to withdraw any consent granted. Any withdrawal of your consent shall not affect any previous processing on the basis thereof. Upon your request, we will inform you in writing whether we process personal data relating to you. When making your request, you must identify yourself by means of a copy of your driving licence or identity document. In our response, we will explain which personal data of yours we have processed or will process, and provide you with a copy thereof. We will also explain for which purposes the data have been or are being processed, with whom the data are shared, how long they are expected to be stored, and what other rights you can assert.

1. Right of access

You have the right to ask Van der Valk whether we process personal data about you. If we process personal data of you, you have the right to access the personal data concerned, the purposes of the processing, any sources or recipients of such personal data and the retention period.

2. Right to rectification

If you have received inspection of the processing of your personal data, you may ask us to correct inaccuracies or complete incompleteness. We will give reasons for our response. If we proceed with correction, you will receive a supplementary statement from us. Any recipients of your incorrect or incomplete data will also receive this statement.

3. Right of deletion

You can request us to delete personal data collected by us from you in the following cases:

• the personal data are no longer necessary for the purposes for which we collected or otherwise processed them;
• if the consent on the basis of which the processing is carried out has been withdrawn by you;
• you make a reasoned objection, and there are no compelling reasons not to honour your objection;
• the personal data are unlawfully processed by us;
• we have to delete your personal data on the basis of a legal obligation;
• we have collected your data by means of mobile telephony or internet services.

4. Right to limitation

If you have reported an inaccuracy or incompleteness in your personal data to us, you may ask us to restrict processing while we are processing your request. You may also ask us to restrict the processing of your data if you believe that we are processing your data unlawfully or no longer need it, or if you have objected to its (further) processing. After receiving your restriction request, we will only process the data after obtaining your consent or for compelling reasons (such as legal proceedings).

5. Right to portability

If you have provided personal data to us in a structured, common digital file format, and we have processed your data with your consent or in the performance of a contract with you, you have the right to ask us for a copy of this data. In such cases, you may also ask us to forward your data directly to another service provider.

6. Right of objection

You may object to the processing of personal data relating to you at any time. This applies in particular to profiles we have created on the basis of your personal data. We will stop processing your data upon receipt of your objection, unless we can provide compelling legitimate grounds which outweigh your interests, rights and freedoms.

If we process your personal data for direct marketing purposes, you may object to this at any time and we will cease processing immediately.

10. Exercising rights

If you wish to exercise one or more of your rights listed above, please contact us at the e-mail address [x]. Van der Valk will decide on your request within 4 weeks, unless we inform you within that period that we need a little more time.

Is your personal data being processed on the basis of your consent? If so, you have the right to withdraw your consent. Any withdrawal of your consent shall not affect any previous processing based on it.

11. Complaints

Do you have a complaint about the use of your personal data? If so, please refer to the complaints procedure at the Personal Data Authority. This body is authorised to take cognisance of your complaint.

12. Contact and changes

For questions, comments or complaints about the processing of personal data, please contact the relevant hotel. You will find this contact information at the start of the Privacy Statement. Please indicate clearly in the subject that it concerns privacy and what request it concerns so that we can respond within the applicable time limits.

This Privacy Statement is in accordance with the General Data Protection Regulation. We reserve the right to update this privacy statement periodically. The latest version will be published on this page.

Version May 2023

1. Personal data
Van der Valk processes different types of personal data, for different purposes. The personal data and purposes are explained below.

Guest administration
To book an overnight stay in one of our accommodations or to rent one of our meeting rooms, the hotel needs your name, address, place of residence, telephone number, day of departure and arrival and your payment details. We may receive this data from third parties with whom you have completed the booking process. Optionally, we may request additional personal data from you for the provision of our services, such as your nationality or guest preferences. We process health data only on the basis of your consent, in order to provide you with a better service, for example providing access for disabled people. In addition, we are required by law to verify your identity. We will do this on site at the hotel on the basis of an identity document shown by you. We will not make a copy of this. This data is only used internally, and is not passed on to other organizations for commercial purposes.

Camera surveillance
Van der Valk uses camera surveillance to the extent necessary to secure its property and protect its guests. Through the camera images, Van der Valk obtains insight into the activities of persons and license plates.

Van der Valk account
You can create a Van der Valk account. This makes it easy to make reservations and requests for information when you make a follow-up request, since we do not have to ask you for your details again. To create an account, we ask for your name, place of residence, telephone number and e-mail details. This personal data is stored in our database.

Van der Valk app
You can download the Van der Valk app for free. Through our app you can easily and safely make a reservation. It is also possible to pay for reservations already made via the app. You will need a Van der Valk account, which can be created in the app. As described above, we hereby request that you submit your name, place of residence, telephone number and e-mail details.

(Direct) Marketing
In order to make offers that interest you, we collect commercially interesting information about individuals, such as demographic data. We may collect information about you from third parties, including information from our partners and social media sites in accordance with your settings on such websites.

Social Media
Van der Valk can be found on various social media, such as Facebook. We may use your personal data when you use features on these websites and/or apps, such as a "Facebook Like". If such a feature is used by you, we may obtain your personal data through our social media in question.

Application Process
Van der Valk collects and processes applicant data through personal contact, by mail, by email and/or by telephone calls. Among other things, we collect the applicant's name, gender, contact details, cover letters, information on educational level and employment history. This data is relevant for going through the application process and will be deleted no later than 4 weeks after the completion of the process. If you give your consent, Van der Valk may store your personal data longer in its records so that you may be contacted again in the future.

Employees
Van der Valk also processes personal data of employees, within the framework of the employment contract and on the basis of legal grounds. For information on the processing of employees' personal data, please refer to the personnel manual of the entity for which you are employed.

2. Recipients
We do not share your personal data with companies, organizations and individuals outside of Van der Valk, except in one of the following circumstances.

Performance of an agreement
Provision of your personal data to third-party organizations is permissible when necessary to fulfill our contractual obligations to you. This includes processing your reservation. If it is necessary for the payment of bookings, we use a third party to handle online payments

With your consent
With your consent, we may disclose your personal data to other parties. The consent only applies if it is clear what you are giving your consent to and what the consequences are.

For external processing
We provide personal data to our partners so that they can process data for us, based on our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures. Our partners include our IT suppliers and administrator of the CRM system.

For legal reasons
We share personal data if we believe that disclosure of the data is necessary to comply with applicable laws, regulations, legal procedures or requests from governmental authorities.

Legal obligation
If a legal obligation requires us to do so, we will provide your personal data. For example, the police may request data from us as part of fraud investigations. Another example is that the tax inspector may, pursuant to article 47 of the General Act on State Taxes, demand all data necessary to levy taxes. Finally, the municipality may also request the provision of data to verify the tourist tax assessment. Van der Valk makes arrangements with the recipients of your personal data to ensure that the personal data are treated confidentially and are secured.

3. Retention period
We do not retain your personal data longer than necessary, unless we are required by law to retain your personal data longer. Our basic principle is that we keep personal data only as long as necessary to provide you with our products and/or services. After this, we will delete your personal data to the extent possible. For example, you can create a Van der Valk account, as explained above in paragraph 2. We will delete inactive accounts after a period of 2 years. If you have provided your e-mail address (possibly through your account) so that we can keep you informed of our services, we will still retain your data for that purpose.

4. Transfer of personal data outside the EU
Van der Valk may transfer your personal data from the Netherlands to other countries. Countries within the European Economic Area (EEA) have an equivalent level of protection of personal data as the Netherlands. Subject to the general requirements of privacy laws and regulations, we may transfer your personal data to countries within the EEA. Our hotels in the Caribbean also fall within the European Economic Area. We may do this, for example, within our group for the purposes of proper business operations.

Outside the EEA, we will only transfer your personal data if there is an adequate level of protection. Van der Valk uses model contracts approved by the European Commission for this purpose.

5. Cookies
Van der Valk makes use of cookies. A cookie is a small text file that is stored on the visitor's device during the first visit to a website. The purpose of cookies is to collect information about a person, the website or statistics. Some cookies additionally aim to improve the user experience of the website.

Types of cookies
We distinguish between functional and non-functional cookies. We always place functional cookies. They are necessary for the website to work properly. Non-functional cookies process personal data outside your field of vision. These mainly enable us to improve our services. For example, they enable us to measure how often our website is used and what information visitors are looking for. We always ask for your permission to use non-functional cookies. We use the following non-functional cookies.

Analytical cookies
With analytical cookies, we collect statistics about how users use the website. By measuring website usage, the website can be improved for the benefit of users.

Among other things, the following data is stored:

• IP address, which is anonymized;
• Technical characteristics, such as the browser you use;
• From which page you arrived at the web store.

Tracking cookies
These are cookies that are placed to identify an Internet user on a website. Placing tracking cookies allows us to keep track of which Internet pages you visit. From the information about your website visits, we can find out what your preferences and interests are. Based on this information, we can provide you with personalized offers.

Advertising cookies
We use advertising cookies to display personalized ads and to measure the effectiveness of an advertising campaign. The advertising cookies are needed to actually show the ads.

Blocking and deleting cookies
If you do not want our website to be able to store cookies on your computer, you can indicate this in the cookie notification you see when you first visit our website. Have you previously accepted our cookies? Then you will no longer see this message and you must delete the cookies (if desired) yourself.

You can also choose to block cookies through your browser. Do you block all cookies? Then our website will not work as well. We recommend that you only selectively disable unwanted cookies. You can do this in your browser settings.

6. Your rights
You have a number of legal rights towards us: access, correction or addition, data deletion, restriction of processing, transfer of digital data and the right to object. We explain these rights below. We also explain how you can exercise these rights against us.

Right of inspection
Upon your request, we will inform you in writing whether we process personal data about you. With your request, you must identify yourself by means of a copy of your driver's license or identity document. In our response we will explain which of your personal data we have processed or are processing and provide you with a copy. We will also explain the purposes for which the data have been or are being processed, with whom the data are shared, how long they are expected to be stored, and what other rights you may assert.

Improvement or supplementation
If you have received access to the processing of your personal data, you may ask us to correct inaccuracies or supplement incompleteness. We motivate our response. If we proceed with correction, you will receive a supplementary statement from us. Any recipients of your incorrect or incomplete data will also receive this statement.

Data deletion
You can request us to delete your personal data in our systems in one or more of the following cases:

• The personal data are no longer needed for the purposes for which we processed them;
  You withdraw your consent for (further) processing, and there is no longer any other basis for processing;
• You make a reasoned objection, and there are no compelling reasons not to honor your objection;
• The personal data have been processed unlawfully by us;
• We have to delete your personal data due to a legal obligation;
• We have collected your data through mobile telephony or Internet services.
• Restriction of processing

If you have reported an inaccuracy or incompleteness in your personal data to us, you may ask us to restrict processing while we are processing your request. You may also ask us to restrict the processing of your data if you believe we are processing your data unlawfully or no longer need it, or if you have objected to (further) processing. Upon receipt of your restriction request, we will only process the data after obtaining consent or for compelling reasons (such as legal proceedings).

Transfer of digital data
If you have provided personal data to us in a structured, common digital file format, and we have processed your data with your consent or in the performance of a contract with you, you have the right to ask us for a copy of this data. You may also ask us in such cases to forward your data directly to another service provider.

Objection
You may object to the processing of personal data relating to you at any time. This applies in particular to profiles that we have created on the basis of your personal data. We will stop processing your data upon receipt of your objection, unless we can provide compelling legitimate reasons that outweigh your interests, rights and freedoms.
If we process your personal data for direct marketing purposes, you may object at any time and we will stop the processing immediately.

Exercising rights
If you wish to exercise one or more of your rights listed above, please contact us at the e-mail address info.delft@valk.com. Van der Valk will decide on your request within 4 weeks, unless we inform you within that period that we need a little more time.
Is your personal data being processed on the basis of your consent? If so, you have the right to withdraw your consent. Any withdrawal of your consent does not affect previous processing based on it.

Asserting your rights
If you wish to exercise one or more of the rights summarised above, you can contact us via the following e-mail address info@hoteldelft.valk.com. Van der Valk will reach a decision on your request, within 4 weeks, unless we inform you within that time limit that we need a little more time. Are your personal data being processed based on your consent? You are entitled to revoke that consent. The revocation of your consent will not affect previous processing done based on that consent.

7. Liability 
Although we manage this website with considerable care and attention, it is possible that the site contains incorrect information. Van der Valk Internet BV cannot be held liable for technical or editorial errors occurring in this website, or for any consequential losses suffered as a result of the use or temporary non-availability of this website or links to third-party websites.

8. Complaints
Do you have a complaint about the use of your personal data? We suggest you consult the complaints procedure of the Autoriteit Persoonsgegevens. This body is authorised to examine your complaint.

9. Questions? 
Do you have any questions? If so, please e-mail them to: info@hoteldelft.valk.com. This privacy statement accords with the General Data Protection Regulation. We reserve the right to update this privacy statement periodically. The most recent version will be published on this page.