Privacy Statement Valk Exclusief Hotels and Restaurants

1. Applicability Privacy Statement

The Privacy Statement applies to all activities and actions of the Valk Exclusief hotels and restaurants ("Valk Exclusief") related to the services they offer, in this case facilitation in the broadest sense. Appendix 1 also contains contact information for all privacy-related questions.

The Privacy Statement does not apply to activities related to applicants and staff. For these, Valk Exclusief has adopted and published a separate privacy statement. The Privacy Statement also does not apply to the processing of personal data by parties from whom Valk Exclusief has received your personal data (such as booking organizations, travel agencies, employers, social media companies), nor to the processing by any other third party. We refer – regarding such processing – to the privacy statement of these organizations.

2. Acceptance of processing of personal data

By registering for or by using our products or services, you confirm that you have read the Privacy Statement and that you agree to the processing of personal data by Valk Exclusief as described in the Privacy Statement. In situations where Valk Exclusief is required by applicable privacy laws and regulations to obtain explicit consent for the processing of your personal data, and you provide such consent, you also consent to be bound to the terms of this Privacy Statement.

3. Nature, purpose, basis, retention period of processing personal data and sharing personal data with third parties

Valk Exclusief processes different types of personal data, for different purposes, on different bases and for a certain period of time. Valk Exclusief shares this personal data - if necessary for its services - with third parties. You will find an overview below.

4. Providing and sharing your information with third parties

4.1 Forwarding of your personal data

In order to provide certain services and to meet the expected level of hospitality and service, we may share your personal information within Valk Exclusief, with our service providers and other third parties. We only share your personal information with third parties if there is a legitimate interest to do so, if you have given your explicit consent, if it is necessary for the execution of the agreement or on the basis of a legal obligation. We ensure that the sharing of data only takes place if the third party processes the data on the basis of our instructions, if the processing is a necessity, if the third party takes sufficient appropriate (security) measures and if the third party guarantees to comply with the applicable privacy laws and regulations. Below is an overview of (the categories of) recipients.

1. Valk Exclusief: companies belonging to or affiliated with Valk Exclusief, all active in the hotel industry and who will need your data to correctly provide the selected services. The sole purpose of this transfer is the ability to correctly provide services to you.
   
   
2. b. Event Organizations/Companies: if you visit Valk Exclusief as part of a group event or meeting, information collected for planning the event or meeting, may be shared with the organizers and, if applicable, with the guests hosting or participating in the meeting or event.
   
   
3. Service providers: we rely on third parties such as IT service providers, software maintenance providers and financial service providers, such as payment services, to provide services and products on our behalf and may share your personal information with them as deemed appropriate. We also may use service providers to communicate news and provide promotional and transactional materials to you on our behalf, including personalized online advertising in compliance with your preferences and applicable laws. If you choose to use self check-in or digital verification of your identity, we engage service providers, with whom we share personal data necessary for the services of these parties.
   
   
4. Other: in addition, Valk Exclusief may share personal information to:

• comply with applicable laws and regulations;
• respond to government requests or court orders;
• comply with valid legal procedures;
• safeguard the rights, privacy, safety of property of Valk Exclusief, guests or employees;
• enforce he terms of our services;
• respond to an emergency..

4.2 Transfer of personal data outside the EEA

Valk Exclusief can transfer personal data from the Netherlands to a foreign country. When personal data is processed by us outside the EEA, we will ensure an appropriate level of protection for the transferred data. We require service providers and other service providers to take appropriate measures to ensure the confidentiality and security of personal data.

4.3 Receiving personal data (sources)

In order to provide certain services and meet the level of hospitality and service expected, we sometimes receive data from other organizations. Below is an overview of (the categories of) sources:

1. Valk Exclusief: Companies belonging to Valk Exclusief (see Appendix 1) and its affiliated parties may share your data with the relevant hotel in order to correctly perform the selected services. The sole purpose of this transfer is the ability to correctly provide services to you.
   
   
2. b. Booking organizations/online travel agents: Valk Exclusief's hotels can be booked through various websites and apps. These are websites and apps of Valk Exclusief (www.valkexclusief.com), of Van der Valk (www.valk.com) or of third-party organizations. If you book through a website or app, your data and other information are transferred to the relevant hotel.
   
   
3. Employer/Client: If you are staying at a Valk Exclusief hotel on a business matter, your employer or client may have provided information about you to us.
   
   
4. Event Organizations: If you visit Valk Exclusief as part of a group event or meeting, information collected for planning the event or meeting may be provided by the organizers and, if applicable, the guests hosting or participating in the meeting or event.
   
   
5. Social media: If you choose to log in to the Valk Exclusief app via Facebook or Apple, Valk Exclusief will receive from your name, profile picture and email address from Facebook or Apple (in addition to your account information).
   
   
6. Valk Exclusief Membership: Parties that together with Valk Exclusief realize (and optimize) the Valk Exclusief Membership. This concerns the following specific parties (which are part of Van der Valk Verswinkel B.V. and Van der Valk Thuisbezorgd B.V.):
   1. Valk voor Thuis;
   2. ValkWijn;
   3. ValkSlagerij;
   4. Valk Energy.

5. Cookies

Valk Exclusief refers you to the separate Cookie Statement (Appendix 2).

6. Security and measures

We maintain a high level of guest data security. Guest data is stored encrypted. Access to data by employees of Valk Exclusief is based on necessity, given the function of the employees (need-to-know principle). Valk Exclusief periodically tests the security of its data processing and underlying IT systems. In case of outsourcing data processing to third parties, we make agreements with these parties on adequate security of personal data. The measures taken are in line with applicable privacy laws and regulations. However, absolute (100%) security of personal data cannot be guaranteed. If, despite the security measures taken, a security incident does occur, we will take measures to minimize the impact on your privacy.

7. Your rights

As a guest of Valk Exclusief or a visitor to one of our websites, you may request access, correction, removal, objection, restriction or transfer of personal data. In addition, you have the right to withdraw a granted consent. Any withdrawal of your consent shall not affect any previous processing based thereon.

1. 1. Right of insight
      You have the right to ask Valk Exclusief whether we process personal data about you. If we process personal data about you, you have the right to access the personal data concerned, the purposes of the processing, any sources or recipients of that personal data and the retention period.
   2. Right of rectification
      If it becomes clear that the data is incorrect, you can request this to be corrected.
   3. Right of removal
      You may request that we delete personal data collected by us regarding you in the following cases:
      1. The personal data are no longer necessary for purposes for which we collected or otherwise processed them;
      2. if the consent on the basis of which the processing is carried out has been withdrawn by you;
      3. the personal data is being processed unlawfully by us;
      4. we have to delete your personal data by virtue of a legal obligation;
      5. we have collected your data through mobile telephony or internet services.
   4. Right to limitation
      If you have reported an inaccuracy in your personal data to us or if you have objected to the processing, you may ask us to restrict processing, while we are processing your request. You may also ask us to restrict processing if you believe that we are processing your data unlawfully or no longer need it for the purposes of processing, and you need it for a legal claim.
   5. Right of transferability
      If the processing is based on your consent or the processing is carried out through automated processes, you may ask us to transfer your personal data to you. You may also ask us to transfer this data directly to another processing controller.
   6. Right to object
      You have the right to object to processing of your personal data at any time. This applies in particular to profiles we have created on the basis of your personal data or if we use your personal data for direct marketing purposes.

Exercising rights

If you wish to exercise one or more of your rights listed above, you may do so only by sending an e-mail to the e-mail address of the relevant hotel (see Appendix 1 to the Privacy Statement). Your request must comply with legal requirements. We may require you to identify yourself before we will process a request. Valk Exclusief will inform you of its decision within four weeks, unless we notify you within that period that we need further time. In that case, we will inform you why we need more time and how long it will take.

Please note that Valk Exclusief may, under circumstances or based on applicable (privacy) laws and regulations, refuse to comply with your request in whole or in part.

8. Contact en identificatie

For other questions, comments or complaints about the processing of personal data, please contact the relevant hotel of Valk Exclusief. These contact details can be found on the Appendix 1 to the Privacy Statement. Please indicate clearly in the subject that it concerns privacy and which request it concerns, so that we can respond within the applicable deadlines.

For questions regarding this Privacy Statement, please contact:

Valk Exclusief
Attn. Privacy Coordinator
Winthontlaan 4-6
3526 KV Utrecht
privacy@valklegal.nl

9. Modification of the Privacy Statement

Valk Exclusief may make changes to the Privacy Statement. Changes to the Privacy Statement will be posted directly through the websites listed on Appendix 1 and will apply immediately, in full to Valk Exclusief's privacy statement. Valk Exclusief therefore recommends that you regularly check for changes.

10. Applicable law and competent court

The Privacy Statement is governed by Dutch law. Any disputes between the parties shall be submitted exclusively to the competent judge of the court in the center of the Netherlands (rechtbank Midden-Nederland).

Appendices:

1. Valk Exclusief branches and entities;
2. Cookie Statement Valk Exclusief

Version October 2023