• Contact
• Shipping & Returns
• Terms & Conditions
• Privacy
• Cancel my purchase

Privacy Statement

Discover The Netherlands! · discoverthenetherlands.nl · Last updated: 19 October 2026

Your privacy

We use your personal data to handle your purchase of Discover The Netherlands!, provide customer service and meet our legal obligations. If you use an influencer discount code, we also process limited order information to administer and evaluate that promotion, as explained below. We do not use buyers' personal data to send newsletters or advertising, build customer profiles or contact them for marketing. We do not sell your personal data or share buyers' names or contact details with influencers for marketing.

1. Who is responsible for your data?

Joop K. de Vries is the controller responsible for the processing described in this statement.

This statement covers purchases directly from us through discoverthenetherlands.nl and enquiries addressed to us. If you buy the game from another retailer, that retailer is responsible for its own processing of your purchase data.

2. What data do we process?

Depending on your order or enquiry, we process your name, email address, delivery and billing address, order details, payment status and transaction reference, and messages you send us. We process a telephone number only if it is provided and needed for delivery or resolving your enquiry. For business orders, we may also process company and invoice details. If you use an influencer discount code, we also record that code with your order, together with the order amount, discount and any relevant return or cancellation information.

If a refund requires bank details, we use those details to arrange the refund. Our payment service provider processes the payment details required for your chosen payment method.

Technical data, such as an IP address and server logs, may be processed by the website infrastructure to deliver and secure the website. Please do not send sensitive personal information that is unnecessary for your order or enquiry.

3. Why do we use your data?

Orders, payments and delivery: we use the necessary contact, address, order and payment information to enter into and perform our sales contract with you (Article 6(1)(b) GDPR). This includes order confirmations and delivery-related messages.

Returns, cancellations and customer service: we use the relevant order information and correspondence to handle your request. The basis is performance of the contract and, where applicable, compliance with consumer-law obligations (Article 6(1)(c) GDPR).

Accounting and tax: we retain the records needed to comply with statutory accounting and tax obligations (Article 6(1)(c) GDPR).

General enquiries, website security and disputes: where these are not covered by a contract or legal obligation, we rely on our legitimate interests in responding to enquiries, protecting our website and establishing, exercising or defending legal claims (Article 6(1)(f) GDPR). We limit processing to what is necessary and consider your rights and interests.

Influencer discount codes: when you use an influencer discount code, we record the code with your order to apply the discount, measure the results of the promotion and, where applicable, calculate the influencer's commission. Applying the discount is necessary to perform our contract with you (Article 6(1)(b) GDPR). Measuring campaign results and calculating commissions are based on our legitimate interests in evaluating and administering these collaborations (Article 6(1)(f) GDPR). We limit this processing to the order information needed for these purposes and balance our interests against your rights and freedoms. We do not use this information to send you marketing messages or build a customer profile. You may object to processing based on our legitimate interests for reasons relating to your particular situation by contacting joop@joopkdevries.nl.

We do not ask you to consent to processing that is necessary to fulfil your order or comply with the law. Providing the information needed for payment and delivery is a contractual requirement; without it, we cannot complete your order. Optional information is not required to purchase the game.

4. Who receives your data?

We disclose only the information needed to organisations that help us fulfil your order and operate our business: payment service providers and banks, delivery companies, website hosting and technical support providers, email service providers, and accounting support where used. We may also disclose information to public authorities where the law requires it, or to legal advisers where necessary to handle a dispute.

Providers processing data on our behalf must act under appropriate data-processing arrangements. Payment providers and delivery companies may act as independent controllers for some of their activities and have their own privacy notices.

We use Stripe Payments Europe, Ltd. (Dublin, Ireland) to process online payments. When you click Buy now, you complete your order on a payment page hosted by Stripe. Stripe processes your payment details, transaction information, technical data such as your IP address and device information, and the name, email address, address and order information you enter at checkout. For its payment services, including fraud prevention and compliance with financial legislation, Stripe acts as an independent controller under its own legal responsibilities. For details about Stripe's processing, retention periods and your privacy rights, please see Stripe's privacy policy: stripe.com/privacy.

We share only aggregated campaign results with influencers, such as the number of orders and total sales generated through their discount code. These reports do not identify individual buyers. We do not share buyers' names, contact details, addresses or individual order records with influencers. Where very small totals could reveal an individual purchase, we combine or withhold those results.

5. How long do we keep your data?

We retain personal data only for as long as needed for the purposes described above.

• Tax and accounting records: generally seven years under Dutch law, calculated in accordance with the applicable statutory rules. Where a longer statutory period applies, we follow that period; for example, records subject to the VAT One Stop Shop rules must be kept for ten years. These periods apply to the relevant records, not automatically to every piece of customer data.
• Order and customer-service information not required for tax records: until the order and any return, complaint or related issue have been resolved, and afterwards only to the extent and for the period necessary to meet any continuing legal obligation or establish, exercise or defend a legal claim.
• General enquiries: until the enquiry has been resolved, unless further retention is necessary for an ongoing matter.
• Influencer discount codes: we retain the link between your order and an influencer discount code for campaign measurement and commission administration for up to 12 months after the promotion ends, unless longer retention is necessary to resolve a commission dispute or meet a legal obligation. After that, we retain only anonymous campaign totals. Discount information forming part of records subject to statutory accounting and tax retention requirements is retained for the applicable legal period and is no longer used for campaign measurement.
• Technical logs and backups: for the limited period needed for security and recovery. Data scheduled for deletion may remain in restricted backups until those backups expire under the applicable deletion cycle.

When retention is no longer necessary, we delete the data or make it permanently anonymous.

6. Cookies and website technology

Our website does not use a shopping basket. When you click Buy now, you go to a payment page hosted by Stripe. On that page, Stripe uses cookies and similar technologies that are necessary to process your payment securely and to prevent fraud; see Stripe's cookie policy.

On discoverthenetherlands.nl we only use technologies that are necessary to deliver and secure the website. We do not use advertising pixels or affiliate tracking cookies. The influencer discount-code reporting described in this statement is based on codes recorded with orders, not on tracking visitors. If we add optional analytics or marketing cookies in the future, we will ask for your consent first where the law requires it, and you will be able to withdraw that consent as easily as you gave it.

7. International transfers

Where a service provider processes personal data outside the European Economic Area, the transfer must comply with the GDPR. The appropriate safeguard may be a European Commission adequacy decision or the European Commission's Standard Contractual Clauses, with additional measures where needed. You can contact us for information about any applicable transfer and a copy of the relevant safeguards.

8. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. Access is limited to people and providers who need the information for their work.

9. Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction of inaccurate information, deletion, restriction of processing and data portability. You may object to processing based on our legitimate interests for reasons relating to your particular situation. If processing is based on consent, you may withdraw that consent at any time; this does not affect the lawfulness of earlier processing.

Send your request to joop@joopkdevries.nl. We normally respond within one month of receiving your request. If an extension is permitted because of the complexity or number of requests, we will explain the reason within that first month; the extension can be up to two additional months. Requests are normally free of charge. We may ask for proportionate information to verify your identity, but please do not send a copy of your identity document unless specifically requested.

Some information cannot be deleted immediately, for example where tax law requires us to retain it. If a right does not apply or we cannot fulfil your request, we will explain why.

You may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the supervisory authority in the EU country where you habitually live or work, or where you believe an infringement occurred.

10. Automated decisions

We do not use buyers' data for profiling or make decisions about you based solely on automated processing that produce legal or similarly significant effects. Independent payment providers may carry out their own security or fraud checks as described in their privacy notices.

11. Changes and contact

We will update this statement when necessary to reflect changes in our processing or the law. The date at the top indicates the latest update. If we intend to use your data for a new purpose, we will provide the legally required information before doing so. For questions about privacy, contact joop@joopkdevries.nl.