Last updated: March 2026
1. Introduction
This Privacy Policy explains how The Battlefield Explorer Tours (“we”, “us”, “our”), part of Hell’s Highway, collects, uses, stores and protects your personal data when you use our website and online booking platform. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.
Data controller: The Battlefield Explorer Tours Geerbosch 10a 5461 XJ Veghel The Netherlands Email: [email protected] Phone: +31 6 2039 3713 Chamber of Commerce: 73442372
2. What Personal Data We Collect
When you book a tour or interact with our platform, we may collect the following personal data:
Booking and contact information:
- Full name
- Email address
- Phone number
- Country of residence
- Number of participants
- Special requests or requirements you provide
Payment information:
- Payment transactions are processed by Stripe. We do not store your credit card number, bank account details or other sensitive payment data on our servers. We do receive confirmation of payment status and a transaction reference from Stripe.
Technical data:
- IP address
- Browser type and version
- Device information
- Pages visited and interactions with our platform
Communication data:
- Email correspondence and its contents
- Booking confirmations and reminders sent to you
3. Why We Process Your Data
We process your personal data for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and managing your tour booking | Performance of a contract (Art. 6(1)(b)) |
| Sending booking confirmations and payment reminders | Performance of a contract (Art. 6(1)(b)) |
| Processing payments via Stripe | Performance of a contract (Art. 6(1)(b)) |
| Responding to your enquiries or complaints | Legitimate interest (Art. 6(1)(f)) |
| Improving our platform and services | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Sending marketing communications (only with your consent) | Consent (Art. 6(1)(a)) |
4. Third Parties and Data Processors
We share your personal data with the following third-party service providers, who process data on our behalf:
| Service provider | Purpose | Location | Data shared |
|---|---|---|---|
| Stripe | Payment processing | USA / EU | Name, email, payment details, transaction data |
| Google Cloud / Firebase | Hosting, database, platform infrastructure | EU (europe-west1) | Booking data, account data, technical data |
| Brevo (formerly Sendinblue) | Transactional emails (booking confirmations, payment reminders) | EU | Name, email address |
These providers act as data processors and process your data only on our instructions and in accordance with GDPR requirements. Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are in place, such as Standard Contractual Clauses or an EU adequacy decision.
5. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy:
| Data type | Retention period |
|---|---|
| Booking and contact information | Up to 2 years after the tour date |
| Payment transaction records | 7 years (Dutch tax and accounting obligations) |
| Email communication | Up to 2 years after the last contact |
| Technical data (logs, IP addresses) | Up to 12 months |
After the retention period, your data is deleted or anonymised.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can ask us to correct inaccurate or incomplete data.
- Right to erasure — You can ask us to delete your personal data, subject to legal retention obligations.
- Right to restriction — You can ask us to restrict the processing of your data in certain circumstances.
- Right to data portability — You can request your data in a structured, commonly used format to transfer to another provider.
- Right to object — You can object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
7. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls, and secure hosting infrastructure provided by Google Cloud.
8. Cookies
Our website uses cookies. For detailed information about which cookies we use and how you can manage your preferences, please refer to our Cookie Policy.
9. Third-Party Websites
Our website and emails may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing their privacy policies before providing any personal data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version is always available on our website. Significant changes will be communicated to you where possible.
11. Complaints
If you believe we have not handled your personal data properly, we would like to hear from you at [email protected]. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl.
12. Contact
The Battlefield Explorer Tours Part of Hell’s Highway Geerbosch 10a 5461 XJ Veghel The Netherlands
Email: [email protected] Phone: +31 6 2039 3713 Chamber of Commerce: 73442372