Menu

Privacy Policy 

Last Updated: 20th November 2025

1. Introduction

This Privacy Policy describes how Patoq (“we”, “us”, “our”) collects, uses, stores, shares, and protects your personal information when you visit our website, purchase products, register for events, or interact with our services.
We are committed to complying with the EU General Data Protection Regulation (GDPR) and all applicable Dutch data protection laws.

By using our website or submitting personal data, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect and process the following categories of personal data:

A. Information You Provide Directly

  • Full name
  • Email address
  • Phone number
  • Billing and delivery address
  • Company name (for corporate clients)
  • Payment information (processed securely via third-party processors; we do not store card details)
  • Dietary requirements, food allergies, accessibility needs
  • Event participation details
  • Communication history (emails, messages)

B. Information Collected Automatically

When you access our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Cookies and tracking technologies
  • Website interactions, page views, session duration
  • Referral sources

C. Information from Third Parties

  • Payment processors
  • Event registration platforms
  • Analytics partners
  • Social media platforms (if you interact with our content)

We do not collect sensitive data unless voluntarily provided by you (e.g., allergies).

3. Legal Basis for Processing Data

We only process your personal data under one or more of the following legal bases:

  1. Contractual necessity — to process orders, registrations, reservations, invoices.
  2. Legitimate interest — to improve our services, enhance security, and communicate relevant updates.
  3. Consent — for marketing emails, cookies, and promotional communication.
  4. Legal obligation — tax, accounting, and regulatory compliance.

4. Purposes of Data Processing

Your data may be used for:

A. Operational Purposes

  • Fulfilling event registrations and orders
  • Billing and payment processing
  • Customer support and service communication
  • Logistics, delivery, and catering preparation

B. Marketing & Communication

  • Sending event updates
  • Informing you about products and services
  • Offering personalized recommendations
  • Managing customer satisfaction surveys

We will only send marketing communications if you have provided explicit consent.

C. Website Functionality & Improvement

  • Analytics, reporting, and performance monitoring
  • Enhancing user experience
  • Preventing and detecting fraud

5. Sharing Personal Data

We do not sell your data.
We only share your information with trusted third parties necessary for our operations:

  • Payment processors (e.g., Stripe, iDEAL partners)
  • Web hosting and IT service providers
  • Event ticketing systems
  • Email and CRM platforms
  • Logistics and delivery partners
  • Professional advisors (legal, accounting)

Each third party is contractually obligated to comply with GDPR requirements.

6. International Data Transfers

If personal data is transferred outside the EEA, it is done under:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other lawful mechanisms

7. Data Retention

We retain personal data only as long as necessary for:

  • Event delivery
  • Service execution
  • Legal, tax, and financial obligations
  • Fraud prevention
  • Customer service recordkeeping

Typically, personal data is stored for 7 years (Dutch tax requirement), unless you request deletion earlier.

8. Security Measures

We employ industry-standard security controls, including:

  • SSL encryption
  • Secure servers
  • Access restrictions and authentication
  • Regular updates and monitoring
  • Data minimization principles

Despite robust measures, no online transmission is 100% secure.

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Request portability of your data

To exercise any right, contact us at [email protected] 

10. Contact

For privacy-related questions, contact:

[email protected]
Hendrik Kraemerlaan 13, 3972SP Driebergen-Rijsenburg
KVK-nummer: 97869708