Version: August 2026

At De Bonte Wever, we find it important that you can enjoy your stay, day out, or event without worries. This also includes careful handling of personal data. In this privacy statement, we explain which data we process, why we do so, how long we keep this data, and what rights you have.

We process personal data in accordance with current privacy legislation, including the General Data Protection Regulation (GDPR).

1. Who are we?

De Bonte Wever Assen B.V. is responsible for the processing of personal data as described in this privacy statement.

De Bonte Wever
Stadsbroek 17
9405 BK Assen
Email: info@debontewever.nl

If you have any questions about this privacy statement or how we handle personal data, feel free to contact us.

2. When does this privacy statement apply?

This privacy statement applies when you, for example:

• reserve a hotel stay or package;

• book a day or evening out;

• participate in swimming lessons or other activities;

• make a restaurant reservation;

• attend an event or arrange tickets/reservations;

• organize a business meeting, conference, party or event;

• sign up for a newsletter;

• contact us;

• apply for a job at De Bonte Wever;

• use our wifi;

• visit our website.

3. What personal data do we process?

The data we process depends on the service you use. We only process data that is necessary for the relevant purpose.

Personal and contact information

• first and last name;

• address, postal code, city, and country;

• phone number;

• email address;

• date of birth and, when necessary, other information required for the particular service;

• payment and billing details.

Reservation and booking details

• arrival and departure dates or the date and time of an activity;

• reservation or booking number;

• chosen room, package, activity, restaurant reservation, or service;

• composition of the group;

• preferences and particulars that you pass on to us;

• information necessary for administrative processing.

Information during your stay or visit

During a stay or visit, we may process data needed to execute our services, such as orders, use of certain services, invoice information and communication with our staff.

Health information

In some situations, we process health-related data. These are special categories of personal data that require additional legal protection. These can include allergies, dietary preferences, mobility limitations, or other medical specifics you provide to us because they are relevant for our services or safety.

We only process health data when there is a valid legal exemption, for example, when you have given explicit consent or when processing is necessary in a specific context to protect vital interests.

Children's data

For certain activities such as hotel reservations, swimming lessons, and certain activities, we also process children’s data. When the law requires parental or legal guardian consent, we will request this consent.

Website information

When using our website, technical data such as IP address, browser and device data, and information about website usage may be processed. More information about this can be found in our separate cookie statement.

4. Why do we process personal data?

We may use personal data to, among other things:

• execute reservations, bookings, and agreements;

• make hotel stays, packages, activities, swimming lessons, and events possible;

• handle payments and invoices;

• respond to questions and requests;

• contact you about a reservation, booking, or service;

• send newsletters and marketing communications where permitted;

• improve our services and website;

• prevent and investigate fraud, abuse, and security incidents;

• ensure the safety of guests, visitors, and staff;

• comply with legal and administrative obligations.

5. On what basis do we process personal data?

Each processing must have a valid legal basis. Depending on the situation, we use one or more of the following bases.

Performance of a contract

We need a lot of data to execute a contract with you, for example, for a hotel reservation, package, restaurant reservation, swimming lesson, activity, or business booking.

Legal obligation

Some data we must process or retain because the law requires us to, for example, for our financial and tax records.

Legitimate interest

In certain situations, we process data because it is necessary for a legitimate business interest, such as for security, fraud prevention, camera surveillance, or improving our services. We balance our interest against your privacy interests.

Consent

When consent is necessary, we request it in advance. This might apply to certain marketing activities, marketing cookies, or processing special categories of personal data. You can always withdraw consent; withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

6. How long do we keep personal data?

We do not retain personal data longer than necessary for the purpose for which it was collected, unless legal obligations require us to keep data longer. The exact retention period may differ per situation.

7. With whom do we share personal data?

We only share personal data when necessary for our services, operations, or to meet a legal obligation. This may include the following categories:

• providers of reservation and booking systems;

• payment service providers;

• website hosting and technical management;

• email and newsletter services;

• analysis and marketing services;

• business software and customer administration;

• online booking and sales partners;

• review and ratings platforms;

• other professional service providers necessary for our operations.

When a party processes personal data solely on our behalf, we make agreements as needed regarding the protection and use of that data. Some parties determine for their own services how they process personal data. In such cases, they are independent data controllers.

We do not sell personal data to third parties. When we are legally required to provide data to authorities such as regulators, tax authorities, or law enforcement, we may comply.

8. Transfer outside the European Economic Area

Some service providers may process personal data outside the European Economic Area (EEA). If personal data is transferred to a country where no adequate level of protection has been established, we ensure a valid transfer basis and appropriate safeguards are used, such as the European Commission-approved standard contractual clauses.

9. Camera surveillance

We use camera surveillance in various locations in and around the De Bonte Wever complex. This is to ensure the safety of guests, visitors, and staff, protect property, and prevent and investigate incidents, fraud, and abuse.

Camera footage is only accessible to authorized persons and is generally retained for no longer than 4 weeks. When necessary for incident handling or investigation, footage may be retained longer as needed.

10. Wifi

During your visit, you can use our public wireless network. To technically enable the connection and manage and secure the network, technical data such as IP addresses, device, and connection data may be processed. This data is not used for purposes other than those necessary or permitted.

11. Newsletters and marketing

You can sign up for newsletters via our website. We use the data you provide for this subscription. We operate with a single opt-in: after your registration, the newsletter can be sent without an additional confirmation email.

You can unsubscribe at any time through the unsubscribe option in our emails. For other forms of direct marketing, we comply with applicable legal rules.

12. Reviews

We may invite guests to leave a review after a visit. Reviews may be posted on external review and search platforms. Posting a review is voluntary. If you use an external platform, that platform's privacy policy also applies.

13. Applications

When you apply for a job at De Bonte Wever, we process the personal data you provide to us via our website, a job site, or a recruitment partner. We use this data to evaluate your application, communicate about the procedure, and, where applicable, enter an employment contract.

14. Cookies and online marketing

Our website uses cookies and similar technologies. This may involve functional, analytical, and marketing techniques. For techniques requiring consent, we request this through our cookie banner before they are placed or read.

We use services for web analysis, tag management, and online advertisements, among others. More information about the techniques used, purposes, providers, and retention periods can be found in our separate cookie statement and the current cookie overview.

15. How do we secure personal data?

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and other forms of unlawful processing. The appropriateness of measures depends on, among other things, the nature of the data and the risks of the processing.

Where appropriate, we use secure connections, access security, authorizations, secure storage, and maintenance and updating of our systems. We also limit access to personal data to employees and parties who need it for their work.

16. What privacy rights do you have?

You have, to the extent that the GDPR allows this in your situation, among others the right to:

• request access to the personal data we process about you;

• correct inaccurate or incomplete data;

• request deletion of personal data;

• request restriction of processing;

• object to certain processing, including in some cases direct marketing;

• withdraw previously given consent;

• receive your personal data in a transferable format in cases applicable.

Do you want to exercise one of these rights? Then contact us via info@debontewever.nl. To prevent the data from reaching the wrong person, we may ask for additional information to verify your identity. We generally respond to a request within one month. If a request is complex or there are many requests, the legal response period can be extended.

17. Questions or complaints

If you have questions about this privacy statement or how we handle personal data, please contact us:

De Bonte Wever
Stadsbroek 17
9405 BK Assen
Email: info@debontewever.nl

If you are not satisfied with how we handle your personal data, please let us know. You also have the right to file a complaint with the Dutch Data Protection Authority.

18. Changes to this privacy statement

We may amend this privacy statement when changes occur in our services, website, or legislation and regulations. We publish the most current version on our website.

Last change: August 2026