Privacy policy
Learn how we collect, use and protect your personal data.
Data collection
We collect data you provide during registration (name, email address, phone number), as well as information related to your use of the platform (browsing history, bookings, reviews). Technical data such as your IP address, browser type and operating system are also automatically collected.
Purpose of processing
Your data is used to: provide and improve our services, manage your account, process bookings, personalise your experience, send service-related communications, ensure platform security, and comply with our legal obligations. We never use your data for purposes unrelated to our services without your explicit consent.
Legal basis
The processing of your data is based on several legal grounds under the GDPR: contract performance (for providing our services), your consent (for marketing communications), our legitimate interests (for platform improvement and fraud prevention), and compliance with our legal obligations (for retention of billing data).
Data retention
We retain your personal data for as long as necessary to provide our services and comply with our legal obligations. After your account is deleted, your data is anonymised or deleted within 30 days, except for data we are legally required to retain (billing data retained for 10 years).
Your rights
Under the GDPR, you have the following rights: right of access to your data, right of rectification, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, right to object to processing. To exercise these rights, contact our Data Protection Officer at dpo@festap.be.
Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files placed on your device that help us provide a personalised service.
Contact DPO
For any questions regarding the protection of your personal data or to exercise your rights, you can contact our Data Protection Officer: dpo@festap.be. You also have the right to lodge a complaint with the Data Protection Authority (DPA) if you believe that the processing of your data does not comply with the GDPR.