Privacy Notice

1. Who we are

This service (“The Dutch Guests Connect”, the “Platform”) is operated by Getting Market, trading as The Dutch Guests, established in Den Helder, the Netherlands, registered with the Dutch Chamber of Commerce (KVK) under number 96364335(“we”, “us”).

For matters relating to your personal data, contact us at yannick@gettingmarket.nl.

2. Our role

We act as the data controller for personal data processed in connection with your account and use of the Platform. For payment-related data, our reseller Paddle acts as an independent controller — see “Payments and Merchant of Record” below.

3. What we collect and why

• Account data (name, email, password hash, role, contact person, phone, job title) — to create your account and let you sign in. Legal basis: performance of a contract.
• Company profile (company name, website, country, region, accommodation or tour-operator profile, seasons, price range, target audience, activities) — to power the matching engine and show your profile to counterparts you request introductions with. Legal basis: performance of a contract.
• Match, introduction and messaging metadata (which campaigns and activations you created, which introductions you requested, approved, rejected or closed, and short optional messages attached to a request). Legal basis: performance of a contract and our legitimate interest in operating the Platform safely.
• Support and contact-form messages — to reply to you and keep a record of the exchange. Legal basis: legitimate interest.
• Transactional email metadata (email address, delivery status, bounce or complaint events, unsubscribe tokens) — to send you introduction updates and admin notifications and to honour suppressions. Legal basis: performance of a contract and legal obligation.
• Technical and security logs (IP address, user agent, timestamps, audit trail of sensitive actions) — to secure the Platform, prevent fraud and abuse, and comply with law. Legal basis: legitimate interest and legal obligation.

We do not knowingly collect data from children under 16. The Platform is intended for business users.

4. How introductions work

The Platform is permission-based. Your company name, country, and profile summary are visible to potential counterparts as part of a suggested match, but your direct contact details are not revealed until both sides have approved an introduction. Once an introduction is approved, the counterpart’s contact person, email, phone and website may be shown to you, and yours to them.

5. Payments and Merchant of Record

Payments on the Platform are processed by our online reseller Paddle.com Market Ltd (“Paddle”), which acts as the Merchant of Record. Paddle collects billing details, processes payments, handles tax where applicable, and manages refunds. Paddle is an independent controller for that data and processes it under its own privacy notice at paddle.com/legal/privacy. We receive only the transaction data we need to activate features on your account (for example, that a paid introduction has been unlocked).

6. Who we share data with

• Other Platform users, but only to the extent described above (public company profile in matches; contact details only after mutual introduction approval).
• Service providers acting as processors, including hosting and database infrastructure, transactional email delivery, error and audit logging, and CRM tooling (HubSpot) used to manage our own commercial relationship with you.
• Paddle, as Merchant of Record for payments (see section 5).
• Professional advisers (legal, accounting) where strictly necessary.
• Public authorities, where we are required to disclose data by law.

We do not sell personal data and we do not use it for advertising profiling.

7. International transfers

Personal data is primarily stored on infrastructure located within the European Economic Area (EEA). Some processors (for example, Paddle and HubSpot) may transfer data to countries outside the EEA. Where that happens, we rely on European Commission adequacy decisions or Standard Contractual Clauses to safeguard the transfer.

8. Retention

We keep personal data only as long as we need it:

• Account and profile data — for as long as your account is active.
• Match, introduction, and messaging metadata — for the life of the account, then archived or deleted within 24 months of account closure.
• Payment records and invoices — kept by Paddle and by us for at least 7 years to meet Dutch tax and accounting obligations.
• Email delivery and suppression records — kept as long as needed to honour unsubscribes and reduce abuse.
• Security and audit logs — up to 24 months, unless a longer period is required for an ongoing investigation.

After the applicable period, data is deleted or irreversibly anonymised.

9. Your rights

If you are in the EEA or the UK, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing based on our legitimate interests, and to withdraw consent where processing is based on consent. You may also lodge a complaint with a supervisory authority — for users in the Netherlands, that is the Autoriteit Persoonsgegevens.

To exercise any of these rights, email yannick@gettingmarket.nl. We aim to respond within one month.

10. Security

We apply appropriate technical and organisational measures to protect personal data — including encryption in transit, encrypted storage, role-based access controls, row-level security on our database, audit logging of sensitive actions, and least-privilege service credentials. No system is perfectly secure; if you believe your account has been compromised, please contact us immediately.

11. Cookies

We use two categories of cookies and similar storage:

• Strictly necessary — session and authentication cookies that keep you signed in, remember basic preferences (including your cookie choice), and protect the site. These are always on and cannot be switched off.
• Analytics (optional, consent-based) — Google Analytics 4 (_ga, _ga_*, _gid) and Google Tag Manager, used to measure aggregated traffic and understand which pages are useful. Analytics scripts are only loaded after you accept them. Retention: up to 14 months.

We do not use advertising or cross-site tracking cookies. You can change your choice at any time:

Manage cookie preferences

12. Changes to this notice

We may update this notice from time to time. Material changes will be announced on the Platform or by email. The date at the top of this page indicates when it was last revised.