Privacy Policy

1. Introduction

Tulip Society values your privacy and processes your personal data with care. This privacy policy explains what data we collect, how we use it, and your rights in accordance with the General Data Protection Regulation (GDPR). By using our services or website, you agree to this policy.

2. Personal Data We Process

We collect personal data that you provide to us directly or through interaction with our services, such as:

• Name and surname
• Address and city
• Email address and phone number
• Payment information (for tickets or membership)
• Membership preferences
• Newsletter subscriptions
• Media content (photos and video recordings during events)
• Usage data collected through cookies, only with your consent: pages visited, device and browser information, and advertising click identifiers (see section 6)

We do not intentionally collect data from children under 16. If you believe we have done so, please contact us so we can remove the data.

3. Purpose and Legal Basis for Processing

We process your data for the following purposes, based on one of the legal grounds defined by the GDPR:

• Membership administration: to register you as a member or event participant (contractual necessity)
• Communication: to inform you about your registration, membership, or updates (legitimate interest)
• Newsletters and marketing: only with your consent or opt-in
• Website optimization: using analytics cookies (only with your consent)
• Advertising measurement and retargeting: only with your consent (marketing cookies, see section 6)
• Legal obligations: such as tax or invoicing requirements (legal obligation)

We do not use automated decision-making or profiling that has legal or similarly significant effects.

4. Data Retention

We do not retain your personal data longer than necessary. Typical retention periods include:

• Membership and payment data: up to 7 years (required by Dutch tax law)
• Newsletter subscriptions: until you unsubscribe
• Event-related contact: up to 1 year after the event
• Photos and videos: retained only as long as relevant unless you object (see section 7)
• Your cookie choice: 1 year, after which we ask again; analytics and marketing cookies: see the durations in section 6

5. Sharing with Third Parties

We only share your data with third parties when necessary to perform our services or comply with legal requirements. These may include:

• Payment processors
• Website and email hosting providers
• Event registration platforms
• Advertising platforms (currently Meta, for Instagram and Facebook ads) — only with your consent to marketing cookies, see section 6

We sign Data Processing Agreements with our processors to ensure your data is handled securely. We do not share data outside the EEA unless appropriate safeguards are in place.

6. Cookies

We use cookies to keep the website working, support secure payments and logins, and — with your consent — to understand how the site is used, to monitor for errors, and to measure our advertising.

Our tag manager

We use Google Tag Manager to load the services listed below. Unlike those services, the tag manager itself loads on every page, including before you have made a choice.

Before you choose, nothing is stored on your device and nothing is read from it. Two requests to Google do happen. Your browser fetches the tag manager itself, and Google Analytics runs in a restricted mode in which it reports the page you are visiting. Both requests include your IP address and basic information about your browser. Neither stores anything on your device, so neither can be connected to your earlier visits.

Advertising services, including the Meta Pixel described below, do not run at all until you consent to marketing cookies. Once you consent, the services you allowed run normally and set the cookies listed in the tables below; if you decline, Google Analytics stays in the restricted mode described above.

If you would rather none of this happened, you can block googletagmanager.com in your browser or with an ad blocker. The website works normally without it.

Essential cookies (always active, no consent required)

These cookies are strictly necessary for the website to function. They cannot be disabled.

Analytics cookies (requires consent)

These cookies help us understand how visitors use the site.

Functional cookies (requires consent)

These cookies enable additional site functionality such as error reporting.

Marketing cookies (requires consent)

These cookies let us see whether visitors who saw one of our Instagram or Facebook ads visit the website or start a membership application, and let us show our ads to people who visited the site before. They are only set after you enable marketing cookies, and never in the member area or on sign-in pages.

We do not send your name, email address or other identifying details to Meta. For the data collected through the Meta Pixel, Tulip Society and Meta Platforms Ireland Ltd are joint controllers; the division of responsibilities is set out in Meta's Controller Addendum. Meta may transfer this data to the United States under the EU-US Data Privacy Framework. See Meta's privacy policy and your Meta ad preferences.

You can change your cookie preferences at any time via the Cookie Settings link in the footer, or by clearing your browser's local storage.

7. Photography and Filming at Events

During our events, photos and video recordings may be taken for use in Tulip Society communications, such as our website and social media channels, and for other promotional purposes.

By approval of this policy you consent to appearing in promotional content of the Tulip Society. If you do not wish to appear in photos or video footage, you may notify us at the event or send a request to info@tulip-society.com. We will respect your objection and remove or blur your image wherever reasonably possible.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct or delete your data
• Withdraw your consent
• Object to processing
• Request data portability

You can exercise these rights by emailing us at info@tulip-society.com. We may request verification of your identity before processing your request. We aim to respond within four weeks.

If you believe your data is being handled unlawfully, you may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Data Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. This includes secure server environments, encrypted website traffic (SSL), and access control to internal systems.

10. Changes to This Policy

We may update this policy from time to time. Any changes will be published on our website. We recommend reviewing this page periodically to stay informed about how we process your data.

Last updated: 19 September 2026 (Time zone: Europe/Amsterdam)