Privacy Policy – Tulip Society

1. Introduction
Tulip Society values your privacy and processes your personal data with care. This privacy policy explains what data we collect, how we use it, and your rights in accordance with the General Data Protection Regulation (GDPR). By using our services or website, you agree to this policy.

Contact
Tulip Society
Website: https://www.tulip-society.com
Email: info@tulip-society.com

2. Personal Data We Process
We collect personal data that you provide to us directly or through interaction with our services, such as:

• Name and surname
• Address and city
• Email address and phone number
• Payment information (for tickets or membership)
• Membership preferences
• Newsletter subscriptions
• Media content (photos and video recordings during events)

We do not intentionally collect data from children under 16. If you believe we have done so, please contact us so we can remove the data.

3. Purpose and Legal Basis for Processing
We process your data for the following purposes, based on one of the legal grounds defined by the GDPR:

• Membership administration – to register you as a member or event participant (contractual necessity)
• Communication – to inform you about your registration, membership, or updates (legitimate interest)
• Newsletters and marketing – only with your consent or opt-in
• Website optimization – using analytics cookies (legitimate interest)
• Legal obligations – such as tax or invoicing requirements (legal obligation)

We do not use automated decision-making or profiling that has legal or similarly significant effects.

4. Data Retention
We do not retain your personal data longer than necessary. Typical retention periods include:

• Membership and payment data: up to 7 years (required by Dutch tax law)
• Newsletter subscriptions: until you unsubscribe
• Event-related contact: up to 1 year after the event
• Photos and videos: retained only as long as relevant unless you object (see section 7)

5. Sharing with Third Parties
We only share your data with third parties when necessary to perform our services or comply with legal requirements. These may include:

• Payment processors
• Website and email hosting providers
• Event registration platforms

We sign Data Processing Agreements with our processors to ensure your data is handled securely. We do not share data outside the EEA unless appropriate safeguards are in place.

6. Cookies
Our website uses only functional and analytical cookies that do not infringe on your privacy. These cookies help ensure the website functions properly and allow us to analyze visitor behavior anonymously. You can manage or disable cookies in your browser settings.

7. Photography and Filming at Events
During our events, photos and video recordings may be taken for use in Tulip Society communications, such as our website and social media channels, and for other promotional purposes.

By approval of this policy you consent to appearing in promotional content of the Tulip Society. If you do not wish to appear in photos or video footage, you may notify us at the event or send a request to info@tulip-society.com. We will respect your objection and remove or blur your image wherever reasonably possible.

8. Your Rights Under GDPR
You have the right to:

• Access your personal data
• Correct or delete your data
• Withdraw your consent
• Object to processing
• Request data portability

You can exercise these rights by emailing us at info@tulip-society.com. We may request verification of your identity before processing your request. We aim to respond within four weeks.

If you believe your data is being handled unlawfully, you may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Data Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. This includes secure server environments, encrypted website traffic (SSL), and access control to internal systems.

10. Changes to This Policy
We may update this policy from time to time. Any changes will be published on our website. We recommend reviewing this page periodically to stay informed about how we process your data.

Last updated: 27 July 2025 (Time zone: Europe/Amsterdam)