Book directly with the specialist
Personal service
Travel with the official partner
  1. Home
  2. Privacy Policy

Privacy Policy

Last updated: 24 October 2026

At HopOn HopOff Holland, we handle your personal data with care. This privacy policy explains which personal data we process, why we use it, how long we retain it and what rights you have.

This policy applies when you visit our website, make a booking, request a quotation, subscribe to our newsletter or contact us.

1. Who are we?

HopOn HopOff Holland is a trading name of Holland Ticket Services B.V. Holland Ticket Services B.V. is the controller responsible for the processing of personal data described in this privacy policy.

Office and contact address
HopOn HopOff Holland
Overhoeksplein 51
1031 KS Amsterdam
The Netherlands

Email: [email protected]
Telephone: +31 (0)20 3300 684
Chamber of Commerce number: 56483090
Website: www.hoponhopoffholland.com

For privacy questions or requests, please email us with “Privacy” in the subject line.

2. Which personal data do we process?

The data we process depends on the services you use and the information you provide. This may include:

  • Your name, email address and telephone number.
  • Your address, company name and billing details, where necessary.
  • Booking details, including the activity, date, departure time, pickup location, number of participants and ticket category.
  • Necessary information about other participants in your booking.
  • Payment status, transaction details and refund information.
  • Correspondence, quotation requests, questions and complaints.
  • Newsletter preferences and records of consent or unsubscribing.
  • Technical information, such as your IP address, browser type and website usage, depending on the technologies used and your cookie preferences.

If you book on behalf of other people, please inform them about this privacy policy and provide only the information necessary for the booking.

3. How do we receive your data?

We receive personal data when you provide it directly, for example through a booking, form, telephone call or email.

If you book through a travel agent, reseller, booking platform or another person, we may receive the information necessary to fulfil your booking from that party. This may include your name, contact details and booking information.

Technical information may also be collected automatically when you visit our website. You can read more about this in the section on cookies.

4. Why do we use your data?

Bookings and activities

We use your data to process bookings, send tickets and confirmations, handle payments and deliver activities. We may also contact you about changes, such as a different departure time or pickup location.

The legal basis is the performance of our contract with you or taking steps at your request before you make a booking.

Questions and quotations

We use your data to answer questions and handle requests for private tours, group trips and corporate outings.

For quotation and booking requests, the legal basis is taking steps before entering into a contract or performing a contract. We handle other correspondence based on our legitimate interest in being accessible and responding to enquiries properly.

Administration

We process data for accounting, tax returns and other legal obligations. The legal basis is compliance with a legal obligation.

Security and complaints

We may use data to prevent misuse, protect our systems and handle complaints or disputes. We do this based on our legitimate interest in protecting our customers, organisation and services. We take your privacy interests into account.

Newsletters

If you give your consent, we use your name and email address to send newsletters, travel tips and offers.

You can unsubscribe at any time using the unsubscribe link in each newsletter or by emailing us. Unsubscribing does not affect essential messages about your booking.

Website usage

We use necessary technical information to operate the website and booking process. We request prior consent for tracking and other technologies that require consent.

5. Which information is required?

When you make a booking or submit a request, we indicate which information is necessary. Without this information, we may be unable to process your booking, payment or request.

Consent to newsletters or marketing cookies is not required to make a booking.

6. Information about assistance

If you need assistance during an activity, please contact us so we can discuss which practical information is necessary.

Do not share more medical or other sensitive information than necessary. If we process health data, we request explicit consent where required. We share this information only where necessary to provide the agreed assistance.

7. Who do we share personal data with?

We share data only where necessary for the purposes described or where required by law.

Depending on your booking and your contact with us, we may share data with:

  • Booking and ticketing providers, including Palisis.
  • Payment service providers.
  • Transport operators, cruise operators, guides and attractions delivering your activity.
  • Hosting, IT, email and newsletter service providers.
  • Our accountant, administrative service providers and advisers.
  • Competent authorities where disclosure is legally required.

We limit the information shared to what is necessary. Where required, we enter into data processing agreements with parties that process personal data solely on our behalf.

Some parties, such as certain payment providers and booking platforms, act as independent controllers. Their own privacy policies apply to their processing.

8. Processing outside the EEA

Using external service providers may involve processing personal data outside the European Economic Area.

Where this happens, a valid transfer mechanism must be in place, such as an adequacy decision by the European Commission or appropriate safeguards, including European Commission-approved Standard Contractual Clauses. Additional safeguards are required where necessary.

You can contact [email protected] for information about the countries and safeguards relevant to the processing of your data, and how to obtain a copy of the relevant safeguards.

9. How long do we retain data?

We apply the following retention periods:

  • Operational booking and participant data: up to two years after the activity, unless a legal obligation or necessary follow-up requires longer retention.
  • Financial records: seven years, unless a longer statutory retention period applies to particular records.
  • Quotations that do not result in a booking: up to one year after the last contact.
  • General enquiries and correspondence: up to one year after resolution.
  • Newsletter data: until you unsubscribe. We review annually whether inactive contacts should still be retained.
  • Evidence of consent: while we rely on the consent and for up to two years afterwards, where necessary to demonstrate compliance.
  • Unsubscribe records: only the minimum information necessary to respect your unsubscribe request, for as long as the relevant mailing list remains in use.
  • Security logs: up to six months, except where information is needed to investigate an incident.
  • Information about special assistance: deleted no later than one month after the activity, unless necessary follow-up requires longer retention.

In the event of a complaint, incident or dispute, we retain only the information necessary for handling the matter and for applicable legal periods.

Cookies and similar technologies have their own lifetimes. These must be stated in the current cookie information available through the cookie settings.

At the end of the applicable retention period, we delete or anonymise the data.

10. Cookies and similar technologies

Our website and webshop may use cookies and similar technologies to operate the booking process, remember settings, secure the website and measure usage.

Necessary cookies and other legally exempt technologies may be used without consent. We request prior consent for tracking cookies and other technologies that require it.

You can refuse consent and withdraw or change it later through the website’s cookie settings. Withdrawing consent is as easy as giving it.

The cookie information explains which technologies are used, by which parties, for what purposes and for how long. Refusing marketing cookies does not prevent you from making a booking.

11. How do we protect personal data?

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access and unlawful use.

We tailor these measures to the nature of the data and the risks associated with its processing. Access is restricted to people who need the data for their work.

If you suspect misuse or a security issue, please email [email protected].

12. What rights do you have?

Depending on the processing and the applicable legal conditions, you can ask us to:

  • Provide access to your personal data.
  • Correct inaccurate or incomplete information.
  • Delete data.
  • Restrict processing.
  • Transfer certain data to you or another organisation.

You can object to processing based on a legitimate interest. You can always object to direct marketing; we will then stop using your data for that purpose.

If you have given consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Not every request can be fulfilled in full. For example, we are legally required to retain certain administrative records.

Send your request to [email protected]. We normally respond within one month. For complex or multiple requests, this period may be extended by up to two additional months. We will inform you of any extension within the first month.

We may request necessary additional information to verify your identity. Please do not send a copy of your identity document unless we ask you to do so.

13. Automated processing

Bookings, payments and confirmations may be processed partly automatically. This does not necessarily mean that a decision is made solely by automated means with legal or similarly significant effects.

If you have questions about automated processing or experience problems as a result, please contact us so a member of our team can review your enquiry. If decisions with such significant effects are made solely by automated means, you must receive separate information in advance about how this works, its consequences and your applicable rights.

14. Complaints

If you have a complaint about how we use your personal data, please contact us at [email protected].

You also have the right to lodge a complaint with the Dutch Data Protection Authority through www.autoriteitpersoonsgegevens.nl, or with the competent data protection authority in the EU country where you live or work.

15. Changes

We may update this privacy policy when our services, data processing practices or legislation change.

The current version is available on this page. The date at the top shows when the policy was last updated. Where necessary, we will provide additional notice of significant changes.