1. General
Osafyr processes personal data in the performance of its tasks and obligations. This statement provides information about Osafyr's handling of personal data and about your options for exercising your rights about personal data.

2. Applicable laws and regulations and scope
As of 25 May 2018, the General Data Protection Regulation (GDPR) applies to all processing of personal data. This European legislation has direct effect in the Netherlands. For those matters that need to be regulated nationally, the GDPR Implementation Act applies additionally in the Netherlands. These legal texts can be found on the website of the Dutch Data Protection Authority. Osafyr processes personal data in its processes and shares them with its implementing partners. The partners are the providers of the activities and Leisureking as the provider of the reservation system and the payment options. In addition, the payment services receive the necessary data to make the payments. Partners are, PayPal, credit card companies and banks.

3. The controller
The director of Osafyr is a controller within the meaning of the GDPR for the processing carried out by or on behalf of Osafyr.

4. Processing of personal data
Osafyr is brooker for activities. In order to be able to carry out the tasks, Osafyr collects and uses personal data. Osafyr uses different categories of personal data of customers such as name, date of birth, address and/or location. In some cases, Osafyr also uses special personal data, this is when there is an illness, allergy or disability. Osafyr collects and uses this personal data for specific purposes, which are tailored to our tasks to know, for example, whether an activity is suitable for an individual. It depends on the specific processing which personal data of which category of data subjects are processed and for what purpose we do so.
Osafyr:

• processes personal data properly, lawfully and transparently, on the basis of a legal basis for processing personal data;
• collects and uses personal data only for a specific and clearly defined purpose and uses the personal data only for the purpose for which it was collected or for the (compatible) purposes for which it is further processed, including scientific and historical research,  archiving in the public interest and statistical purposes;
• processes only the personal data necessary for the purpose;•
• ensures that the personal data is correct, correct and updated if necessary;
• does not store personal data longer than necessary. The necessity is related to the purposes to which the personal data in question are related or for as long as this is necessary to comply with a legal obligation, for example for archiving or statistics; and
• takes appropriate organizational and technical measures for the protection of personal data.

5. Sharing of personal data
In the performance of its tasks and responsibilities, Osafyr works together with partners outside Osafyr's organization. These may be providers of activities, Leisureking as a provider of our reservation system and payment services. In certain cases, we share personal data with those organizations. When we exchange personal data with other parties, we make agreements about this that are in line with the applicable laws and regulations. When personal data is provided to parties outside the European Economic Area (EEA), this will be done in accordance with the requirements of the law, such as making appropriate agreements about the level of data protection in that country.

6. Profiling
Some of Osafyr's tasks may require the use of people's profiles so that supply is properly matched to demand. The data will be  anonymized.

7. Exercising your rights
As a customer or interested party, you can exercise your rights with Osafyr. This means that you may request access to the personal data that Osafyr processes about you. You may also request that your personal data be corrected, deleted or restricted from being used. Finally, you can withdraw your consent, if this has been the basis for the processing of personal data, and you can object to the processing of personal data by Osafyr. You can submit these requests via info@osafyr.com. Osafyr will notify you of the action taken on your request within one month of your request.

8. Questions or complaints
If you have any questions about the protection of your personal data, or would like to contact Osafyr for any other reason, please send an email to info@osafyr.com.