Privacy Policy

1. Introduction

Amsterdam Local Gems ("we", "our", or "us") is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This privacy policy explains how we collect, use, and protect your personal data when you use our website and services.

Data Controller: Amsterdam Local Gems
Contact: info@amsterdamlocalgems.com
DPO: dpo@amsterdamlocalgems.com

2. Information We Collect

Personal Data You Provide:

• Name and email address (for bookings, reviews, newsletters)
• Phone number (for tour bookings)
• Payment information (processed by Stripe - we don't store card details)
• Reviews and ratings
• Communication preferences

Automatically Collected Data:

• IP address and location data
• Browser type and device information
• Pages visited and time spent
• Cookies and similar technologies (see our Cookie Policy)

3. Legal Basis for Processing

We process your data under the following legal bases:

• Consent: For newsletters, marketing, and cookies
• Contract: To process bookings and provide services
• Legitimate Interest: To improve services, prevent fraud, and ensure security
• Legal Obligation: To comply with laws and regulations

4. How We Use Your Data

• Process tour bookings and payments
• Send booking confirmations and important updates
• Display reviews and ratings on our platform
• Send newsletters and marketing (with consent)
• Improve website functionality and user experience
• Prevent fraud and ensure security
• Comply with legal obligations

5. Data Sharing

We share your data only with:

• Service Providers: Stripe (payments), Vercel (hosting), analytics tools
• Tour Operators: Necessary information for bookings
• Legal Authorities: When required by law

We never sell your personal data to third parties.

6. Your GDPR Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion ("right to be forgotten")
• Restriction: Limit processing of your data
• Portability: Receive data in a portable format
• Object: Oppose certain processing activities
• Withdraw Consent: Revoke consent at any time

To exercise these rights, email: info@amsterdamlocalgems.com

7. Data Security

We protect your data with:

• SSL/TLS encryption
• Secure servers and databases
• Regular security audits
• Access controls and authentication
• Employee training on data protection

8. Data Retention

9. International Transfers

Your data may be transferred outside the EEA. We ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Privacy Shield compliance (where applicable)

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Contact & Complaints

12. Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or website notice. Your continued use of our services after changes indicates acceptance of the updated policy.