PRIVACY STATEMENT

What personal data we require from you depends on whether you are:

• Guest in our Grand Hotel Karel V

• Guest in our Restaurant Karel 5 or guest in our Bistro Karel V

• Guest in our meeting rooms or guest at an event via Karel V Events.

• Supplier or Service provider

• Employed by us or wanting to be employed by us.

Camera surveillance

It is also possible that we collect personal data from you because you visit our location. We use camera surveillance (CCTV) within our buildings and on our premises. You can read more about our camera surveillance here.

Internet

On our location we offer secured conference internet and free public internet. To use the public internet you must agree upon the conditions. Your data will be registered. You can read more about the use of internet here.

If you follow the links above you can find all information about:

• why we require personal data,

• what the legal basis is for collecting the data

• how long we store your personal data

• how we secure your personal data

• to whom we pass on data (if applicable) and why

In all cases, the Police and the Ministry of Justice may request us to pass on personal data in the context of investigations or matters of public order.

You also have rights with regard to your personal data, you have, among other things:

• right of access to your data

• right to rectification of inaccurate personal data

• right to erasure of data (which Karel V no longer needs for its original purpose)
  If you want to make use of these or other rights, you can contact us. Preferably via our e-mail address privacy@karelV.nl

As a rule, we do not require special personal data from you. However, it is possible that you still provide us with special information. For example because you pass on dietary wishes or pass on that you are disabled. This in connection with access to our location or help. This information helps us to provide you with the best possible service. If possible, these data will be kept anonymous. They are in any case destroyed as quickly as possible.

We try to keep our privacy statement up-to-date. It may therefore be that the statement changes. You can read here our latest updated version of October 25, 2018. If you believe that something is missing or wrong with our privacy statement, we would appreciate it if you report this via our e-mail address privacy@karelV.nl.

If you have complaints about how we treat your privacy and you feel that we are not helping you properly, you have the right to file a complaint. You can submit this complaint to the Dutch regulator for privacy matters: the Dutch Data Protection Authority (AP Autoriteit Persoonsgegevens). You can read how you file a complaint at www.autoriteitpersoonsgegevens.nl.

Of course we hope that the latter is not necessary. And we hope that during you stay at Karel V you have felt as safe as the thousands of visitors who have over the centuries enjoyed hospitality at this historic location.

• Your name and address

• How you want to be addressed

• Your phone number and / or cell phone number

• Your email address

• Your year of birth to determine whether you are over 18 years of age.

• Your payment details (credit card or other)

• The number of your identity card and the type of identity card

• Any special dietary needs you might have

• Your possible disability

Sometimes you give this information directly to us and sometimes the party through whom you have booked gives us this information. We use your data exclusively for our own services and our own legal obligations. Karel V does not pass on data to third parties for commercial purposes.

Your personal data may be passed on to the city of Utrecht in connection with the levying of taxes.

In order to improve our services, you may receive an email after your visit to inquire about your experiences. On behalf of Karel V Amplixs Interaction Management B.V. (Amplixs) conducts this survey. We provide your email, name and room number to Amplixs. Amplixs processes these data for the survey.

Karel V works worldwide together with TravelClick Inc. (TravelClick). If you book via TravelClick and/or use their Hospitality Program, your data will also be processed by TravelClick.

How TravelClick handles your personal data can be found in the TravelClick privacy statement. https://www.travelclick.com/privacy-policy.html.

In addition, TravelClick also processes data on behalf of Karel V. If you book via third parties, we refer you to the privacy statements of that party if you want to know what they do with your personal data.

Karel V is obliged by Dutch law to keep your billing details and the associated data for 7 years after your visit. After these 7 years, Karel V will destroy your data, unless there is a legal necessity to keep the data for a longer period of time. For example because you have a dispute with us.

Amplixs will delete your personal data after 13 months. The research results are then anonymized as far as necessary. TravelClick stores the data that it processes for us for a maximum of three years.

Karel V uses its own secured servers and/or servers from third parties. For all cases of data storage, we ensure that we and the parties with whom we cooperate meet the requirements of technical and organizational security that the privacy legislation in the Netherlands requires. Our external auditors check this and report on this in our annual report.
All data carriers are located within the EU. The current European privacy legislation applies.

Amplixs is based in the Netherlands. Amplixs does not use other parties outside the European Union when processing the data. Therefore, your data are always protected according to current European privacy legislation.

TravelClick is based in America. For the data that TravelClick processes for Karel V, TravelClick agrees with the European Standard Contractual Clauses stipulated for this purpose. This means that there is an appropriate level of protection for the processing of any personal data according to the current European privacy legislation.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.

• Your name

• How you want to be addressed

• Your phone number and / or cell phone number

• Possibly your email address

• Any special dietary needs you might have

• Your possible disability

• At checkout: your payment details (credit card or other), unless you pay in cash.

We require this information from you out of our legitimate interest to know who is reserving. Sometimes you give this information directly to us and sometimes the party through whom you have booked passes this information on. We use your data exclusively for our own services and our own legal obligations. Karel V does not pass on data to third parties for commercial purposes.

If you book via third parties, we refer you to the privacy statements of that party if you want to know what they do with your personal data.

If you are a guest with us without reservation, we will only register your payment details at the checkout (unless you pay in cash).

In order to improve our services, you may receive an email after your visit to inquire about your experiences. On behalf of Karel V Amplixs Interaction Management B.V. (Amplixs) and/or Resengo N.V. (Resengo) conduct this survey. For this purpose we pass on your email and name. Amplixs and/or Resengo process these data for the survey.

Karel V is obliged by Dutch law to keep your billing details and the associated data for 7 years after your visit. After these 7 years, Karel V will destroy your data, unless there is a legal necessity to keep the data for a longer period of time. For example because you have a dispute with us.

Amplixs and Resengo will delete your personal data after 13 months. The research results are then anonymized as far as necessary.

Karel V uses its own secured servers and/or servers from third parties. For all cases of data storage, we ensure that we and the parties with whom we cooperate meet the requirements of technical and organizational security that the privacy legislation in the Netherlands requires. Our external auditors check this and report on this in our annual report.
All data carriers are located within the EU. The current European privacy legislation applies.

Amplixs is based in the Netherlands. Resengo is based in Belgium. They do not use other parties outside the European Union when processing the data. Therefore, your data are always protected according to current European privacy legislation.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.

• Your name and address

• How you want to be addressed

• Your phone number and / or cell phone number

• Your email address

• Any special dietary needs you might have

• Your possible disability

• Your payment details (credit card or other)

• Your registration number at the Chamber of Commerce

• We also ask you to inform us about any dietary requirements and the possible disability of your guests and/or visitors.

We require this information from you to carry out our contract with you. Sometimes you give this information directly to us and sometimes the party through whom you have booked passes this information on. We use your data exclusively for our own services and our own legal obligations. Karel V does not pass on data to third parties for commercial purposes.
If you book via third parties, we refer you to the privacy statements of that party if you want to know what they do with your personal data.

In order to improve our services, you may receive an email after your visit to inquire about your experiences. On behalf of Karel V Amplixs Interaction Management B.V. (Amplixs) conducts this survey. For this purpose we pass on your email and name. Amplixs processes these data for the survey.

Karel V is obliged by Dutch law to keep your billing details and the associated data for 7 years after your visit. After these 7 years, Karel V will destroy your data, unless there is a legal necessity to keep the data for a longer period of time. For example because you have a dispute with us.

Amplixs will delete your personal data after 13 months. The research results are then anonymized as far as necessary.

Karel V uses its own secured servers and/or servers from third parties. For all cases of data storage, we ensure that we and the parties with whom we cooperate meet the requirements of technical and organizational security that the privacy legislation in the Netherlands requires. Our external auditors check this and report on this in our annual report.
All data carriers are located within the EU. The current European privacy legislation applies.

Amplixs is based in the Netherlands. Amplixs does not use other parties outside the European Union when processing the data. Therefore, your data are always protected according to current European privacy legislation.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.

Karel V is obliged by Dutch law to keep your billing details and the associated data for 7 years after your visit. After these 7 years, Karel V will destroy your data, unless there is a legal necessity to keep the data for a longer period of time. For example because you have a dispute with us.

Karel V uses its own secured servers and/or servers from third parties. For all cases of data storage, we ensure that we and the parties with whom we cooperate meet the requirements of technical and organizational security that the privacy legislation in the Netherlands requires. Our external auditors check this and report on this in our annual report.
All data carriers are located within the EU. The current European privacy legislation applies.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.

We will delete and destroy your personal data after one month if you apply for a job an you are not hired. However you may ask us to keep your data longer if you want to be approached in case of a new vacancy. In that case, we will store your data for a maximum of 1 year.

Karel V respects the aforementioned periods and will destroy the relevant data at the end of the said period. We will keep the data longer in the case of a legal necessity. For example because you have a dispute with us.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.

Karel V uses its own secured servers and/or servers from third parties. For all cases of data storage, we ensure that we and the parties with whom we cooperate meet the requirements of technical and organizational security that the privacy legislation in the Netherlands requires. Our external auditors check this and report on this in our annual report.

All data carriers are located within the EU. The current European privacy legislation applies.

A data breach is a breach of security that leads to abuse or loss of personal data. Despite all our measures, such an incident can never be ruled out. If a data breach presents a great risk to the data subject – and you are the data subject – we must inform you about this data breach.