Privacy Policy

Last updated: 17 August 2026

Privacy and Personal Data

1. Data Controller

Ravecation V.O.F., Netherlands (“Ravecation”), is responsible for processing personal data collected in connection with its Services and acts as the data controller where it determines the purposes and means of such processing.

For privacy-related questions or requests, the Customer may contact Ravecation at legal@ravecation.nl.

2. Personal Data Collected

Depending on the Customer's interaction with Ravecation, Ravecation may collect and process:

  • First and last name;

  • Email address and telephone number;

  • Date of birth;

  • Address and country or nationality;

  • Booking, order, and service information;

  • Information provided through forms or other communications with Ravecation; and

  • Photographs or videos in which the Customer may appear during Ravecation events or activities.

Ravecation does not process or store the Customer's payment or card details. Payments are processed through Weeztix and its applicable payment providers.

3. Sources of Personal Data

Ravecation may receive personal data directly from the Customer or through services used by Ravecation, including Weeztix, Squarespace Forms, Google Forms, MailerLite, and WhatsApp.

Ravecation may store and manage Customer information using systems including Microsoft Excel and HubSpot.

4. Purposes of Processing

Ravecation may process personal data for the following purposes:

  • Processing and managing bookings and orders;

  • Providing and administering the Services;

  • Communicating with Customers regarding bookings, events, changes, cancellations, and other service-related matters;

  • Customer support and complaint handling;

  • Maintaining business, accounting, and administrative records;

  • Complying with legal and regulatory obligations;

  • Sending newsletters, event announcements, promotional offers, and other Ravecation marketing communications;

  • Analysing previous purchases and segmenting Customers for relevant marketing communications;

  • Creating and managing advertising audiences through platforms such as Meta and Google, where permitted by applicable law; and

  • Improving Ravecation's Services, events, and customer communications.

5. Legal Bases

Ravecation processes personal data only where a lawful basis under applicable data protection law exists.

Depending on the purpose, processing may be based on:

  • The performance of a contract with the Customer;

  • Compliance with a legal obligation;

  • Ravecation's legitimate interests, where these interests are not overridden by the Customer's rights and freedoms; or

  • The Customer's consent, where consent is required by applicable law.

Where processing is based on consent, the Customer may withdraw that consent at any time.

6. Marketing Communications

Customers who purchase a service from Ravecation or submit their information through a Ravecation form may be added to Ravecation's mailing list for future communications, subject to applicable direct-marketing laws.

Marketing emails include an unsubscribe option. Customers may unsubscribe from marketing communications at any time.

Unsubscribing from marketing communications does not affect communications that are necessary to provide or administer an existing booking or Service.

7. Advertising and Audience Management

Where permitted by applicable law, Ravecation may use Customer information to create or manage advertising audiences on platforms such as Meta and Google.

Where consent is legally required for such processing, Ravecation will obtain and process the applicable consent in accordance with legal requirements.

Customers may object to or withdraw consent for applicable forms of marketing and advertising-related processing by contacting legal@ravecation.nl.

8. Sharing of Personal Data

Ravecation does not sell Customer personal data.

Ravecation may share personal data with service providers where reasonably necessary to provide its Services, operate its business, process Customer requests, or comply with legal obligations.

Ravecation may also provide Customer information to a Festival Organizer where this is required by the Festival Organizer or applicable law.

Ravecation will only provide third parties with information reasonably necessary for the relevant purpose.

10.9 Third-Party Service Providers

Ravecation uses third-party platforms and service providers, which may process personal data on Ravecation's behalf or independently in accordance with their own privacy policies.

These services may include:

  • Weeztix for ticketing and payment processing;

  • Squarespace for website and form services;

  • Google services, including Google Forms and advertising services;

  • MailerLite for email marketing;

  • HubSpot for customer relationship management; and

  • WhatsApp for customer communication.

Such providers may process personal data outside the European Economic Area (EEA). Where required by the GDPR, Ravecation will ensure that appropriate safeguards are in place for international data transfers, such as an adequacy decision, Standard Contractual Clauses, or another legally recognised transfer mechanism.

10. Identification at Private Accommodation

Where identification is required by a private accommodation provider, Ravecation may verify the Customer's identification document on site.

Ravecation does not make or retain photocopies or photographs of identification documents for this purpose unless separately required by law or expressly agreed with the Customer.

11. Data Retention

Ravecation retains personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by law.

As a general guideline:

  • Booking and contractual records are retained for the duration of the contractual relationship and for the applicable statutory accounting, tax, or legal limitation periods;

  • Financial and accounting records are retained for the period required under applicable tax and accounting legislation;

  • Carketing data is retained until the Customer unsubscribes or objects, after which the Customer's details may be retained on a suppression list where necessary to ensure that marketing is not sent again;

  • Customer complaints and related records may be retained for as long as reasonably necessary to handle the complaint and protect Ravecation's legal interests; and

  • Photographs and videos may be retained for as long as reasonably necessary for their intended business, promotional, or archival purpose, subject to applicable law and any relevant objection or removal request.

12. Customer Rights

Subject to the conditions and limitations provided by applicable law, the Customer may request:

  • Access to their personal data;

  • Correction of inaccurate or incomplete personal data;

  • Deletion of personal data;

  • Restriction of processing;

  • Data portability where applicable;

  • Objection to certain processing, including direct marketing; and

  • Withdrawal of consent where processing is based on consent.

Requests may be submitted to legal@ravecation.nl.

Ravecation may request reasonable information necessary to verify the identity of the person making a request.

13. Data Security

Ravecation takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction.

Ravecation will limit access to personal data to persons and service providers who reasonably require access for the performance of their duties or services.

14. Personal Data Breaches

If Ravecation becomes aware of a personal data breach, it will assess and handle the breach in accordance with applicable data protection law.

Where legally required, Ravecation will notify the competent supervisory authority and affected Customers within the applicable statutory periods.

15. Complaints Regarding Personal Data

Customers who believe that Ravecation has processed their personal data unlawfully may first contact Ravecation at legal@ravecation.nl so that Ravecation can investigate and, where appropriate, resolve the issue.

The Customer also has the right to lodge a complaint with the competent data protection supervisory authority, including the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10.16 Changes to the Privacy Provisions

Ravecation may amend these privacy provisions where necessary to reflect changes in its Services, processing activities, technology, or applicable legislation.

The most recent version will be made available through Ravecation's website.