Privacy policy

Last Updated: March 27, 2025

Introduction

Rise and Shine B.V. ("we," "our," or "us") wants to protect your privacy. This Privacy Policy explains what information we collect when you visit our website https://breakfastclub.nu, and how we use it.

This applies to all information we collect on our website, in emails, or other messages between us.

1. Information we collect

1.1. Website analytics

We monitor how people use our website using a privacy-friendly analytics tool. This tells us:

• When people visit our website
• How long they stay
• Which pages they look at
• How they found us (like from DuckDuckGo or another website)
• What browser and device they're using
• What country they're in (not specific locations)

Our analytics tool doesn't use tracking cookies and keeps all data on our own server. The information is anonymous - we can't trace it back to individual people.

1.2. Contact information

When you contact us through our Website or via email, we may collect:

• Name
• Email address
• Phone number
• Address details (if provided)
• Any additional information you choose to provide in your message

1.3. Ticket purchases

When you purchase tickets to our events through our ticketing partners, they may collect:

• Name
• Email address
• Payment information
• Billing address

1.4 Technical information

Our server automatically collects certain information when you visit the website, including:

• IP address (stored in an anonymized format)
• Browser type and version
• Operating system
• Date and time of access
• Pages visited

2. How we use your information

We use the information we collect to:

• Improve our website
• Understand how visitors use our pages
• Respond to your messages
• Process ticket orders and provide event information
• Send you important information about the event(s) you’ve bought a ticket for
• Provide the services you ask for

We have legal reasons for processing your information:

• To run our business: We analyze website usage to make our site better (this is called "legitimate interest").
• Because you agreed: When you give us information on purpose, like filling out a contact form or purchasing a ticket.
• To fulfill agreements: When we need to process information as part of a service you've requested.
• To follow the law: When we have a legal obligation to process certain information.

3. How long we keep your information

We retain your information for no longer than necessary, taking into account:

• Legal obligations (such as tax record requirements)
• The purpose for which we collected it
• Any consent you’ve given us
• Our legitimate interests as a business

In practice, this means:

• Website usage statistics: Up to 24 months
• Contact information: For the duration of our relationship plus the legally required retention period
• Financial records: 7 years (as required by tax law)

4. Who we share your information with

Since we do not collect personal information through our analytics, there is no personal information to disclose from our analytics. The anonymized data collected by our analytics tool is used solely for monitoring and improving website performance.

If you contact us directly or purchase tickets, we keep that information private. We only share it in these limited situations:

• With the ticketing partners who process ticket sales for our events
• To contractors, service providers, and other third parties who assist us in operating our website.
• If required by law, such as to comply with a subpoena or similar legal process
• When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request

We do not sell your personal information to third parties.

5. Tools we use

5.1. Website tools

Our website runs on a content management system with various themes. While we configure these for privacy, some features need basic data to work properly.

5.2. Privacy-friendly analytics

We use a privacy-focused analytics tool developed in the Netherlands. It doesn't use cookies to track you and looks at general patterns rather than individual browsing. It's designed to respect privacy laws while still letting us understand basic website usage.

5.3. Cookies

Our website only uses cookies that are necessary for the site to work properly. We don't use tracking or advertising cookies.

You can control cookies through your browser settings - most browsers let you block cookies or warn you before accepting them. Just know that blocking certain cookies might affect how our website works for you.

5.5. Embedded content

Our website may include embedded content (e.g., video’s, images, articles, etc.) from other websites. Embedded content behaves exactly as if you visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction.

6. Your rights

Under European privacy laws (GDPR), you have these rights:

• See your data: You can ask for copies of your personal information we have.
• Fix your data: If information is wrong, you can ask us to correct it.
• Delete your data: You can ask us to erase your personal information.
• Limit how we use your data: You can ask us to restrict processing of your information.
• Take your data elsewhere: You can ask us to transfer your data to another organization.
• Object to data use: You can tell us to stop using your information in certain ways.
• No automated decisions: We don't make automated decisions about you, so you don't need to worry about this.

Note that our website analytics data is completely anonymous and cannot be linked to you as an individual, so these rights don’t apply to that data.

To use any of these rights, just contact us using the details at the bottom of this page. We'll respond within 30 business days.

We may not always be able to fully comply with your request. For example, we might need to keep certain information for legal obligations or to fulfill our contract with you. In such cases, we’ll explain why we can’t fully comply.

7. International data transfers

We aim to keep your data within the European Economic Area (EEA) whenever possible. However, we use certain cloud service providers like Google that may process or store data on servers outside the EEA.

When data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Working with providers that provide adequate levels of data protection
• Implementing technical measures to protect your information during transfer

If you purchase tickets through third-party ticketing services, their own privacy policies will govern their data transfer practices.

8. How we protect your information

We take steps to keep information safe:

• Using secure servers
• Making sure IP addresses are anonymous
• Only letting authorized staff access personal information
• Regularly checking our security

We try to select service providers who also maintain high security standards when they handle your data.

While we do our best to protect your information, no internet method is 100% secure, so we can't guarantee absolute security.

9. Children's privacy

Our website isn't meant for children under 16. We don't knowingly collect information from children. If you're a parent and think your child has given us information, please contact us so we can address this.

10. Changes to this privacy policy

We may update this policy occasionally to reflect changes in how we work or for legal reasons. When we make changes, we'll update the "Last Updated" date at the top. It's a good idea to check back sometimes to stay informed.

11. Verification of identity

To ensure we’re providing information to the right person when you exercise your privacy rights, we may ask you for verification. This could include:

• Asking security questions
• Requesting identification documentation (with sensitive information like photo and ID number redacted)
• Using the email address linked to your personal information.

We only process requests related to your own personal information.

12. Data breach procedures

In the unlikely event of a data breach that affects your personal information, we will:

• Notify relevant authorities within 72 hours if required by law
• Inform you directly if there’s a high risk to your rights and freedoms
• Document all breaches and our response actions
• Take immediate steps to limit any damage

13. If you have concerns

If you're unhappy with how we handle your information, you have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). But we'd appreciate a chance to address your concerns first - please contact us directly and we'll do our best to help.

Contact us

If you have questions about this privacy policy or how we handle your data, please contact us:

Rise and Shine B.V.
De Kolk 13
6541 AV, Nijmegen
The Netherlands
Email: contact@breakfastclub.nu
VAT: NL860844614B01

©2025 Rise and Shine B.V.