Privacy policy
Last updated: January 2026
1. Data controller
Cruise Tours Amsterdam B.V., Damrak 26, 1012 LJ Amsterdam, The Netherlands, is the data controller for personal data processed through this website. KvK registration: 12345678.
2. Data we collect
We collect: name, email address, phone number (optional), booking details, payment information (processed by our payment partner), and usage data (cookies, IP address, device info).
3. Purpose
We use your data to process bookings, send confirmation emails, provide customer support, improve our services, and comply with legal obligations. Marketing communications are only sent with your explicit consent.
4. Legal basis
We process your data based on: (a) contract performance (to fulfil your booking), (b) legitimate interest (to improve our services), (c) consent (for marketing and non-essential cookies), and (d) legal obligation (tax and accounting requirements).
5. Cookies
We use essential cookies for website functionality and analytics cookies (with consent) to understand how visitors use our site. You can manage cookie preferences via the cookie banner. For full details, see our Cookie Policy.
6. Third parties
We share data with: payment processors (Stripe/Adyen), cruise operators (to fulfil your booking), analytics providers (Google Analytics, with anonymised IP), and email providers (for booking confirmations). We do not sell your personal data to third parties.
7. International transfers
Some of our service providers are based outside the EEA. We ensure adequate protection through EU Standard Contractual Clauses or adequacy decisions.
8. Your rights (GDPR)
You have the right to access, correct, delete, or port your personal data. You may also withdraw consent or object to processing. To exercise your rights, contact us at privacy@canalcruise.amsterdam.
9. Data retention
Booking data is retained for 7 years (Dutch tax law). Analytics data is retained for 26 months. Marketing consent records are retained for 3 years. You can request deletion at any time for data not subject to legal retention requirements.
10. Data protection officer
For privacy-related inquiries, please contact our DPO at privacy@canalcruise.amsterdam. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).