Privacy statement

The data controller is Centaur+Zander BV, Postelsesteenweg 115, 2400 Mol, company number 0441.662.873, operator of De Zander.

For any question about privacy, you can contact us at info@dezander.be or +32 498 38 42 04.

When you book a cruise

• Data: name, email address, phone number, country, number and type of passengers, comments, language preference and the status of your payment.
• Purpose: to manage your booking, to check you in at boarding using the QR code from your confirmation, and to notify you if anything changes about your cruise.
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Retention period: up to 2 years after the date of the cruise. After that, your name, contact details and comments are automatically erased.

When we ask for your opinion after the cruise

• Data: your name, email address and the cruise you took.
• Purpose: a single email asking whether you would like to write a review. You will not receive newsletters or advertising from us.
• Legal basis: our legitimate interest in knowing how guests experience their cruise (Art. 6(1)(f) GDPR). You can object to this at any time with a simple message.

When you write a review

• Data: your rating, your text and the name you provide.
• Purpose: to display your review on the website. We only show your first name and the initial of your surname.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw by asking us to remove the review.
• Retention period: for as long as the review is online.

When you use the contact form

• Data: name, email address, phone number (optional) and your message.
• Purpose: to answer your question and, if you ask, to prepare a quotation.
• Legal basis: steps taken at your request before any contract and our legitimate interest in answering questions.
• Retention period: 2 years after receipt, after which it is automatically deleted.

When you visit the website

• We keep anonymous visitor statistics using our own software, without cookies and without third-party services. For each page visit, we store the page, the referring website and the type of browser and device.
• We do not store your IP address. To count unique visitors, it is combined with a key that changes daily and converted into a code that cannot be traced back to you.
• Legal basis: our legitimate interest in improving the website. Retention period: 2 years.

This website does not place any cookies on visitors’ devices. A cookie banner is therefore not needed either.

Only staff who log in receive a session cookie (dz_session), which is strictly necessary to stay logged in. It expires when you log out or after 14 days.

Your data is only accessible to staff who need it for their work, such as the crew who check guests in.

We work with a limited number of processors who process data solely on our behalf: our hosting provider (OVHcloud, op servers in de Europese Unie) and an email delivery service. Your data is not transferred outside the European Economic Area and is never sold.

If you pay online, your payment is processed by Mollie B.V. (Amsterdam). Your card or bank details never reach us; we only see the amount and whether the payment succeeded.

External links, for example to a review platform or social media, are subject to the privacy policies of those parties.

All traffic with the website is encrypted (https). Access to the management area is restricted to personal accounts, passwords are stored encrypted, and a backup is made every night.

You can ask us at any time to access, correct or erase your data, to restrict its processing, to transfer your data or to object to its processing.

Send your request to info@dezander.be. We will respond within one month. If we have doubts about your identity, we may ask you to confirm it.

You also have the right to lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

Whenever we amend this statement, we also update the date at the top.