MICRO GROEI · 2026-10-29.privacy-v1
Privacy
Who is responsible?
Micro Groei, a Dutch sole proprietorship trading as TruffelTrip Xperiences, Dutch Chamber of Commerce 97061085, VAT NL005245848B57, Koningswinkelstraat 52E, 6301 WJ Valkenburg aan de Geul, the Netherlands. Contact for privacy requests: info@truffeltrip-xperiences.nl.
Information and purposes
To handle requests and provisional reservations we use your name, email, WhatsApp number if supplied, language, package, guide, party size, preferred communication method, time zone, selected time slots, practical notes and acceptance of terms. For payments we retain references, amounts, statuses and refund details, not full payment card details. Limited technical security data helps prevent abuse.
Legal bases
Requests, scheduling and performance: steps at your request prior to and during a contract (Article 6(1)(b) GDPR). Tax and accounting records: legal obligation (Article 6(1)(c)). Security, fraud prevention and legal claims: our legitimate interest after balancing your rights (Article 6(1)(f)). We do not automatically use booking data for marketing; marketing requires a separate valid choice.
No health information in booking forms
Do not include diagnoses, medication, mental-health details or other special-category data in ordinary booking fields. A separate safety intake will only be operated once necessity, an Article 6 lawful basis and a valid Article 9 exception have been established. Special-category information must not be sent by ordinary booking email.
Recipients and international transfers
Hostinger provides website hosting and Supabase provides the booking and account platform. For standard payment services Mollie acts as a separate data controller. WhatsApp/Meta may process contact details if you choose WhatsApp communications; alternatives may be available. An email provider and/or Google receives necessary message or appointment data only after those services are activated. No booking data is sent to Tripguides. For transfers outside the EEA, applicable safeguards such as adequacy decisions or standard contractual clauses must be assessed.
Retention
Unconverted requests are generally retained for no longer than six months after last contact unless there is a specific lawful reason to retain them. Booking records are kept only as needed for services, complaints and applicable limitation periods. Legally required tax records are generally kept for seven years. Deletion currently follows an internal administrative process; automated retention deletion has not yet been activated.
Your rights
You may request access, rectification, erasure, restriction or portability, or object to legitimate-interest processing. Where consent is used you may withdraw it. Email info@truffeltrip-xperiences.nl. We normally reply within one month and may verify identity. You may complain to the Dutch Data Protection Authority. Required booking details are necessary to process a request. No solely automated decision determines suitability.
Cookies and security
The current site uses necessary session and authentication technology and temporary browser storage for unfinished requests. No advertising pixels were found in the reviewed application source. Any future optional analytics or marketing cookies will require appropriate prior information and consent when necessary. Administrative access is restricted and owner accounts require multi-factor authentication. External providers secure their services under their own terms.
Updates
Updated 29 October 2026. We will update this notice before adding a separate health intake, marketing tools, verified transactional email, a custom domain or calendar integration where these change personal-data processing.