Privacy statement
How Carpdistrict Walenhoek handles the details you give us when you book, send a message or share a photo of your catch.
Who we are
Carpdistrict Walenhoek is part of Lucky Lakes bv (Chamber of Commerce no. 85674508), Walenhoekseweg 4, 4051 CM Ochten. We are responsible for the details you give us through this website.
Het Ondernemers Kompas builds and maintains the website for us and can therefore access the data. We have a data processing agreement with them.
When you book
We ask for your name, email address and phone number, and for every angler their first name, surname, address and country. You can add a note if you like.
We use your email address for the confirmation, a payment link, a reminder if your payment is still open, an email two days before you arrive and a short email after your stay, and your phone number in case we need to reach you around your arrival. The municipality requires a register of everyone who stays overnight, for the tourist tax, which is why we ask for the details of every angler.
You pay through Mollie. We never see your bank or card details; we only hear whether the payment succeeded and how you paid. For every payment we make an invoice, which our accountant receives.
When you send a message
The contact form asks for your name, email address, your message and, if you like, your phone number. We only use them to answer you.
Photos of your catch
After your stay you get an email with a link where you can send photos of your catch, with the type of carp, the weight and, if you like, your first name. A photo only appears on the website after we approve it and only if you gave permission. Want it removed? Let us know and we will take it down.
Against misuse
On the booking page and the contact page we use Google reCAPTCHA to stop automated bookings and spam. Google receives your IP address and some browser details. This is the only service that sends data to the United States.
We also store a scrambled version of your IP address (a hash, which cannot be turned back into the address) for 30 days, so we can block someone who sends too many requests.
What we do not do
No statistics, no advertising code, no tracking pixels and no cookies for visitors, which is why there is no cookie banner. Only the management area, where we log in ourselves, uses a login cookie. The weather on the website is fetched by our own server and the fonts come from our own server, so your browser does not contact those services. We never sell or share your details for marketing.
Who else handles your details
Supabase, Vercel and Resend are American companies; your details are stored in Frankfurt. With all three, the European Commission’s standard contractual clauses for data outside the EU apply.
- Supabase
- Database and photos. Frankfurt, Germany.
- Vercel
- Runs the website. Frankfurt, Germany.
- Mollie
- Payments. Amsterdam, the Netherlands.
- Resend
- Sends our emails.
- Google reCAPTCHA
- Against misuse, booking and contact page only. United States.
- Our accountant
- Invoices and the overnight-stay register. The Netherlands.
How long we keep it
A computer job cleans up every night. A booking stays as a line without a name or contact details, so the numbering and counts remain correct.
- Booking that was not paid
- Personal details removed after 3 months.
- Paid booking and invoices
- 7 years, the period the tax authorities require. Then removed.
- Message through the contact form
- 12 months.
- Scrambled IP address
- 30 days.
- Catch photo we did not approve
- 30 days.
- Approved catch photo
- Until you ask us to remove it.
Your rights
You can ask what we have stored about you, have it corrected or have it removed, except what we are required to keep by law. Get in touch through the contact page and we will reply within a month. If you are not satisfied with how we handle it, you can file a complaint with the Dutch Data Protection Authority.
Last updated 7 October 2026. This is a translation for your convenience. The Dutch version is legally binding.
