Privacy statement

Identity and contact details of the data controller

This privacy policy applies to all personal data processed by STUDIO PLOPSA NV, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0463.938.924. Studio Plopsa NV acts as the overarching data controller for the entire Studio Plopsa group.

Studio Plopsa, a subsidiary of Studio 100 NV, acts as the (sub-)holding company for all theme parks based on Studio 100 characters.

This Privacy Policy also applies to all subsidiaries of Studio Plopsa NV, including:

Each subsidiary within the Studio Plopsa group is a separate data controller for the processing of personal data in the context of its specific activities. Studio Plopsa NV acts as the central data controller for group-wide processing, such as customer management, marketing activities and central administration.

The Data Controller attaches great importance to your privacy and therefore processes your personal data in accordance with European Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”), as well as any future or supplementary legislation implementing it, insofar as applicable.

For further questions or comments about the way we handle your personal data, you can always contact us, either by email at [email protected] or by post at the above-mentioned postal address.

Our DPO can also be reached via the same contact details (marked ‘for the attention of the DPO’).

What does “processing personal data” mean?

The processing of personal data (hereinafter “data”) covers any processing of data that can identify you as a natural person. You can read which data this concerns in this Privacy Policy. The term ‘processing’ is very broad and covers, among other things, the collection, storage and use of your data, or sharing it with third parties.

What data do we process?

Below we explain which of your data we may process. Depending on the specific situation, your preferences and the way you contact us, we do not process all of the data below about you.

Main activities

In the context of our main activities:

  1. Park and pool visits and ticket sales

In the context of your visit to our parks and swimming pools and the purchase of tickets, we may process the following data:

  • Identification data: surname, first name, date of birth (for age-related tickets)
  • Contact details: email address, telephone number (for sending tickets or confirmations)
  • Order and payment data: payment method, transaction data, billing address
  • Personal particulars: height, family and household composition, special requests or facilities, data to demonstrate and relating to assistance for disabilities, membership of group visits or specific promotional or event days (if provided by you or relevant to your visit)
  • Medical data: health information relating to the intervention, contact details of an emergency contact, if you make use of our first aid services.
  • Electronic identification and usage data: IP address, browser type, location data (for online ticket sales)
  • Security camera footage: security camera footage for the supervision and surveillance of our parks, photos and videos from attractions and park photographers
  1. Season passes

To create and manage season passes, we may additionally process the following data:

  • Identification data: surname, first name, date of birth (for age-related season passes)
  • Contact details: email address, telephone number
  • Order and payment data: payment card details, billing data
  • Season pass data: type of season pass, season pass number, purchase date, expiry date, data on special rates (such as discounts based on age, persons with disabilities, family and/or group passes, seasonal or promotional discounts)
  • Images for identification: photo for identification when entering the park
  1. Events

Studio Plopsa organises and facilitates various events in its parks and venues, such as shows, meet & greets, theme days, corporate parties and special promotions. In this context, we process personal data of event visitors, artists and performers, organisers and service providers. We may additionally process the following data

  • Identification data: surname, first name
  • Contact details: email address, telephone number
  • Order and payment data: ticket purchase, payment card details, billing data
  • Personal particulars: height, family and household composition, special requests or facilities, data to demonstrate and relating to assistance for disabilities, membership of group visits or specific promotional or event days (if provided by you or relevant to your participation)
  • Medical data: health information relating to the intervention, contact details of an emergency contact, if you make use of our first aid services.
  • Security camera footage: security camera footage for the supervision and surveillance of our parks, photos and videos from attractions and photographers
  • Contractual and financial data: agreements and contracts between Studio Plopsa and the organiser or service provider, billing and payment data, permit and insurance documents (if required)
  • Operational data: planning information and logistical arrangements, list of participants or crew if required for access control and organisation

PlopsaRun

In the context of organising the PlopsaRun, photos and videos of participants may be taken during the event. These images may be used to give participants access to the photos in which they appear after the event.

Participants can find their photos using their bib number. In addition, a selfie-based search function may be offered. When you use this search function, the photo you provide is processed by means of automated image analysis. Based on this analysis, the photos taken during the PlopsaRun in which you appear are selected.

Depending on the technical operation of the photo system, facial features may be used for this purpose. If these features are processed for the purpose of uniquely identifying a participant, this may result in the processing of biometric personal data.

Following your registration and depending on the functionality you use, the following personal data may be processed:

  • identification data (first name, surname, date of birth) and registration data
  • gender
  • telephone number
  • country
  • email address
  • bib number
  • photos and videos taken during the PlopsaRun
  • the selfie you provide
  • data resulting from the automated image analysis and, where applicable, biometric personal data
  • Order and payment data: card number, expiry date and other data necessary to process the registration and payment
  • Race category/distance
  • Timing
  • Proof of identity or details of a person registering another participant
  • Any park/overnight stay/parking purchase
  • Group registrations:
    • Group/company name
    • Name of the contact persons
    • Email address of the contact persons
    • Distance
    • VAT number
    • Street and number
    • Town/city
    • Postcode
    • Country
    • Logo
    • List of participants with first name & surname, date of birth and gender
  1. Hotel guests and rental of holiday homes/campsites

When you stay at a Studio Plopsa hotel, holiday home or campsite, we may additionally process the following data:

  • Identification data: surname, first name, date of birth (for age-related discounts)
  • Contact details: email address, telephone number, address details
  • Order and payment data: payment method, transaction data, billing data
  • Reservation data: booking number, arrival and departure date, number of persons, type of accommodation, membership or discount details such as season pass discounts or partner discounts
  • Personal particulars (if provided by you or relevant to your stay): special requests or facilities in connection with your stay, family or group composition, data to demonstrate and relating to assistance for disabilities, preferences for room facilities such as adapted rooms or additional services
  • Medical data: health information relating to the intervention, contact details of an emergency contact, if you make use of our first aid services.
  • Electronic identification and usage data: IP address, browser type, device data (for online bookings)
  • Security camera footage: security camera footage for the supervision and surveillance of our hotels and holiday accommodation, photos and videos from photographers
  • Contractual and operational data: agreements and contracts if you book a business or long-term rental, logistical information such as parking details or additionally reserved facilities
  1. Communication

Studio Plopsa processes personal data in the context of communication with visitors, customers and professional contacts. This includes newsletter subscriptions, contact via our website or customer service, and interactions with business prospects and partners.

If you subscribe to our newsletter, we additionally process the following data:

  • Contact details: email address, name
  • Marketing preferences: preferences for specific events, offers or news
  • Interaction data: data on open and click rates in our emails (if tracking is enabled and you have consented to this)

You can unsubscribe at any time via the unsubscribe link in our newsletters or by contacting us.

When you contact us via the contact form or customer service, we may additionally process the following data:

  • Identification data: surname, first name
  • Contact details: email address, telephone number
  • Contact history: messages via web forms, emails, chat history
  • Feedback and testimonials: any feedback or reviews you leave

For business relations, suppliers and prospects, we may additionally process the following data:

  • Identification and contact details: name, job title, company name, email address, telephone number
  • Company data: company number, VAT number, sector, address details
  • Communication data: emails, telephone conversations or other interactions with our business teams
  • Marketing preferences: information about events, services or collaborations in which you have shown interest
  1. Website and webshop

Studio Plopsa processes personal data in the context of your visit to our website(s) and the use of our webshop. This includes data collected via cookies and tracking technologies, as well as data required to process orders via our online shop.

During your visit to our website, we may additionally process the following data:

  • Electronic identification and usage data: IP address, browser type, device and location data
  • Cookies and similar technologies: for functional, analytical and marketing purposes. See our Cookie Policy for more details on the use of cookies and how you can manage your preferences.
  • Behavioural data: click behaviour, pages visited, duration of the visit

For purchases via our webshop (https://shop.plopsa.com/), we may additionally process the following data:

  • Identification data: surname, first name
  • Contact details: email address, telephone number, delivery address
  • Order and payment data: payment method, transaction data, billing address
  • After-sales data: returns, complaints, warranties
  1. Camera surveillance

We use camera surveillance to monitor our parks and company buildings. In this context, we process:

  • Security camera footage: for safety and surveillance purposes
  • Timestamps: date and time of the recording

Camera footage is retained in accordance with the statutory retention periods and used only for safety and security purposes.

  1. Plopsa Identity App

The Plopsa Identity App is a mobile application that allows visitors to easily identify themselves on arrival at the park, access their season pass or ticket, and use personalised features such as reservations, loyalty benefits or communication preferences. When you use this App, we may additionally process the following data:

  • Identification data: surname, first name, date of birth
  • Contact details: email address, telephone number
  • Authentication data: username, password (encrypted)
  • Images: profile photo or photo linked to the season pass
  • App usage data: login times, features used, preferences
  • Location data: only if explicitly permitted by the user, e.g. for geo-features or personalised park experiences
  • Electronic identification data

Users can manage their preferences and certain data in the App or by contacting our customer service. Location services and tracking features can be deactivated at any time in the settings of the mobile device.

Suppliers – service providers

We may additionally process the following data from our suppliers and B2B partners:

  • Contractual data: company name, address, VAT number, agreement details
  • Contact details: name of contact person, email address, telephone number
  • Payment and billing data: bank details, invoices, payment data
  • Platform account data: registration data for access to portals or platforms
  • Feedback and testimonials: reviews and experiences of our collaboration
Job applicants (Jobs website)

We may additionally process the following data from job applicants. Naturally, this will largely depend on the data you yourself wish to provide to us for your application.

If you apply for a position within Studio Plopsa, we process:

  • Identification data: surname, first name, date of birth
  • Contact details: address, email address, telephone number
  • Work-related data: CV, work experience, education details
  • Personal data: cover letter, hobbies, interests (if mentioned)
  • Photos: if voluntarily attached to the application

Unless you have given your explicit consent, your data will be used only for the application process and will not be kept longer than necessary to assess your application.

Directors and shareholders

For directors and shareholders of Studio Plopsa, we may process the following data:

  • Identification data: surname, first name
  • Contact details: address details, email address, telephone number
  • Data from the UBO register
  • Financial data: bank and payout details, dividend distributions and financial holdings
  • Data relating to meetings and board structure: invitations and attendance records for board and shareholder meetings, board structure and positions within the company, minutes and voting results of meetings, communication data relating to shareholding
  • Data relating to shareholders
For what purposes do we process your data?

We process your data for the purposes described below and do not collect or process more data, or other types of data, than are necessary for these purposes.

Personal data is processed solely in the context of our business activities, in particular for the following purposes:

  • In the context of our main activities
    • Operating theme parks and swimming pools
    • (Online) sale of tickets and season passes, online webshop
    • Organising and facilitating events
      • PlopsaRun
        • Organising and facilitating the PlopsaRun
        • Taking photos and videos of participants during the event
        • Making these photos available to participants
        • Enabling photos to be found using the bib number
        • Enabling photos to be found using a selfie, applying automated image analysis and, where applicable, facial recognition
    • Hotel services and rental of holiday homes/campsites
    • In the context of our internal operations and obligations as a company
  • Marketing and communication
  • Events and competitions
  • Compliance with administrative and tax obligations
  • Communication with customers and prospects
  • Camera surveillance and security
  • Recruitment procedure and employee management
On what legal bases do we process your data?

We only process your data insofar as this is based on one of the legal bases listed in the GDPR, as set out below.

Legal obligation

We process certain data to comply with legal or regulatory obligations that apply to us. For example, in the context of tax and accounting obligations, employment law obligations or in the field of data protection.

Necessary for the performance of the agreement

We process certain data because it is necessary for entering into, performing or terminating an agreement with you as the data subject, such as for processing and delivering tickets, access control and customer service; for creating, managing and renewing season passes; for processing orders, payments and deliveries in our webshop; for registration, communication and follow-up of participation in events or competitions; for performing employment contracts and managing personnel files.

Legitimate interest

We process certain data on the basis of legitimate interest, provided our interests outweigh any possible disadvantages to your rights and freedoms. This is the case, for example, for promoting our activities, events and products to existing customers or business contacts (B2B marketing); for collecting feedback, handling complaints and improving our services and products; for improving the functionality of our websites and analysing user behaviour (using analytical cookies); for protecting our company buildings and parks; for retaining and using evidence in the context of liability, disputes or legal proceedings; for business reporting, statistics and archiving of activities.

Medical data processed by our first aid services that does not fall under an emergency (such as minor injuries, for example a graze) is processed on the basis of our legitimate interest. This data is processed solely to provide the necessary care when you make use of our first aid services.

Consent

We process certain data on the basis of your consent. This means that we only process your data after you have given your explicit consent. You always have the right to withdraw this consent. This applies, for example, to sending personalised newsletters, offers and promotions; collecting data about your browsing behaviour for analytical and marketing purposes; using photos, videos and testimonials on our website, social media and promotional material; retaining your application data for future vacancies; processing personal data of minors under the age of 16, subject to the consent of a parent or guardian.

For taking and processing photos and videos in the context of the PlopsaRun, personal data is processed on the basis of the applicable legal basis as set out in this Privacy Policy. If you choose to use the selfie-based search function, the photo you provide is analysed automatically in order to select photos in which you appear. If biometric personal data is processed for the purpose of uniquely identifying you, this processing takes place solely on the basis of your explicit choice and thus consent, in accordance with Article 9(2)(a) GDPR. Using the selfie search function is not required to find your photos. Participants can also find their photos using their bib number.

Where the processing of biometric personal data is based on consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Vital interests and public order

In exceptional cases, we process data to protect the vital interests of a person (for example in the event of an emergency in our parks, swimming pools, hotels or event venues) or to maintain public order, such as cooperation with judicial or police investigations. Examples include first aid provided by our first aid service in medical emergencies such as serious injuries or loss of consciousness, contacting an emergency contact, providing essential medical data to emergency services, and sharing camera footage with judicial authorities in an investigation into theft or vandalism.

Medical data that does not fall under an emergency is processed on the basis of our legitimate interest.

Origin of the data

Directly

Most of the data we process about you has been obtained directly from you. For example, when you buy tickets for our parks or events; subscribe to our newsletter or marketing campaigns; contact us via our website, social media or customer service; make a purchase in our webshop; apply for a position at Studio Plopsa; visit our websites; visit our parks or company buildings.

Obtained from third parties

In the context of our services, we may obtain data about you via external service providers or public sources. For example, if you follow or contact us via social media, we may receive data in accordance with the privacy settings of your account; for joint events, competitions or promotions in collaboration with business partners or sponsors; via external recruitment agencies or job websites when you apply for a position at Studio Plopsa; public sources such as trade registers or public social media profiles, where relevant for business contacts and B2B relationships.

Please note that when you visit our pages on Facebook, X, Instagram, LinkedIn or TikTok, whether or not via a link on our website, cookies are processed by Facebook, X, Instagram, LinkedIn or TikTok respectively. On that basis, we can obtain more information – in a completely anonymised way – about the audience visiting our social media pages. For more information on why and how personal data is processed in that context, please refer to the privacy policy and cookie policy on the website of these platforms (Facebook: privacy policy – cookie policy, X: privacy policy – cookie policy, Instagram: privacy policy – cookie policy, LinkedIn: privacy policy – cookie policy, TikTok: privacy policy – cookie policy).

Data of minors

In some cases, we process personal data of minors, for example when a parent or guardian buys a ticket or season pass for a child. We obtain this data directly from the parent or guardian during the purchase process or with the consent of the parent or guardian, as required by the GDPR.

Automatically collected data

When you use our websites and webshop, we automatically collect certain data, such as electronic identification and usage data (IP address, browser type, device and location data), cookies and similar technologies, behavioural data (pages visited, duration of visit, interaction with online advertisements). See our Cookie Policy for more details on the use of cookies and how you can manage your preferences.

With whom do we share your data?

With Studio 100 NV

Studio Plopsa NV is a subsidiary of Studio 100 NV and acts as the (sub-)holding company for all theme parks based on Studio 100 characters. In this context, operational data may be shared with Studio 100 NV, solely for administrative, operational and strategic purposes.

This data sharing always takes place in accordance with the GDPR and within the framework of a data processing agreement or joint controllership agreement, with appropriate safeguards in place to protect your personal data.

Within the Studio Plopsa group

Your data may be shared within the Studio Plopsa group to offer you a uniform and personalised experience, as well as for administrative and operational purposes. This means that your data may be accessible to Studio Plopsa NV for group-wide processing such as customer management, marketing activities and central administration, as well as to its subsidiaries.

This data sharing takes place only on a “need-to-know” basis and is limited to what is necessary for the performance of our services and operational activities. All entities within the Studio Plopsa group are contractually obliged to guarantee the confidentiality of your data and to comply with the GDPR.

With third parties outside the Studio Plopsa group

We do not pass on your data to third parties outside the Studio Plopsa group, unless this is strictly necessary in light of the above-mentioned purposes, or if we are legally obliged to do so.

External service providers (processors)

Where necessary, we use external service providers (processors) to support our operational purposes, such as the management of our websites, IT systems, marketing campaigns and the photo system for events such as the PlopsaRun. Where applicable, these external service providers carry out certain data processing on our behalf and in accordance with our instructions.

We will only share your data with these external service providers to the extent necessary for the purpose concerned. They may not use the data for other purposes. In addition, these service providers are contractually bound to guarantee the confidentiality of your data by means of a “data processing agreement” concluded with these parties.

In concrete terms, this means that, insofar as relevant to your situation, we share your data with the following third parties for the following purposes, with these third parties in certain cases acting as processors on our behalf:

  • Postal companies, transport and delivery companies if we need to send you something by post;
  • Payment service providers if we receive payments from you, or vice versa;
  • External representatives and consultants or any other parties involved in the context of our main or ancillary activities;
  • The processors who assist us in the IT field in running our organisation, with a view to secure and efficient digital data management within our organisation;
  • Marketing partners for carrying out marketing campaigns;
  • Government bodies, judicial authorities and practitioners of regulated professions such as accountants and lawyers, with a view to complying with our legal obligations and defending our interests, insofar as required.
How long do we keep your data?

We do not keep your data longer than necessary for the purpose for which it was collected or is processed. Since the period for which data can be kept depends on the purposes for which it was collected, the retention period may vary in each situation. Sometimes specific legislation will oblige us to keep the data for a certain period. Our retention periods are always based on legal requirements and a balance between your rights and expectations and what is useful and necessary to fulfil the purposes. At the end of the retention period, your data will be deleted or anonymised.

For photos, selfies and any biometric data in the context of the PlopsaRun, a specific, limited retention period applies, linked to the period during which the photos remain available after the event (once known).

Where do we store your data and how is it protected?

We take appropriate technical and organisational security measures to prevent, within the context of our activities, the destruction, loss, falsification, modification, unauthorised access or unlawful disclosure to third parties, as well as any other unauthorised processing of this data.

We also ensure that the processors we use likewise take appropriate security measures to limit the risk of incidents as much as possible.

The data we process remains within the European Economic Area (EEA) at all times.

If, when using specific services or software tools, your data is processed outside the European Economic Area (EEA), this will only take place in/to countries that the European Commission has confirmed guarantee an adequate level of protection for your data, or measures will be taken to ensure the lawful processing of your data in these third countries.

Automated decision-making

Automated decision-making is defined as decisions about individuals that are based solely on automated data processing and that produce legal effects or significantly affect the individuals concerned.

As a principle, your data will not be used for automated decision-making. We will not take any decision based solely on automated processing of your personal data.

What are your rights?

You have various rights with regard to the data we process about you. If you wish to exercise any of the following rights, please contact our GDPR officer via the contact details included under the first heading of this Privacy Policy.

Right of access and copy

You have the right to access your data and obtain a copy of it. This right also includes the possibility to request further information about the processing of your data, including the categories of data processed about you and the purposes for which this is done.

Right to rectification

You have the right to have your data corrected if you believe that we hold incorrect data.

Right to erasure (right to be forgotten)

You have the right to ask us to erase your data without undue delay. However, we will not always be able to comply with such a request, for example when we still need the data for an ongoing agreement, or when we are legally obliged to keep certain data for a certain period.

Right to restriction of processing

You have the right to restrict the processing of your data. In this way, processing is temporarily suspended until, for example, its accuracy has been established.

Right to withdraw your consent

Where processing is based on your consent (such as for the selfie search function and facial recognition for the PlopsaRun), you have the right to withdraw this consent at any time by contacting us. For marketing messages you receive from us by email on the basis of your consent, you can easily withdraw this consent by clicking the unsubscribe link at the bottom of such a message.

Right to object

You have the right to object to the processing of your data based on legitimate interest. This must be done on the basis of specific reasons relating to your situation. You can also object to the use of your data for direct marketing purposes. Marketing messages by email will always include an opt-out.

Right to data portability

You have the right to obtain, in electronic form, the data you have provided to us with your consent or in the performance of an agreement. This allows it to be easily transferred to another organisation. You also have the right to ask us to transfer your data directly to another organisation, where technically possible.

Right to lodge a complaint with your supervisory authority

If you believe that we are processing your data incorrectly, you always have the right to lodge a complaint with your supervisory authority in the field of data protection.

Belgian Data Protection Authority (DPA)

Rue de la Presse 35

1000 Brussels

[email protected]

How can you exercise your rights?

You can exercise your rights by contacting us, either by email at [email protected] or by post at De Pannelaan 68, 8660 De Panne, enclosing a copy of the front of your identity card or another document by which you can be identified. The copy will only be used to identify you in accordance with the GDPR.

Changes

We reserve the right to amend this Privacy Policy. The most recent version is available on our websites at all times. You can find the date on which this Privacy Policy was last amended at the top. In the event of a substantial change to the Privacy Policy, we will, where possible, inform the data subjects who may be affected directly.