Template notice: This document is a working draft. Review with qualified legal counsel before going live.
Who we are
Seasonable is a seasonal-staff management platform built for campsites and holiday parks in the Netherlands. The platform is operated by Seasonable ("we", "us", "our"). For privacy questions, contact us at hello@seasonable.nl.
We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.
What data we collect
We collect only what we need to run the service and respond to your enquiries:
- Demo-request data: When you request a demo, we collect your name, email address, and the name of your campsite or holiday park.
- Account data: If you create an account, we collect your name, email address, and a hashed password. We never store passwords in plain text.
- Seasonal-staff data: Campsite operators may upload staff details (name, availability dates, housing assignments, pay information) to the platform. This data is provided by the operator and processed on their behalf.
- Server logs: Our hosting infrastructure automatically records IP addresses, browser user-agent strings, requested URLs, and timestamps. These logs are used solely for security monitoring and diagnostics.
- Cookies: We use only technically necessary session cookies. We do not use advertising or third-party tracking cookies.
How we use your data
We use your personal data for the following purposes:
- Responding to demo requests and scheduling demonstrations.
- Providing and operating the Seasonable platform.
- Authenticating users and maintaining account security.
- Diagnosing technical issues and ensuring service stability.
- Complying with legal obligations.
We do not sell your data, share it with advertising networks, or use it for automated profiling or decision-making.
Legal basis for processing
We rely on the following legal bases under GDPR Article 6:
- Contractual necessity (Art. 6(1)(b)): Processing your account and staff data is necessary to provide the service you have agreed to use.
- Legitimate interests (Art. 6(1)(f)): Responding to demo requests, maintaining server logs for security, and improving the platform.
- Consent (Art. 6(1)(a)): Where we seek your explicit consent (for example, for optional marketing communications), you may withdraw that consent at any time.
Data retention
- Demo-request data: Retained for up to 24 months after your last interaction, then deleted.
- Account data: Retained for as long as your account is active. After account deletion, data is purged within 30 days, except where retention is required by law.
- Staff data uploaded by operators: Retained according to the operator's instructions. Operators are responsible for their own retention schedules.
- Server logs: Retained for a maximum of 90 days, then automatically deleted.
Sharing your data
We do not sell or rent your personal data. We may share data with:
- Hosting providers: Our platform runs on cloud infrastructure within the European Economic Area (EEA). Processors are bound by data-processing agreements.
- Legal authorities: Where we are required to do so by law, court order, or regulatory authority.
Any transfer outside the EEA will only occur under appropriate safeguards (adequacy decision, standard contractual clauses, or equivalent).
Your rights under GDPR
If you are based in the EEA or the UK, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your data ("right to be forgotten"), subject to legal obligations.
- Restriction: Ask us to limit how we use your data while a complaint is resolved.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any right, email hello@seasonable.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Cookies
The Seasonable website and platform use technically necessary session cookies to keep you logged in and to protect against cross-site request forgery (CSRF). We do not use analytics cookies, advertising cookies, or any third-party tracking scripts on this website. No cookie consent banner is shown because no non-essential cookies are set.
Security
We apply technical and organisational measures to protect your data, including TLS encryption in transit, encrypted storage, and access controls. See our Security page for details.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by email notification to account holders. Continued use of the service after the effective date constitutes acceptance of the revised policy.
Contact
For any privacy-related questions or to exercise your rights, please contact:
Seasonable
hello@seasonable.nl