Skip to content
Pack & Quest

Cities

Free city map

Your data

Privacy Policy

Last updated:

Who is responsible

[Company name – to be filled in], [Business address], The Netherlands. Chamber of Commerce (KvK): [KvK number]. Contact: contact page.

What we collect and why

  • Visiting the site. Our host (Cloudflare) processes technical data such as your IP address and browser type to deliver the site securely. Legal basis: legitimate interest (security and operating the site).
  • Analytics: only with your consent. If you accept analytics cookies, we use Cloudflare Web Analytics, which is privacy-friendly and does not use cookies for tracking. Legal basis: consent.
  • Newsletter. If you sign up, we store your email address, the page you signed up on and the time of signup and confirmation (double opt-in), to send you the free map and our emails. Our email provider processes this on our behalf. You can unsubscribe at any time via the link in every email. Legal basis: consent.
  • Purchases. City Quests are sold via a payment provider that acts as merchant of record. It processes your payment and invoice data. We receive your name, email and order details to deliver your download and support you. Legal basis: contract.
  • Contact. If you email us, we use your message to reply. Legal basis: legitimate interest.
  • Affiliate links. When you click an affiliate link you go to the partner’s website, which may set its own cookies to attribute your booking. Their privacy policy applies there.

Stored on your device

We store your cookie choices, and, if you use our tools, your packing list and budget inputs, in your browser’s local storage. This data never leaves your device. See our cookie policy.

How long we keep data

Newsletter data until you unsubscribe (plus a short suppression record so we don’t email you again). Order data as long as tax law requires (in the Netherlands, 7 years). Contact emails for up to 2 years.

Your rights

You have the right to access, correct, delete or export your data, to object to processing, and to withdraw consent at any time. Contact us to exercise these rights. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local authority.

International transfers

Some providers are based outside the EU (for example in the US). Where that’s the case, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.