Privacy statement

1. Identity and contact details of the controller

This privacy policy applies to all personal data processed by STUDIO PLOPSA NV, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0463.938.924. Studio Plopsa SA acts as the umbrella processing entity for the entire Studio Plopsa Group.

Studio Plopsa, a subsidiary of Studio 100 NV and acts as a (sub-)holding company for all theme parks based on Studio 100 characters.

This Privacy Policy also applies to all subsidiaries of Studio Plopsa SA, including: 

  • Plopsa NV, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0466.400.051;
    • Plopsaland De Panne
    • Plopsaqua De Panne
    • Studio 100 Theatre De Panne
    • Plopsa Indoor Hasselt
    • Plopsa Shop Wijnegem
    • Plop-up Newport
  • Plopsa Village SA, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0446.258.396;
    • Plopsaland Base Camp
    • Plopsaland Village
    • Studio 100 Chalets De Panne
  • Plopsa Hotel NV, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0691.787.865;
  • Plopsa Station Antwerp NV, with registered office at De Pannelaan 68, 8660 De Panne, with company number BE 0505.747.508;
  • Plopsa SRL, (Plopsa Coo Ardennes) with registered office at Coo 0, 4970 Coo Stavelot, with company number BE 0405.853.542;
  • Plopsa Hannut-Landen BV, with registered office at Rue de Landen 187, 4280 Hannut, with company number BE 0732.726.617;
  • Plopsa BV, with registered office at Reindersdijk 57, 7751 SH Dalen, with company number NL 8093.76.490.B01;
  • Holiday Park GmbH, with registered office at Holiday Park-Str. 1-5, 67454 Hassloch, with company number DE 149.372.868.

Each subsidiary within the Studio Plopsa Group is a separate controller for the processing of personal data in the context of its specific activities. In this regard, Studio Plopsa SA acts as central controller for group-wide processing, such as customer management, marketing activities and central administration.

The Controller attaches great importance to your privacy and therefore processes your personal data in accordance with the European Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter "GDPR") as well as any future or additional legislation implementing it, as applicable.

For further questions or comments regarding the way we handle your personal data, you can always contact us, either by e-mail toDPO@plopsa.be or by post to the aforementioned postal address.

Our DPO can also be reached via the same contact details (stating 'tav the DPO').

2. What does "process personal data" mean?

Processing personal data (hereinafter "data") includes any processing of data that can identify you as a natural person. You can read about what data is involved in this Privacy Policy. The term "processing" is very broad and covers, among other things, collecting, storing, using your data, or sharing it with third parties.

3. What data do we process?

Below, we clarify what data we may process from you. Depending on the specific situation, your preferences and the way you contact us, we do not process all the data below about you

Main activities

In the context of our main activities:

a. Park and pool attendance and Ticket sales

In connection with your visit to our parks and pools and the purchase of tickets, we may process the data below:

  • Identification data: surname, first name, date of birth (for age-related tickets)
  • Contact details: e-mail address, phone number (for sending tickets or confirmations)
  • Order and payment details: payment method, transaction details, billing address
  • Personal details: size, family and household composition, special requests or facilities, data for demonstration and in connection with disability assistance, membership in group visits or specific promotional or event days (if provided by you or relevant to your visit)
  • Medical data: health information related to the intervention, contact details of an emergency contact person, if you use our first aid services.
  • Electronic identification and usage data: IP address, browser type, location data (for online ticket sales)
  • Images from security cameras: images from security cameras for surveillance and monitoring of our parks, photos and videos from attractions and park photographers

b. Subscriptions

To create and manage subscriptions, we may additionally process the following data:

  • Identification data: surname, first name, date of birth (for age-related subscriptions)
  • Contact details: e-mail address, phone number
  • Order and payment details: payment card details, invoice details
  • Subscription data: type of subscription, subscription number, purchase date, expiry date, data on special rates (such as discounts based on age, persons with disabilities, family and/or group subscriptions, seasonal or promotional discounts)
  • Images for identification: photo for identification at park entrance

c. Events

Studio Plopsa organises and facilitates various events in its parks and locations, such as shows, meet & greets, theme days, company parties and special promotional events. In this context, we process personal data of event visitors, artists and performers, organisers and service providers. We may additionally process the following data:

  • Identification data: name, first name
  • Contact details: e-mail address, phone number
  • Order and payment details: ticket purchase, payment card details, invoice details
  • Personal details: size, family and household composition, special requests or facilities, data for demonstration and in connection with disability assistance, membership in group visits or specific promotional or event days (if provided by you or relevant to your participation)
  • Medical data: health information related to the intervention, contact details of an emergency contact person, if you use our first aid services.
  • Security camera images: security camera images for surveillance and monitoring of our parks, photos and videos of attractions and photographers
  • Contractual and financial data: agreements and contracts between Studio Plopsa and the organiser or service provider, invoice and payment details, licensing and insurance documents (if required)
  • Operational data: planning information and logistical arrangements, list of participants or crew if required for access control and organisation

d. Hotel guests and holiday home/camping site rentals

When staying in a Studio Plopsa hotel, holiday home or camping pitch, we may additionally process the following data:

  • Identification data: surname, first name, date of birth (in case of age-related discounts)
  • Contact details: e-mail address, phone number, address details
  • Order and payment details: payment method, transaction details, invoice details
  • Booking details: booking number, arrival and departure date, number of persons, type of accommodation, membership or discount details such as subscription discounts or partner discounts
  • Personal details (if provided by you or relevant to your stay): special requests or facilities related to your stay, family or group composition, details for demonstration and related to disability assistance, preferences for room facilities such as adapted rooms or extra services
  • Medical data: health information related to the intervention, contact details of an emergency contact person, if you use our first aid services
  • Electronic identification and usage data: IP address, browser type, device data (for online bookings)
  • Images from security cameras: images from security cameras for surveillance and monitoring of our hotels and holiday accommodation, photos and videos from photographers
  • Contractual and operational data: agreements and contracts if you book a business or long-term rental, logistical information such as parking details or additional reserved facilities

e. Communications

Studio Plopsa processes personal data in the context of communication with visitors, customers and professional contacts. This includes newsletter subscriptions, contact through our website or customer service, and interactions with business prospects and partners.

If you subscribe to our newsletter, we additionally process the following data:

  • Contact details: e-mail address, name
  • Marketing preferences: preferences for specific events, offers or news
  • Interaction data: data on the open and click frequency in our emails (if tracking is enabled and you have consented to it)

You can unsubscribe at any time via the unsubscribe link in our newsletters or by contacting us.

When you contact us via the contact form or customer service, we may additionally process the following data: 

  • Identification data: name, first name
  • Contact details: e-mail address, phone number
  • Contact history: messages via web forms, e-mails, chat history
  • Feedback and testimonials: any feedback or reviews you leave behind

For business relations, suppliers and prospects, we may additionally process the following data: 

  • Identification and contact details: name, position, company name, e-mail address, phone number
  • Company details: company number, VAT number, sector, address details
  • Communication data: emails, phone calls or other interactions with our business teams
  • Marketing preferences: information about events, services or collaborations in which you have expressed interest

f. Website and webshop

Studio Plopsa processes personal data in the context of your visit to our website(s) and the use of our online shop. This includes data collected via cookies and tracking technologies, as well as data needed to process orders via our online shop.

During your visit to our website, we may additionally process the following data:

  • Electronic identification and usage data: IP address, browser type, device and location data
  • Cookies and similar technologies: for functional, analytical and marketing purposes. See our Cookie Policy for more details on the use of cookies and how to manage your preferences.
  • Behavioural data: click behaviour, pages visited, length of visit

When making purchases via our webshop (https://shop.plopsa.com/), we may additionally process the following data:

  • Identification data: name, first name
  • Contact details: e-mail address, phone number, delivery address
  • Order and payment details: payment method, transaction details, billing address
  • Aftersale data: returns, complaints, warranties

g. Camera surveillance

As part of the surveillance of our parks and business premises, we use camera surveillance. In doing so, we process:

  • Security camera images: for security and surveillance purposes
  • Time stamps: date and time of recording

Camera images are kept according to the legal retention periods and used only for safety and security purposes.

Suppliers - service providers

From our suppliers and B2B partners, we may additionally process the following data

  • Contractual data: company name, address, VAT number, agreement details
  • Contact details: contact name, e-mail address, phone number
  • Payment and billing data: bank details, invoices, payment details
  • Platform account details: registration details for accessing portals or platforms
  • Feedback and testimonials: reviews and experiences of our collaboration
Applicants ( Jobwebsite )

In addition, we may process the following data on candidate employees. Of course, this will largely depend on what data you yourself wish to provide us with in relation to your application

If you apply for a position at Studio Plopsa we process:

  • Identification data: surname, first name, date of birth
  • Contact details: address, e-mail address, phone number
  • Work-related data: CV, work experience, educational data
  • Personality data: cover letter, hobbies, interests (if stated)
  • Photos: if voluntarily attached to the application

Unless you have given your explicit consent, your data will only be used for the application process and will not be kept longer than necessary for the assessment of your application.

Directors and shareholders

For directors and shareholders of Studio Plopsa, we may process the following data:

  • Identification data: name, first name
  • Contact details: address details, e-mail address, phone number
  • Data from the UBO register
  • Financial data: bank and disbursement details, dividend payments and financial holdings
  • Data relating to meetings and director structure: invitations and attendance records at board and shareholder meetings, director structure and functions within the company, records and voting results of meetings, shareholder communication data
  • Data relating to shareholders

4. For what purposes do we process your data?

We process your data for the purposes described below and do not collect and process more and no other types of data than those required for these purposes.

Personal data is processed exclusively within the scope of our business activities and in particular for the following purposes:

  • Within the framework of our main activities
    • Amusement park and swimming pool profits
    • (Online) sales of tickets and subscriptions, online webshop
    • Organising and facilitating events
    • Hotel service and holiday home/camping site rental
    • Within the framework of our internal operations and obligations as a company
  • Marketing and communication
  • Events and competitions
  • Meeting administrative and tax obligations
  • Communication with customers and prospects
  • Camera surveillance and security
  • Recruitment procedure and employee management

5. On what grounds do we process your data?

We only process your data to the extent based on one of the processing grounds listed in the GDPR, and as shown below.

Legal obligation

Certain data are processed by us to comply with legal or regulatory obligations incumbent on us. For example, in the context of tax and accounting obligations, employment law obligations or in the field of data protection.

Necessary for the performance of the agreement

Certain data are processed by us because it is necessary for entering into, performing or terminating an agreement with you as a data subject, such as for processing and delivering tickets, access control and customer service; for creating, managing and renewing subscriptions; for processing orders, payments and deliveries in our web shop; for registration, communication and follow-up of participation in events or competitions; for executing employment contracts and managing personnel files.

Legitimate interest

We process certain data on the basis of legitimate interest, provided that our interests outweigh possible harm to your rights and freedoms. This is the case, for example, for promoting our activity, events and products to existing customers or business contacts (B2B marketing); for collecting feedback, handling complaints and improving our services and products; for improving the functionality of our websites and analysing user behaviour (using analytical cookies); for the protection of our premises and parks; for preserving and using evidence in the context of liability, disputes or legal proceedings; for business reporting, statistics and archiving activities.

Medical data processed by our first aid services that does not fall under an emergency (such as minor injuries, e.g. an abrasion) is processed based on our legitimate interest. This data is only processed to provide necessary care when you use our first aid services.

Permission

We process certain data on the basis of your consent. This means that we only process your data after you have given your explicit consent. You always have the right to withdraw this consent. This applies, for example, for sending personalised newsletters, offers and promotions; for collecting data on your surfing behaviour for analytical and marketing purposes; for the use of photos, videos and testimonials on our website, social media and promotional materials; for storing your application data for future vacancies; for processing personal data of minors under 16 years of age, subject to the consent of a parent or guardian.

Vital interests and public order

In exceptional cases, we process data to protect a person's vital interests (for example, in the event of an emergency at our parks, swimming pools, hotels or event venues) or to maintain public order, such as cooperation with judicial or police investigations. This is, for example, providing first aid by our first aid service in medical emergencies such as serious injuries or unconsciousness, contacting an emergency contact person, providing essential medical data to emergency services, sharing camera images with judicial authorities in an investigation of theft or vandalism.

Non-emergency medical data is processed on the basis of our legitimate interest.

6. Origin of data

Direct

We also obtain most of the data we process from you directly. For example, when you buy tickets for our parks or events; subscribe to our newsletter or marketing campaigns; contact us via our website, social media or customer service; make a purchase in our webshop; apply for a position at Studio Plopsa; visit our websites; visit our parks or business premises.

Obtained from third parties

Within the scope of our services, we may obtain data from you through external service providers or public sources. For example, if you follow or contact us through social media, we may receive data according to the privacy settings of your account; for joint events, competitions or promotions in cooperation with business partners or sponsors; through external recruitment agencies or job websites when you apply for a position at Studio Plopsa; public sources such as trade registers or public social media profiles, if relevant for business contacts and B2B relationships.

Please know that when you visit our pages on Facebook, X, Instagram, LinkedIn or TikTok, whether or not via a shortcut on our website, cookies are processed by Facebook, X, Instagram, LinkedIn or TikTok respectively. On this basis, we can obtain more information - in a completely anonymised way - about the audience visiting our social media pages. For more information on why and how personal data are processed in that context, please refer to the privacy policy and cookie policy on the websites of these platforms (Facebook: privacy policy - cookie policy, X: privacy policy - cookie policy, Instagram: privacy policy - cookie policy, LinkedIn: privacy policy - cookie policy, TikTok: privacy policy - cookie policy).

Data of minors

In some cases, we process personal data of minors, such as when a parent or guardian purchases a ticket or subscription for a child. We obtain this data directly from the parent or guardian during the purchase process or with the consent of the parent or guardian, as required by the GDPR.

Automatically collected data

When using our websites and webshop, we collect certain data automatically, such as electronic identification and usage data (IP address, browser type, device and location data), cookies and similar technologies, behavioural data (pages visited, duration of visit, interaction with online ads). See our Cookie Policy for more details on the use of cookies and how to manage your preferences.

7. With whom do we share your data?

With Studio 100 NV

Studio Plopsa NV is a subsidiary of Studio 100 NV and acts as (sub-)holding company for all theme parks based on Studio 100 characters. In this context, operational data may be shared with Studio 100 NV exclusively for administrative, operational and strategic purposes.  

In addition, customer data may also be shared with Studio 100 NV for marketing and communication purposes, provided this complies with applicable privacy legislation. For example, customers who buy tickets for a Plopsa park or show may in that case receive marketing messages about Studio 100 productions and events. This data sharing only takes place if there is a legitimate interest and the processing complies with the law, the customer has given explicit consent or can reasonably expect such data sharing to take place.

Data that may be shared in this context includes contact details such as name, email address and telephone number, as well as purchase history and preferences regarding Studio Plopsa products and services. Interaction data with marketing campaigns and events may also be shared. This data sharing aims to provide customers with a more personalised experience. This includes sending personalised offers and promotions that match customers' interests, as well as newsletters and updates on Studio 100 and Studio Plopsa events and activities.

Customers retain the right to object to the processing of their data for marketing purposes at any time. In addition, they can adjust their preferences or unsubscribe via the opt-out mechanisms indicated in marketing messages. More information on your rights can be found in article 11. 
This data sharing is always done in accordance with the GDPR and within the framework of a processor agreement or joint processing responsibility agreement, with appropriate safeguards in place to protect your personal data

Within the Studio Plopsa Group

Your data may be shared within the Studio Plopsa Group to provide you with a unified and personalised experience, as well as for administrative and operational purposes. This means that your data may be accessible to Studio Plopsa SA for group-wide processing such as customer management, marketing activities and central administration, as well as its subsidiaries.  

This data sharing is done only on a need-to-know basis and is limited to what is necessary for the performance of our services and operational activities. All entities within the Studio Plopsa Group are contractually bound to ensure the confidentiality of your data and to comply with the GDPR.  

With third parties outside the Studio Plopsa Group

We will not pass on your data to third parties outside the Studio Plopsa Group unless this is strictly necessary in the light of the above-mentioned purposes, or if we are legally obliged to do so.

External service providers (processors)  

Where necessary, we use external service providers (processors) to support our operational purposes, such as the management of our websites, IT systems, and marketing campaigns. Where appropriate, these external service providers carry out certain data processing operations on our behalf and in accordance with our instructions.  

We will only share your data with these external service providers to the extent necessary for the relevant purpose. The data may not be used by them for other purposes. Moreover, these service providers are contractually bound to ensure the confidentiality of your data by means of a "processor agreement" concluded with these parties.  

Specifically, where relevant in your situation, we share your data with the following third parties for the following purposes, with these third parties acting as processors on our behalf in certain cases: 

  • Postal, transport and delivery companies if we need to send you something by post;  
  • Payment service providers if we receive payments from you, or vice versa;  
  • External representatives and consultants or any other parties involved in the context of our main or ancillary activities;  
  • The processors who assist us in IT to operate our organisation, with a view to secure and efficient digital data management within our organisation;
  • Marketing partners to run marketing campaigns;
  • Government bodies, judicial authorities and practitioners of regulated professions such as accountants and lawyers, for the purpose of complying with our legal obligations and defending our interests, as required.

8. How long do we keep your data?

We do not keep your data for longer than necessary for the purpose for which the data was collected or is processed. Since the period for which data can be kept depends on the purposes for which the data was collected, the storage period may vary in each situation. Sometimes specific legislation will require us to keep the data for a certain period of time. Our retention periods are always based on legal requirements and a balancing of your rights and expectations with what is useful and necessary to fulfil the purposes. At the end of the retention period, your data will be deleted or anonymised.  

9. Where do we store your data and how is it protected?

We provide appropriate technical and organisational security measures to avoid, within the scope of our activities, the destruction, loss, falsification, modification, unauthorised access or unauthorised disclosure to third parties as well as any other unauthorised processing of this data.

We are also careful to ensure that the processors we rely on also take appropriate security measures to minimise risks of incidents.

The data we process remains within the European Economic Area (EEA) at all times.

If, when using specific services or software tools, your data is processed outside the European Economic Area (EEA), it will only be processed in/to countries that have been confirmed by the European Commission to ensure an adequate level of protection of your data, or measures will be taken to ensure the lawful processing of your data in these third countries.

10. Automated decision-making

Automated decision-making is defined as decisions about individuals based solely on automated data processing that produce legal effects or significantly affect the individuals concerned.

As a starting point, your data will not be used for automated decision-making. We will not make any decision solely on the basis of automated processing of your personal data.

11. What are your rights?

You have various rights regarding the data we process about you. If you wish to invoke any of the rights set out below, please contact our GDPR Officer using the contact details included under the first title of this Privacy Policy.

Right of inspection and copy

You have the right to access your data and obtain a copy thereof. This right also includes the possibility of requesting further information on the processing of your data, including on the categories of data processed about you and for what purposes.

Right of adaptation or rectification

You have the right to have your data amended if you believe we have incorrect data.

Right to exchange data (right to oblivion)

You have the right to request that we delete your data without unreasonable delay. However, we will not always be able to comply with such a request, including when we still need the data in function of an ongoing contract, or when keeping certain of your data for a certain period of time is required by law.

Right to restriction of processing

You have the right to restrict the processing of your data. In this way, the processing is temporarily stopped until, for example, there is certainty about its accuracy.

Right to withdraw your consent

Where processing is based on your consent, you have the right to withdraw this consent at any time by contacting us. For marketing messages you receive from us via e-mail based on your consent, you can easily withdraw this consent by clicking on the unsubscribe link at the bottom of any such message.

Right of objection

You have the right to object to the processing of your data based on legitimate . This should be based on reasons specific to your situation. You may also object to the use of your data for direct marketing purposes. An opt-out will always be provided for marketing messages by e-mail.

Right of transferability

You have the right to obtain in electronic form your data that you yourself have provided to us with your consent or in execution of a contract. That way, they can be easily transferred to another organisation. You also have the right to request us to transfer your data directly to another organisation, if this is technically possible.

Right to complain to your supervisory authority

If you should consider that we process your data in an incorrect way, you always have the right to lodge a complaint with your data protection supervisory authority.

Belgian Data Protection Authority (GBA)
Printing Press Street 35
1000 Brussels
contact@apd-gba.be

12. How can you exercise your rights?

You may exercise your rights by contacting us, either by e-mail to DPO@plopsa.be or by post to De Pannelaan 68, 8660 De Panne, provided that you enclose a copy of the front of your identity card or other document identifying you. The copy will only be used to identify you in accordance with the GDPR.

13. Changes

We reserve the right to change this Privacy Policy. The most recent version is available on our websites at all times. The date on which this Privacy policy was last amended can be found at the top. In the event of a substantial change to the Privacy policy, we will inform those affected by it directly if possible.