Privacy Policy
Last updated: 1 September 2026
The Oasis respects your privacy and processes personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR/AVG).
1. Who is responsible for your data
The controller responsible for processing your personal data is:
The Oasis Adventure
Hoogtedwarsstraat 22, 5021 PB Tilburg, The Netherlands
KvK: 99949261
Email: info.oasisadventuretrip@gmail.com
2. Personal data we process
Depending on how you use this website, we may process:
- your name;
- your email address;
- your telephone number, where you choose to supply it;
- the information you provide in the interest-registration form (such as age range, country, activity preferences and any message);
- communications you send us through the contact form or by email;
- booking information, once paid booking launches;
- payment and administrative information, once paid booking launches;
- limited technical information processed by our hosting and backend providers to deliver and secure the website.
We do not ask for medical, health, disability or insurance documentation through this website.
3. Purposes and legal bases
| Purpose | Typical legal basis |
|---|---|
| Responding to enquiries | Legitimate interest / steps requested by you |
| Interest registration | Consent, or legitimate interest where appropriate |
| Event booking | Performance of a contract |
| Payment administration | Contract / legal obligation |
| Accounting and tax records | Legal obligation |
| Optional marketing | Consent |
| Website security | Legitimate interest |
- Purpose
- Responding to enquiries
- Typical legal basis
- Legitimate interest / steps requested by you
- Purpose
- Interest registration
- Typical legal basis
- Consent, or legitimate interest where appropriate
- Purpose
- Event booking
- Typical legal basis
- Performance of a contract
- Purpose
- Payment administration
- Typical legal basis
- Contract / legal obligation
- Purpose
- Accounting and tax records
- Typical legal basis
- Legal obligation
- Purpose
- Optional marketing
- Typical legal basis
- Consent
- Purpose
- Website security
- Typical legal basis
- Legitimate interest
4. Marketing communications
Marketing messages that require consent are only sent after you have given valid, separate consent. Marketing consent is always kept separate from essential event-related communications.
Every marketing message contains an easy way to unsubscribe, and you can withdraw your consent at any time by emailing info.oasisadventuretrip@gmail.com.
5. Service providers
We may use trusted service providers to operate our website and event services, for example hosting, database, email, payment and activity providers. Personal data is shared only where reasonably necessary and subject to appropriate legal safeguards.
Providers currently used to operate this website:
- Lovable — website hosting and deployment platform.
- Supabase — database used to store interest registrations and contact-form messages.
- Google Fonts — delivery of the website typeface.
Additional providers (for example a payment provider, an email delivery provider and professional activity providers) will be added to this list when paid booking opens.
6. International transfers
Where personal data is processed outside the European Economic Area, we will use appropriate GDPR safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses, together with any additional measures required in the circumstances.
7. Retention
- Enquiries and contact-form messages: retained for a reasonable period after the matter has been resolved.
- Interest registrations: retained while reasonably relevant to The Oasis registration process, or until you withdraw your consent where consent is the basis.
- Marketing consent: retained until you withdraw it, with limited suppression records where appropriate so that we do not contact you again.
- Contractual and accounting information: retained for the applicable statutory retention period.
8. Security
We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No website or system can be guaranteed to be completely secure, but we review our measures and work with providers that apply recognised security practices.
9. Your rights
Subject to the conditions of applicable data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data rectified;
- request erasure of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive your data in a portable format, where applicable;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise these rights, email info.oasisadventuretrip@gmail.com.
10. Supervisory authority
If you believe your data is not handled correctly, you may lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or with another competent supervisory authority in the EU/EEA country where you live or work.
11. Cookies
Information about the cookies and similar technologies used on this website is set out in our Cookie Policy.