Privacy policy

Who is responsible?

Barn038 is the cultural meeting place in the barn at Boerderij de IJsselhoeve, Geldersedijk 99, Hattem, the Netherlands. Payments and donations are handled by Stichting Vrienden van de IJsselhoeve.

Controller and contact for privacy questions: info@barn038.com.

What data do we collect and why?

We only process data you give us yourself:

• Reservations and tickets: your name and email address, the number of seats, your chosen amount and any answers to event questions. Purpose: to process your reservation, send your ticket and confirmation, and check you in at the door. Basis: performance of the contract.
• Proposing an event (form on the contact page): your name, email address, optional phone number and description. Purpose: to get in touch about your idea. Basis: your consent and the preparation of a possible agreement.
• Payment point (coffee or donation via QR): we ask for no personal data here. The payment itself is handled by Mollie.

Payments

Payments are handled by Mollie B.V. We never see your full payment details (such as your account or card number); Mollie processes those as an independent processor. We only receive whether a payment succeeded and the amount, for our records.

Who do we share data with?

We never sell your data and only share it with parties that help us deliver the service, under a data processing agreement:

• Mollie B.V. (Amsterdam) - handling payments and donations.
• MailerSend (EU) - sending confirmation and ticket emails.
• TransIP B.V. - hosting of the website and database, in the Netherlands.
• Otherwise only when we are legally required to.

Booking The Barn

When an event is published, we automatically reserve the room in the farm's calendar to avoid double bookings. For this we only share the event's title and time, no visitor data.

Cookies

We use no tracking or advertising cookies and no visitor analytics. We only set technically necessary cookies: remembering your language choice and, for administrators, a login session. No cookie banner is needed for this.

Security

Your data is sent encrypted (HTTPS). We store your name and email address encrypted in our database (AES-256). Only authorised administrators have access, each with a personal account.

How long do we keep your data?

We do not keep your data longer than necessary. We anonymise or delete contact data no later than 3 years after your last visit or contact. Data related to a payment we keep for 7 years, because we are legally required to (fiscal retention obligation).

Your rights

You have the right to access, correct or erase your data, to restrict or object to processing, and to data portability. You can withdraw any consent at any time.

Send your request to info@barn038.com; we respond within one month. If you disagree with something, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Changes

We may update this privacy policy if our way of working changes. The current version is always on this page.