Legal

Privacy policy & cookies

Last updated: 27 October 2026. This policy explains how CEAL Space V.O.F. handles personal data in line with the EU General Data Protection Regulation (GDPR).

Who we are

CEAL Space V.O.F. is the data controller for this website and our programs.

  • CEAL Space V.O.F., Posthoornstraat 11, 3011 WD Rotterdam, the Netherlands
  • Chamber of Commerce (KvK) 93816138 · VAT NL866537922B01
  • Email ceal.space@gmail.com · Phone +31 623 500 245 · WhatsApp +43 660 645 4859

What we collect

We only collect what we need to answer you and organise your program:

  • Enquiry forms: name, email, phone, school or organisation, country of study, group size, preferred dates and your message.
  • Partnership form: organisation name, representative, email, phone and website.
  • Program participants: the details needed to organise the trip, such as name, date of birth, passport details, emergency contact, and dietary or medical needs that you choose to share.
  • Correspondence by email, WhatsApp, WeChat or other messengers.
  • Website usage through cookies, see Cookies.

Why we use it

  • To reply to your enquiry and prepare a proposal (steps before a contract, GDPR Art. 6(1)(b)).
  • To organise and run the program you booked (performance of a contract, Art. 6(1)(b)).
  • To keep financial and tax records (legal obligation, Art. 6(1)(c)).
  • To improve the website and our programs (legitimate interest, Art. 6(1)(f)).
  • To send news about our programs, only if you agreed (consent, Art. 6(1)(a)). You can withdraw consent at any time.

Medical or dietary information is used only with explicit consent and only to keep participants safe.

Who we share it with

We never sell personal data. We share it only when needed to deliver the program:

  • hotels, transport companies, host universities, schools and guides;
  • travel insurers, if you take insurance through us;
  • IT and email providers that host our data (for example Google Workspace, and FormSubmit, which forwards the website forms to our email);
  • our partner offices Shanghai Qilian Cultural Consulting Co., Ltd. (Shanghai), CEAL HUB Dubai and CEAL.KG (Bishkek), when your group travels through them;
  • authorities, when the law requires it.

When data goes outside the European Economic Area, we use the European Commission’s standard contractual clauses or another legal safeguard.

How long we keep it

  • Enquiries without a booking: up to 2 years after our last contact.
  • Participant data: until 2 years after the program ends.
  • Invoices and financial records: 7 years, as Dutch tax law requires.

Children and minors

Many participants are school students. For participants under 16 we ask a parent or legal guardian to give consent and to share the data. Schools that send groups confirm they are allowed to share their students’ details with us.

Your rights

You can ask us at any time to see, correct or delete your data, to limit or object to its use, or to receive it in a portable format. Write to ceal.space@gmail.com and we will reply within one month.

If you think we handle your data incorrectly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

We protect data with access controls, secure (HTTPS) connections and trusted providers.

Cookies

Cookies are small text files that a website stores on your device. We use them to make the site work, remember your preferences and understand how the site is used.

  • Essential cookies keep the site working (session, load balancing and security). They do not need consent.
  • Preference cookies remember choices such as language.
  • Analytics cookies (Google Analytics) show anonymous, aggregated statistics about which pages are visited.
  • Social media cookies (Instagram, Facebook) are set when you interact with social media content.

We only use preference, analytics and social media cookies after you choose “Accept all” in the cookie notice. You can change your choice at any time with , or delete cookies in your browser settings.

Changes

We may update this policy. The date at the top shows the latest version.