Privacy Policy | Adam and Eve Amsterdam Food Tours

Last updated: 11 June 2026

1. Introduction

This Privacy Policy explains how Unthinkable Experiences B.V., operating under the brand “Adam and Eve” (“Adam and Eve”, “we”, “us”, “our”), collects and processes your personal data when you visit our website, contact us, make a booking, or join our tours.

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

Please read this policy carefully. If you have any questions, you can contact us using the details in section 2 below.

2. Who We Are and How to Contact Us

Controller Unthinkable Experiences B.V. Oostelijke Handelskade 1213 1019 DN Amsterdam The Netherlands

Email: contact@adamandevetours.com Phone: +31 6 23028032 Website: https://adamandevetours.com/

KvK (Chamber of Commerce) number: 98895591

For any questions or requests about this Privacy Policy or your personal data, please contact us at contact@adamandevetours.com.

Data Protection Officer (if appointed) If we appoint a Data Protection Officer (DPO) in the future, we will add their contact details here.

3. What Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Data you provide directly

Contact details: name, email address, phone number, country of residence.
Booking details: tour type, date and time, number of participants, language preferences, hotel name or accommodation details, special requests.
Participant details: names of participants, age range (e.g., to check legal drinking age), dietary requirements, mobility information, other relevant health information you choose to share to adapt the tour.
Payment information: payment status, method of payment, and transaction reference (card details are usually processed directly by our payment provider and are not stored by us in full).
Communication data: emails you send us, messages via messaging platforms, feedback and complaints.
Website form data: when you use our contact form we collect your name, email address, your message, and any booking details you add (tour, date, group size). When you sign up for one of our email lists we collect your email address and, if you fill them in, your first and last name. This data goes to Brevo, our EU-based email provider, so we can reply and send you the emails you asked for. See section 7.
Marketing preferences: newsletter opt-in/opt-out status, consent to receive offers.

3.2 Data we collect automatically

Our website runs no analytics or tracking scripts. We do not follow which pages you view or how you move around the site.

Some technical data is still processed to deliver the site and its core functions:

Hosting logs: our hosting provider (Cloudflare) processes technical data such as IP address and browser type to serve the site and protect it against attacks.
Booking and review services: when you open the booking window (FareHarbor) or a page loads our review widget (Trustindex), those services may process similar technical data to deliver their function.

For the cookies these services use, see section 6 and our Cookie Policy.

3.3 Data we receive from third parties

We may receive some data about you from:

Online travel agencies (OTAs) and travel agents you book through (e.g., booking reference, names, contact details, tour details, special requests).
Payment providers (payment status, fraud-prevention signals).
Marketing partners and social media platforms (if you interact with our ads or social pages and have consented to such sharing).
Review platforms (e.g., your name, rating and review text if you publish a review about our tours).

4. Purposes and Legal Bases for Processing

Under the GDPR, we must have a legal basis for each processing activity.

We process your personal data for the following purposes:

4.1 To handle enquiries and provide customer service

What we do: answer your questions by email, contact form, phone or social media; provide quotes and information about our tours.
Performance of a contract or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Our legitimate interest in responding to potential customers (Art. 6(1)(f) GDPR).

4.2 To manage bookings and deliver our tours

What we do: process bookings, send confirmations and pre-tour information, allocate guides, coordinate with suppliers (e.g., boat operators, restaurants), manage changes and cancellations.
Performance of a contract with you (Art. 6(1)(b) GDPR).

4.3 To process payments and comply with legal obligations

What we do: handle payments, issue invoices, keep financial records, prevent fraud.
Performance of a contract (Art. 6(1)(b) GDPR).
Compliance with legal obligations, for example tax and accounting rules in the Netherlands (Art. 6(1)(c) GDPR).

4.4 To tailor tours to your needs (dietary, mobility and other preferences)

What we do: use information you provide on dietary requirements, allergies, mobility or health limitations to adapt the tour where possible.
Performance of a contract (Art. 6(1)(b) GDPR).
Insofar as this involves special categories of data (e.g., health information), we rely on your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR).
Important: You are not required to provide such information, but if you choose not to, we may be unable to make specific adjustments.

4.5 To send you marketing communications

What we do: send newsletters, updates about new tours, and special offers; show you tailored content.
Your consent when you subscribe to our newsletter (Art. 6(1)(a) GDPR), or
Our legitimate interest in promoting similar services to existing customers, where local rules allow (Art. 6(1)(f) GDPR).
You can withdraw your consent or opt out of marketing at any time (see section 9).

4.6 To operate and improve our website and services

What we do: keep the website running and secure, fix errors, test new functions, and improve our tours and customer experience.
Our legitimate interest in running a secure and efficient business and improving our services (Art. 6(1)(f) GDPR).

4.7 To comply with legal requirements and handle disputes

What we do: store data needed for tax, accounting, complaint handling, and to establish, exercise or defend legal claims.
Compliance with legal obligations (Art. 6(1)(c) GDPR).
Our legitimate interest in protecting our rights and defending against claims (Art. 6(1)(f) GDPR).

5. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described above, or as required by law.

In general:

Booking data and invoices: kept for up to 7 years to comply with Dutch tax and accounting requirements.
Enquiries that do not lead to a booking: kept for up to 2 years after our last contact.
Complaints and legal claims: kept for the duration of the claim and up to 5 years after resolution (or longer if required by law).
Newsletter data: kept until you unsubscribe or we stop sending newsletters.
Cookies and similar technologies: stored for the duration indicated in our Cookie Policy and/or in your cookie settings.

When data is no longer needed, we will delete or anonymise it.

6. Cookies and Similar Technologies

Our website uses a small number of cookies, set by the services that make it work: FareHarbor for booking and Trustindex for review widgets. We set no analytics cookies, no marketing cookies, and no advertising trackers. You can manage cookies through your browser settings. For the full list and what each cookie does, see our Cookie Policy.

We do not sell your personal data, and we do not share it with anyone for their own marketing. We may share it with the following categories of recipients, only where necessary for the purposes listed in section 4:

Our own team: employees and authorised freelancers (e.g. guides), but only where access is needed to perform their tasks.
Booking and payment platform: we use FareHarbor to manage online reservations and process payments for our tours. FareHarbor processes your booking details and payment information on our behalf.
Email provider: we use Brevo, an EU-based company, to send our newsletters and to deliver the messages you send through our website forms. When you submit a form, your name, email address and message go to Brevo so we can reply and, if you signed up, send you the emails you asked for. Brevo processes this data on our behalf and does not use it for its own purposes.
Website hosting: our website is hosted on Cloudflare, which processes technical data (such as IP addresses) to serve and protect the site.
Tour suppliers: guides, boat operators, restaurants, venues and transport companies, but only where they need limited information (e.g. your name, group size, dietary needs) to perform the service.
OTAs and travel agents: if you booked through an OTA or travel agent, they act as separate controllers of your data. We and they may need to share limited information to manage your booking and provide the tour.
Authorities and advisers: where required by law, or to protect our rights or respond to legal claims, we may share data with public authorities, regulators, insurers, lawyers or courts.

If we ever intend to share your data in other ways, we will inform you and, where required, ask for your consent in advance.

8. International Transfers

Some of our service providers may be located outside the European Economic Area (EEA) or may store data on servers outside the EEA (for example, certain IT or marketing tools).

When we transfer personal data outside the EEA, we will ensure that:

The European Commission has recognised the country as providing an adequate level of data protection (adequacy decision), or
We use appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other mechanisms recognised by the GDPR.

You can contact us if you would like more information about the safeguards we use for international transfers.

You have several rights in relation to your personal data.

Subject to certain conditions, you have the right to:

Obtain confirmation as to whether we process your personal data and, if so, receive a copy.
Have inaccurate or incomplete personal data corrected.
Have your personal data deleted in certain situations, for example, when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
Ask us to limit the processing of your data, for example, while we check its accuracy.
Receive personal data you provided to us in a structured, commonly used and machine-readable format and transmit it to another controller where technically feasible and where the processing is based on consent or contract.
Object at any time to processing based on our legitimate interests, including profiling, and we will stop unless we have compelling legitimate grounds.
Object to the use of your data for direct marketing at any time; if you do, we will stop sending such communications.
Where we rely on your consent (for example, for newsletters or certain cookies), you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at contact@adamandevetours.com.

We may need to verify your identity before responding to your request. We will respond without undue delay and in any case within the time limits set by the GDPR. Information is provided free of charge, unless your request is clearly unfounded or excessive.

10. Right to Lodge a Complaint

If you believe that we have not handled your personal data correctly, you can always contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which is the supervisory authority in the Netherlands:

Autoriteit Persoonsgegevens PO Box 93374 2509 AJ The Hague The Netherlands

Website (incl. complaint form): https://autoriteitpersoonsgegevens.nl/

If you live in another EU/EEA country, you may also contact your local supervisory authority.

11. Children

Our website and services are not intended for children under 16. We do not knowingly collect personal data from children under 16 without the consent of a parent or legal guardian.

If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will delete such data where required by law.

12. Is Personal Data Required?

When we ask for personal data, we will tell you whether it is necessary:

Some information is required to enter into or perform a contract (for example, name, contact details, booking details). If you do not provide it, we may not be able to process your booking or deliver the tour.
Other information is optional, but may be helpful to tailor the experience (e.g., dietary or mobility information) or to send you marketing (newsletter).

13. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, in line with industry standards and GDPR requirements.

These measures include, for example:

Limiting access to personal data to authorised staff and suppliers.
Using secure connections (HTTPS) on our website.
Using passwords and access controls for systems.
Regular updates and security measures for our IT infrastructure.

However, no transmission of data over the internet can be guaranteed to be completely secure. You use our website and services at your own risk, while we do our best to protect your data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example, to reflect changes in our services, legal requirements or technical developments.

The date at the top of this page shows when this Privacy Policy was last updated. The current version is always available on https://adamandevetours.com/. We recommend that you review it regularly.

If the changes are significant or required by law, we may inform you by email or via a notice on our website.

15. SMS and Text Message Communications

When you book a tour with us through FareHarbor or by contacting us directly, you give us your mobile phone number. We may send you text messages for the following reasons:

Booking confirmations, reminders, and meeting point details
Updates or changes related to your tour (for example, weather changes or last-minute schedule changes)
A short follow-up message after your tour to ask about your experience

The number of messages varies based on your booking. Message and data rates may apply, depending on your mobile carrier and plan.

You can opt out at any time by replying STOP to any text we send. We will stop sending you SMS once we receive your request. Reply HELP if you need help, or contact us at contact@adamandevetours.com or +31 6 23028032.

We do not share your mobile phone number or SMS opt-in information with any third party for marketing or promotional purposes. Mobile information stays with us and our SMS provider (Twilio), and is used only to send you the messages described above.