Privacy policy

Beyond Routes Privacy Statement
Last updated: 4 October 2026

At Beyond Routes, we process personal data to provide our services properly. Among other things, we use this data to provide travel advice, put trips together and make reservations. We handle personal data with care and in confidence, and use it only for the purposes for which it was collected.

1. Who is responsible for your data?
Beyond Routes is responsible for processing your personal data.

Our details are:
Company name: Beyond Routes
Trading name: Beyond Routes
Address: Curacaostraat 86-3, 1058 CA Amsterdam
Chamber of Commerce number: 96144599
Email address: info@beyondroutes.nl
Telephone number: 06-28820904

If you have questions about your personal data or would like to exercise a privacy right, please contact us at info@beyondroutes.nl.

2. Which personal data do we process?
The data we process depends on your contact with us and the service you purchase from us.

We may process, among other things, the following data:

name, address and contact details;
date of birth, gender and details of fellow travellers;
travel requirements, travel period, budget and preferences;
passport, identity document, visa and driving licence details when these are required for a reservation;
flight, transport and booking details;
invoice and transaction details;
details of an emergency contact;
correspondence and information you provide to us via our website or other communication channels;
technical data about your use of our website;
other information you provide to us that is relevant to your enquiry or trip.

For a trip, it may sometimes be necessary to process information about, for example, dietary requirements, allergies, mobility or health. We only ask for information that is necessary to organise the trip properly. Where this is special category personal data, we process it only when a valid legal exception applies, such as your explicit consent.

We may also receive details of fellow travellers from the lead booker or another fellow traveller. If you provide us with someone else’s details, please inform that person.

3. What do we use personal data for?
We use personal data, among other things, to:

handle enquiries and travel requests and prepare travel proposals;
provide free travel consultations and other advisory services;
book, organise and carry out trips;
make reservations with accommodation providers, transport companies, rental companies, guides and other travel partners;
to process payments and our administration;
to communicate with you before, during and after a trip;
to handle complaints, changes or emergencies;
to secure and improve our website and services;
to send newsletters and offers when you have given your consent or where this is legally permitted;
to comply with legal obligations.

The legal basis for processing depends on the situation. We process personal data when this is necessary to prepare for or perform an agreement, to comply with a legal obligation, on the basis of your consent or because of a legitimate interest of Beyond Routes.

When we rely on a legitimate interest, we weigh this interest against your privacy interest.

4. What are the legal bases for processing data?
We only process personal data where there is a valid legal basis for doing so. Depending on the situation, this may be:

performance of an agreement, for example when we provide travel advice, put together a trip or make reservations for you;
a legal obligation, for example for our financial administration;
your consent, for example for certain marketing activities and cookies. You can withdraw this consent at any time;
a legitimate interest, for example to secure and improve our services or to maintain contact with existing customers, provided that your privacy interest does not outweigh it.

When we process special categories of personal data, such as necessary information about health or dietary requirements, we only do so where a legal exception also applies, for example your explicit consent.

When we rely on a legitimate interest, we weigh our interest against your privacy interest.

5. Who do we share personal data with?
We do not sell your personal data.

To provide our services, we may share personal data with parties that need this information. For example:

DMCs and local travel partners;
accommodation providers, transport companies, rental companies, guides and activity providers;
car hire companies, airlines and other transport providers;
payment and administrative service providers;
our bookkeeper, accountant or administrative service providers;
providers of CRM, booking and travel planning software;
hosting, email, cloud and website providers;
analytics and marketing services;
insurers, guarantee funds, professional advisers and public authorities where this is necessary or legally required.

We do not share more data than necessary.

As we organise travel outside the EEA, it may be necessary to share personal data with local travel partners in the destination country. We only do this where it is necessary to perform the trip or where other appropriate legal safeguards are in place to protect personal data.

You can request more information about a specific international transfer via info@beyondroutes.nl.

6. How long do we retain personal data?
We do not retain personal data for longer than necessary for the purpose for which it was collected or for as long as necessary due to a legal obligation.

In general:

enquiries that do not result in a booking are retained for a maximum of 12 months after the last contact;
passport, identity and other sensitive travel data are deleted as soon as they are no longer needed for the reservation or performance of the trip;
special categories of personal data, such as medical information, are retained for as short a period as possible;
financial records subject to a statutory retention obligation are generally retained for 7 years;
newsletter data are retained until you unsubscribe;
data about cookies and website use are retained in accordance with the periods set out in our cookie statement.

In some cases, we may retain data for longer, for example when this is necessary for a complaint, dispute or other legal obligation.

7. Cookies and website use
Our website uses cookies and similar technologies.

Functional cookies that are necessary for the website to work properly may always be placed. For cookies that require consent, including marketing cookies, we will first ask for your consent via our cookie banner.

You can accept or refuse marketing cookies and change your choice at any time later via the cookie settings at the bottom of our website.

We also use, among other things, Google Analytics to gain insight into the use of our website.

Which cookies and services we use, for what purpose and for how long they are retained is set out in our cookie statement.

8. What rights do you have?
Depending on the situation, you have the right to:

access your personal data;
have inaccurate data corrected;
have data erased;
have processing restricted;
object to processing;
have your data transferred;
withdraw consent previously given.

You can contact us for this via info@beyondroutes.nl. We may ask you to confirm your identity before carrying out a request.

Beyond Routes does not make decisions with significant consequences for you that are based solely on automated processing.

Are you dissatisfied with the way we handle your personal data? Please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority.

10. Security and changes
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Where necessary, we make agreements with suppliers that process personal data on our behalf regarding privacy and security.

We may amend this privacy statement when our services, systems or legislation change. The most recent version is always available on this page.