General Data Protection Policy

The Data Controller of personal data is ‘Pairi Daiza S.A.’ (hereinafter referred to as the “Data Controller”) – Domaine de Cambron, 1, 7940 Brugelette – BCE: 0629.878.507.

Pairi Daiza has appointed a Data Protection Officer (hereinafter referred to as the “DPO”).

You can contact the DPO by email at: “[email protected]” or by mail at: “Domaine de Cambron, 1 – 7940 Brugelette.”

The DPO’s responsibilities include informing and advising the Data Controller, monitoring compliance with the Regulation, assisting with impact assessments when necessary, and acting as the point of contact for the Data Protection Authority (DPA).

Pairi Daiza, as the Data Controller, or the service providers acting on behalf of and for Pairi Daiza, may collect and process personal data necessary to achieve the following purposes:

Personal Data	Purpose of Processing	Legal Basis	Retention Period
Identification data, contact details	Creation of a customer file for the online sale of tickets, subscriptions, stays, or consumable products	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	Until the end of the (pre-)contractual relationship or until the request is processed/resolved.
Identification data, contact details, bank data	Billing related to the online sale of tickets, subscriptions, stays, or consumable products	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	Until the end of the (pre-)contractual relationship or until the request is processed/resolved.
Identification data, contact details	Authentication and management of subscriber accounts for the online sale of tickets, subscriptions, stays, or consumable products	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	Until the end of the (pre-)contractual relationship or until the request is processed/resolved.
Identification data, contact details	Provision of tools/price simulators (quotes) for the online sale of tickets, subscriptions, stays, or consumable products	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	Until the end of the (pre-)contractual relationship or until the request is processed/resolved.
Identification data, contact details	Provision of a customer service accessible by phone or email and handling of requests related to the online sale of tickets, subscriptions, stays, or consumable products	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	Until the end of the (pre-)contractual relationship or until the request is processed/resolved.
Identification data, supporting documents	Fraud prevention	Legitimate interest (Art. 6, §1, f GDPR): Pairi Daiza’s legitimate interest in fraud prevention.	Until the end of the visit.
Evaluation content	Conducting satisfaction surveys	Legitimate interest (Art. 6, §1, f GDPR): Pairi Daiza’s legitimate interest in improving its services.	As long as necessary to achieve the survey’s purpose, then anonymized.
Identification data, contact details, application information	Management of job applications and the recruitment process	Legitimate interest (Art. 6, §1, f GDPR): Pairi Daiza’s legitimate interest in recruiting employees.	2 years after data collection for unsuccessful applications.
Identification data, contact details	Creation of statistics, including commercial statistics	Legitimate interest (Art. 6, §1, f GDPR): Pairi Daiza’s legitimate interest in improving its understanding of its customers.	As long as necessary to achieve the statistical purpose, then anonymized.
Identification data, contact details, claims, and/or litigation data	Handling complaints and litigation	Processing is necessary for the performance of pre-contractual measures requested by you or the execution of the contract between you and Pairi Daiza (Art. 6, §1, b GDPR).	5 years after the resolution of the complaint.
Email address and decision to unsubscribe from the newsletter	Compliance with legal provisions for sending newsletters after unsubscribing	Legitimate interest (Art. 6, §1, f GDPR): Proof of compliance with legal obligations and management of disputes or claims.	No time limit, unless the legal basis is no longer justified.
Identification data, contact details	Sending commercial information	Based on your consent (Art. 6, §1, a GDPR).	Until consent is withdrawn. Withdrawal does not affect the legality of data processing before withdrawal.
Connection and navigation data on our site	Implementation of site traffic measurement and customer relationship management	Based on your consent (Art. 6, §1, a GDPR).	12 months after data collection.
Identification data, contact details	Conducting competitions	Execution of the competition.	Up to 6 months after the end of the competition.
Identification data, contact details	Subscription to the newsletter	Based on your consent (Art. 6, §1, a GDPR).	Until consent is withdrawn. Withdrawal does not affect the legality of data processing before withdrawal.
Identification data, contact details	Exercising your GDPR rights	Legal obligations.	10 years from the closure of the request. If proof of identity was required, it will be deleted immediately after verification.

Pairi Daiza only collects personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

We collect data that you provide to us, particularly when:

• you purchase entry or parking tickets online,
• you purchase subscriptions,
• you book a stay at Pairi Daiza Resort,
• you request a quote for a stay at Pairi Daiza Resort,
• you use our services (in person, by phone, or online),
• you create a personal online account,
• you browse our website,
• you complete a contact, request, or complaint form,
• you participate in a competition,
• you apply for a job offer.

The different categories of personal data collected by Pairi Daiza include:

Category	Details
Civil status and identification data	First name, last name, gender, date and place of birth
Contact details	Postal address, email address, phone number
Bank details	IBAN, BIC…
Connection and navigation data on our website	IP address, login credentials for personal online areas
Application information	CV, cover letter
Evaluation content	Evaluation texts, ratings, and optional additional information about the author of the evaluation

If Pairi Daiza discovers that personal data has been collected from a minor under 18 years of age without verifiable consent from their parents/legal guardians, such data will be deleted from our database as soon as possible, in accordance with Article 8 of the GDPR. If you believe that we may have collected information about a minor under 18, please contact Pairi Daiza’s Data Protection Officer by email at: “[email protected]” or by mail at: “Domaine de Cambron, 1 – 7940 Brugelette.”

Pairi Daiza is able to personalize the display of content on its website and send you newsletters tailored to your needs.

This personalization is implemented solely based on the information that Pairi Daiza has directly collected from you during your purchases (and only this information), as well as your navigation data on the Pairi Daiza website, provided that you have accepted optional cookies.

This information also allows Pairi Daiza to better target its advertising campaigns on third-party sites (e.g., social networks) to better match your interests.

The data used for this profiling is based on:

• A maximum history of 5 years concerning your customer account data;
• A maximum history of 12 months concerning your navigation data on our website.

Personal data may be shared with Pairi Daiza’s employees, subcontractors, or suppliers who provide adequate data security guarantees and work with Pairi Daiza in the marketing of products or the provision of services. They act under the direct authority of Pairi Daiza and are responsible for collecting, processing, or subcontracting these data.

In all cases, the recipients of the data and those to whom the data have been disclosed comply with the provisions of this General Data Protection Policy. Pairi Daiza ensures that they process these data solely for the intended purposes, in a discreet and secure manner.

Internal Recipients of Pairi Daiza:
Your data are accessible only to a limited number of individuals within specific departments (customer service, sales, IT, etc.) and only if access to the data is necessary for the performance of their duties.

External Recipients of Pairi Daiza:

• All our technical service providers whose intervention is necessary for the processing operations mentioned above, to handle your orders and improve our services, and strictly within the limits of our instructions;
• Where applicable, to national or local authorities, if required by law or in the context of an investigation and in compliance with regulations.

Your personal data are subject to rules that define their retention periods. Pairi Daiza has implemented a data retention policy in compliance with the applicable Regulation, including the deletion of data once the purpose for which they were collected has been fulfilled or no longer exists. The retention periods for the various data processed are outlined above. Additionally, Pairi Daiza may retain personal data in a secure archive for periods corresponding to the legal statutes of limitations for claims or litigation.

In accordance with the Regulation, you have the following rights regarding your data collected by Pairi Daiza: the right of access, rectification, restriction, and, where applicable, erasure of your personal data:

• Right of Access: You have the right to ask us about the personal data that Pairi Daiza holds about you. We can provide you with a free copy, but not for all documents, as we also aim to respect the rights and freedoms of others.
• Right of Rectification: If you believe your data is incorrect or outdated, you have the right to request its correction.
• Right to Restrict Processing: You can ask us to limit the processing of your personal data.
• Right to Erasure or “Right to Be Forgotten”: You can request the deletion of your personal data. However, if we are legally obliged to retain certain personal data, we may not be able to comply with your request.

You also have the right to object, on legitimate grounds, to the processing of your data and, without justification, at any time and free of charge, to the use of your data for commercial prospecting purposes, including profiling for such purposes.

It is important to note that the rights to object, restrict, or delete your data may be limited when the personal data collected is strictly necessary for the execution of the contract to which you are a party, or when Pairi Daiza is required to collect or retain your data under a legal obligation.

If the processing of personal data is based on your consent, you may withdraw this consent at any time.

You can exercise these rights, by providing proof of your identity, via postal mail to “Pairi Daiza – DPO, Domaine de Cambron, 1 – 7940 Brugelette” or via email to “[email protected].”

Pairi Daiza commits to providing automated tools for exercising your rights, where technically possible, and to responding to your requests free of charge unless your requests are repeated frequently and impose administrative costs due to their volume, in which case these costs will be borne by you. Pairi Daiza will make every effort to respond to any relevant request within thirty (30) days of receipt. However, if the complexity of your request or the volume of information makes it impossible to respond within thirty days, Pairi Daiza will inform you in writing within this period of the reasons for the delay and will make every effort to respond to your request as soon as possible, but no later than two additional months.

If your request is unclear or missing documents, Pairi Daiza may ask you for additional information to process your request within the legal timeframe.

Pairi Daiza reserves the right not to respond to your request if it is deemed manifestly unfounded or excessive and will inform you of the reasons why your request will not be fulfilled.

If you are not satisfied with your interactions with Pairi Daiza, you have the right to file a complaint with the Data Protection Authority.
Rue de la Presse, 35 – 1000 Brussels – [email protected] – https://www.autoriteprotectiondonnees.be/citoyen/agir/introduire-une-plainte

Commercial prospecting operations targeting individuals are based on the prior collection of the data subject’s consent, in the form of an opt-in. This consent can be withdrawn at any time by the data subject, in accordance with their right to withdraw consent as indicated above.

You may therefore receive information about Pairi Daiza’s offers and updates via email. You can oppose future mailings and unsubscribe from the mailing list at any time by exercising your right to object to commercial prospecting, as outlined in Article 6 above.

Pairi Daiza is present on certain social networks. We recommend that you read the data protection policies of these social networks to understand what data they collect about you and for what purposes, particularly for advertising. Pairi Daiza is not responsible for the collection and use of your data by social networks for their own purposes.

Pairi Daiza collects, for its own purposes, the contact details you may provide on the Pairi Daiza pages of these networks in order to respond to your requests in case of dissatisfaction or participation in competitions.

The use of your data by Pairi Daiza for its own purposes is governed by this Data Protection Policy.