Privacy & cookies
Your data at NIUS.
In short: we only ask for what we need to help you. We don’t sell anything on, we don’t send you advertising unless you ask for it, and this website doesn’t track you.
Who is responsible
Loubri B.V., trading as NIUS Beach House
Boulevard Paulus Loot, strandafgang 5, 2042 AA Zandvoort
Chamber of Commerce (KvK) 80429920
Email: [email protected] · phone: 085 087 14 85
What we receive from you, why and for how long
You ask a question by email, WhatsApp or phone
- Which data
- Your name, your contact details and what you ask us.
- What for
- To answer your question.
- Legal basis
- Our legitimate interest in answering guests’ questions (Art. 6(1)(f) GDPR).
- How long
- Your name, phone number and address: seven years. Your email address: for as long as you keep coming to us; after seven years without a visit or contact, we delete it.
You book a table
- Which data
- Your name, email address, phone number, the date, the time, the number of people and any comments you add yourself.
- What for
- To record and confirm your booking and to prepare properly for your visit.
- Legal basis
- The performance of the agreement you make with us (Art. 6(1)(b) GDPR).
- How long
- Your name, phone number and address: seven years. Your email address: for as long as you keep coming to us; after seven years without a visit or contact, we delete it.
You request a proposal for a party, wedding or team day
- Which data
- Your name, contact details, the date, the number of guests and your requirements.
- What for
- To draw up a proposal and, if you book, to organise your event.
- Legal basis
- Steps taken at your request before an agreement, and then its performance (Art. 6(1)(b) GDPR).
- How long
- Your name, phone number and address: seven years. Your email address: for as long as you keep coming to us; after seven years without a visit or contact, we delete it. We keep the records of a booked event for seven years, as required by law.
You buy a gift voucher
- Which data
- Your name, email address, your postal address if sent by post, and the payment.
- What for
- To deliver the gift voucher and process the payment.
- Legal basis
- The performance of the purchase (Art. 6(1)(b) GDPR) and the statutory obligation to keep records (Art. 6(1)(c) GDPR).
- How long
- Seven years, due to the statutory obligation to keep records.
You apply for a job
- Which data
- Your name, contact details, your age if you mention it, and what you tell us about yourself.
- What for
- To assess your application and get in touch with you.
- Legal basis
- Steps taken at your request before an employment contract (Art. 6(1)(b) GDPR).
- How long
- Up to four weeks after the application process ends. If we may keep your data longer for a future vacancy, we’ll ask you separately, and we’ll keep it for a year at most.
You visit this website
- Which data
- Technical data that every website receives, such as your IP address and browser type.
- What for
- To show you the page and protect the website against misuse.
- Legal basis
- Our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR).
- How long
- Briefly: only for as long as our hosting provider needs it for security.
Statistical research. To improve our service, we look at figures such as the number of bookings per day or the size of groups. The results are always aggregated and cannot be traced back to you. We keep such anonymous data indefinitely.
The website itself has no database. Whatever you fill in on the enquiry or application forms stays on your own device until you send it yourself by email or WhatsApp.
Allergies and dietary requirements. We don’t ask about your health. If you tell us about an allergy yourself, we only use that information to prepare your food safely, and we don’t keep it any longer than necessary for your visit.
Children. Our website is not intended to collect data from visitors under the age of 16 without the consent of a parent or guardian. If you think we have done so, email [email protected] and we’ll delete that data.
We don’t process data about your browsing behaviour and we don’t make decisions about you that are taken solely by a computer.
Who receives your data
We only share your data with parties we need in order to help you:
Guestplan (eTender B.V., Amsterdam)
Our booking system. Processes data on our behalf.
Stripe
The payment service in the booking window, among other things to prevent fraud. Works via Guestplan. May process data outside the EU (see below).
Gifty (Gifty B.V., IJsselstein)
Sale and delivery of gift vouchers. Processes data on our behalf.
Hostnet
Our email. Processes data on our behalf.
Cloudflare
Hosting and securing this website. Processes data on our behalf. May process data outside the EU (see below).
WhatsApp (Meta)
Only if you send us a message via WhatsApp yourself. WhatsApp is responsible for its own processing; WhatsApp’s privacy policy applies.
Billies Beach Sauna
You book sauna sessions on the Billies website. Billies is responsible for its own processing; Billies’ privacy policy applies.
We make agreements with the parties working on our behalf about the security and confidentiality of your data. Otherwise, we only pass on data if the law requires us to, for example to the Dutch Tax Administration.
Data outside the European Union
Cloudflare and Stripe may also process data in the United States. They participate in the EU-US Data Privacy Framework. For that framework, the European Commission has decided that data is adequately protected there. The European Commission’s standard contractual clauses also apply.
Cookies
This website does not use cookies to track you or to show adverts, and does not measure your visit with analytics. We load the fonts and the weather via our own server, so nothing about you is passed on to others in the process.
Third-party cookies are only placed if you choose a service yourself that requires them. That’s why you don’t see a cookie banner: cookies that are needed for a service you request yourself do not require consent (Dutch Telecommunications Act, art. 11.7a).
__stripe_mid · Stripe
When: only once you tap Book. What for: to prevent fraud with payments in the booking window. How long: 1 year.
__stripe_sid · Stripe
When: only once you tap Book. What for: to prevent fraud with payments in the booking window. How long: 30 minutes.
m · Stripe (m.stripe.com)
When: only once you tap Book. What for: to prevent fraud with payments in the booking window. How long: just over 1 year.
Gifty’s gift voucher window did not place any cookies when we checked. You can always delete cookies yourself in your browser settings.
Security
We take the protection of your data seriously and take appropriate measures against misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration:
- the website only works over a secure connection (https, shown by the padlock in the address bar);
- our hosting provider protects the website with a firewall and against attacks;
- only the people handling your question, booking or application can see your data.
If you feel your data is not properly secured, or you see signs of misuse, email [email protected].
Your rights
You have the right to:
- ask which data we hold about you;
- have incorrect data corrected;
- have your data deleted;
- have the use of your data restricted;
- object to the use of your data;
- receive your data in a format you can pass on to someone else;
- withdraw any consent you have given at any time.
To do so, email [email protected]. We’ll respond as quickly as possible, and within four weeks at the latest. To make sure the request concerns your own data, we may ask you to confirm who you are.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
If anything changes in how we handle your data, we’ll update this page. You’ll then see the new date at the bottom.
Updated on 26 October 2026.