Privacy and Cookie Notice

We are Mysteryland B.V. We are based at Overhoeksplein 31, 1031KS Amsterdam, The Netherlands. You can contact us at if you have questions about data protection, or if you have any requests for resolving issues with your personal data.

In this privacy notice we describe:

  • The ways we collect personal data about you when you buy a ticket for Mysteryland or subscribe to our newsletter, when you visit our website, or when you provide services to us, and why we do so,
  • How we use your personal data, and
  • The choices you have about your personal data.

As a controller, we are committed to a lawful, fair and transparent processing of personal data, adhering to the EU General Data Protection Regulation (GDPR).

1. The data we process
When you buy a ticket, we collect your given names (first name, family name) and any other data that you may provide to us.

When you subscribe to our newsletter, we collect your email address.

When you visit our website, our analytics and advertising providers collect data such as your IP address and mobile device identifiers (such as your device ID, advertising ID, MAC address, IMEI), data about your device, such as device name and operating system, browser type and language, and data about how you use the site.

When you provide services to us, we collect the information that you provide to us, such as your name, email address, telephone number and postal address.

2. What do we use the data for, and on what legal basis
For ticket buyers, to be able to provide you with access to Mysteryland and related information, such as updates about the festival, security information, and so on. We do this on the basis of the contract that you and Mysteryland enter into when you buy a ticket.

For newsletter subscribers, we use the data to send you a regular newsletter and to show ads to you and so-called look-alike visitors. We do this on the basis of your consent. Within each newsletter e-mail, an opt-out link is provided.

For website visitors, we use the data to analyze the use of our website, and to be able to show you and look-alike visitors ads on other websites. We do this on the basis of our legitimate interest to be able to analyze how our website is used, where visitors come from, what may cause people to spend more or less time on the website and so on.

For service providers, including DJs, crew, guests and suppliers who help us to organize and produce Mysteryland, we use the data to be able to work with them and communicate about what is needed, invoicing, and so on. We do this on the basis of their contract with us, or if they are not the contract partner, our legitimate interest to have things run smoothly.

3. Who we share data with
We do not actively share data with any third-parties, other than processors acting on our behalf.

We have also engaged third-parties for analytics and advertising. How they capture and use data is described under Cookies and other technologies.

4. How long and where do we store data

We store ticket buyer information for at least 7 years to be able to meet our obligations to keep accurate records for the tax authorities.

We store newsletter subscriber information until such subscriber indicates they no longer want to receive the newsletter.

We store website visitor and advertising data for at least 7 years to be able to analyze seasonal and mid-term trends.

We store service provider data for at least 7 years to be able to meet our obligations to keep accurate records for the tax authorities.

5. How do we protect data
Taking into account the nature, scope, context and purpose of the processing, we have taken the following technical and organizational measures:

    • Our database, and the information contained therein, is protected with access control.
    • Access to the database is limited, not all staff in our organization have full access.
    • Data submitted via our website is encrypted in transit.

We do not actively monitor the security of our database and need to rely on our processors to notify us of any data breaches.

6. Transfer of your personal data
You should also know that your personal data may be transferred from your home country to third parties. If you are an EU resident, this could imply that we also transfer data to countries that do not offer an adequate level of protection for your personal data. When we transfer this data, we will do so only when we have put in place appropriate safeguards to protect your personal data. Please contact us to get a copy of the safeguards that we have put in place.

7. Your Rights
You have the right to request access to your personal data that we process. You also have the right to:
• Rectify incorrect personal data or erase it in certain circumstances.
• Restrict or object to the processing of your personal data.
• Receive your data so that you can use it elsewhere (data portability).

Where we process data based on your consent, you also have the right to withdraw your consent at any time but we would like to point out that this does not affect the lawfulness of the processing before the date that you withdrew your consent.

If you wish to exercise any of the above rights, please write us at We will respond to all requests within a reasonable timeframe. You also have the right to lodge a complaint with your local EU data protection authority for unresolved complaints.

8. Cookies and other technologies
Like most online services, we and our partners use cookies and similar technologies to provide and personalize our website, analyze use, target advertisements and prevent fraud. You can disable cookies in your browser settings, but some parts of the website may then not function properly. We have identified the following cookies placed on our website:

We use Google Analytics and Doubeclick. This is a web analytics service provided by Google, Inc. to count visitors to our websites and analyse their usage of the site to help us determine the value of our content to our users.

1 minute

2 years from set/update

We use the YouTube video player.

2 years

20 years

2 years

1 years

2,5 years

We use Hotjar for analytics. We use the data to analyze the use of our website.

2 years

30 minutes

When browsing session ends

17 days

24 hours

Facebook Inc.
We use Facebook for advertising. We use the data for analytics and advertisement services.

When browsing session ends

188 days

2 years

52 days

9. Version information
This policy was last updated on May 2018.
It can be viewed on: