Privacy Policy
April 2026 version
When you place an order, we need certain information to ensure that we can process your order. We always handle your personal information with care and store it securely. We’re happy to explain here what we do with your information and why we need it. If you still have questions after reading this privacy statement, please feel free to contact us at rockwerchter@bol.com
Who is responsible for processing my personal data?
Bol.com b.v. (“bol”), located at Papendorpseweg 100, 3528 BJ Utrecht, is the data controller responsible for processing data as described in this privacy statement
When does this privacy statement apply?
This privacy statement applies to all personal data processed by bol regarding anyone who visits our Rock Werchter online store and/or has placed an order through our Rock Werchter online store.
What is personal data?
Personal data refers to any information that can be traced back to you as an individual. This includes your name, email address, or phone number, as well as information that is unique to you, such as your order history.
Whose personal data do we process, and how do we obtain this data?
We process the personal data of everyone who places an order through our special Rock Werchter online store. We receive this information directly from you when you enter it during the ordering process. This includes your name, contact information, and details about your order. Without this information, we cannot process your order and prepare it for pickup at De Festivalwinkel on the Rock Werchter grounds.
In addition, we also process personal data from visitors to our Rock Werchter online store, even if they do not place an order. This is done, for example, through cookies and similar technologies that collect information about your use of this website, such as your IP address, browser settings, and click behavior. This data helps us ensure the online store functions properly, analyze usage, and improve the user experience.
What personal data do we process about you, what do we use it for, and how long do we keep it?
Information needed to process your order
When you place an order through our Rock Werchter online store, we need certain personal information from you in order to process your order, keep you updated on its status, and have it ready for pickup at the festival shop. This information is also necessary for any returns or service inquiries.
For this purpose, we process:
- Name
- Address
- Email address
- Payment Information
- Order information (such as the selected product and pickup time)
This information is necessary to fulfill the agreement you enter into with us. The information you provide during the ordering process will be deleted no later than October 1, 2026. We retain your payment information in conjunction with your order details for up to 7 years after purchase, as we are legally required to do so.
Information about your contact with customer service
Do you have a question or complaint about your order from the Rock Werchter online store? If so, please contact our customer service team by email at: rockwerchter@bol.com. We use the information you provided during the ordering process to assist you as best as possible. When you email us, we process:
- Your name and email address
- Content of your message
- Any order details you provide
We use this information to answer your question and to assist you more quickly in the future. We retain records of this contact until October 1, 2026, at the latest. In the event of (suspected) fraud, we may extend this period.
Information regarding the operation of the Rock Werchter online store
When you visit our Rock Werchter online store, we process data about how you use the website. We do this using cookies and similar technologies. We use this data to ensure the Rock Werchter online store functions properly and to improve the user experience. For this purpose, we collect, for example:
- Your IP address
- Information about your device and browser
- Click behavior and pages visited
We retain this data for up to two years; you can find more information about this in our Cookie Policy.
Who do we share your information with?
We also engage other third-party service providers to assist us with various tasks. Sometimes they need personal data to do so. We only share the data that is necessary for the task the third-party service provider is performing on our behalf. We do not sell your data to these service providers or other third parties. We enter into agreements with all third-party service providers in which we specify what they are permitted to do with the data.
The types of work our external service providers perform for us are:
- to assist in the delivery of our digital services, such as the hosting, maintenance, and support of our websites and applications;
- the provision of financial services, such as payment services.
Where do we store your data, and how is it secured?
Bol takes extensive measures to protect your personal data, both from an organizational and a technical standpoint. We store your data in Europe. In addition, we have an in-house team of specialists who work daily to secure our systems and identify vulnerabilities. Through strict access controls, we ensure that your personal data is only accessible to employees who need it for their work. Furthermore, at bol, we regularly have our security assessed by external experts. If we share your data with a third party, we require that party to handle your data with the same care as we do.
What rights do you have regarding your personal data?
Right to Information
You have the right to a clear and transparent explanation of how we handle your personal data and what rights you can exercise in that regard. In this privacy statement, we have therefore provided a detailed explanation of what information we collect from you and how we handle your data.
Right of access
You have the right to request access to the information we have about you at any time. You can submit your request via rockwerchter@bol.com. We process requests within 30 days at the latest.
Right to correction
You have the right to have your personal data corrected if it is inaccurate or out of date, and/or to have it completed if it is incomplete. You can do this via: rockwerchter@bol.com.
Right to object
You have the right to object to the processing of your data if you disagree with the way we process your personal data. This right applies to the data we use based on our legitimate interest. For our Rock Werchter webshop, all processing is necessary to fulfill your order and comply with our legal obligations. You cannot object to this.
Right to data portability
You have the right to receive the data you have provided to us in connection with the agreement(s) you have entered into with us in a machine-readable format, so that you can store this data in a database maintained by you or another party. This includes your name, email address, and order history. You can request this via: rockwerchter@bol.com.
Right to restriction
You have the right to request that we restrict the processing of your data. This means that we may store your data but not use it. This right applies in certain circumstances. If you believe this applies to you, please contact us at: rockwerchter@bol.com.
Right to be forgotten/Request to delete account
You have the right to request that we delete all data we have about you. If you submit such a request, we will delete any data that can be traced back to you, except for data that we are required or permitted by law to retain.
We cannot comply with this request if there are any outstanding orders or invoices. We also cannot comply with this request if we are legally required to retain your personal data despite a request for deletion. If you wish to have your data deleted in connection with the Rock Werchter webshop, please contact us at: rockwerchter@bol.com.
If you would like to delete your data from bol.com, please contact us via customer service.
Right to file a complaint
You have the right to file a complaint about how we handle your data. If you have a complaint, we would prefer to resolve it with you directly. To do so, please contact us at: rockwerchter@bol.com. However, you also have the right to file a complaint with our Data Protection Officer. You can do this by emailing dpo@bol.com. Finally, you have the right to submit your complaint to the Dutch Data Protection Authority.