Privacy
Policy
Effective date
28 February 2026
Last updated
28 February 2026
Jurisdiction
Netherlands · GDPR
Who we are
Beyond the Pitch ("Beyond the Pitch", "we", "us") is a cultural sports experience organiser based in the Netherlands. We connect participants with authentic local sporting traditions in Mongolia and Ireland via www.travelbeyondthepitch.com and associated services (the "Platform").
We are not a travel agency or tour operator. We do not sell travel packages, arrange flights or book accommodation. All experiences are hosted directly by local partners. Participants arrange their own travel independently. Beyond the Pitch is not responsible for the execution, quality, safety, or outcomes of any travel arrangements made independently by participants.
We are the data controller for personal data processed through our services under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).
If we appoint a Data Protection Officer (DPO), we will publish their contact details here.
What data we collect
We collect personal data only where necessary to facilitate connections between you and our local experience partners.
Name, email address, phone number, country of residence.
Participant names, dates, dietary or accessibility needs, emergency contact information.
Billing details. Full card data is handled exclusively by third-party processors. We store no card numbers or CVV codes.
Messages, enquiries, feedback and newsletter subscriptions.
Reviews and photos you share voluntarily.
IP address, device information, usage patterns, cookies.
Why we use your data
We process personal data strictly to operate as an experience organiser. Below is an overview of purposes and their legal bases under GDPR.
You may withdraw consent at any time without affecting the lawfulness of prior processing.
Cookies and tracking
Essential cookies are required for our website to function. With your permission, we also use:
A cookie banner on your first visit lets you accept, reject or customise non-essential cookies. You can update your preferences at any time via your browser settings.
Who receives your data
We share only what is strictly necessary to connect you with our local experience partners.
International transfers
Because participants and local partners are based worldwide - including in Mongolia and Ireland - data may be transferred outside the European Economic Area (EEA). We safeguard your data through EU Standard Contractual Clauses (SCCs) and European Commission adequacy decisions where applicable.
Data retention
We retain personal data no longer than necessary for its stated purpose.
Active period + 7 years after last activity (Dutch tax and legal requirements).
Until you unsubscribe or withdraw consent.
3 years after last contact.
After the applicable retention period, data is securely deleted or anonymised.
Your rights
As an EEA resident, you have the following rights regarding your personal data:
Contact us using the details in section 1. We will respond within one month.
www.autoriteitpersoonsgegevens.nl
Children
Our experiences and website are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If a parent or legal guardian makes a booking on behalf of a minor and provides explicit consent, we will process that data only to fulfil the experience booking.
Security & changes
We protect your personal data with appropriate technical and organisational measures, including encryption and access controls. In the event of a data breach that poses a risk to your rights, we will notify the competent Dutch authorities within 72 hours in accordance with GDPR.
Any material changes to this Privacy Policy will be published on this page with an updated date. We will notify you of significant changes by email where we hold your contact details.
For questions or to exercise your rights, please contact us using the details in section 1.