Legal & compliance

Privacy Policy

This policy explains how Skywalker Adventure Builders collects, uses, stores, and protects your personal data when you visit skywab.com or interact with us commercially. We are committed to full compliance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG / UAVG).

Last updated: April 2026 · Supersedes all previous versions

Who is responsible for your data

Data Controller

The legal entity responsible for determining how and why your personal data is processed is:

Skywalker Adventure Builders B.V. Elleboog 15, 6713 KP Ede, The Netherlands
KvK (Chamber of Commerce): 11070690
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: skywab.com

This policy applies to all personal data processed through skywab.com, including enquiry forms, newsletter subscriptions, and commercial correspondence. It covers our headquarters in Ede, the Netherlands, and our operations in Dubai, UAE, and Riyadh, Saudi Arabia, insofar as personal data of EU/EEA residents is involved.

Skywalker Adventure Builders does not have a designated Data Protection Officer (DPO), as we do not meet the mandatory thresholds under GDPR Article 37. All privacy matters are handled directly by our commercial team using the contact details above.

What we process and why

Data We Collect and Our Legal Basis

We only collect personal data that is necessary and proportionate. GDPR Article 6 requires us to identify a lawful basis for every processing activity. The table below sets out each category of data we collect, the purpose for which we process it, and the applicable legal basis.

Data category

Purpose

Legal basis (GDPR Art. 6)

Contact and enquiry data — name, email, phone, organisation, project details

Responding to project enquiries; providing feasibility assessments; managing the commercial relationship

Art. 6(1)(b) — processing necessary for pre-contractual steps taken at your request

Newsletter subscription data — name, email address

Sending product updates, industry news, and marketing communications by email

Art. 6(1)(a) — your explicit opt-in consent. Withdraw at any time via the unsubscribe link.

Technical and usage data — IP address, browser type, pages visited, session duration

Monitoring website performance; detecting and preventing security threats

Art. 6(1)(f) — legitimate interests in operating a secure and functional website

Cookie data — session identifiers, preference settings, analytics identifiers

Enabling core website functionality (session); analysing visitor behaviour (analytics); remembering your settings (preference)

Strictly necessary: Art. 6(1)(f). Analytics and preference cookies: Art. 6(1)(a) — your consent required.

We do not collect sensitive categories of personal data (special category data under GDPR Article 9), and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Cookies and tracking technologies

How We Use Cookies

Strictly necessary cookies

These cookies are essential for the website to function and cannot be disabled. They are set only in response to actions you take — such as submitting an enquiry form or navigating between pages. They do not store any personally identifiable information beyond what is necessary for the session.

No prior consent is required for strictly necessary cookies under Dutch law and GDPR.

Analytics and preference cookies

We use analytics tools to understand how visitors use our website, including which pages are visited and how long sessions last. These tools may process your IP address and browser type. Preference cookies remember your settings across visits.

These cookies are placed only after you have given your active prior consent, in line with the Dutch Telecommunications Act (Tw) and the Dutch Data Protection Authority guidelines updated November 2025.

Your consent — equal choice guaranteed

In line with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) guidelines, accepting and rejecting non-essential cookies is equally straightforward on our site. You may withdraw your cookie consent at any time by clearing your cookies or adjusting your browser settings. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.

Our website loads typography from Google Fonts (Google LLC, USA). When your browser requests a font file, Google may process your IP address as part of that request. If you prefer to prevent this, you can block external font requests using browser settings or a privacy extension.

Third parties and international transfers

Data Sharing and International Transfers

We do not sell or rent your personal data. We may share your data with the following categories of third-party processors, who are contractually required to process your data only on our documented instructions and for no other purpose.

Zoho Forms and CRM

Data submitted through project enquiry and contact forms on our website is collected and managed using Zoho Forms and stored in Zoho CRM (Zoho Corporation Pvt. Ltd.). Zoho's servers may be located outside the EEA.

Transfer safeguard: Standard Contractual Clauses (SCCs) under GDPR Art. 46(2)(c).

Sendy (newsletter)

Newsletter subscriptions are managed via Sendy, our self-hosted email marketing platform operating under the skywab.com domain. Your email address is used exclusively to send communications to which you have consented.

Unsubscribe at any time using the link in any email we send. Requests are processed within 10 working days.

Website analytics

We use analytics tools to measure website performance and understand visitor behaviour. These tools may process technical information including anonymised IP addresses and aggregated browsing patterns.

Analytics cookies are placed only with your prior consent. Opt out via browser settings at any time.

International transfers. Where personal data is transferred to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place — including Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Article 46, or that the receiving country benefits from an adequacy decision under GDPR Article 45.

External links. Our website may contain links to third-party sites. We are not responsible for the privacy practices of those external sites and recommend reviewing their privacy policies before providing any personal information.

We may also disclose your personal data where required to do so by law, by a competent court or regulatory authority, or to protect the rights, property, or safety of Skywalker Adventure Builders, our clients, or the public.

GDPR Articles 15 to 22

Your Rights as a Data Subject

Under the GDPR and the Dutch UAVG, you have the following rights regarding the personal data we hold about you. You may exercise any of these rights — free of charge — by contacting us at This email address is being protected from spambots. You need JavaScript enabled to view it.. We will respond within 30 days of receiving a valid request. We may need to verify your identity before processing certain requests.

Right of access — Art. 15

You may request confirmation of whether we process personal data about you, and receive a copy of that data along with information about how and why it is being processed.

Right to rectification — Art. 16

You have the right to have inaccurate personal data we hold corrected without undue delay, and to have incomplete data completed.

Right to erasure — Art. 17

You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the original purpose, or where you have withdrawn consent and no other legal basis applies.

Right to withdraw consent — Art. 7

Where we process your data based on consent, you may withdraw that consent at any time without giving a reason. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal. For newsletters, use the unsubscribe link in any email.

Right to restriction — Art. 18

You may request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.

Right to data portability — Art. 20

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller.

Right to object — Art. 21

Where we process your data on the basis of legitimate interests, you have the right to object. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to lodge a complaint — Art. 77

You have the right to lodge a complaint with the Dutch Data Protection Authority at any time: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl, PO Box 93374, 2509 AJ Den Haag.

Retention, security and contact

How Long We Keep Your Data — and How to Reach Us

Retention periods

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by Dutch law.

Data type

Retention

Enquiry and contact data

3 years from last contact

Active client and contract data

7 years (Dutch legal obligation)

Newsletter subscriptions

Until you unsubscribe

Website analytics and log data

13 months maximum

Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our website uses HTTPS encryption for all data in transit, and access to personal data within our organisation is restricted to personnel who need it to perform their role. No method of internet transmission is completely secure; while we take every reasonable precaution, we cannot guarantee absolute security.

Children's privacy

Our website and services are directed exclusively at business professionals, investors, and developers in the adventure park industry. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has submitted personal data to us, please contact us immediately and we will take steps to delete that information.

Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our data processing activities, our service providers, or applicable law. Any material changes will be communicated by updating the date at the top of this page. We encourage you to review this policy regularly.

Contact us about your data

To exercise your rights, submit a data subject access request, or raise a concern about how we handle your personal data, please contact us:

By email: This email address is being protected from spambots. You need JavaScript enabled to view it.
By post: Skywalker Adventure Builders B.V., Elleboog 15, 6713 KP Ede, The Netherlands
Dutch DPA: autoriteitpersoonsgegevens.nl — if you are not satisfied with our response

✓ GDPR and Dutch UAVG compliant

✓ Your data is never sold

✓ International transfers via SCCs

✓ All requests handled within 30 days

Questions about your personal data?

We are happy to help with any privacy-related enquiry.

Send us a message via our contact page, or email This email address is being protected from spambots. You need JavaScript enabled to view it. directly. We respond to all data subject requests within 30 days.

Send a message →

This email address is being protected from spambots. You need JavaScript enabled to view it.