Who we are

Ocean Challenge 2027 (Ocean Challenge 2027) is an initiative by Demarage Zeil Centrum, located at Demarage Zeil Centrum, Sasdijk 2X, 4671 RN Dinteloord. We are the data controller for personal data processed through oceanchallenge.nl and our associated Google Ads campaigns. This privacy policy explains what data we collect, why, how long we keep it, and what rights you have.

What data we process through the website

• Contact form: name, email address, subject and the message you enter.
• Founding Crew sign-up form: name, email address and any other information you provide when signing up.
• Advertising data: if you arrive on the site via a Google Ads advertisement, we record a click ID (gclid) and whether you consented to marketing cookies, so we can attribute a sign-up to the campaign that led to it.
• Technical data: page views and interactions collected via Google Analytics/Google Ads tags, only after you have accepted marketing cookies.

Our Google Ads API integration

• To manage and analyse our own Google Ads campaigns, our internal (admin-only) dashboard uses an application that connects to our own Google Ads account (customer ID 2934343615) via the Google Ads API (OAuth scope "https://www.googleapis.com/auth/adwords").
• Through this integration we only read and manage data belonging to our own advertising account: campaign, ad group, keyword, search term and conversion performance, budgets and bidding strategies. No data from other Google accounts or website visitors is retrieved directly through this API.
• The retrieved data is only displayed inside our secured, login-protected admin dashboard and is used to optimise our own advertising campaigns (for example, updating conversion goals or reallocating budget between campaigns).
• We never use this data for advertising or profiling purposes outside our own campaigns, we do not resell it, and we do not share it with third parties other than Google itself (as the API provider). Our handling of data obtained through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Access to the dashboard is restricted to authorised Ocean Challenge 2027 administrators via a secured login (NextAuth session). The OAuth refresh token that powers this integration is stored encrypted as an environment variable with our hosting provider (Vercel) and is not accessible to unauthorised parties.

Why we process this data

We use the data from our forms to answer your question, process your sign-up and keep you informed about Ocean Challenge 2027. We use advertising data and the Google Ads API integration to measure and improve the effectiveness of our own advertising campaigns.

Legal basis for processing

We process data based on your consent (e.g. marketing cookies and advertising measurement), the performance of a contract or steps taken prior to entering one (when signing up for the Founding Crew), and our legitimate interest in answering questions and improving our advertising.

Cookies

We place necessary cookies to make the website function. Marketing cookies (including Google Ads conversion tracking) are only placed after you give consent. You can adjust your cookie preferences at any time via the "Cookie preferences" link at the bottom of the website.

Sharing with third parties

• Our hosting provider (Vercel), to keep the website and admin dashboard running.
• Google (Google Ads and, if accepted, Google Analytics), for advertising measurement and managing our own advertising campaigns.
• Email and form processors we use to handle messages and sign-ups.
• We never sell personal data to third parties.

Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access control on our admin dashboard, and encrypted storage of API credentials (such as the Google Ads refresh token) at our hosting provider.

Retention period

We do not keep data longer than necessary for the purpose it was collected for, or as long as required by law. Advertising measurement data is retained in line with Google Ads’ standard retention periods.

Your rights

Under the GDPR you have the right to access, correct, delete and transfer your personal data, and the right to object to its processing or withdraw your consent. Please contact us via the email address below to exercise these rights. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Contact

Questions about this privacy policy or how we process data? Contact us at info@demarage.nl or +31 (0)6 5588 5094.