Privacy Policy 

We protect your privacy. The lawful collection, processing and use of your personal data is very important to us and is carried out in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR). This data protection declaration informs you below about the type, scope and purpose of the processing of your personal data when you visit our website. 

Collection, processing and use of personal data 

In principle, we only process your personal data to the extent necessary to provide a functional website and our content and services. Your personal data will only be processed with your consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is legally permitted. To the extent that we obtain your consent for the processing of personal data, Art. 6 paragraph 1 lit. an EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing your personal data, which are necessary for the execution of an agreement to which you are a party, art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 paragraph 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 paragraph 1 lit. f GDPR serves as the legal basis for processing. We also use the personal data we store to maintain customer relationships, to take care of our customers (e.g. important information about your trip), to carry out our own advertising and marketing measures (e.g. sending catalogs of other advertising mailings within the legally permitted framework, customer satisfaction inquiries) and for order processing. When processing your personal data in the context of the application process, Art. 6 (1) (f) GDPR serves as the legal basis. Once received, your application documents will be assessed by our HR department employees and forwarded internally to the responsible department heads. As part of the application process, only those employees will have access to your data necessary for the proper process. (e.g. sending catalogs of other advertising mailings within the legally permitted framework, questions about customer satisfaction) and for order processing. When processing your personal data in the context of the application process, Art. 6 (1) (f) GDPR serves as the legal basis. Once received, your application documents will be assessed by our HR department employees and forwarded internally to the responsible department heads. As part of the application process, only those employees will have access to your data necessary for the proper process. (e.g. sending catalogs of other advertising mailings within the legally permitted framework, questions about customer satisfaction) and for order processing. When processing your personal data in the context of the application process, Art. 6 (1) (f) GDPR serves as the legal basis. Once received, your application documents will be assessed by our HR department employees and forwarded internally to the responsible department heads. As part of the application process, only those employees will have access to your data necessary for the proper process. Once received, your application documents will be assessed by our HR department employees and forwarded internally to the responsible department heads. As part of the application process, only those employees will have access to your data necessary for the proper process. Once received, your application documents will be assessed by our HR department employees and forwarded internally to the responsible department heads. As part of the application process, only those employees will have access to your data necessary for the proper process. 

Data deletion and storage duration 

The personal data of the data subject are processed in accordance with Art. 17 and 18 GDPR deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the responsible person is subject. The data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract. 

What do we process personal data for? 

Your personal data is processed by Travoley for the following purposes: 

• Entering into agreements by means of a booking 
• Sending newsletters 
• Optimizing the website 
• Collecting reviews 
• Drawing up and sending marketing communications 

For the above purposes, we may request one or more of the following personal data from you: 

• Name / initials / prefix 
• Titles 
• Address / zip code / city / country 
• residence 
• phone number 
• E-mail address 
• Sex 
• Bank account number 
• Information about your health 
• BSN number 
• Passport 

If your email address is collected for reasons other than in the context of a concluded agreement, it will not be used to transmit unsolicited communications without your consent. We use your address details (received in the context of a sale) to send advertising messages with information about products and services. If you do not wish to receive such advertising, please let us know using the contact details above. Unless you have indicated that you do not wish this, we may contact you by telephone to inform you about products and services. We only process other personal data (by means of cookies or otherwise) if the data processing is necessary for the execution of an agreement concluded with you, the proper performance of a public law task, the pursuit of our legitimate interest or if you have given permission for the processing when collecting this. The special information collected such as your passport details or bank account number is only used internally and is not passed on to other organizations. 

Security 

We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing, for example we have taken the following measures; 

• Privacy statement in accordance with new privacy legislation 
• Cookie Policy 
• Processing agreements 
• Staff are aware of the measures to be taken 
• Destruction container for confidential documents 
• Secure internet connection 
• Secure website 

Newsletter 

With the following information we would like to inform you about the contents of our newsletter, as well as the registration and shipping procedure and your right to object. If you have registered for the Travoley newsletter, Travoley will use your data to send you the newsletter. We only send newsletters with advertising information with the consent of the recipient or legal permission. Our newsletters contain information about our products, offers, promotions, events and our company. § 7 Abs. 3 UWG serves here as the legal basis for sending the newsletter and advertising by e-mail as a result of the sale of goods or services. Registration for our newsletter takes place after registering. Registrations for our newsletter are recorded in order to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time and your IP address. The newsletter is sent it automatically by our server. Registrations for our newsletter are recorded in order to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time and your IP address. 

To subscribe to our newsletter, simply enter your email address. The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file, when the newsletter is opened. As part of the retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and time of retrieval. This information is used to technically improve the services based on the technical data or the target groups and your reading behavior based on their collection locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened and which links are clicked. Although this information may be assigned to individual newsletter recipients for technical reasons. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content based on the interests of our users. 

We also want to ensure that the information about our products, offers, promotions, events and our company is tailored to your personal interests. We use the personal data you provide to find out which products, offers, etc. you are interested in. This helps us tailor our communications to make them more relevant to you. For this we use existing information, such as receipt and read confirmations of e-mails, your previous book history, date and time of your visit to our website, products you have viewed. This process takes place exclusively in pseudonymised form. These analyzes help us to better understand you as a customer and enable us to send you personalized offers and thus better meet your needs. If you do not want to receive this personalized service, you can object to personalized advertising at any time by sending an email to media@travoley.nl . In this case you will only continue to receive our standardized newsletter. The sending of the newsletter and the performance measurement are based on the consent of the recipients in accordance with Art. 6(1)(a), Art. 7 GDPR in conjunction with § 7 Abs. 2 No. 3 UWG or on the basis of legal permission according to § 7 Abs. 3 UWG. The registration procedure is carried out on the basis of our legitimate interests in accordance with Art. 6 paragraph 1 lit. f GDPR and serves as proof of consent to receive the newsletter. By registering, you agree to receive newsletters and emails based on your user behavior (e.g. shopping cart reminder). You can unsubscribe at any time with effect for the future, i.e. withdraw your consent, by using the unsubscribe link in each email. You will find a link to cancel the newsletter at the end of each newsletter or you can send your unsubscribe request at any time by email to media@travoley.nl. 

Storage of the IP address 

An IP address is a unique number that your Internet service provider assigns to your computer when you connect to the Internet. When you visit our website, the IP address assigned to your computer is permanently stored by our web server. This IP address can be used by us in the context of statistical evaluations and is deleted and archived from our servers at regular intervals (every six months). However, your personal data is always included anonymously in these evaluations. Your IP address will only be passed on to third parties if this is required by law, or if the data is processed by third parties on behalf of the company. 

Google Analytics 

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR), we use Google Analytics, a web analysis service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by users is usually transmitted to a Google server in the USA and stored there. 

Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services relating to the use of this online offering and the Internet . Pseudonymous user profiles of the users can be created from the processed data. 

We use Google Analytics to display the advertisements placed within advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products offered determined based on the websites visited) that we send to Google (so-called “remarketing”, or “Google Analytics target groups”). With the help of remarketing audiences, we also want to ensure that our advertisements match the potential interests of users and are not annoying. 

We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. 

The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: 

https: // tools.google.com/dlpage/gaoptout?hl . 

More information about Google’s use of data, settings and objection options can be found on Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you browse websites or apps from our partners”), https://policies.google.com/technologies/ads (“Data use for advertising purposes”), https://adssettings.google.com/authenticated (“Manage information that Google uses to serve you ads to show”). 

Google-Re/Marketing-Services 

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR), we use the marketing and remarketing services (in short “Google Marketing Services “) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”). 

Google’s marketing services allow us to target advertisements for and on our website to only present users with advertisements that may match their interests. For example, if a user is shown advertisements for products they have been interested in on other websites, this is called “remarketing”. For these purposes, when our and other websites on which Google marketing services are active, Google executes a code directly from Google and so-called (re)marketing tags (invisible images or code, also called “web beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (similar technologies can also be used instead of cookies). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user visits, what content he is interested in and which offers he has clicked, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. The IP address of the users is also recorded, whereby we inform you in the context of Google Analytics that the IP address is shortened within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area and only in exceptional cases is completely transmitted to a Google server in the US and is being shortened there. The IP address will not be merged with the user’s data within other Google offers. The above information may also be combined by Google with such information from other sources. If the user then visits other websites, tailored advertisements can be displayed based on his interests. 

User data is processed pseudonymously as part of Google’s marketing services. This means that, for example, Google does not store and process the name or email address of the users, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly given Google permission to process the data without this pseudonymization. The information collected about users by Google marketing services is sent to Google and stored on Google’s servers in the United States. 

The Google marketing services we use include the Google AdWords online advertising program . In the case of Google AdWords, each AdWords customer receives a different ‘conversion cookie’. Cookies cannot therefore be tracked via the websites of AdWords customers. The information collected using the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could personally identify users. 

We may integrate third-party advertisements based on the Google marketing service DoubleClick . DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet. 

We may integrate third-party advertisements based on the Google marketing service AdSense . AdSense uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet. 

We can also use the Google Optimize service . Google Optimize allows us to understand how various changes to a website affect it (e.g. changes to the input fields, the design, etc.) in the context of so-called “A/B testing”. For these testing purposes, cookies are stored on users’ devices. Only pseudonymous user data is processed. 

In addition, we may use the Google Tag Manager to integrate and manage Google’s analytics and marketing services into our website. More information about Google’s use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads , Google’s privacy policy is available under https://policies.google.com/privacy . If you wish to object to interest-based advertising by Google marketing services, you can use Google’s settings and opt-out options: https://adssettings.google.com/authenticated . 

. To extend Google Analytics, we also use the technical extension Google Signals . This extension enables cross-device tracking and remarketing and can therefore be used to assign a single website visitor to different end devices. Activated Google signals also enable additional Google Analytics reports, such as interest and demographics reports. However, these features are only possible if you are logged into a Google service and have enabled the ‘personalized ads’ option in your Google account settings. Even if this option is activated, no personal data or user profiles will be sent to us, they will remain anonymous to us. 

If you do not want to use Google Signals, you can disable the ‘personalized ads’ option in your own Google account. 

Google reCaptcha 

We use the Google service reCaptcha on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR). This service may be used to determine whether input is made by a natural person or unlawfully through automated or machine processing. This service includes the transmission of the IP address to Google. Within Member States of the EU or other contracting states of the Agreement on the European Economic Area, IP addresses are almost always shortened before the data is sent to the USA. The IP address will not be combined with other data held by Google unless you are logged in with your Google account when using reCAPTCHA. 

Google Fonts 

We use Google Fonts from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on the basis of our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. We want to optimize our website and improve the use of our website for you and make it more user-friendly. . 

The Google Fonts service allows us to use external fonts. For this purpose, when you call up our website, the required font is loaded from your web browser into the browser cache. This step is necessary so that your browser can display a visually improved representation of our texts. If your browser does not support this feature, a default font from your own computer will be used for display. The integration of these fonts is done by a server call to a server of the provider. This transmits to the server which website you have visited and the IP address of your device’s browser is stored by the provider. . 

With each Google Font request, additional information such as browser settings, browser screen resolution, browser version and browser name may be automatically sent to Google servers. You can also find out what data is generally collected by Google and what this data is used for at https://policies.google.com/privacy?hl=en  

Google Maps 

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, this website uses Google Maps to display interactive offers in our credit offers. Google Maps is a mapping service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA. By using the Google Maps map service, information about the use of this website, including your IP address, may be sent to Google in the USA. When you visit a page of our website that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is sent directly to your browser by Google and integrated into the website. Therefore, we have no influence on the amount of data that Google collects in this way. 

• Date and time of the visit to our website 
• Location information 
• IP address and URL of the visited website 
• Usage 
• Keywords 
• Geographic location 

We have no influence on the further processing and use of the data by Google and therefore cannot accept any responsibility for this. If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. However, in this case you cannot use the map view. The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for the protection of your privacy, can be found in Google’s privacy policy https://policies.google.com/privacy?hl 

Microsoft Advertising and Microsoft Clarity 

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR), we use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). 

Microsoft stores a cookie on the website user’s computer (“conversion cookie”) if they have reached our website via a Microsoft advertisement. This allows us to recognize that the advertisement has been clicked and that it has been forwarded to our website. In this way, our customers can be retargeted through targeted product recommendations and interest-based advertising on the pages of Microsoft and other “Microsoft Advertising” customers. The information collected using the conversion cookie is also used to create conversion statistics. We learn the total number of users who clicked on a Microsoft advertisement and were redirected to our website. 

The following information may be collected from our users, among other things: IP address, identifiers assigned by Microsoft (IDs), information about the browser used by the users. 

In addition, we use Microsoft Clarity from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). This is also done on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR). 

Microsoft Clarity allows us to better understand the needs of our users and optimize the offerings on this website. We gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click, what they like and don’t like, etc.) and this helps us tailor our offering to feedback from our users. Clarity uses cookies and other technologies to collect information about the behavior of our users and their devices, including the device’s IP address (collected and stored only in anonymized form), screen size, device type, browser, or location information (country only ). Clarity stores this information in a pseudonymised user profile. The information is not used by Clarity or us to identify individual users. You can opt out of receiving interest-based ads from Microsoft at Microsoft’s opt-out page: https://choice.microsoft.com/opt-out.                                                            See Microsoft’s privacy statement: https://privacy.microsoft.com/en-GB/privacystatement for more information about privacy at Microsoft. 

Comments 

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. 

Media 

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. 

Cookies 

We use temporary and persistent cookies, i.e. small files stored on users’ devices. Cookies are pieces of information that are sent from our web server or third party web servers to users’ web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage. By storing the information requested from you on your computer, it makes it easier for you to use our website. When you visit the website again, the saved data will be displayed again. The user data is never stored on Travoley servers. In some cases, cookies serve security purposes or are necessary for the operation of our online offering (e.g. for the presentation of the website) or to store the user decision when confirming the cookie banner. In addition, we or our technology partners use cookies for reach measurement and marketing purposes, about which users will be informed in the course of the privacy policy. A general objection to the use of cookies used for online marketing purposes can be indicated for a large number of services, especially in the case of tracking, via the US site about which users are informed in the course of the privacy policy. A general objection to the use of cookies used for online marketing purposes can be indicated for a large number of services, especially in the case of tracking, via the US site about which users are informed in the course of the privacy policy. A general objection to the use of cookies used for online marketing purposes can be indicated for a large number of services, especially in the case of tracking, via the US sitehttp://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. If you do not want cookies to be stored on your computer, you will be asked to deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the browser’s system settings. The exclusion of cookies may lead to functional limitations of this online offer. We use “session cookies”, which are only stored for the duration of the current visit to our online presence (e.g. to enable the storage of your login status or the shopping cart function and thus the use of our online offering). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and storage period. These cookies cannot store any other data. 

Embedded Content From Other Websites 

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. 

Who Do We Share Your Data With 

If you request a password reset, your IP address will be included in the reset email. 

How Long We Retain Your Data 

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. 

Rights of data subjects

You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and copies of the data in accordance with Art. 15 GDPR. In accordance with art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you. In accordance with art. 17 GDPR, the right to demand that the data in question be deleted immediately, or alternatively in accordance with Art. 18 GDPR to demand a restriction of the processing of the data. You have the right to demand that the data relating to you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers. Moreover, on the basis of art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority.

You have the right to inspect, rectify or delete the personal data we have about you. You can also object to the processing of your personal data (or part thereof) by us or by one of our processors. You also have the right to have us transfer the data you provide to yourself or directly to another party if desired. We can logically ask you to identify yourself before we can respond to the aforementioned requests.

Complaints

If you have a complaint about the processing of your personal data, we ask you to contact us. If you cannot resolve this with us, we will of course find this very annoying. You have the right to file a complaint with the Dutch Data Protection Authority, which is the supervisory authority in the field of privacy.

If you have any questions or comments regarding our privacy statement, please contact us!