This privacy statement concerns the processing of personal data for travel purposes. Click here for the privacy statement for our website and newsletter.
With this privacy statement, we inform you about what type of personal data we collect, what your data is processed for and what rights you have.
BOOKING
If you wish to book for other people, you must be authorized by that person.
What information do we collect from you?
When you book a tour, the information you provide is recorded by us. We collect data including:
- Name, address, place of residence, telephone number, e-mail
- Date of birth
- Payment details (if you do not book through an intermediary)
- Dietary information (if you wish to provide it)
- Necessary medical data (if you wish to provide this)
- Information about the booked trip
- Company name and policy number of your travel insurance
What do we use the data for?
- Your data is needed to make requests, to provide you with information about your trip, for relevant communication regarding the booking, for the proper execution of the trip and to process the booking and payment.
- Your dietary information will be shared with the hotel or other travel service providers who provide meals, and if this is for a medical or religious reason, only to the extent that you consent to this.
- To the extent that you consent to this, your medical data will be shared with the travel service provider, who must be aware of this and provision is necessary for your stated needs, your safety or the safety of third parties.
- Name and address details, bank details and details about the booked trip, costs and payment are processed for accounting, accounts receivable administration and collection operations.
- Your data can be used for the legitimate interest of the company or third parties, such as handling complaints, disputes and legal claims, insofar as your interest does not have to prevail. We process your travel insurer’s company name and policy number to check whether you have travel insurance because it is mandatory.
Legitimate basis
We collect your data for the execution of the agreement we have with you. In addition, data is processed based on the legitimate interest of the company and third parties, insofar as your interests do not have to prevail. Furthermore, data is collected to comply with legal obligations, particularly the obligation to keep accounts. You must give explicit permission to process your dietary data/medical data.
How long do we store your data?
- Unless otherwise stated, personal data will be kept for a maximum of two years after the trip.
- Medical data will be deleted after the complaint period (see General Terms and Conditions).
- To the extent that data is required for tax administration, this data will be kept for the applicable mandatory period (usually seven years).
- The above retention periods may be deviated from due to a legal obligation or a legitimate interest of the company or third parties insofar as your interest should not prevail. Data may be retained in case of complaints, possible disputes or legal claims for up to 2 years after settlement of the complaints, dispute or legal claims.
With whom do we share your data?
- We make your data available to travel service providers if and to the extent that this is necessary for the proper execution of the trip, to meet the needs you have indicated, for your safety or the safety of others.
- When processing data, external processors are used, such as the booking system, the accounting system, the e-mail system, the accounting system and for payment and collection.
Transfer to a third country or international organization outside the EU
If your trip takes place outside the EU, the necessary personal data will be passed on to local travel service providers outside the EU on the basis of the execution of the (travel) agreement with you. The travel service providers are responsible for the correct processing of your personal data and are bound by the privacy rules that apply in that country.
TOUR EVALUATION
What information do we collect from you?
We collect data including your name, the tour taken, your reviews, and your other feedback or information you mention in the tour evaluation. You can choose to complete the tour evaluation anonymously.
What do we use the data for?
- We use the data for internal evaluation.
- We use the data for evaluation and feedback to the relevant travel service provider.
Legitimate basis
We collect your data on the basis of the execution of the agreement we have with you. In addition, data is processed on the basis of the legitimate interest of the company and travel service providers in a thorough evaluation of its products or services, insofar as your interests do not have to prevail.
How long do we store your data?
Non-anonymized data in the evaluation will be kept for 2 years after the trip. Anonymized data is stored indefinitely.
With whom do we share your data?
External processors such as a survey company are used to carry out the evaluation. The data can be passed on to the travel service provider. Depending on the situation, this is done anonymously.
COMPLAINTS ABOUT THE TOUR
What information do we collect from you?
We collect data including your name, the tour taken, the complaint and other information that you mention in the complaint.
What do we use the data for?
- We use the data for internal evaluation of the complaint.
- If the complaint relates to the execution of the tour, we use the data to provide feedback to the travel service provider involved with the request for a response to the complaint.
- Your data may be used for a legitimate interest of the company or third parties, such as disputes and legal actions, to the extent that your interest should not prevail.
Legitimate basis
We collect your data on the basis of the execution of the agreement we have with you. In addition, data is processed on the basis of the legitimate interest of the company and travel service providers in proper complaint assessment and complaint handling insofar as your interests do not have to prevail.
How long do we store your data?
Data relating to the complaint will be kept for two years after the complaint has been handled.
SECURITY
How do we protect your data?
We take all appropriate organizational and technical precautions to secure your personal data and require third parties who process your personal data for us to do the same. This means, among other things, that:
- access to your personal data is limited to persons who should process this data due to physical and digital access restrictions.
- our network, data storage and data transport are secured – and where appropriate encrypted – according to current security standards.
- login and user activities are logged in order to detect unlawful processing.
- we train our employees and encourage a privacy culture.
- the privacy policy is evaluated annually for effectiveness.
YOUR RIGHTS
Your rights:
- You have the right to view your personal data and to correct your personal data.
- You have the right to have us delete your personal data to the extent that:
- they are no longer necessary for the purposes for which they were collected and compatible purposes, or;
- the processing is based on your consent and you withdraw this consent and there is no other legal basis for the processing, or;
- the processing is based on a legitimate interest of the company or third parties, you object to the processing and your interest prevails over legitimate interests of the company and third parties.
- You have the right to restrict processing.
- You have the right to a digital copy of the personal data you provide to us.
- You have given the right to withdraw consent.
- You have the right to object to the processing of your personal data on grounds of your particular situation, to the extent that the processing is based on the legitimate interest of the company or third parties.
- You have the right to object to the use of your personal data for direct marketing purposes, including profiling.
- You have the right to file a complaint with the Dutch Data Protection Authority.
You can send a request to the email address or postal address below. To help us process your request, you must be able to identify yourself.
AMENDMENTS
We must occasionally adjust this privacy statement, including due to changes on the website, changed processing purposes, changed working methods or due to changing regulations. We will change the content of the statements unilaterally and without prior notice.
QUESTIONS, COMMENTS & COMPLAINTS
If you have any questions, comments or complaints about how we handle your personal data, we would like to hear from you via the email address below. We will respond as soon as possible, but no later than within 4 weeks.
PERSON RESPONSIBLE FOR PROCESSING
The company below is the controller within the meaning of the General Data Protection Regulation.
COMPANY NAME: ChinaTalk
ADDRESS: Bermershof 801, 5403 WP Uden, The Netherlands
EMAIL: info@chinatechtrip.com