Privacy Policy

In this Privacy Policy we want to provide clear and transparent information on how we handle personal data.

We make every effort to safeguard your privacy and therefore handle personal data with care. InsiderTravel complies in all cases with the applicable laws and regulations, including the General Data Protection Ordinance. This means that we in any case:

- Processing your personal data in accordance with the purpose for which it was provided, these purposes and type of personal data are described in this Privacy Policy;

- Processing of your personal data is limited to only those data that are minimum necessary for the purposes for which they are processed;

- Ask for your explicit consent if we need it for the processing of your personal data;

- Appropriate technical and organisational measures have been taken to ensure the security of your personal data;

- Do not pass on personal data to other parties, unless this is necessary for the execution of the purposes for which they have been provided;

- To be aware of your rights regarding your personal data, to point this out to you and to respect these rights.

We are responsible for the processing of your personal data. If, after reviewing our Privacy Policy, or in a more general sense, you have any questions or wish to contact us, you can do so via the contact details at the bottom of this document.

Processing of personal data of Customers

Personal data of customers are processed by InsiderTravel for the following purpose(s):

- Administrative purposes;

- Communication about the assignment;

- The execution of an order.

The basis for this personal data is:

- The agreed assignment;

For the above purpose(s) InsiderTravel may request the following personal data from you:

- First name(s) / Last name(s);

- Address / postal code / city / country;

- Telephone number;

- Email address;

- Gender;

- Date of birth;

- Nationality;

- Name of the employer in the travel industry;

- Proof of employment in the travel industry.

Your personal data will be stored by InsiderTravel for the purpose of the above mentioned processing(s) for the period:

- During the term of the agreement and afterwards for the financial administration for a maximum of 7 years.

Processing of personal data of newsletter subscribers

Personal data of Newsletter subscribers are processed by InsiderTravel for the following purpose(s):

- Informing the person by means of newsletters.

The basis for this personal data is:

- The subscription form Newsletter.

InsiderTravel may request the following personal data from you for the purpose(s) stated above:


- First name;

- Surname;

- Name of the employer in the travel industry;

- E-mail address.

Your personal data will be stored by InsiderTravel for the purpose of the aforementioned processing(s) for the period:

- During the period that you are subscribed.

Processing of personal data from prospect, stakeholder/lobby contacts and/or interested parties

Personal data of prospect, stakeholder/lobby contacts and/or interested parties are processed by InsiderTravel for the purpose of the following objective(s):

- Provision of information in the form of newsletters and/or specific contacts.

The basis for this personal data is:

- Oral consent, issuing of business cards and/or via a link on LinkedIn.

InsiderTravel may request the following personal data from you for the purpose(s) stated above:

- First name;

- Surname;

- Name of the employer in the travel industry;

- E-mail address.

Your personal data will be stored by InsiderTravel for the purpose of the aforementioned processing(s) for the period:

- During the period that one is seen as a prospect, stakeholder/lobby contact and/or interested party.

Provision to third parties

The information you provide to us may be provided to third parties if this is necessary to carry out the purposes described above.

For example, we use a third party for:

- Execution of the assignment / travel agreement;

- Providing newsletters.

We never pass on personal data to other parties with whom we have not entered into a processing agreement. With these parties (processors) we will of course make the necessary arrangements to ensure the security of your personal data. Furthermore, we will not pass on the information provided by you to other parties, unless this is required and permitted by law. An example of this is that the police request (personal) data from us as part of an investigation. In such a case, we must cooperate and are therefore obliged to provide this information. We may also share personal data with third parties if you give us your written permission to do so.

Within and outside the EU

Most of our data storage is located within the EU. However, it is possible that your data will be forwarded and/or stored at a location outside the EU. In order to execute your order / booking it is often necessary to pass on your data to companies outside the EU such as airlines, hotels, shipping companies and local agencies. In order to be able to travel to countries outside the EU, it is sometimes necessary to submit certain personal data to government agencies or other authorities responsible for immigration, border control, security and counterterrorism. Even if it is not mandatory to provide this type of information, InsiderTravel may, for security reasons, choose to cooperate with the authorities.

Minors

We only process personal data of minors (persons under the age of 16) if written consent has been given by the parent, guardian or legal representative.

Storage period

InsiderTravel does not retain personal data any longer than necessary for the purpose for which they were provided or are required by law.

Security

We have taken appropriate technical and organisational measures to protect your personal data against unlawful processing, for example we have taken the following measures;

- We maintain a user name and password policy on all our systems;

- We pseudonymize and encrypt personal data if necessary;

- We make backups of the personal data in order to be able to recover it in case of physical or technical incidents;

- We regularly test and evaluate our measures.

COOKIES:

Google Analytics

Through our website, a cookie is placed by the U.S. company Google, as part of the "Analytics" service. We use this service to track and receive reports on how visitors use the website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. We have no influence on this. We have not allowed Google to use the obtained analytics information for other Google services.

The information that Google collects is made anonymous as much as possible. Your IP address is explicitly not given. The information is transferred to and stored by Google on servers in the United States. Google is committed to adhering to the Safe Harbor principles and is a member of the Safe Harbor program of the U.S. Department of Commerce. This means that there is an adequate level of protection for the processing of any personal data."

We explicitly mention this:

- We use Google Analytics cookies.

- We have concluded a processing agreement with Google.

- We have chosen to mask the last octet of the IP address.

- We have turned off 'data sharing'.

- We do not use other Google services in combination with the Google Analytics cookies.

STRATO

The website host of InsiderTravel is STRATO. STRATO stores IP addresses of website visitors in so-called log files for a maximum of seven days. They do this in order to recognise and repel cyber attacks. They then remove the IP addresses again. STRATO is a 100% German company and still complies with German privacy legislation, one of the strictest in the world. And the ISO certification of the data centres according to ISO 27001 is further proof of this privacy protection.

We explicitly mention this:

- We have concluded a processing agreement with STRATO.

Facebook Social Plugins

Our website uses social plugins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA ('Facebook'). The plugins can be recognized by a Facebook logo or the words "Facebook Social Plugin". When you open a web page with one of these plug-ins, your browser connects directly to Facebook's servers. The content of the plugin is transferred directly from Facebook to your browser which automatically processes it into the web page. By using plugins, Facebook can see that you have opened a page on our website. If you are logged into Facebook, Facebook can link the visit to your Facebook account, even if you have not pressed the "Like" button. If you interact with the plugins, for example by pressing the "Like" button or leaving a comment, the relevant information is sent directly from your browser to Facebook where it is stored. Even if you do not have a Facebook account, Facebook may collect data about you (e.g. IP address). We refer you to the Facebook data protection information regarding the purpose and scope of the data collected, its further processing and use by Facebook, and your rights and possibilities to protect your privacy. If you do not want Facebook to collect data about you when you visit our website, you should log out of Facebook before visiting us. You can also use add-ons to install blockers for your browser.

YouTube

Our website uses plug-ins from Google's YouTube page. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our YouTube plug-ins, you are connected to YouTube's servers. The YouTube server is informed about which of our pages you have visited.

If you are logged in to your YouTube account, YouTube allows you to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Please refer to YouTube's Privacy Policy for more information about the use of user data.

Mailchimp

We are currently using Mailchimp to send our newsletter. This is a platform for delivery of newsletters from the American provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The e-mail addresses of our newsletter recipients are stored on the Mailchimp servers in the United States. Mailchimp uses this information to send and evaluate the newsletters on our behalf. In addition, according to its own information, Mailchimp may use these data to optimize or improve its own services, e.g. for the technical optimization of the sending and presentation of the newsletter or for economic purposes, to determine which countries the recipients come from. However, Mailchimp does not use the data of our newsletter recipients to use them themselves or to pass them on to third parties.

We rely on the reliability, IT and data security of Mailchimp. The company is certified according to the U.S. and EU privacy shield and strives to comply with EU privacy rules. More information about Mailchimp and Mailchimp privacy can be found here: www.mailchimp.com/legal/privacy/

We will report this explicitly:

- We have concluded a processing agreement with Mailchimp.

Rights concerning your data

You have the right to access, rectify or delete any personal data that we have received from you. You can also object to the processing of your personal data (or part of it) by us or by one of our processors. You also have the right to have the data provided by you transferred by us to yourself or by order of you directly to another party. We may ask you to identify yourself before we can comply with the above requests.

If we are allowed to process your personal data on the basis of a permission given by you, you always have the right to revoke this permission.

Complaints

If you have a complaint about the processing of your personal data, please contact us directly. If we cannot find a solution together with you, we will of course find this very annoying. You always have the right to submit a complaint to the Personal Data Authority, which is the supervisory authority in the field of privacy protection.

Questions

If you have any questions or comments regarding our Privacy Policy, please contact us!

Contact details

InsiderTravel

In the Mehre 77

NL-6114 NE Susteren

E: info (at) insidertravel.nl

T: +31 (0)6-81568515

Data protection contact person: Sylvia Hendriks