Privacy Policy
1. Introduction
At Toerisme-Maas.com (“we”, “our”, “us”), we are firmly committed to safeguarding the privacy, confidentiality, and security of our users’ personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard the personal information of individuals who interact with our website and services. We prioritize responsible data processing practices and comply with all applicable data protection legislation, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope of Policy and Role of Data Controller
This Privacy Policy applies to all personal data processed via our website (toerisme-maas.com), whether provided through forms, cookies, transactions, or other interactions. For the purposes of data protection law, Toerisme-Maas.com acts as the “data controller” for the personal data we collect and determine the purposes and means of processing such data. Any questions or requests regarding this policy or our data processing practices should be directed to: [email protected].
3. Categories of Data Processed
We process the following categories of personal data collected directly from you or automatically via your interaction with toerisme-maas.com:
a. Usage Data
Information collected automatically about your device and usage patterns when you visit our website, including IP addresses, browser type and version, geographic location, referral source, page views, session duration, and navigation paths.
b. Account Data
Information you provide during account registration, purchasing processes, newsletter sign-ups, or form submissions, including your name, physical address, email address, and phone number.
c. Profile Data
Details relating to your preferences, bookings, activities, and behavior on our platform, such as tour interests, favorite regions, or interaction histories with services.
d. Communication Data
Information contained in or relating to any communications you send to us, including support requests, feedback, or contact form submissions. This includes your email address, message content, and history of contact with our team.
e. Technical Data
Technical information about the devices used to access toerisme-maas.com, including device type, operating system, browser settings, screen resolution, and other system configurations.
f. Transaction Data
Data related to purchases made through our website, such as payment method (card type, last four digits, billing address), booking details, delivery instructions, and payment confirmation.
g. Preference Data
Data relating to your marketing preferences, communication consent, and interests in particular destinations, experiences, or travel packages.
4. Legal Bases for Processing
We process personal data on the following legal bases, as permitted under applicable privacy laws:
– Consent: Where you have explicitly agreed to the processing of your data (e.g., signing up for our newsletter or enabling cookies).
– Contractual Necessity: Where processing is required to fulfill a contract with you (e.g., completing a booking or processing payments).
– Legitimate Interests: Where it is necessary for our legitimate interests in maintaining and improving our services, except where such interests are overridden by your interests or fundamental rights.
– Legal Obligation: Where we are legally required to process your data for compliance with applicable laws or lawful requests.
5. Your Data Protection Rights
Under GDPR, CCPA, and other applicable data protection laws, you may have the following rights:
– Right of Access: You may request access to your personal data that we hold.
– Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
– Right to Erasure (“Right to Be Forgotten”): You may request deletion of your personal information, subject to applicable legal obligations.
– Right to Restriction: You can request restriction of processing under certain conditions.
– Right to Data Portability: You have the right to receive a copy of your personal data in a structured, machine-readable format and transmit it to another controller.
– Right to Object: You may object to our processing of your data based on legitimate interests or for direct marketing purposes.
– Right Not to Be Subject to Automated Decision Making: We do not use personal data to make decisions based solely on automated processing.
To exercise any of your rights, please contact us at [email protected].
6. Security Measures
We implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to the risk of our data processing activities. Security measures include but are not limited to:
– Secure, encrypted communication channels (HTTPS/TLS)
– Role-based access controls and authentication
– Regular backups and secure storage of user data
– Ongoing employee privacy and security training
– Routine audits and monitoring of internal systems
7. International Transfers
As an international website, some of your data may be transferred to countries outside the European Economic Area (EEA) or your region of residence. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or equivalent legal mechanisms, to ensure your rights and protections are upheld to a standard comparable to that in your jurisdiction.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted under law. Specific retention periods are as follows:
– Usage Data: Up to 12 months for analytics and security
– Account and Profile Data: Maintained for the life of the account, and up to 36 months after inactivity
– Communication Data: Held for 24 months for quality and legal accountability
– Transaction Data: Retained for a minimum of 7 years to meet accounting obligations
– Preference Data: Retained for up to 24 months from last interaction or consent update
Upon the expiration of these periods, data is either securely deleted or irreversibly anonymized.
9. Cookie Policy
Toerisme-maas.com uses cookies and similar technologies to enhance user experience, provide essential services, and analyze traffic. Cookies may be categorized as:
– Strictly Necessary Cookies: Essential to make the website function properly, such as session authentication and security tokens.
– Functional Cookies: Enable enhanced functionality like language selection or remembering user preferences.
– Performance and Analytics Cookies: Help us understand how users interact with our site and improve website functionality.
– Marketing Cookies: Used to deliver advertising more relevant to you and your interests based on behavior and preferences.
10. Cookie Management and Compliance
In accordance with GDPR and CCPA regulations, users are presented with the ability to manage cookie preferences upon first visit via a cookie banner. Users may modify or withdraw consent at any time by adjusting cookie settings in their browser or through our on-site Cookie Preference Center. For opt-out instructions tailored to your browser or device, please refer to the help section of your application or device provider.
11. Children’s Privacy
Toerisme-maas.com does not knowingly collect personal data from children under the age of 13 without verified parental consent. If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete such data. Parents who believe their child has provided us with information should contact us at [email protected].
12. Policy Updates
We may update this Privacy Policy from time to time in response to changes in our processing practices, regulatory updates, or technological advancements. Whenever material changes are made to this Privacy Policy, we will post a revised version on our website and, where appropriate, provide notice to users. Continued use of our website signifies your agreement to the updated terms.
13. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact:
Email: [email protected]
We are committed to ensuring compliance with all applicable data protection laws and protecting your privacy rights. Please do not hesitate to reach out to us if you have questions or wish to exercise your data rights.