Privacy Policy

1. Data Controller

Favotrip B.V. is the data controller within the meaning of the General Data Protection Regulation (GDPR). For questions about this privacy policy, you can contact us via [email protected].

2. What personal data do we collect?

We collect the following personal data:

• First and last name
• Email address
• Phone number
• Address details (if necessary for the booking)
• Payment details (processed via our payment provider)
• IP address and browser data
• Booking and voucher data

3. Purposes of processing

We process your personal data for the following purposes:

• Processing and executing bookings and voucher orders
• Sending confirmation emails and booking information
• Handling payments
• Providing customer service
• Improving our website and services
• Complying with legal obligations
• Sending newsletters and offers (only with your consent)

4. Legal grounds

The processing of your personal data is based on the following legal grounds from the GDPR:

• Performance of a contract: for processing bookings and vouchers
• Consent: for sending marketing communications
• Legal obligation: for tax and accounting obligations
• Legitimate interest: for improving our services and fraud prevention

5. Sharing data with third parties

We only share your personal data with third parties when this is necessary for the execution of our services:

• Hotels and accommodation providers (for your booking)
• Activity providers (for activities included in your package)
• Payment service providers (for processing payments)
• IT service providers (for hosting and maintaining our systems)

We never sell your personal data to third parties for commercial purposes.

6. Cookies

Our website uses cookies to enhance the user experience and to track anonymous statistics. We use the following types of cookies:

• Functional cookies: necessary for the functioning of the website
• Analytical cookies: for tracking visitor statistics (anonymized)
• Marketing cookies: for displaying relevant advertisements (only with your consent)

You can manage cookies through your browser settings.

7. Retention periods

We do not retain your personal data longer than necessary for the purposes for which they were collected. For booking data, we apply a retention period of 7 years due to tax obligations. Account data will be deleted after your account is closed.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: you can request which data we process about you
• Right to rectification: you can have incorrect data corrected
• Right to erasure: you can request the deletion of your data
• Right to restriction: you can have the processing of your data restricted
• Right to data portability: you can receive your data in a structured format
• Right to object: you can object to the processing of your data

To exercise any of these rights, you can contact us via [email protected]. We will respond to your request within 30 days.

9. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Payments are processed through secure, PCI-DSS certified payment providers.

10. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first. You also have the right to file a complaint with the autoriteitpersoonsgegevens.nl.

11. Changes

We reserve the right to change this privacy policy. The most current version is always available on this page.