Privacy Policy
Last Updated: 2024-06-07
CostaBallena.eu (“we”, “our”, or “us”) is committed to protecting your privacy. You should always feel secure when you provide your personal information to us. This Privacy Policy describes how we ensure that your personal data is processed in accordance with applicable privacy legislation, specifically the EU’s General Data Protection Regulation (GDPR).
What is Personal Data?
Personal data can include information such as your name, personal identification number, address, email address, and phone number. It can also include various encrypted data and different kinds of electronic identities such as IP numbers. A condition for it to be considered personal data is that the information directly or indirectly can identify a currently living individual.
Sensitive Personal Data
Certain types of personal data are particularly sensitive, such as information related to your health, religious beliefs, or ethnic origin. We only collect and process sensitive personal data when absolutely necessary. This may occur in connection with a booking if you request permission to fly with a medical condition or otherwise disclose sensitive personal data to us or any of our partners.
Data Controller
CostaBallena.eu is the data controller for the processing of your personal data and is responsible for ensuring that the processing is carried out in accordance with applicable legislation. CostaBallena.eu is responsible for the processing of personal data on the website and other communication systems linked to CostaBallena.eu.
Data Protection Officer
CostaBallena.eu has appointed a Data Protection Officer responsible for monitoring that the processing of your personal data is carried out in accordance with applicable legislation. The Data Protection Officer can be reached at the following email address: [email protected].
Contact Information
Do not hesitate to contact CostaBallena.eu if you have any questions about this privacy policy, the processing of your personal data, or if you wish to request a register extract. You can contact us at [email protected] or via the phone number in our official contact information.
How Does CostaBallena.eu Collect Information About You?
Directly from You:
CostaBallena.eu collects information that you provide when you request information, use additional services, book events, register for newsletters, participate in announced activities, respond to surveys, email, call, or contact CostaBallena.eu or any of our partners. This can include information about you, or other individuals mentioned in your communication.
Through Your Use of Our Websites:
We collect information in the form of your usage of the service when you use our websites or any other digital service from us. We also collect information about how you navigate the service, the searches you perform, and the information you are interested in. Read more in our cookie policy.
From Third Parties:
We collect information from third parties that provide personal data about you, or other individuals included in communications regarding inquiries and bookings of activities via our website, e.g., if you book a service from a partner that publishes their product or service on our website or if someone makes a booking on your behalf. We assume that those who provide the information have the consent of all travelers to submit this personal data to CostaBallena.eu and its partners.
What Information Does CostaBallena.eu Collect?
Contact Information:
Name, address, phone number, email, etc.
Purchase Information:
Information about the purchase of services and products (selected payment solution, completed purchase, etc.) and any purchases of additional services such as booking accommodation, events, excursions, restaurant reservations, etc.
Health Information:
If you provide information about your health (e.g. illnesses and/or disabilities), you consent to its processing and agree that we may use the provided health information to administer and deliver the service you have requested.
User Information:
Information about your device, such as IP address, language settings, web settings, operating system, platform, screen resolutions, and information about your geographical location. We also collect information about how you interact with CostaBallena.eu, such as how you use our services, including page response times, download errors, how you reached and left the service, as well as delivery notifications when we contact you. Read more in our cookie policy about the collections we make to improve your user experience.
What Does CostaBallena.eu Do with Your Information?
All data is used to provide, perform, and improve CostaBallena.eu’s services. CostaBallena.eu processes personal data for the following purposes based on the following legal grounds:
For Administration and Delivery of Service:
CostaBallena.eu processes your personal data for the administration and delivery of bookings and services, i.e., to fulfill the contract with you. This includes, among other things, issuing booking confirmations, administering bookings of accommodation (hotels & tourist apartments), restaurant reservations, additional services, excursions, processing payments, and administering any changes before and during the execution of the service.
To Provide Customer Service:
Your personal data can be used when you contact us with questions, comments, or complaints to provide you with the service you are entitled to in accordance with the contract you have entered with us. We process your personal data such as your name and booking number to handle such service matters related to your service.
Personal data is stored in CostaBallena.eu’s data systems, such as CRM, websites, and booking systems. The data stored for customer service purposes includes booking information, name, date of birth, gender, contact information, customer communication, accommodation information, transportation information (flight, transfer), payment information. Sensitive personal data regarding special needs/disabilities is also stored when necessary for the execution of specific services included in the booking.
For Sending and Providing Information:
We use your personal data to send and provide information via email, SMS, and/or phone calls to fulfill the contract with you. This includes sending booking confirmations, important information before and during your trip, offers related to the trip, any deviations that may arise, and payment reminders.
Your contact information and booking information are also used to send you a customer survey after the trip to help us improve and develop our travel service. Participation in the customer survey is voluntary.
Marketing and Personalization:
Your personal data is used for direct marketing of our own and/or selected partners’ goods and services to provide better and more personalized offers to you. The processing of your personal data is to fulfill the contract with you and other legitimate interests. This includes personalization to:
– Customize newsletters based on your preferences and needs from your usage pattern of our website (including history).
– Influence how the content on the website appears when you visit us.
– Communicate via social media and web advertising on other websites than CostaBallena.eu.
Read more in our cookie policy about how CostaBallena.eu uses personalization.
You can unsubscribe from receiving marketing from us at any time in each marketing message.
For Business Development and Service Development:
To develop and improve our services and service, we mainly use anonymous or anonymized data at an aggregate level for this purpose. However, it may occur that we use information such as user behaviour and/or booking information collected if relevant for the purpose based on our legitimate interests to improve our travel service and service to you in the future.
To Comply with Regulatory Requirements:
We process your personal data to fulfill obligations under laws and regulations to prevent, investigate, or report fraud or security issues and to cooperate with law enforcement agencies regarding security, accounting, complaints, immigration, and customs control.
Legal Basis:
In summary, we process your personal data to:
– Fulfil our contract with you, i.e., administer and deliver service and services to you.
– You have given your consent for us to process them.
– Comply with legal requirements.
– It is in our or our partners’ legitimate interest.
How Long Does CostaBallena.eu Retain Your Information?
CostaBallena.eu retains personal data only as long as necessary to fulfill our contract with you and the purposes for which the data was collected in accordance with this privacy policy. Your purchase history, including contact information, booking information, and health information, is retained for two (2) years from the date of the completed service or service. We also retain your personal data on other grounds than to fulfill our contract with you, e.g., to comply with accounting laws. Statutory requirements then determine how long we retain your data.
If you have registered to receive newsletters from CostaBallena.eu, we retain your personal data as long as you wish to continue receiving the newsletter.
The same personal data can be retained by us for different purposes in different systems. For example, your name can remain in our systems to deliver services and service even though the personal data has been deleted for marketing purposes.
Who May CostaBallena.eu Share Your Information With?
CostaBallena.eu may disclose your personal data to carefully selected third parties. All processing and transfer are made to fulfill the purposes of processing your personal data as described above. We take all reasonable legal, technical, and organizational measures to ensure that your personal data is handled securely and with an adequate level of protection when transferred to or shared with such selected third parties.
The personal data we share includes booking information, name, date of birth, gender, contact information, customer communication, accommodation information, deviation information (flight times, flight delays, change of accommodation), payment information made for compensation purposes. Sensitive personal data such as the need for assistance for special needs/disabilities is also retained.
All processing and transfer are made to fulfil the purposes of processing your personal data as described in this policy and to streamline and provide accurate service.
Providers of Travel-Related Services:
Transfers are made to our partners in the travel industry to administer and deliver the service you ordered from us. We provide personal data to these to perform the service.
Travel Agencies or Other Partners:
If we broker a service via a travel agency or another partner, we send certain personal data such as booking number to them to confirm the booking. Each entity is individually responsible for handling personal data according to their privacy policy. We are not responsible for another entity’s processing of the personal data you have provided to them.
Accommodation and Golf:
When you book accommodation or golf through CostaBallena.eu, the accommodations and golf courses need certain personal data to execute and confirm your booking. This includes data such as name, date of birth, golf handicap, etc.
Flights:
Airlines need certain data to execute your trip, such as name, age, and in some cases, gender. These personal data are transferred either via our data systems to the airline with passenger lists. CostaBallena.eu also sends your contact information to the airline. The data may only be used by the airlines to contact you in case of flight disruptions.
In some cases, airlines hire agents to perform services related to the airport, such as baggage handling and check-in. When the agent performs the service, they may have access to personal data necessary to perform the service.
Destination Agents:
Destination agents who perform services on-site act in some cases as intermediaries between CostaBallena.eu and accommodations, events, and other activities. They have access to the personal data they need to perform the services.
Other Parties:
We have partners who manage your bookings of related services such as accommodation, excursions, and other activities. They receive the personal data they need to deliver the booked service. This includes data such as name, email, and address to confirm bookings but also passport information such as gender, eye colour, and height to perform excursions across borders when passport controls are required.
IT Services and Systems:
We have several internal and external systems in which we handle your personal data, such as customer service systems, booking systems, and systems for data management and data improvement. The data is processed in these systems to, among other things, deliver and administer your booked services, handle customer care issues, and deliver other related services.
Microsoft:
In our internal work, we use Microsoft Office products and system services. The personal data is stored by Microsoft in a cloud service within the EU. To protect your personal data in the event of a significant IT incident, Microsoft may transfer your personal data to a third country, i.e., a country outside the EU/EEA.
Web Analysis Companies:
To provide you with the best possible experience on our websites, we use external providers to help with the analysis of user behaviours and user feedback on our websites. The data handled is anonymized. Read more in our cookie policy.
SMS:
To provide information via SMS before and during the trip, we use an external provider. The personal data we share with this provider is your mobile phone number.
Payment Solutions:
CostaBallena.eu uses an external payment provider to handle payments and refunds. The payment provider has access to personal data necessary to execute the payment, such as payment information and, in some cases, name. The processing is necessary for us to deliver your trip or process a complaint.
Your Rights
CostaBallena.eu is responsible for ensuring that your personal data is processed in accordance with applicable legislation. We will, at your request or on our own initiative, correct, anonymize, delete, or complete data that is found to be incorrect, incomplete, or misleading.
You have the right to request access to and rectification or, in some cases, deletion of your personal data, request restriction of further processing of your personal data, and the right to object to the processing (e.g., if you question whether the personal data is correct or if the processing is lawful). The data controller will notify each recipient to whom the personal data has been disclosed, as per the section “Who May CostaBallena.eu Share Your Information With?” above, of any corrections or deletions of data and restrictions on the processing of data that takes place under this point.
You have the right to data portability, i.e., the right to under certain conditions obtain and transfer your personal data to another data controller.
You have the right to, through a signed written request, receive a register extract from CostaBallena.eu free of charge, including information on what personal data is registered about you, the purposes of the processing, and to which recipients the data has been disclosed or will be disclosed.
If you do not want CostaBallena.eu to process your personal data for direct marketing purposes, you have the right to opt-out at any time in our marketing communications. Once we have received your opt-out, we will cease processing the personal data for this purpose.
Requests for register extracts, rectification, or deletion of personal data are handled by our employee responsible for data protection issues. After receiving the request, it will be verified and confirmed. We will respond as soon as possible, but no later than 30 days.
Security
CostaBallena.eu takes all reasonable legal, technical, and organizational measures to ensure that your personal data is handled securely and with an adequate level of protection when transferred to or shared with selected third parties.
How Does CostaBallena.eu Protect Your Information?
When we share your data with partners, we enter into agreements to ensure that such partners process your data in accordance with our privacy policy and applicable data protection legislation. You should always feel secure when providing your personal data to us. CostaBallena.eu has therefore taken the necessary security measures to protect your personal data against unauthorized access, alteration, and deletion.
Measures to fulfill the principles of “data protection by design and by default” are continuously taken, as well as training our staff on data protection issues. The risks associated with personal data processing are continuously evaluated, and security measures are taken to minimize the risks.
Cookie Policy
We use cookies to improve the user experience on our website. Read more about how we use cookies in our cookie policy.
Changes to This Privacy Policy
From time to time, we may make changes to our privacy policy. We will notify you of changes to the policy with reasonable notice as required by law. We will also post an updated policy on our website. The updated policy will have a different date and version number. Please visit our website regularly for updates.
This privacy policy ensures compliance with the GDPR and clearly explains how CostaBallena.eu handles and protects users’ personal data.