OUR PERSONAL DATA PROCESSING POLICY
What personal data do we process?
We are required to process certain kinds of information necessary for providing services to our customers and partners and for other purposes specified below. Such information shall include the following, without limitation:
- name and surname,
- date of birth, age of the participant
- place of residence,
- e-mail address,
- telephone number,
- account number,
- cookies and GPS data;
and (if necessary with regard to the selected experience) information on:
- health status and health limitations,
- special skills (e.g. whether you have a driving licence, captain’s and pilot licence, diving licence, etc.).
For the purpose of the processing of your personal data, we are the “controller” of your personal data pursuant to Regulation (EU) 2016/679 on personal data protection.
Why do we process the personal data?
We need some of the personal data in order to perform our contract with you, i.e. to host your customer account on our website and for purposes of selection and reservation of activities and processing of payments. We use some of the personal data to communicate with you, in particular, by sending information regarding the activities, co-ordination and organisation of the activity.
We process some of the personal data so that we can pair it with your feedback and evaluate experiences in order to keep improving our services.
Use of information for one-way communication
We process some of the personal data in order to send you marketing offers and information regarding our services and products.
Information on your device
For a more comfortable use of geolocation tools we also process the GPS data from your devices (desktop computer, laptop, tablet, mobile phone) that you let us collect through your device settings.
We process cookies to ensure a more comfortable user experience in using our website functionalities and the integrated customer system. We process data from cookies stored in your device, including cookie settings and ID.
Personal data transfers to partner agencies
We transfer your personal data which we process to provide our services to our partner agencies who to a certain extent act as processors in relation to OutdoorTrip SE within the meaning of the Regulation (EU) 2016/679 on personal data protection. From a broader perspective, the agencies are the controllers themselves as they process your personal data, e.g. in order to perform activity contracts.
Some of our partner agencies are based outside EU. Such agencies (if they are not from countries whose legislation provides adequate protection of your personal data pursuant to the decision of the European Commission) are obliged to provide protection of your personal data similar to ours based on contractual clauses adopted by the European Commission and concluded with us (contractual clauses pursuant to the decision of the European Commission No. 2001/497/EC, 2004/915/EC and 2010/87/EU available at http://eur-lex.europa.eu).
Therefore, your personal data are always processed in accordance with the EU regulation on personal data protection.
Ensuring protection, integrity and security of your personal data
We process any and all of your personal data in accordance with the GDPR. We take any and all technical and organisational measures to ensure appropriate protection, integrity and security of your personal data.
Legal grounds for personal data processing
We process your personal data for the aforementioned reasons based on these legal grounds:
- processing is necessary for the performance of a contract and fulfilment of our legal obligations
- processing is necessary to protect our legitimate interests.
Exercising your rights regarding personal data processing
Pursuant to the Regulation (EU) 2016/679 on personal data protection, you especially have the right of access, right to rectification, portability and erasure of your personal data. Furthermore, you have the right to object to and limit processing of your personal data; in particular, you have a right to reject further processing of your personal data for the purposes of direct marketing, i.e. sending marketing offers.
Retention of your personal data
We process your personal data during the term of provision of our services and products or until you exercise the right to erasure of your data, or, based on legal grounds for processing (e.g. accounting records), for the period stipulated by law.
If you have any further questions, you can contact us at firstname.lastname@example.org.
Controller’s contact details
OutdoorTrip SE, Svatopetrská 35/7, Komárov, 617 00 Brno, Czech Republic, Id. No.: 06784615, e-mail: email@example.com.
Valid from 10.10.2018