Privacy Statement

General

Net Travel Associates, Vuelandia and Flexible Autos, all trade names of Net Travel Associates BV (hereinafter also “we,” “us,” “our” and “our”) are committed to protecting and respecting your privacy. This privacy statement explains how we collect, use and store personal data from you. The terms used in this privacy statement are defined in the General Data Protection Regulation (“GDPR”) and have the meanings assigned to them in the GDPR. Depending on your country of residence, additional privacy rules may apply. Please read this privacy statement carefully.

Contents of this privacy statement

We are both processors and processors of your personal data.

Our privacy statement also covers the use and processing of your personal data on our websites: nettravelassociates.com, vuelandia.com, vuelandia.co.uk and flexibleautos.co.uk including the processing of this data through the placement of so-called “cookies”.

Any questions, comments or requests regarding your personal data can be directed to:

Net Travel Associates BV
Cross Road 478
2132 LA Hoofddorp
Netherlands

Phone: +31 (23) 8200470
E-mail: privacy@vuelandia.com

We will respond to your message no later than 30 days after receipt.

If you think there is a problem with the way we handle your personal data, you have the right to lodge a complaint with the Personal Data Authority, https://autoriteitpersoonsgegevens.nl, which can be reached by phone at telephone no. +31 (88) 1805250.


Provision of personal data

When you provide your personal data to us, you consent to the use of your personal data for the purposes for which it is provided. This could be, for example, signing up for a newsletter, asking for (specific) information, or making or accepting an offer for which we need your personal data, etc.

If you provide us with personal data of persons other than yourself, you are responsible for and warrant that these other persons:

  1. have consented to the provision of their personal data to us and are familiar with our privacy policy as reflected in this privacy statement and our terms and conditions;
  2. are aware that, in the context of the execution of an order (if any), we may provide these personal data to third parties involved in the execution of the order;
  3. are aware that they may have access to each other’s personal data if they are part of the same assignment;
  4. prior to obtaining the foregoing consent, have received from you all legally required information, including at least the following information:
    1. What personal data you will provide to us from these other persons;
    2. That third parties, including airlines, hotels and car rental companies, to whom we provide this personal data, may, in order to provide their services, be required to provide certain personal data to third countries, or international organizations, or service providers that may be located outside the European Economic Area (EEA), that do not provide similar privacy protections as those within the EEA pursuant to AVG, such as for example but not limited to the US Bureau of Customs and Border Protection;
  • that, within the limits of applicable laws and regulations, such other persons have the right to request access to the personal data we hold about them and that, if such personal data are factually inaccurate, incomplete, or irrelevant, or are otherwise processed in violation of any legal requirement, the person in question may request that such data be corrected, supplemented, deleted or blocked and inform that person that they may contact us for more information on the rights and/or such a request;
  1. any other information necessary to deliver to these other persons a proper and careful processing of their personal data by us.


Objection to the processing of your personal data

You can always object to the processing of your personal data or withdraw a previously given consent for the processing of your personal data. If you withdraw your consent to the processing of your personal data, this only relates to the future processing of your personal data.

You may object to the processing of your personal data unless the processing is essential for the protection of our legitimate interests or a third party for whom we are acting as a processor (Art. 6(1)(f) AVG). In doing so, we will always weigh your interests against the necessity of processing your personal data. For example, there may be necessary processing if it is important for providing our services such as making bookings, processing complaints or other claims. We therefore ask you to send us your objection to the processing of your personal data as clearly and substantiated as possible. We will then examine your request and stop processing your personal data, modify it or indicate the lawfulness for a continuation of processing your personal data.

You can always object to the processing of your personal data for advertising and marketing purposes.

Processing personal data when contacting us.
If you contact us, we will process your personal data that you have provided to us in order to process your request and answer possible follow-up questions. These personal data may be used, for example, in preparation for – or execution of – a future assignment. We process your personal data to provide you with requested products or services and to optimize our services. In addition, we use your personal data to send you messages with both (general) content and promotional purposes, which also includes:

  • meeting our legal obligations;
  • Assessing and accepting a customer and establishing agreements with customers;
  • Processing data for marketing purposes;
  • Offering, reserving, delivering and improving products and services;
  • for the purpose of communication;
  • For handling questions or complaints;
  • for security and dispute resolution;
  • for the purpose of analysis.

These personal data may also come from third parties, provided that the third party has been authorized to provide these data, or that a legitimate interest is served by providing these personal data.

The data we may collect from you include:

  • Your (first and last) name, gender and date of birth;
  • Your contact information such as address, phone number, e-mail address;
  • any travel details;
  • Any memberships in customer and loyalty programs;
  • other personal data you have provided to us (including special personal data as referred to in Art. 9(1) AVG).

The basis for processing these personal data is Art. 6 paragraph 1 sub b AVG and, in the case of special personal data, Art. 9 paragraph 2 sub a AVG. The processing of your personal data will be limited until it is no longer relevant, taking into account a possible legal minimum and maximum period.


Marketing

We may use personal data for marketing purposes and providing information about (new) products and services. If you no longer appreciate such information, you may notify us by following the instructions in the message itself or by notifying us by e-mail or in writing.


Processing of personal data in the case of orders

If you make reservations for flights, hotels, rental cars, package tours or other services, the relevant personal data requested during the reservation process are essential for the fulfillment of your order. The personal data we may collect in the process include:

  • Your (first and last) name, gender and date of birth;
  • Your contact information such as address, phone number, e-mail address;
  • details of your travel and other documents (such as passport details, driver’s license, etc.);
  • your travel details;
  • Any memberships in customer and loyalty programs;
  • your payment information;
  • other personal data that you have provided to us (including special personal data as referred to in Art. 9(1) AVG).

The basis for processing these personal data is Art. 6 paragraph 1 sub b AVG and, in the case of special personal data, Art. 9 paragraph 2 sub a AVG.

Within a maximum of 1 year after the completion of your trip, your personal data will be deleted. We are required by law to retain a limited amount of your personal information (including your name, contact information and travel information) for a period of 7 years.


Website Security

When you contact us online, make online bookings or make online payments, the communication process is always secured with SSL or TLS encryption. You can check this in your browser by clicking on the lock icon () with your mouse.


Links to other websites

Our websites contain links to other websites of our business partners such as hotels, airlines, car rentals and other providers or advertisers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we have no control over them and therefore accept no responsibility or liability for them. Therefore, check the privacy policies of these websites before sending personal information through them.


Monitoring of websites and cookies

We use various technical capabilities to monitor the use of our website(s). This gives us insight about how visitors use our websites. This is done on the basis of (anonymized) reports and cookies. This information allows us to improve our offerings and better tailor our offerings to you as a user

The basis for processing these personal data is Art. 6 (1) (f) AVG. Below we detail the different methods we use.

  1. Cookies

Our websites use so-called cookies. A cookie is a small file stored on your device (computer, smartphone, tablet, etc.) by the Internet browser you use to visit our websites. A cookie helps us monitor and where necessary improve the use, effectiveness and security of our websites and to recognize you as a (returning) visitor. In addition, these cookies allow us to collect statistical data on the use of our websites with which we are able to further improve our offer. Cookies do not contain viruses and do not affect the operation of your device.

In most cases, we use so-called “session cookies.” These are cookies that are automatically deleted after you close your Internet browser. Other cookies will remain on your device until you delete these cookies.

You can set the Internet browser not to store cookies on your device and thus and to a certain extent control cookies stored by our websites yourself. More information on blocking cookies can be found, for example, at https://veiliginternetten.nl. Please note that certain features on our websites may not work properly if you block cookies.

  1. Server log files

When you visit one of our websites, your IP address may be recorded in a log file. This record is provided with (among other things) a date and time, information about the Internet browser and operating system used, and the pages visited by you. The purpose of processing this data is to ensure the stability and security of our websites.

  1. Google (Universal) Analytics

Cookies from the American company Google are placed through our websites as part of the “Analytics” service. Google may provide this information to third parties if Google is legally required to do so, or to the extent that third parties process the information on Google’s behalf. We have no control over this.

The information Google collects is anonymized as much as possible. Your IP address is expressly not included. The information is transferred to and stored by Google on servers in the United States. Only in exceptional cases is the full IP address transferred to a Google server in the United States and anonymized there. In these exceptional cases, Google is subject to the Privacy Shield Framework(https://www.privacyshield.gov/welcome).

You can disable the collection of data by Google through our websites (including your IP address) and the processing of this data by downloading and installing the Google Analytics Opt-Out plug-in at the following link: https://tools.google.com/dlpage/gaoptout?hl=nl or clicking on this link. In the latter case, an opt-out cookie will be stored on your device. You must click this link again if you delete your cookies, or use a different device.


Provision of personal data to third parties.

Except in the circumstances specified in this privacy statement, we do not share your personal data with third parties unless:

  1. You have given us permission to do so, or;
  2. we are required to do so by laws to which we are subject, or;
  3. this is necessary to provide a product or service.

We will only disclose your personal data to third parties if this is important in preparation for – or for the performance of – the agreement that is (will/can be) concluded between you and this third party in accordance with Art. 6 (1) (b) AVG. Please note that these third parties, which include airlines, may be located in a country outside the European Economic Area (EEA) that does not provide similar privacy protections as those within the EEA pursuant to AVG. In addition, these third parties themselves may also be required to provide certain personal data to third countries, or international organizations or other parties that may be located outside the European Economic Area (EEA) that do not provide similar privacy protections to those within the EEA pursuant to AVG, such as for example but not limited to the US Bureau of Customs and Border Protection.


Your rights regarding the processing of your personal data.

You have the following rights with respect to your personal data:

  • The right to see the personal data we hold about you;
  • The right to delete or correct your personal data;
  • The right to restrict or prohibit the processing of your personal data;
  • The right to transfer your personal data.

To ensure that the request for access is made by you, we ask that you send a scan or copy of your valid ID with the request. In this scan/copy, make the passport photo, MRZ (machine readable zone, the strip of numbers at the bottom of the passport), passport number, Citizen Service Number (BSN) and your height illegible. We use this document to establish that the request came from you and is deleted immediately after it is established. We will respond to your request as soon as possible and in any case within five working days.

There is no charge for requests for inspection, deletion, correction or similar requests, unless these requests are unreasonable or in case you want to receive the personal data on paper or other data carriers. In all cases, we will inform you in advance whether you will owe us a fee to fulfill your request.

In case we refuse access to your personal data, we will always give reasons for this insofar as this is not permitted by law or regulations. You have the right to challenge our decision to deny access to your personal data.

Any request for access to personal data will be documented by us.

Every privacy-related complaint is acknowledged, recorded and investigated. The results of this investigation will be provided to the person filing the complaint. If the complaint is found to be justified, appropriate action will be taken, which may include changes to our privacy policy and procedures.


Security of personal data

We take all appropriate technical and organizational measures to secure your personal data against loss, theft, infringement, as well as against any form of unlawful processing. In doing so, we will ensure that our own security policy and its implementation meet at least the criterion of “appropriate technical and organizational measures” as stipulated in Article 32 of the AVG. These measures ensure an appropriate level of security given the nature of the personal data we process. In addition, we also advise you to take precautions for unwanted use or disclosure.


Changes to this privacy policy

We will periodically review our privacy policy and update it as necessary. This right is expressly reserved for this privacy statement. This privacy statement was last updated on April 1, 2023.

© Net Travel Associates BV