Since 25 May 2018, all organisations in the Netherlands have to comply with new privacy rules. The new requirements are set out in the General Data Protection Regulation (GDPR). This law imposes strict requirements on the handling of personal information.
- Processing of your personal data is limited to only those data that are minimally necessary for the purposes for which they are processed;
- Ask for your explicit consent if we need it for the processing of your personal data;
- Have taken appropriate technical and organisational measures to ensure the security of your personal data;
- Do not transfer personal data to other parties, unless this is necessary for the execution of the purposes for which they were provided;
- Be aware of your rights regarding your personal data, want to point this out to you and respect them.
1422 KL UIthoorn, the Netherlands
Processing of personal data
Your personal data will be processed by L’Orange CV for the following purposes:
- For the execution of an agreement with you.
- For sending newsletters, brochures and invitations;
For the above purposes, we may request the following personal data from you:
- First name, insert and last name
- Date of birth
- Gender (male/female)
- Address details;
- Phone numbers
- Email address
- Chamber of Commerce no / VAT no
- Details regarding.b your diet if you report dietary requirements when booking your trip.
Provision to third parties
We may provide the data you provide to us to third parties if this is necessary for the execution of the purposes described above.
For example, we use a third party for:
- Taking care of the (financial) administration for individual trips;
We only pass on personal data to other parties with whom we have concluded a processing agreement. We of course make the necessary agreements with these parties (processors) to ensure the security of your personal data. Furthermore, we will not provide the data you provide to other parties, unless this is required and permitted by law. An example of this is that the police request (personal) data from us as part of an investigation. In such a case, we must cooperate and are therefore obliged to provide this information. We may also share personal data with third parties if you give us written permission to do so.
We do not provide personal data to parties established outside the EU.
We only process personal data of minors (persons under the age of 16) if written permission has been given by the parent, carer or legal representative.
L’Orange CV does not store personal data longer than necessary for the purpose for which it was provided or is required by law.
We have taken appropriate technical and organisational measures to protect your personal data against unlawful processing, for example, we have taken the following measures;
- All persons who can access your data on behalf of L’Orange CV are obliged to keep it confidential.
- We use a username and password policy on all our systems;
- We pseudonymize and ensure the encryption of personal data if there is reason to do so;
- Online bookings are made via a secure connection;
- IP addresses are registered and times stored, but cannot be traced back to you;
- We make backups of the personal data in order to be able to restore it in the event of physical or technical incidents;
- We regularly test and evaluate our measures;
- Our employees have been informed about the importance of the protection of personal data.
Your privacy rights
You have the right to inspect, rectify or delete the personal data that we have received from you. You can also object to the processing of your personal data (or part of it) by us or by one of our processors. You also have the right to have the data you provide transferred by us to yourself or on your behalf directly to another party. We may ask you to identify yourself before we can respond to the aforementioned requests.
If you have a complaint about the processing of your personal data, we ask you to contact us directly about this. If we can’t work it out together with you, we will of course find this very annoying. You always have the right to lodge a complaint with the Dutch Data Protection Authority,which is the supervisory authority in the field of privacy protection.