Privacy Statement

1. Bagbooking.eu

We are Travel Experience B.V., a Dutch company trading under the name ‘Bagbooking.eu’.

We operate in the European Economic Area (EEA) and store our data on servers in the EEA unless otherwise stated in this privacy statement.

2. General

In this privacy statement, we summarize the data we process from you and how we handle it.

We may change the provisions of this privacy statement. If we do so, we will do our best to inform you. However, we recommend that you periodically check whether the privacy statement has changed.

3. What personal data do we collect?

When you visit our websites or use our services, we may process your personal data. Below, we explain what personal data we may collect from you, why we process it, and how long we retain it.

3.1 You are a visitor to our website

When you visit our websites or use our services, we may process your personal data. Below, we explain what personal data we may collect from you, why we process it, and how long we retain it.

A. To ensure that you can use our website and that the website functions properly, we process your session ID during your visit to our website. Our legal basis for processing the data is our legitimate interest in being able to show you the functioning website.

B. To improve our websites, we use Google Analytics and Hotjar. The software processes the personal data listed below for up to 2 years after it has been collected. We only see anonymized statistics and do not have access to the personal data listed below.

User, browser, and/or session ID
IP address
Information about your browser and device
The duration of your website visit and how you use our websites
The date and time of your visit to our website
Your searches on our websites
How you found our websites

We use Google Analytics based on our legitimate interest in improving our websites. Your interests are safeguarded because the data processing is limited. Google Analytics may store the data outside the EEA but guarantees compliance with European privacy laws. You can consult Google’s privacy statement here: https://policies.google.com/privacy?hl=en-US.

For the use of Hotjar, we request your consent in advance. You can consult Hotjar’s privacy statement here: https://www.hotjar.com/legal/policies/privacy/.

C. If you sign up for a newsletter on our website, we process your email address until you unsubscribe from the newsletter. Our legal basis for processing the data is your consent because you voluntarily subscribe to the newsletter.

You can unsubscribe from these newsletters by following the unsubscribe instructions included in each newsletter. Unsubscribing from the newsletter does not affect our ability to send you emails about important matters.

D. If you ask us a question or make a request, we process the personal data listed below for up to 2 years after our last contact with you. We process your data to respond to your question or request. Our legal basis for processing the data is your consent because you voluntarily contact us.

Name
Email address
Phone number
Holiday destination
Arrival date
Departure date
Provided information in the designated open fields

E. If you visit our website and give your consent in the cookie notification, we place tracking and advertising cookies from Facebook. The cookies process the information below for up to 2 years after the data is collected.

User, browser, and/or session ID
IP address
Information about your browser and device
The date and time of your visit to our website

Facebook may store the data outside the EEA but guarantees compliance with European privacy laws. You can consult Facebook’s privacy statement here: https://www.facebook.com/privacy/explanation

3.2 You are using our services

A. In order to provide you with our services, we process the personal data listed below for up to 2 years after you last used our service. The legal basis for processing your data is the performance of the contract we have entered into with you.

Name
Address
Email address
Phone number
Bank details and payments
Holiday address
Any specific details regarding your luggage
Necessary correspondence about the service

If you use our services through your accommodation, we may receive the above-mentioned data from your accommodation. We kindly refer you to the privacy policy of your hotel for more information.

If you make payments via iDeal, we will share your name and payment and bank details with our payment provider Mollie. You can consult Mollie’s privacy policy here: [Mollie Privacy Policy Link].

We share your name, address, and holiday address with our transportation partner so that they can pick up and deliver your luggage to the correct address.

4. Sharing your personal data

4.1 Processors we engage

We may ask others to assist in providing our services and maintaining the websites. These ‘processors’ may process your personal data on our behalf. We agree with these processors that they may only use your personal data to enable our service provision.

We use the following types of processors:
Parties that host our services and websites, store data, and manage and maintain our servers and databases.
Accounting software.
Developers and suppliers of our websites.
Research agencies and analytical software providers to improve our service provision.

4.2 Sharing your data with third parties

We only share your personal data with third parties if:

It is described in this privacy statement and we have a valid legal basis for it.
It is reasonably necessary or appropriate to comply with legal obligations.
It is necessary to comply with legal requests from authorities.
It is necessary to respond to any claims.
It is necessary to protect the rights, property, or safety of us, our users, our employees, or the public.
It is necessary to protect ourselves or our users from fraudulent, offensive, inappropriate, or unlawful use of our services.

We will immediately notify you if a government agency makes a request regarding your personal data unless we are prohibited from doing so by law.

Our websites may also contain links to third-party websites. If you provide your personal data on these third-party pages, the privacy policy of that third party applies. We are not responsible for the content of the privacy policies of these parties and the way in which they handle your personal data. We recommend that you review their privacy policies before providing them with personal data.

5. Protection of your personal data

We have implemented appropriate technical and organizational security measures to protect your personal data. We have taken the following measures at least:

We have secured our servers physically and digitally to prevent unauthorized access to your personal data.
We use encryption to ensure that data is transmitted securely between the websites and our servers.
We create backups of your personal data.
Vulnerabilities on the websites are addressed as quickly as possible.
We have implemented physical and electronic measures designed to prevent unauthorized access, loss, or misuse of personal data as much as possible.
We store your passwords encrypted.

We would like to remind you that the internet is never completely secure. Therefore, please be cautious about what you share over the internet and contact us if you have any doubts.

6. Your Rights

You have certain rights regarding your personal data. The rights described below are not absolute rights. We will always consider whether we can reasonably fulfill your request. If we cannot do so or if it would compromise the privacy of others, we may refuse your request. If we refuse a request, we will provide a reasoned explanation.

Right to Access and Data Portability

You have the right to request information about the personal data we process about you. You can also ask us for the following:

Right to Access and Data Portability

You have the right to request information about the personal data we process about you. You can also ask us for the following:

Insight into the reasons why we process your personal data.
The types of personal data we process about you.
The types of parties with whom we share your personal data.
The duration for which we retain your personal data.
The source of the personal data.
Whether we use automated decision-making.

You can also request a copy of your processed personal data. If you require additional copies, we may charge a reasonable fee for that.

Right to Rectification

If the personal data we process about you is incorrect or incomplete, you can request us to correct or supplement your personal data. If we grant your request, we will, as far as reasonably possible, inform the parties to whom we have disclosed the data about the changes.

Right to Erasure of Data

If you no longer want us to process certain personal data about you, you can request the erasure of specific or all personal data we hold about you. If we have unlawfully processed data or if a specific law requires us to erase data, we will do so. However, if the data is necessary for the handling of a legal process or dispute, we will delete the personal data only after the conclusion of the process or dispute. If we grant your request, we will, as far as reasonably possible, inform the parties to whom we have disclosed the data about the erasure.

Limitation of Processing

If you believe that we are processing incorrect personal data about you or that we are unlawfully processing or no longer need your personal data, you can request us to restrict the processing of that personal data. For example, during the time we need to evaluate your request or if there is no longer a lawful basis for processing but you still have a legitimate interest in us not deleting the personal data. If we restrict the processing of your personal data at your request, we may still use the data for the handling of a legal process or dispute.

Automated Individual Decision-Making

We do not make decisions solely based on automated processing.

Withdrawal of Consent

You have the right to withdraw your consent at any time by unchecking the consent boxes or by contacting us. Our contact details are provided below.

Exercising Your Rights

You can send the above requests to info@bagbooking.eu.

Before we can respond to your request, we need to verify that it is indeed your personal data. If necessary, we may ask for a copy of a valid identification document. In that case, please remember to redact your social security number (BSN), machine-readable zone (MRZ), and photograph.

We aim to respond to your request or complaint within one month. If it is not possible to make a decision within one month, we will notify you of the reasons for the delay and provide an expected timeframe for the decision, which will not exceed three months from the date of receipt.

Dutch Data Protection Authority

If you have a complaint about our processing activities, please contact us. We are happy to assist you. If, despite our efforts, we are unable to resolve the issue, you also have the right, under privacy legislation, to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority for privacy matters. You can contact the Dutch Data Protection Authority via https://autoriteitpersoonsgegevens.nl/.