At Gustavista, we prioritize the protection of your personal data and are committed to providing clear and transparent information on how we handle it. Our focus is on delivering personalized services and maintaining the highest standards of privacy, and this Privacy Policy outlines our practices.

This Privacy Policy applies to individuals using our products and services, interacting with our websites, mobile application, social media channels, or engaging with our representatives at Gustavista.

We take every measure to ensure the utmost privacy and handle personal data with care. Gustavista complies with all applicable laws and regulations, including the General Data Protection Regulation. This means we commit to:

• Process personal data for specific and lawful purposes, as outlined in this Privacy Policy

• Limit the processing of personal data to what is necessary for the intended purposes

• Seek explicit consent when necessary for processing personal data

• Implement appropriate technical and organizational measures to secure personal data

• Not share personal data with third parties unless necessary for fulfilling the intended purposes

• Respect and uphold your rights regarding your personal data

We use personal data to efficiently manage and improve our services, including:

• Processing bookings

• Enhancing our online services, including our websites and mobile application

• Detecting and preventing fraud for secure bookings

• Developing our product range, technological systems, and communication methods

• Providing specialized and personalized services to meet your needs, including relevant marketing materials matching your interests

• Maintaining personal contact to assist you effectively with (booking) requests

As Gustavista, we are responsible for processing your personal data. If you have questions or wish to contact us regarding this Privacy Policy, please use the contact details provided at the end of this document.

Processing of Personal Data for Customers or Suppliers We process personal data of customers or suppliers for the following purposes:

• Administrative purposes

• Communication related to the assignment and/or invitations

• Executing or processing an order

The basis for processing this personal data is:

• The agreed assignment

For these purposes, Gustavista may request the following personal data:

• First name; Middle name; Last name

• (Business) Telephone number

• (Business) Email address

• Gender

• Date of birth

• Address

• Relevant preferences for holidays or business trips

In some cases, we may also collect more personal data, such as medical information, disabilities, and special preferences, to cater to your individual needs and preferences.

Your personal data will be stored by Gustavista for the aforementioned processing purposes for the following period:

• During the term of the agreement and thereafter, only in the financial administration for a maximum of 7 years

Processing of Personal Data for Marketable Customers/Subscribers:

We process personal data of marketable customers/subscribers for the following purpose:

• Informing individuals through news/marketing communications

The basis for processing this personal data is:

• Verbal consent or registration form

For this purpose, Gustavista may request the following personal data:

• First name; Middle name; Last name

• Email address

Your personal data will be stored by Gustavista for the aforementioned processing purpose for the period:

• During the period that you are registered

For us, marketing entails sending news, offers, and information about our products and services through various channels, including email or direct communication by your designated Gustavista representative. This occurs only when you have given prior consent to receive marketing communications from us. You can always modify this preference through your Gustavista representative or in writing via our head office.

When you participate in promotions, actions, surveys, or questionnaires, or interact with us via our social media channels, Gustavista may collect the following personal data from you:

• First name; Middle name; Last name

• Email address

• Any other information you willingly share with us, such as feedback and suggestions

• Digital content provided by you, such as videos, images, or emails

When you visit our website, we collect the following data from you through data tracking software ("cookies"):

• Information regarding your online search and click behavior on our websites and mobile application

• Information about the devices and operating systems you use

Cookies are small data files stored locally that allow websites to temporarily collect and store data and preferences. They help us collect information about important functionalities of our websites and mobile application to enhance user-friendliness and customer experience. Cookies also aid in measuring the effectiveness of our marketing communications. You can manage your acceptance of new cookies through your browser settings.

Gustavista may occasionally use third parties such as Facebook Advertising to obtain personalized social media data. This data helps us:

• Analyze and improve the content on our social media channels

• Measure and optimize the effectiveness of our marketing communications

Processing of Personal Data for Prospects, Stakeholders, and Interested Parties

We process personal data of prospects, stakeholders, and interested parties for the following purpose:

• Providing information in the form of newsletters and/or targeted communications

The basis for processing this personal data is:

• Verbal permission, provision of a business card, and/or via a LinkedIn link

For this purpose, Gustavista may request the following personal data:

• First name; Middle name; Last name

• Telephone number

• Email address

Your personal data will be stored by Gustavista for the aforementioned processing purpose for the period:

• During the period you are regarded as a prospect, stakeholder, and/or interested party

Processing of Personal Data for Employees

We process personal data of employees for the following purpose:

• Implementing the employment contract

The basis for processing this personal data is:

• The employment contract

For this purpose, Gustavista may request the following personal data:

• First name; Middle name; Last name

• Telephone number

• Email address

• Date of birth

• Salary data

• Copy of ID

• BSN number

Your personal data will be stored by Gustavista for the aforementioned processing purpose for the period:

• During the period you have a contract and subsequently only in the financial administration for a maximum of 7 years.

Provision to Third Parties We may share the data you provide with third parties when necessary to fulfill the purposes described above.

For instance, we use third parties for:

• Managing the internet environment of the AVG program

• Handling (financial) administration

• Managing newsletters and digital marketing

• Handling our technological services, data storage, and payment processing

We never share personal data with parties with whom we haven't established a processing agreement. We ensure necessary agreements with these parties (processors) to ensure the security of your personal data. We will not provide your information to other parties unless legally required and permitted. For example, if the police request (personal) data from us as part of an investigation, we must cooperate and provide the information. In the event of a potential acquisition of Gustavista, we will share personal data with the new party, who will use the data only in the same manner as we currently do. Additionally, we may share personal data with third parties if you provide written permission for this.

Within and Outside the EU:

Most of our data storage is within the EU. However, your data may be transferred and/or stored at a location outside the EU to fulfill your order/booking. It is often necessary to share your data with companies outside the EU, such as airlines, hotels, insurance companies, and local agencies, to facilitate your travel. When traveling to countries outside the EU, providing specific personal data to government agencies or other relevant authorities responsible for immigration, border control, security, and counter-terrorism may be necessary. Even if not mandatory, Gustavista may choose to cooperate with authorities for safety reasons.

Minors:

We only process personal data of minors (individuals under the age of 16) if we have obtained written permission from the parent, guardian, or legal representative.

Retention Period:

Gustavista does not retain personal data longer than necessary for the purpose for which it was provided or as required by law.

Security:

We have implemented appropriate technical and organizational measures to safeguard your personal data against unauthorized processing. Some of these measures include:

• Requiring confidentiality from all individuals who can access your data on behalf of Gustavista

• Implementing a username and password policy across all systems

• Pseudonymizing and encrypting personal data when necessary

• Creating backups of personal data for restoration in case of incidents

• Regularly testing and evaluating our security measures

• Ensuring employees are informed about the importance of personal data protection

Rights Regarding Your Data:

You have the right to access, rectify, or delete the personal data we have received from you. You can also object to the processing of your personal data (or part thereof) by us or our processors. Moreover, you have the right to have the data you provided transferred by us to yourself or to another party on your behalf. We may request you to provide identification before fulfilling the aforementioned requests.

If we process your personal data based on your consent, you always have the right to withdraw this consent.

Complaints:

If you have a complaint about the processing of your personal data, we encourage you to contact us directly. If we are unable to resolve the issue with you, we deeply regret the inconvenience. You always have the right to file a complaint with the relevant data protection authority, such as the Dutch Data Protection Authority, which oversees privacy protection.

Inquiries:

For any questions or comments regarding our Privacy Policy, please reach out to us using the details below.

Contact Information:

Gustavista 

contact@gustavista.com