SECURITY POLICY OF PERSONAL DATA OF XPERIENCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Mine damer og herrer, fra den 25. maj 2018 gælder Europa-Parlamentets og Rådets forordning (EU) 2016/679 af 27. april 2016 om beskyttelse af fysiske personer i forbindelse med behandling af personoplysninger og om fri udveksling af sådanne oplysninger og om ophævelse af direktiv 95/46 / WE (GDPR). 

Due to the obligations imposed by the GDPR on entities processing personal data, we ensure that as part of the services provided by our company, your data is safe and processed only when necessary. We understand the importance of ensuring protection by properly managing your personal data. Our company uses appropriate security measures to protect personal data against accidental loss and unauthorised access, use, alteration and disclosure. 

Dataansvarlig for personoplysninger 

The administrator of your personal data is XPERIENCE Spółka z ograniczoną odpowiedzialnością (hereinafter referred to as the “Administrator”). In all matters related to the protection of personal data, please contact us via the email address: friends@xperiencepoland.com. 

Indsamling af personoplysninger 

Når du indgår aftaler med administratoren, giver du frivilligt følgende kategorier af oplysninger:

  1. Dine personlige oplysninger, herunder navn og efternavn, fødselsdato, adresse, e-mailadresse, telefonnummer, nummer og en række identitetskort (ID-kort eller pas);
  2. Personoplysninger om andre personer i din gruppe, herunder navn og efternavn, fødselsdato, privatadresse, e-mail-adresse, telefonnummer, nummer og serie af identitetsbeviser (id-kort eller pas);
  3. Personoplysninger om mindreårige, som du er forældre eller værge for, herunder navn og efternavn, fødselsdato, adresse, e-mailadresse, telefonnummer, nummer og en række identitetsbeviser (ID-kort eller pas). 

When you provide other people’s personal data, you must be sure that they consent to it and that you are authorised to provide it. You should also make sure that, if necessary, these persons are aware of how the Administrator uses their personal data. It is your responsibility to provide these persons with the Personal Data Security Policy of XPERIENCE Spółka z ograniczoną odpowiedzialnością.

Use of personal data 

The Administrator uses your personal data for the following purposes: 

  1. Provision of tourist services

The Administrator must obtain your personal data in order to perform the contract in the field of tourist services. In addition, the processing of personal data is necessary for the purposes of managing your bookings, providing you with access to additional products and services, providing support for any services offered and possible reimbursement.

  1. Etablering af kontakt med kunden 

For at yde bedre kundeservice kan administratoren i tilfælde af kontakt med administratoren, f.eks. via e-mail, traditionel post, telefon eller sociale medier, bruge dine personoplysninger til at yde support eller give afklaringer.

  1. Markedsføringskommunikation 

From time to time, the Administrator may send you relevant offers and messages about services via e-mail, SMS or may contact you by phone. The administrator will only do so after giving your free prior consent to receive such marketing information. It should be emphasized that you can change your marketing preferences at any time by contacting the Administrator in this regard.

  1. Udlevering af personoplysninger

In order to provide tourist services, the Administrator may provide personal data to entities co-implementing or continuing the provision of tourist services, as well as selected entities responsible for travel arrangements, including airlines, hotels, transport companies and local suppliers. In selected cases, the Administrator authorises guides, tour leaders and other entities cooperating in the implementation of the tourist service to use your personal data, but only for the purpose and for the duration of the service. In addition, the Administrator provides personal data to insurers in order to provide you with adequate protection during the implementation of the tourist service. The administrator entrusts selected personal data as part of cooperation with an external accounting office.

  1. Videregivelse af data til tilsynsmyndigheder 

In order to travel, it may be required (as required by government authorities at the point of departure / departure and / or destination) that the Administrator discloses and processes your personal data for immigration, border control, security and counter-terrorism purposes or any other purposes such authorities consider appropriate. Some countries allow entry on the condition of providing their personal data in advance (eg. under the Caricom API Data agreements and the US “Secure Flight Data” program). In addition, the Administrator may disclose the necessary minimum scope of personal data to other public authorities, if required by law or legally permitted. 

Dine personlige oplysninger er ikke underlagt automatiseret beslutningstagning, herunder profilering.

Legal basis for the processing of personal data

Your data will be collected and used by the Administrator provided that at least one of the following conditions is met:

  1. Obtaining your consent (example: marketing information);
  2. Når det er nødvendigt for at indgå en kontrakt eller foretage de ønskede handlinger forud for indgåelse af en kontrakt (eksempel: levering af turistydelser);
  3. Når det er nødvendigt for at overholde en juridisk forpligtelse (eksempel: deling af personoplysninger med regulerende/statslige myndigheder). 
  4. Når det er nødvendigt for at beskytte dine eller andres vitale interesser (eksempel: nødsituation / nødsituation: dit forsikringsselskab, dets agenter og medicinsk personale kan udveksle relevante personoplysninger og særlige kategorier af personoplysninger med administratoren i en situation, hvor en af parterne skal handle på vegne af eller i andre kunders interesse eller i nødsituationer / nødsituationer). 

Archiving of personal data

The Administrator will store your personal data only as long as it is necessary for the purposes set out in this document and / or to meet legal and regulatory requirements. After this period, the Administrator will safely delete your personal data.

Adgang til og opdatering af personoplysninger; klager 

Du har ret til at anmode om en kopi af dine personlige oplysninger, som administratoren er i besiddelse af. Desuden kan du anmode om rettelse eller sletning af personoplysninger, gøre indsigelse mod behandlingen af personoplysninger og, hvis det er teknisk muligt, anmode om overførsel af de personlige oplysninger, du har givet, til en anden organisation. 

Administratoren opdaterer eller sletter dine oplysninger, medmindre den har en juridisk forpligtelse til at opbevare dem for at kunne drive forretning eller for at overholde loven. Du kan også kontakte administratoren, hvis du har forbehold over for metoden til indsamling, opbevaring eller brug af dine personoplysninger. Den dataansvarlige bestræber sig på at undersøge klagerne endeligt, men hvis du stadig er utilfreds med det modtagne svar, kan du indgive en klage til databeskyttelsestilsynet hos den lokale databeskyttelsesmyndighed. 

XPERIENCE Spółka z ograniczoną odpowiedzialnością