Version April 2018
We do everything we can to safeguard your privacy and therefore handle personal data with care. Schip Josefien always complies with applicable laws and regulations, including the General Data Protection Regulation. This means that we:
o limit the processing of your personal data to only those data which are minimally necessary for the purposes for which they are processed;
o ask for your explicit consent if we need it for the processing of your personal data;
o have taken appropriate technical and organizational measures to ensure the security of your personal data;
o do not pass on personal data to other parties, unless this is necessary for the execution of the purposes for which they were provided;
o are aware of your rights with regard to your personal data, want to point them out to you, and respect them.
8913 CL Leeuwarden
+31(0)6 53 57 29 56
+31(0)6 83 16 43 48
Processing of personal data
Schip Josefien processes your personal data for the following purposes:
o For the execution of an agreement with you.
o For sending newsletters, brochures, and invitations.
For the above purposes, we may ask you for the following personal data:
o First name, middle name, and last name
o Date of birth
o Gender (male/female)
o Address details;
o Phone numbers
o Email address
o Company name
o Chamber of Commerce number / VAT number
o Body length (for bike size)
o Data relating to your diet if you report dietary requirements when booking your trip.
Provision to third parties
The data you provide to us may be provided to third parties if necessary for the execution of the purposes described above.
For example, we use a third party for:
o Carrying out the trip you booked with us;
o Providing the internet environment for Schip Josefien;
o Taking care of the (financial) administration;
We only provide personal data to other parties with whom we have concluded a processing agreement. With these parties (processors), we of course make the necessary agreements to safeguard the security of your personal data. We will not provide the information you provide to other parties unless this is legally required and permitted. An example of this is that the police request (personal) data from us in the context of an investigation. In such a case, we are obliged to cooperate and are therefore obliged to provide this data. We may also share personal data with third parties if you give us written permission to do so.
We do not provide personal data to parties established outside the EU.
We only process personal data of minors (persons under the age of 16) if written permission has been given by the parent, caregiver or legal representative.
Schip Josefien does not retain personal data for longer than is necessary for the purpose for which it was provided or required by law.
We have taken appropriate technical and organizational measures to protect your personal data against unlawful processing. For example, we have taken the following measures:
o All persons who can access your data on behalf of Schip Josefien are obliged to keep this information confidential.
o We have a username and password policy on all our systems;
o Online bookings are made via a secure connection;
o IP addresses are registered and stored, but cannot be traced back to you;
o We make backups of personal data to be able to restore it in the event of physical or technical incidents;
o We regularly test and evaluate our measures;
o Our employees are informed about the importance of protecting personal data.
<h3>Your privacy rights</h3> You have the right to access, rectify or delete the personal data that we have received from you. You can also object to the processing of your personal data (or a part thereof) by us or by one of our processors. Additionally, you have the right to have the data you have provided to us transferred to yourself or, on your behalf, to another party. We may ask you to identify yourself before we can comply with these requests. <h3>Complaints</h3> If you have a complaint about the processing of your personal data, we ask that you contact us directly. If we are unable to resolve the issue together, we naturally find this very unfortunate. You always have the right to file a complaint with the <a href=”https://autoriteitpersoonsgegevens.nl/”>Dutch Data Protection Authority (Autoriteit Persoonsgegevens)</a>, the supervisory authority for privacy protection.