Privacy policy

SC LUXETRAVELDEAL SRL, also referred to as the Triptailor Travel Agency, as the author / owner / administrator of the www.trip-tailor.com website, respects the privacy and security of the information provided by you when using this website, including that of personal data. For this purpose it developed and applies this privacy policy.

The access to this website is subject to the terms and conditions of use and the privacy policy, it implies your explicit consent for them and represents the entire agreement between parties.

Triptailor Travel Agency reserves the right to change and update at any time the content of the www.trip-tailor.com website, as well as the Privacy Policy and the Terms and Conditions of Use without any prior notice. Therefore, please visit this section periodically to check the terms and conditions that you have agreed to comply with.

The terms and conditions presented are valid and apply to all websites in the trip-tailor.com domain and for which SC LUXETRAVELDEAL SRL is the author / owner / administrator. All these websites (as they currently exist or will be subsequently implemented) as well as the www.trip-tailor.com website will be generically, individually or collectively named website / websites in this document.

In this document, the singular words include the plural, the plural words include the singular, the words that denote the male include the feminine, and the words denoting the female genre include the masculine.

 

Definitions

  1. Triptailor Travel Agency, we, us, our - SC LUXETRAVELDEAL SRL
  2. personal data - any information relating to an identified or identifiable individual; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, psychological, economic, cultural or social identities;
  3. data processing - any operation or set of operations that is performed on personal data by automatic or non-automatic means, such as collecting, recording, organizing, storing, adapting or modifying, extracting, consulting, using, disclosing to third parties by transmission, dissemination or in any other way, joining or combining, blocking, deleting or destroying;
  4. storing - retaining personal data collected on any medium;
  5. personal data recording system - any organized structure of personal data, accessible according to certain criteria, organized centrally or decentralized or is distributed according to functional or geographic criteria;
  6. operator - any natural or legal person, whether private or public, including public authorities, institutions and their territorial structures, which establishes the purpose and means of processing personal data;
  7. third party - any natural or legal person, whether private or public, including public authorities, institutions and their territorial structures, other than the data subject which is empowered to process data;
  8. recipient - any natural or legal person, whether private or public, including public authorities, institutions and their territorial structures to whom data is disclosed, whether or not it is a third party; public authorities to whom data is communicated under a special investigative competence will not be considered as recipients;
  9. anonymous data - data which, due to the origin or specific mode of processing, can not be associated with an identifiable or identifiable person;
  10. "business contact" data - data that includes the name, function, business address, telephone number or e-mail address of an employee of an organization, as such. Business contact data does not fall into the category of personal data;
  11. statistical data - data that has been obtained as a result of processing of personal data by the operator but which can not be used to identify a person and is used exclusively for statistical purposes and / or for information, promotion.

 

Our contact details

The data operator for our website is SC LUXETRAVELDEAL SRL, based in 10 Calea Plevnei, Kogalniceanu Square, 050052 Bucharest, Romania. You can contact the data operator via e-mail at dpo@triptailor.ro.

If you have any questions about this privacy policy, please contact the data operator.

 

What information do we collect when you visit our website?

Information about the web server log

To host our website we use a third-party server provided by S.C. Hiperstore S.R.L, whose privacy policy is available here. The server automatically logs the IP address you use to access our website, as well as other information about your visit, such as the pages accessed, the information requested, the date and time of the request, the referral URL, browser version and your operating system.

Our provider collects and stores server logs in order to ensure the network’s safety and integrity. This includes analyzing log files to help identify and prevent unauthorized access to our network, malicious code distribution, predicting DDOS attacks and other cyber attacks by detecting unusual or suspicious activity.

Legal basis for processing: Compliance with the legal obligations to which we are subject (Article 6 (1) (c) of the General Data Protection Regulation).

Legal Obligation: Registering access to our website using server log files is a technical measure to ensure an adequate level of security for protecting the information gathered from our site in accordance to Article 32 (1) of the General Data Protection Regulation.

Cookies and similar technologies

Cookies are small data files that are sent from a website to a browser in order to record user information for different purposes.

We use cookies and similar technologies on our website, including essential, functional, analytical and marketing cookies, as well as web beacons. For more information on using cookies, please see our Cookie Policy.

The information we collect when you contact us

How do we collect data?

  • Direct collection through phone, live chat on our website and e-mail;
  • Contact from on our website;
  • Cookies following your interaction with our website;

 

What data do we collect when you contact us?

Through phone

When you contact us by phone, we collect your phone number and any information you provide during your conversation with us. Phone calls are not recorded.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to answer questions and messages we receive and to keep track of our correspondence.

Legal basis for processing: it is necessary to make a contract or start the employment process in a contract at your request (Article 6 (1) (b) of the General Data Protection Regulation).

The reason that is required for a contract: if your message is a request for services or if you request information about the services we provide we will process your information to do so.

Transferring and storing your information

Your call information, such as your phone number and the date and time of your call, is processed by our telephone service providers, Vodafone Romania S.A. and Telekom RomaniaCommunications S.A., which are located in Romania. Their privacy policies are available here and here.

 

Through the live chat integrated in our website

When you contact us through the live chat, we collect your IP address, the type of browser you are using, the operating system, the history of the viewed pages on our site and any other information you provide in the conversation.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to answer questions and messages we receive and to keep track of our correspondence.

The reason that is required for a contract: if your message is a request for services or if you request information about the services we provide we will process your information to do so.

Transferring and storing your information

We use a third-party vendor to implement the chat service. Our provider is Zendesk Inc. and its privacy policy can be found here. Your data is stored on servers in the European Economic Area, the United States, or other locations. You can learn more by consulting Zendesk Inc.'s privacy policy.


Through e-mail

When you send a message to the email address displayed on our site, we collect your e-mail address and any other information you provide in that e-mail (such as your name, your phone number and information included in the signature block).

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to answer questions and messages we receive and to keep track of our correspondence.

The reason that is required for a contract: if your message is a request for services or if you request information about the services we provide we will process your information to do so.

Transferring and storing your information

We use a third-party e-mail provider to store the e-mails received, S.C. Hiperstore S.R.L, located in Romania. The vendor's privacy policy is available here.

 

Through the contact form on our website

When you contact us using the contact form on our website we collect the names, e-mail address, phone number and any other information you provide when filling in the form.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to answer questions and messages we receive and to keep track of our correspondence.

The reason that is required for a contract: if your message is a request for services or if you request information about the services we provide we will process your information to do so.

Transferring and storing your information

We use a third-party e-mail provider to store the e-mails received, S.C. Hiperstore S.R.L, located in Romania. The vendor's privacy policy is available here.

The information we collect when you’re using our website

  • Server logs: Our provider collects and stores the server logs in order to assure the security of the network where the website is hosted. The data saved in the logs is as follows: the IP address, the server query date and time, the previously visited page, the operating system, and the browser type from which the website is accessed.
  • Newsletter: When subscribing to our newsletter using the Subscription form on the website or any other subscription form, the e-mail address filled in the form will be saved in our mailing list.
  • Contact form: name, first name, phone number, e-mail address and any other information you provide in that message;

 

Newsletter

When subscribing to our newsletter, you choose to receive news and offers from us by entering your e-mail address in the subscription form and by clicking the "Subscribe" button; we collect your e-mail address.

Legal basis for processing: your consent (Article 6 (1) (a) of the General Data Protection Regulation).

Consent: You consent to receiving our newsletter by signing up to receive it.

The information we collect when you open the newsletter

We use web beacons to measure the performance of email campaigns we send (e.g., delivery rate, number of openings, number of clicks, operating system and browser used to view the e-mail).

Transferring and storing your information

We use a service provided by a third party, SC Conversion Marketing SRL, to send our newsletter and to manage our mailing list. The supplier is in the European Economic Space.

 

How do we use your personal information?

  • To make sure the website is relevant to your needs.
  • To deliver services such as newsletters, events, or services that you have requested or purchased.
  • To help us create and publish the most relevant content for you.
  • To ensure access to website’s sections with limited access.

 

The use of automatic decision-making and profiling mechanisms

You have the right to oppose to our use of automated decision making and profiling mechanisms described in this section. You can do so by renouncing cookies and similar technologies in accordance with the method described in the relevant section of this privacy policy. If you do not want us to process your real IP address (usually the IP address attributed by the Internet Service Provider) when you visit our site, you can use a virtual private network (VPN) or a free service such as Tor

You can learn more about the use of cookies and similar technologies and how to opt-out of using such technologies by reading our Cookie Policy available here.

 

Automated decision making mechanisms

Automatic decision-making mechanisms are those decision-making mechanisms by means of technology (through a machine), without human involvement.

 

The use of automatic decision making mechanisms for advertising

We automate the display of ads containing our products and services on other websites you visit by using cookies. For more information about the types of cookies we use, please refer to our Cookie Policy, available here.

The logic involved: Automatically displaying ads to people who visited our site leads to increased publishing efficiency and is more economical to us than manual display or other advertising methods.

Significance and expected consequences: cookies will be used to recognize that you have visited our site to display ads (unless you have blocked such cookies) and will collect information about your online behavior.

How can you oppose: You can block these types of cookies by blocking third-party cookies using browser settings or dropping out of personalized ads by following the instructions here. For more information, please refer to our Cookie Policy.

 

Profiling

Profiling is any form of automatic processing of your information to evaluate personal aspects about you, especially to analyze or predict things such as workplace performance, economic status, health, personal preferences, interests, reliability, behavior, location or movements.

Our Google Analytics online analysis service uses information such as your location (based on your IP address) and your behavior (cookies) when you visit the website (such as pages which you access and links you click on). We will process information from cookies only if you have agreed to store cookies on your computer in accordance with the Cookie Policy. The collected information about you is anonymous and stored in an aggregated database.

The logic involved: By analyzing and automatically classifying information such as location (based on IP address), as well as the behavior and visitor devices on our website (using cookies), we can better understand what visitors want from our website (in terms of the content and our products), how to improve the website and how to advertise and market our services.

Significance and expected consequences: cookies will be used to track and store information about your behavior and device on our website (unless you have blocked these cookies.) The location will be analyzed based on your IP address. We can target advertisements based on the level of interest we receive from certain visitors and their behavior on our website.

 

The use of profiling in marketing e-mails

We use web beacons in our marketing emails to analyze who opens our emails and what actions they take (for example, what links they click on). We process information from web beacons if you have consented to using them in accordance with our Cookie Policy.

The logic involved: By analyzing how e-mail recipients interact with our e-mails, we can improve the content and effectiveness of our e-mails and deduct what are users most interested about.

Significance and expected consequences: Your behavior when opening our emails will be tracked using small a gif image (web beacon) files to measure the opening rate, delivery rate, number of clicks, device and e-mail client used.

How can you oppose: You can tell us about the refusal to recieve our web beacons in promotional e-mails by contacting us at dpo@triptailo.ro.

 

Disclosure of your personal data to other third parties

The Triptailor Travel Agency does not sell, change or rent personal data to third parties. We disclose your information to third parties in certain circumstances, as shown below.

Providing information to third parties, such as Google Inc.

Google collects information through our use of Google Analytics on our website. Google uses this information, including IP addresses and cookie information, for many purposes, such as improving Google Analytics. Information is shared with Google on aggregate and anonymous basis. To learn more about what information Google collects, how it uses this information and how to control information sent to Google, you can check out this page.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interests: Compliance with Google's contractual obligations under Google Analytics Terms of Service.

You can opt out of Google Analytics by installing the browser plugin here.

Sharing your information with third parties that are either related to or associated with the operation of our business, if necessary for us:

These third parties include:

Accountants: We share information with our accountants for tax purposes. For example, we share the invoices that we issue and receive to our accountants to complete our tax returns and accounts at the end of the year.

Business partners: Business partners are the businesses we work with and provide goods and services that are complementary to our own business or that allow us to deliver goods or services that we cannot provide for ourselves.

Independent contractors: We use independent contractors in our business. Your information will be distributed to independent contractors only if it is necessary for them to perform the job we have undertaken to fulfill in relation to our business.

Insurers: We will disclose your information to our insurers if it is necessary to do so, for example, in connection with a claim or any request we receive or send in accordance with our general disclosure obligations under our insurance contract with them.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: Effective operation and management of our business.

Disclosure and use of your information for legal reasons

If we suspect that there has been a criminal or potential behavior, we will, under certain circumstances, need to contact a competent authority such as the police. This could be the case, for example, if we suspect that a fraud or a cybercrime has been committed or if we receive threats or bad intentions towards us or third parties. In general, we will only need to process your information for this purpose if you have been involved or affected by such an incident in one way or another.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: Prevention of suspected criminal activity (such as fraud).

In connection with the potential application or enforcement of our legal rights

We will use your information in connection with the implementation or enforcement of our legal rights, including, for example, the exchange of information with debt collection agencies, unless you pay the amounts due when you are contractually bound to do so . Our legal rights may be contractual (if we have a contract with you) or non-contractual (such as our legal rights under copyright).

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: to impose our legal rights and take steps to ensure our legal rights.

 

In connection with a litigation or legal proceeding

It may be necessary to use your information if we are involved in a dispute with you or a third party, for example either to resolve the dispute or as part of a mediation, arbitration or court order or a similar process.

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: resolving disputes and possible litigation.

For the continued observance of laws, regulations and other legal requirements

We will use and process your information to comply with the legal obligations to which we are subject. For example, it may be necessary to disclose your information based on a court order or quote, if we receive one.

Legal basis for processing: Compliance with a legal obligation (Article 6 (1) (c) of the General Data Protection Regulation.

Legal obligations: Legal obligations to disclose information that is part of the Romanian laws or whether they have been incorporated into the legal framework of Romania (for example, in the form of an international agreement that Romania has signed).

Legal basis for processing: our legitimate interests (Article 6 (1) (f) of the General Data Protection Regulation).

Legitimate interest: if legal obligations are part of the laws of another country and have not been integrated into the legal framework of Romania, we have a legitimate interest in complying with these obligations.

How long we keep your data

This section explains how long we keep the collected data. We have set specific storage periods wherever possible. If this was not possible, we set the criteria we use to determine the retention period.

 

Retention times

Server logs: 6 months.

Order information: When placing an order for goods and services, we retain this information for six years after the end of the financial year in which you placed the order, in accordance with our legal obligation to keep records for tax purposes.

Correspondence: When you make a request or contact us for any reason, either by e-mail, through our contact form or by phone, we will keep your information as long as we need to respond to your request and for the following 12 months, after which we will delete your information.

Newsletter: We keep the information you have used to sign up for our newsletter as long as you remain a subscriber or until we decide to cancel our newsletter service.

Criteria for setting retention periods

In any other circumstances, we will only keep your information as long as it may be necessary, taking into account the following:

  • the purpose(s) and use of your information both presently and in the future (for example, if we need to continue storing that information to continue to fulfill our obligations under a contract with you or to contact you in the future);
  • if we have a legal obligation to continue processing your information (such as any record keeping obligations imposed by law or relevant regulations);
  • if we have any legal basis to continue processing the information (such as your consent);
  • how valuable your information is (both now and in the future);
  • any agreed industrial practices on the duration of the information storage;
  • the levels of risk, cost and responsibility involved in continuing to hold information;
  • how hard it is to make sure that information can be current and accurate;
  • any relevant surrounding circumstances (such as the nature and status of our relationship with you).

The security of your information

We take the appropriate technical and organizational measures to keep your information safe and to protect it against unauthorized or unlawful use and accidental loss or destruction, including:

  • sharing and providing access to your data to the minimum extent required, subject to confidentiality restrictions, where applicable and anonymously, whenever possible;
  • using secure servers to store information;
  • checking the identity of any person requesting access to information before giving them access;
  • the collection and transfer of personal data is done using an encrypted SSL connection using a digital certificate;
  • transfer your data only through a closed system or encrypted data transfers.

Sending information to us via email

The transfer of information over the Internet is not entirely secure and if you send us information via the Internet (by e-mail, through our website or by any other means), you do so entirely at your own risk.

We cannot be responsible for any expenses, loss of profits, damage to reputation, damages, debts or any other form of loss or damage suffered by you as a result of your decision to send information to us by such means.

 

Transferring your data outside of the European Economic Area

Considering the object of the company's activity, in order to comply with the contractual obligations that we assume with you, respectively to ensure the tourist packages that you contract, we have to transfer your personal data to our contractual partners, some of which are located outside the EEA.

Your data will be transferred outside of the EEA only when you purchase tourist packages with destinations outside the EEA or when the transport operators of your choice are located outside the EEA.

Your individual rights

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling.

Verifying your identity if you request access to your information

In case you request access to your information, we are legally required to use all reasonable measures to verify your identity before doing so.

These steps are designed to protect your information and reduce the risk of identity fraud, identity theft or unauthorized general access to your information.

How we verify your identity

If we have adequate information about you in the file, we will try to verify your identity using this information.

If it is not possible to identify you based on this information or if we do not have sufficient information about you, we may request copies or certificates of documents to be able to verify your identity before your data can be accessed.

Your right to object to data processing for certain purposes

You have the following rights with respect to your data that you can exercise by sending an e-mail to dpo@triptailor.ro.

  • you can object to the use or processing of information by us to perform a task in the public interest or in our legitimate interest, including "profiling" (analyzing or predicting your behavior based on your information);
  • you can object the use or processing of your data for direct marketing purposes (including any profile in relation to direct marketing).

You may also exercise the right to object to the use or processing of your data for direct marketing purposes:

  • by clicking the unsubscribe link at the bottom of any marketing e-mail we send you.
  • sending an email to contact@trip-tailor.com, requesting that we no longer send marketing communications or by including the word "UNSUBSCRIBE".

 

Sensitive personal data

Sensitive personal data is information that discloses racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership of a trade union, genetic information, biometric information for the sole purpose of identifying an individual, health information, or information on sexual life or sexual orientation of a natural person.

Personal health data is provided to us by users when they have special requirements for transport services or accommodation services by way of purchase (for example, in case of allergies, requesting a special menu at the hotel or in the case of people with disabilities - requesting a ramp hotel, etc.).

 

Minor’s confidentiality

The Triptailor Travel Agency does not sell products and / or services to be purchased by minors. The Triptailor Travel Agency can sell or charge the value of products / services for minors but purchased by an adult. If you are a minor and access this website you can do so only if you are under the supervision of a parent or legal guardian.

 

External links

Our website may contain links to other websites, outside Triptailor Travel Agency's control (websites that we think you will find useful). If you access these links, you will access / visit websites that may have a different privacy policy from the Triptailor Travel Agency website.

If you have any questions about the Privacy Policy or wish to be informed about personal data processed by the Triptailor Travel Agency, please contact us.