Privacy Policy

1. Introduction

backstikeh B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our travel services, visit our website, or interact with us in any way.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws in the European Union and Netherlands.

2. Data Controller

The data controller for your personal information is:

3. Information We Collect

3.1 Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Contact information (name, email address, phone number, postal address)
• Travel preferences and requirements
• Passport and identification details (when required for bookings)
• Payment information (processed securely through third-party payment processors)
• Emergency contact information
• Dietary requirements and accessibility needs
• Communication preferences
• Feedback and reviews about our services

3.2 Information Automatically Collected

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referral sources
• Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Service Provision

• Planning and booking your travel arrangements
• Processing payments and managing bookings
• Providing customer support and assistance
• Communicating important travel information and updates

4.2 Business Operations

• Improving our services and website functionality
• Analyzing usage patterns and customer preferences
• Fraud prevention and security purposes
• Compliance with legal and regulatory requirements

4.3 Marketing (with your consent)

• Sending promotional materials and travel offers
• Personalized travel recommendations
• Newsletter and updates about our services

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our travel service obligations
• Legitimate Interests: To improve our services and prevent fraud
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

• Airlines, hotels, car rental companies, and tour operators
• Payment processors and financial institutions
• Insurance providers
• Technology service providers (website hosting, email services)

6.2 Legal Requirements

• Government authorities when required by law
• Law enforcement agencies for fraud prevention
• Regulatory bodies in the travel industry

7. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Generally, we keep booking and travel-related information for 7 years for tax and legal compliance purposes. Marketing data is retained until you withdraw consent or request deletion.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing

To exercise these rights, contact us at privacy@backstikeh.top. We will respond within 30 days of receiving your request.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and staff training on data protection.

11. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may also provide direct notification via email.

15. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, please contact us first at privacy@backstikeh.top. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

16. Contact Information

For any questions about this Privacy Policy or our data practices, please contact us: