Privacy Policy
CALVA DMC (in the following referred as The Company) is an incoming tour operator for the Nordic Countries in Europe. As an incoming tour operator based in Europe, The Company is responsible to handle and process all personal data collected online and offline in accordance with the European General Data Protection Regulation (GDPR). The Company, through this Privacy Policy, will explain in the following, how it is committed to act in accordance with the GDPR requirements when collecting and processing personal data using the best practises.
Data Collector and Data Controller
- The Company is both the data collector and data controller.
Types of Collected Personal Data
- Suppliers’ representatives, names and surnames, suppliers phone numbers, online addresses and physical office addresses and home countries.
- Costumer names and surnames, phone numbers, online addresses, physical office addresses and home countries.
- Passengers’ names and surnames, passport numbers, day of birth, gender, and nationalities
Type of Channels of The Collected Personal Data
- To make sure the best practice of data protection, The Company has deliberated taken out the opportunity that all interested parties can contact The Company by submitting an online request by filling up a form trough The Company’s webpage. The only channels all the interested parties can contact The Company is through the e-mail, physical addresses, phone number and WhatsApp stated on The Company’s webpage. In this context, by reducing the number of channels, The Company makes sure the best practice of personal data controlling and personal data protection.
Purposes of Personal Data Collection
- Suppliers: The main purpose of collecting personal data from suppliers’ representatives is to make agreements with the relevant persons on the suppliers and The Company’s main businesses. The personal data will be collected, storage and protected at Microsoft’s 365 Business Premium server and the Company’s additional operations systems. In case the personal data of the supplier’s representative is not relevant anymore for the Company’s main business, the personal data will be kept for 5 years according to the Danish Accounting Act and after this period the personal data will be deleted from the named server and The Company’s additional operation systems.
- Costumers: The main purpose of collecting personal data from costumers is to make agreements with the relevant persons on the costumers and The Company’s main businesses. The personal data will be collected, storage and protected at Microsoft’s 365 Business Premium server and The Company’s additional operation systems. In case the personal data of the costumer is not relevant anymore for The Company’s main business, the personal data will be kept for 5 years according to the Danish Accounting Act and after this period the personal data will be deleted from the named server and The Company’s additional operation systems.
- Passangers: The main purpose of collecting personal data from passengers is to prepare the relevant name lists required for the allocation of the different type of services provided by The Company’s suppliers. The personal data will be collected, storaged and protected at Microsoft’s 365 Business Premium server and the Company’s additional operation systems and will be deleted when the season is over, normally a period of max 12 months.
Sharing of Personal Data Information
-
- Suppliers: The collected personal data information is exclusively for the use and the related activities of The Company and will not be shared in anyway with other parties.
- Costumers: The collected personal data information is exclusively for the use and the related activities of The Company and will not be shared in anyway with other parties unless the sharing of personal data is crucial for common business activities as for instance FAM trips and/or other common sales activities.
- Passangers: The collected personal data information is exclusively for the use and the related activities of The Company, and as a natural part of the business process, the personal data of passengers will be shared with the relevant suppliers, who need the data to allocate the services to be provided. Besides the relevant suppliers, the personal data of passengers will not be shared with other parties unless the requesting party is an official authority or institution, who needs the data for official purposes.
Webpage traffic controlling
- The Company has deliberated decided to exclude the possibility of controlling the traffic of data through the website by using as for instance Google Analytics, due to the uncertainty about using this kind of tool. In case of the implementation of such kind of analytics tool will take place in the future, or changes in general, The Company is always committed to update this Privacy Policy.
Cookies
- The Company’s webpage uses cookies and related technologies for the necessary technical webpage functionality, so the site works and responds as expected. At this moment, The Company does not use cookies to analyse the traffic at the website as for instance to improve marketing strategies, but as per the Cookie Low, you may choose to consent the use of these technologies by managing your own preferences when you visit The Company’s webpage.
Your Rights
- According to GDPR, you have will always have the following rights in relation to our processing of information about you.
- Right to see the information (right of access)
- Right to correction (right of rectification)
- Right to delete (right of erasure) unless it is prohibited according to official law.
- Right to restriction of processing
- Right to object
- Right to transmit information (data portability)
If you want to exercise your rights, please contact us at:
CALVA DMC APS
Jaegerhegnet 1
DK 3450, Alleroed
Denmark
PH + 45 40218740
contact@calvadmc.com