Privacy statement

This statement describes which personal data ORA Reizen processes through orareizen.nl, why, and for how long. It was written from what the website actually does — not as a piece of boilerplate.

Who processes your data

ORA Reizen is responsible for processing your data. You can reach us at info@orareizen.nl or through the contact form. If you would rather be phoned, leave a callback request.

What data we process, and what for

If you fill in a form

This site has forms for a callback request, a contact question, a quote request and a sign-up for new prices. In those we process:

• your name;
• your email address and, if you enter it, your phone number;
• the subject you choose and the text you write yourself;
• the page you sent the form from;
• your IP address, solely to prevent misuse of the form.

That data arrives as an email at our own address. We use it to answer your question or handle your request — and for nothing else.

If you book

For a booking we also need the data required to carry out and pay for your stay: your billing and address details, your travel period, the chosen hotel and room type, and the number of travellers with the ages of any children. The ages are needed because both the rate and the room's occupancy depend on them.

We share your name and travel details with the hotel you are staying at. Without that exchange the hotel cannot carry out your booking.

Payment details

You pay through the secure environment of a payment provider. Your bank, card or account details do not reach us and are therefore not stored by us. We only see whether a payment succeeded and for what amount.

What we base this on

• Performance of the contract — for everything needed to make and carry out your booking.
• Consent — for the contact form and for the sign-up for new prices. You give it with the tick box on the form and can withdraw it at any time.
• Legitimate interest — for protecting the forms against misuse.
• Legal obligation — for the records the Dutch tax authority requires.

How long we keep it

• We keep a question or callback request for as long as we need to deal with it, and after that no longer than is needed for any follow-up.
• We keep booking data for as long as the booking and its guarantee period require; financial records we keep as the law prescribes, currently seven years.
• The form protection measure keeps an encrypted representation of your IP address for 20 seconds — exactly long enough to stop one visitor submitting the form hundreds of times in a row.

Who we share data with

Only with the parties needed to carry out your trip or to run the site: the hotel you are staying at, our payment provider, the party that hosts our website and the party that handles our email. We do not sell your data and do not use it for third-party advertising.

Cookies

What this site places in the way of cookies, and what for, is on the cookie page.

Your rights

You have the right to see your data, to have it corrected or deleted, to restrict the processing, to object, and to receive your data in a common file format. Consent you have given can always be withdrawn.

Send your request to info@orareizen.nl. We respond within a month. To avoid handing data to the wrong person, we may ask you to substantiate your request.

If you disagree with how we handle your data, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Security

The site runs over a secure connection. The forms are protected against automated misuse, and the destination of every form message is fixed by a signature, so the site cannot be used by others to send mail to arbitrary addresses.

Changes

If anything changes in how we handle data, we will amend this statement and change the date at the top.