Privacy and security
Cloud9 Travel processes personal data of its customers, website visitors, and other contacts. We do this to this ensure our goals and to help our customers in the best way possible. If you submit your data to Cloud9 Travel, then we can imagine that you would like to know why this personal data is requested and what we do with it. In this privacy statement we will explain why and how we process your personal data.
Who are we
We are Cloud9 Travel: An organizer/travel agency of heli-trip travels and cat-ski travels in Amsterdam. This privacy statement covers all our processing operations – even if we process personal data together with other parties. We are located at Bloemgracht 32a, 1015 TJ in Amsterdam, The Netherlands.
What personal information do we collect?
Cloud9 Travel processes personal data from you when you place a booking, use the website, fill in a contact form or sign up for the newsletter. By personal data we mean data relating to a natural person. These are:
- Name, address and place of residence
- Telephone number
- E-mail address
- Date of birth
- Ski and/or snowboard skills
- IP address
- Internet usage information
How do we collect personal data?
Cloud9 Travel uses your data for a number of different reasons. More information on this will follow. How we process data can be read here. We use data that we receive from you, but also data that we collect ourselves. For example, information about your visit(s) on the website.
Contact and booking information
Your contact and booking information is the data with which we can identify you, contact you or finalize a booking. These include your name and address, phone number, e-mail address, date of birth and gender. In addition, we also store your billing address, weight and skiing and/or snowboarding experience before making a booking. We receive this information from the people concerned if, for example, one is interested in our services.
We also keep records of possible discussions in our CRM system Pipedrive. These minutes may contain personal data. We communicate with our customers through various channels. For example, by telephone, via e-mail and SMS/WhatsApp. To make this possible, we also process personal data.
Most people subscribe to our newsletter in order to stay up-to-date with new, upcoming trips, locations, and stories about heli-skiing or Cloud9 Travel. Therefore, the goal of our newsletter is to keep people informed. There are different ways we can collect your data.
- You can register via the website
- You can register via an external platform such as Facebook
- You can register by asking us directly
Sometimes we ask for more than just your e-mail address, such as your name, gender, and date of birth. In this way we can personalize the newsletter as much as possible for you as a customer. This also prevents you from receiving e-mails that are not interesting. (replace ‘that are not interesting’ to – ‘that are not suited to your personal interests’.)
If you do not want to receive e-mails, you can always unsubscribe by clicking on the unsubscribe link at the bottom of the e-mail. You can also send an email to firstname.lastname@example.org with the request to be unsubscribed from the mailing list. This way, we strive to make it easy for everyone!
Marketing and internet data
Like almost every other website, Cloud9 Travel stores internet data, your cookie ID, social ID, IP address and/or surfing behavior. The purpose of this is to give you a personalized user-experience of our website. However, we only do this when you give us permission to do so through our cookie notification.
We cannot see who you are or which company you work for. We also use so-called adjusted target groups on various social media. This means, for example, that we recognize that you have been on our website and therefore, we follow up by sending a relevant advertisement through a medium such as Facebook, Instagram or LinkedIn. If you do not wish to see these Cloud9 Travel ads on Facebook, Instagram and LinkedIn, you can unsubscribe by using the links below:
It is possible that you will see an advertisement from Cloud9 Travel after logging out. This is the case when you fall into the general target group (also called ‘saved target group’) where we focus our advertisements.
Improve our website
In order to improve the performance of our website, we collect personal data. To do so, we collect, among other things, information based on previous visits to our website such as pages you have visited. We look at cookies, your IP address, browser type and which pages seemed most interesting to you.
Other personal information
This is information which we may obtain from publicly available sources. We may also collect information about others if you provide it to us. This could be, for example, information about an acquaintance who would like to know more about one of our trips.
Why do we collect your data?
Because of the nature of our services, we collect information about you. It is important for us to make the process of delivering our services as simple, personal, and reliable as possible. We are always looking for ways to improve our services and tailor them to your personal needs as much as possible. Therefore, with your permission, we may collect personal data for the following purposes as required:
The delivery of our services
We use contact and address information for our administrative processes and the completion of the bookings. These activities include support/service and invoicing.
Improvement of our services
Cloud9 Travel collects your surf, search, and contact behavior based on cookie technologies. We also collect your IP address and the advertising number that is linked to the device you are surfing with. This way, we can see which pages, pieces of text, and images you seem to prefer and which ones we need to improve. This allows us to improve our website for our users. In addition, we can communicate relevant information to you in this way and personalize it as much as possible.
We may use your contact information to request feedback on our services and the services of our partners. We only do this when you give us permission to do so.
Complying with our legal obligation
We may be required by law to disclose personal information in the context of a legal process, or if law enforcement agencies compel us to do. In order to comply with the conditions of a valid legal process, we may disclose this information without your knowledge, without your consent and without informing you of this. We also reserve the right to challenge access to personal information by authorities.
Use anonymous information
We may use anonymous information to develop reports and analysis on what types of content and/or advertisements are viewed or skipped. We may do for research and for other legitimate business purposes.
To whom can we possibly disclose your personal information?
At Cloud9 Travel, we attach great value to protecting personal information. That is why we only share data with stakeholders and partners if this is strictly necessary to deliver our services, or to improve the user experience of our customers. We demand that they treat your information just as carefully as we do. In addition, they are only allowed to use this data for the purpose for which they are shared.
We may, with permission to the extent required, pass on your personal information to third parties. This also applies to third parties in countries outside the EU and Switzerland where the privacy rules deviate from the rules that apply here.
Employees of Cloud9 Travel
Some of our employees may be permitted to access your personal information. This group is and will remain limited to the employees who need this information to deliver our services or improve performance only. In addition, they only receive the information that is necessary for the purpose for which they are shared.
In order to achieve our services, it is necessary to share your personal information with our partners. This includes name and address details, and further information necessary to finalize your booking.
In addition, we work together with marketing and media partners who work with us on a single goal: to fully optimize and personalize the experience of Cloud9 Travel both offline and online. Think of partners who function as intermediaries for websites and advertising platforms.
Buyer of our company
Other third parties
We may also share personal information with carefully selected third parties if necessary, these are not recipients but ‘processors’. We only do this when disclosing the data is necessary for the delivery/execution of our services. As far as required by law, we will first ask your permission for this. You may read more about who we share your information with further down this policy notification.
How do we protect your personal information?
All personal data is securely stored in our database which is protected by the use of Network Firewalls, and controlled access to avoid unauthorized access. Your information is treated completely confidentially and discretely. We require third parties to treat your information just as carefully as we do. In addition, they are only allowed to use this data for the purpose for which they are shared. If you feel that this does not happen, let us know directly via email@example.com.
We have also implemented several other solutions to protect your data. These consist of technical and policy-based solutions that depend on the type of data that you share with us. For example, security through passwords, antivirus and access control for (new) employees and partners.
To improve our platform, we use the Google Analytics metrics program. Doing so, we have taken various measures in order to protect the anonymity of you as a visitor. For example, a processor agreement with Google (Analytics) has been closed and the last octet (digit group) of each IP address is deleted before an IP address is processed by Google Analytics. In addition, the data sharing option is disabled, meaning no data is shared with Google Analytics. This is how we guarantee your anonymity.
How long do we store personal information?
Cloud9 Travel does not store your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. The above applies at all times, unless there is a legal obligation to keep personal information for a longer time. We store data relating to the delivery of our services for a maximum of 7 years.
When you unsubscribe from our newsletter, your personal data will be removed from the system within 3 months.
Under the GDPR, everyone has a listed number of rights. We do our best to comply with these. To use those rights, you may contact us via firstname.lastname@example.org. Your rights are listed below:
- Information and inspection: you may see which of your personal data we process. We would also like to tell you more about ‘how and why’ we process this data.
- Rectification: Do you feel that we have wrong information about you? Let us know then we will adjust it.
- Forgetting: You can delete the personal data that we have on you. It may be that for other purposes (administration or deduplication, for example) we still have to process this data.
- Restriction: If you feel that we are processing your personal data unlawfully or incorrectly, then you may also limit that processing.
- Objection (objection): You may lodge an objection for the processing of your personal data. Does it regard marketing purposes? Then we will terminate that processing as soon as possible.
- Transferability: This is a new right under the GDPR to transfer your personal data. If you want to make use of this, please contact us.
We will process your request within 2 weeks. You can e-mail your request to us via email@example.com.
We hire service providers for the execution of our services. These are not ‘third recipients’ but processors. For example, we work together with the suppliers below:
- CRM-software from Pipedrive
- The Cloud environment Google Drive
- Website statistics of Google Analytics
- Website statistics from Facebook
- Call tracking with Cookie
- The accounting program Basecone
- The accounting program Liftoff
We require all third parties to treat the information confidentially and safely, and to only use the information for supplying the products or services to us. We may also be required by law to disclose personal data to authorities or other third parties. We will never sell your personal information to third parties and will never abuse your data.
Cookies are small blocks of information that your internet browser stores and provides information about your browser type, your operating system, the internet pages you have visited, the duration of those visits, the content and advertisements that you have viewed and other so-called clickstream data.
We reserve the right to make changes to this privacy statement. The changes take effect on the announced time of entry into force.
If you feel that your data is not properly secured or if there are indications of abuse, please contact us at firstname.lastname@example.org.
This privacy statement is valid from January 16, 2018.