Last updated: 11-11-2022
This privacy statement, for Splashpacker (hereafter also “company“, “site“, “we“, “us“, or “our“) describes how and why we might collect, store, use and/or share (hereafter also “process“) your information when you use our services (“services“). Reading this privacy statement will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services. If you still have any questions or concerns, please contact us at firstname.lastname@example.org
Who we are
Splashpacker is responsible for the processing of personal data as shown in this privacy statement.
Calle Alfredo Kraus 70A
35100 San Fernando de Maspalomas
Ellis Derkx is the Data Protection Officer of Splashpacker. She can be reached via email@example.com
What personal data we collect and why we collect it
We collect your personal data because you are using our services and/or because you yourself provide this information to us. This is an overview of the personal data we may collect:
– First and last name
– E-mail address
– Your website address
– A comment you decide to post on our website
– Your language preference
– IP address
– Non-specific identity information as stated under the heading ´Automatically collected data`, below
When you, as a visitor, leave comments on the site we collect the data shown in the comments form (like name, e-mail adress and website url). You can choose to save this personal data to post a comment in the future. Your name and website (optional) will be displayed with your comment, but your e-mail adress will not be visible.
Visitor comments may be checked through an automated spam detection service called Akismet anti-spam service. The collected data typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself)
If you choose to sign up for the mailing list, we collect your full name and e-mail adress. We will also collect your language preference, based on if you´ve signed up through the English or Dutch site menu.
We collect your personal data to provide, improve, and administer our services. We process your personal data for the purpose of sending our newsletter and/or new blogposts to your e-mail address.
Special and/or sensitive personal data that we process
We do not intend to collect data about website visitors who are younger than 16 years. Unless they have permission from parents or guardians. However, we can not check if a visitor is older than 16. We encourage parents to be involved in the online activities of their children, in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information from a minor without this consent, please contact us at firstname.lastname@example.org and we will delete this information.
Automatically collected data
We automatically collect certain information when you visit, use or navigate the services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URL´s, device name, location, country, information about when and how you use our services, and other technical information. This information is primarly needed to maintain the security and operation of our services, and for our internal analytics and reporting purposes.
Splashpacker makes decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions that are taken by computer programs or systems, without involving a person (for example, an employee). Splashpacker uses the following computer programs or systems: Mailchimp. Mailchimp registers your personal data if you have given permission to register yourself for the mailing list. E-mail addresses are stored within this system and as soon as a new blog post is available online, Mailchimp automatically sends an e-mail to the e-mail address you provided.
How long we retain personal data
We will only keep your personal data for as long as it necessary for the purposes set out in this privacy statement, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize such information, or, if this is not possible (for example because your personal information has been stored in a back-up archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
Personal data that is submitted to us in order to be signed up for the mailinglist by MailChimp (for the purpose of sending out our newsletter) will be stored and retained indefinitely, until you indicate that you wish to be removed from the mailing list. In that case your data will immediately be deleted.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Who we share your data with
Splashpacker provides only to third parties if this is necessary for the execution of our agreement with you or to comply with a legal obligation. Personal data will be shared with:
Personal data which is received by us because you choose to sign up for our mailinglist, will be stored and processed with MailChimp. You can read more about how MailChimp processes and protects your personal data in the section ´Where your data is transferred internationally´ below.
Personal data might be collected if you choose to place a comment on our site, due to the use of Akismet anti-spam service. The collected data includes the commenter’s IP address, user agent, referrer, and site URL, along with other information directly provided by the commenter such as their name, username, email address, and the comment itself. You can read more about how Akismet processes and protects your data in the section ´Where your data is transferred internationally´ below.
– Google AdSense programme
We also may need to share personal data in the following situations:
– Business transfers
We may share or transfer your information in connection with, or during negotiations of, any merger sale of company assets, financing, or acquisition of all, or a portion of, our business to another company
– Business Partners
We may share your information with our business partners to offer you certain products, services or promotions.
Cookies and other tracking technologies
You can opt out of cookies by setting your internet browser so that it does not store cookies anymore. In addition, you can also delete all information previously saved via the settings of your browser. For an explanation, see: https://policies.google.com/technologies/cookies
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, advertisements, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. On Splashpacker, embedded content from YouTube, Instagram and Google AdSense might appear on the main website, and this embedded content might as well as be included in posted articles (blogposts), together with embedded content from GetYourGuide, Booking.com, Agoda, 12go.co, Bol.com and Amazon. There might be, however, embedded content from other websites too.
What third parties we receive data from
Our services offer you the ability to register and log in using your third party social media account details (like your Facebook or Twitter logins). When you choose to do this, we will receive certain profile information about you, from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, e-mail address, friends list, and profile picture, as well as other information you choose to make public on such a social media platform.
Where your data is transferred internationally
If you are accessing our services from outside, please be aware that your data may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal data (see above: ´Who we share your data with´), in any other countries.
If you are a resident in the European Economic Area (EEA) or United Kingdom (UK) then these other countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal data in accordance with this privacy statement and applicable law.
Personal data which is received by us because you choose to sign up for our mailinglist, will be stored and processed with MailChimp. MailChimp has his headquarters in the United States. This means personal data that we receive through our sign up form on the mailing list, may be transferred to, stored, or processed in the United States. However, MailChimp has a data policy that complies with the GDPR. The measures taken by MailChimp to protect personal data, can be found here: https://mailchimp.com/en/gdpr/
We collect information about visitors who place comments on our site, using Akismet anti-spam service. Akismet has its headquarters based in China. The information we collect includes the commenter’s IP address, user agent, referrer, and site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself). Akismet complies with the GDPR. You can read more about how Akismet protects your personal data here: https://akismet.com/gdpr/
Further information on data processing and information on data protection by YouTube can be found at https://www.youtube.com/intl/en_us/howyoutubeworks/our-commitments/protecting-user-data/ If you would like to ensure that YouTube does not receive any data from you, please do not give consent to, or play, the embedded YouTube videos.
Your data might be shared with Google Adsense Programme, as stated under the heading ‘Who we share your data with’, and in the way of advertisements in the form as embedded content. The headquarters of Google are located in Mountain View, California in the United States. Further information on data processing and information on data protection by Google can be found at: https://policies.google.com/privacy?hl=en-US
Your privacy rights & rights over your personal data
What rights you have over your personal data
If you have a signed up for the mailing list on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Your privacy rights
If you are located in the EEA or the UK and you believe we are unlawfully processing your personal data, you also have the right to complain to your local data protection supervisory authority. You can find their contact details as below:
Europe (general): https://ec.europa.eu/newsroom/article29/items/612080
United Kingdom: https://ico.org.uk/make-a-complaint/
Find the data authority of any European country on this link: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Withdrawing your consent
If we are relying on your consent to process your personal data, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us by using the contact details provided in the section ´Who we are´, or by sending an e-mail to email@example.com
Please note that this will not effect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal data conducted in reliance of lawful processing grounds other than consent.
If you, at any time, would like to review or change the information in your account or terminate your account, you can contact us as described above (under withdrawing your consent). Upon your request to terminate your account, we will deactivate or delete your account and information from our database. We may, however, retain some information in our files in order to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and /or comply with applicable legal requirements.
View, modify or delete your data
Based on the applicable laws of your country, you have the right to view, correct or delete your personal data. You also have the right to withdraw your permission for data processing or to object the processing of your personal data by us, and you have the right to data portability. This means that you can submit a request to us, to send your personal information we hold in a computer file to you (or another organization as mentioned by you). If you want to use your right of objection and / or right of data portability or if you have other questions / comments about data processing, please send a specified request to firstname.lastname@example.org.
In order to ensure that the request for access has been made by you, we ask you to send a copy of your identification document with the request. Make sure to make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and citizen service number or tax identification number black in this copy. This is to protect your privacy. We will respond to your request as soon as possible, but in any case within four weeks.
We also would like to point out that you have the opportunity to file a complaint with the national supervisory authority. Splashpacker is officially located in Spain and the Spanish data protection authority, ´agencia Española de protección de datas´, can be found through the following link: https://www.aepd.es/
If you would like to contact the data authority in your own country and in your own language, you can use the link under the heading above entitled: ‘Your privacy rights’. There you can find the right European authority for each country.
Most web browsers and some mobile operating systems and mobile applications include a ´do-not-track (“DNT) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy statement.
We work with affiliate partners to promote certain activities and products. When you click through on any links provided by us, certain personal and user information may be shared with our affiliate parent company. We might also receive a small commission if you purchase anything through the links provided by us. Here is an overview of the affiliate companies we work with:
- Booking.com affiliate programme
- Getyourguide.com affiliate programme
- 12go.co affiliate programme
- Amazon.com affiliate programme, and international subdivisions
- bol.com affiliate programme
Likewise, Google AdSense program may place advertisements on our site to promote certain products or activities. If you click through to these advertisements, certain personal and user information may be shared with Google or the advertiser you will be redirected to.
Specific privacy rights for californian residents
California Civil Code Section 1798.83, also known as the ´Shine the Light´ law, permits our users who are Californian residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the inmediately preceding calender year. If you are a Californian resident and would like to make such a request, please submit your request in writing to us using the contact information provided in the section ´Who we are´.
If you are under 18 years of age, and reside in California, and have a registered account with our services, you have the right to request removal of unwanted data that you publicly post on the services. To request removal of such data, please contact us using the contact information provided in the section ´Who we are´, and include the e-mail address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the services, but please be aware that the data may not be completely or comprehensively from all our systems (e.g. back-ups, etc.)
How we protect personal data
Splashpacker takes the protection of your data serious and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your data is not properly secured or there are indications of abuse, please contact us using the contact information provided in the section ´Who we are´ or through email@example.com