Privacy Policy

1. Introduction

Eutouria ("we", "us", or "our") is a travel agency registered in the Netherlands (KvK: 99316005). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our website and services.

By using our website at eutouria.com, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, you can contact us at [email protected].

2. Data We Collect

We may collect the following types of personal data:

• Contact information: name, email address, phone number, and country of residence when you fill in our contact or booking forms.
• Travel preferences: destination interests, travel dates, group size, budget range, and any special requirements you share with us.
• Communication data: messages you send us via our contact form, email, or WhatsApp.
• Newsletter subscription data: your email address when you subscribe to our newsletter.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically through cookies and similar technologies.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide personalised travel planning.
• To process and manage your travel bookings.
• To send you our newsletter, if you have opted in.
• To improve our website, services, and user experience.
• To comply with legal obligations and protect our legitimate interests.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on one or more of the following legal grounds:

• Consent: when you subscribe to our newsletter or accept non-essential cookies.
• Contractual necessity: when processing is required to fulfil a booking or respond to your travel enquiry.
• Legitimate interest: to improve our services, analyse website usage, and ensure security.
• Legal obligation: when required by Dutch or EU law.

5. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

6. Third-Party Services

We use a limited number of third-party services to operate our website and communicate with you:

• Resend: we use Resend to process and deliver emails, including contact form submissions and newsletter messages. Your email address and message content are shared with Resend for this purpose.
• Vercel: our website is hosted on Vercel. Standard server logs (IP addresses, request data) may be processed by Vercel as part of hosting.
• WhatsApp (Meta): if you contact us through WhatsApp, your messages are subject to WhatsApp's own privacy policy.

We do not sell your personal data to third parties. We only share data with service providers who are necessary for delivering our services.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact enquiries: retained for up to 2 years after your last communication, unless a booking is made.
• Booking data: retained for up to 7 years to comply with Dutch tax and accounting obligations.
• Newsletter subscriptions: retained until you unsubscribe.
• Technical/analytics data: retained for up to 26 months.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can request deletion of your personal data in certain circumstances.
• Right to restrict processing: you can ask us to limit how we process your data.
• Right to data portability: you can request your data in a structured, machine-readable format.
• Right to object: you can object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: you can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption, and we regularly review our security practices.

10. International Data Transfers

Some of our service providers may process data outside of the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data.

11. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: