Privacy statement

In this privacy statement, you will read the following:
- Exactly what type of personal data we process and why we do so.
- When and how we may share personal data as Avila Reizen B.V. and other organisation.
- What choices you can make, and how you can view and update your personal data.

When we refer to "we", "us" or "our" in this privacy statement, we mean Avila Reizen B.V. We are the party that collects, uses and also protects your personal data, the data controller. In doing so, we take care. Because your privacy is important to us, we hope you will take the time to read this statement. So that you will soon know exactly what happens to your personal data. And do you see terms you are not familiar with? These are explained in more detail under Important terms.

The personal data we collect

If you sign up for any of our services, please provide us with the following:
- Your personal data, including your address, e-mail address, phone number and date of birth.
- Your login details, including your username and the password you have chosen.

When you visit our website, we may process the following data:
- Your travel preferences.
- Information about your browsing behaviour on our website.
- Information about when you click on one of our advertisements, including when they appear on the websites of other organisations.
- Information about how you access our digital services, such as operating system, IP address, online identifiers and browser information.
- Social preferences, interests and activities.

If you book with Avila Reizen B.V., we may process the following data:
- Traveller information, passport data, data from other identity documents.
- Insurance details.
- Relevant medical data and any special requirements, such as those related to diet, religion or disability.
- Information about your purchases, such as what you bought, where and when you bought it, how you paid for it and other payment information.
- Information about your browsing behaviour on our websites and mobile apps.
- Information about when you click on one of our advertisements, including when they appear on the websites of other organisations.
- Information about how you access our digital services, such as operating system, IP address, online identifiers and information from your browser.
- Social preferences, interests and activities.

Actions, competitions, surveys, questionnaires about our service
- If we contact you, but also if you contact us, we may store the following data:
- Personal data that you leave behind when you email us, send us a letter, call us or contact us via social media. This may include data such as name, user name, telephone number and (email) address.
- Data from emails and other digital communications that we send you and that you open, such as the links you click on.
- Your feedback and participation in customer surveys and questionnaires.

Other sources of personal data
- Your insurance company, their intermediaries and medical staff may share relevant personal data and special categories of personal data with us if we/she need to act on your behalf, for example in an emergency or in the interests of other customers.
- If you log in via social networks such as Facebook, Google+ or Twitter to access our platforms and online services, you consent to sharing your user data with us. This includes, for example, your name, e-mail address, date of birth, location and basically any information you voluntarily share with us.

Personal data of your travel companions
- We use personal data of others provided by you, for example the people listed in your booking because you are going on holiday together.
- If you provide the personal data of others, please ensure that they agree and that you are allowed to provide this data. Please also ensure, if applicable, that they understand how we may use their personal data.

Use of your personal data

We do not sell your personal data to third parties at Avila Reizen B. V. What we do use your personal data for is as follows:

To provide the products and services you ask us for.
We need this personal data to manage your account or booking, to provide the products and services you want to buy and to help you with the orders or refunds you request.

To manage and improve our products, services and operations.
With the personal data you leave behind, we continuously improve our products so that you have the best possible experience on our websites, with our mobile apps, with our loyalty and customer programmes and other services. At Avila Reizen B.V., we want you to be able to use our services safely at all times. That is why we monitor their use. We do this to protect your personal data and to detect and stop fraud, other crimes and the misuse of our services.

We may use personal data in security operations, accidents or similar incidents and for medical and insurance purposes.
We also use personal data for market research and research & development within Avila Reizen B. V. . We are always developing and improving our product range, services, shops, IT systems, security, knowledge and the way we communicate with you.

To get in touch with you
We want to serve you better as a customer, so if you contact us, for example via email, post, phone or social media, we may use your personal data to clarify matters or help you better. If you enter a promotion or competition, we will use your personal data to let you know, for example, that you have won a prize. This also applies to promotions and competitions we organise with our suppliers and partners. We may ask you to participate in our customer surveys (think surveys). In that case, we - or the company we hire for this purpose - will contact you.

Marketing Communications

From time to time, we may send you (e.g. via e-mail) relevant travel offers or news about our services. We may also send you information about other companies' products and services, if we think they might be of interest to you. We will only do this if you have indicated in advance that you wish to receive these marketing communications.
If you book a holiday with us or register with us, we will ask you if you want to receive messages from us. You can change this setting at any time: online, by phone, with the 'unsubscribe' link in our marketing emails, by texting STOP back after receiving our marketing text messages or by writing to us (e.g. via email). The choice is of course entirely up to you, but without these messages you do miss out on great offers and promotions that may be of interest to you. You may still receive service messages from us, such as confirmation of your booking and important information on the use of our products or services.

Market research

Your opinion is important to us. This is how we find out how to improve our products and services. That is why we occasionally contact you for a survey. You always decide whether you want to (continue to) participate in our market research.

Sharing personal data with suppliers and partners

To provide you with the requested products or services, we share your personal data with the suppliers of your travel arrangements, such as airlines, hotels and transport companies. If we hire companies to help us with our IT services, storing and combining data, marketing, market research, processing payments and providing products and services, we want you to know that we select these companies with extreme care. Sometimes we share personal data to establish, exercise or defend our legal rights; in this context, we may provide personal data to others to counter fraud and mitigate credit risk. When we share personal data with other organisations, we make clear agreements that they keep your data safe and do not use it for their own marketing purposes. Finally, we only share the minimum personal data with our suppliers and partners. This means that they only get access to the data needed to provide you with the services.

Sharing personal data with regulatory authorities

In order for you to travel, we are required to transfer your personal data if government agencies at the point of departure or arrival require it. They often want to know this for immigration, border control, security and anti-terrorism purposes or for other purposes that these authorities deem important. Some countries you may only enter if you provide traveller details in advance (such as Caricom API Data and US Secure Flight Data). These requirements may vary by destination and we recommend you check. Even if we are not required to do so, we can help with this. Sometimes we share the minimum personal data with other government bodies if it is required by law or if we are allowed to do so by law.

Protecting your personal data

We know how important the protection and management of your personal data is. Therefore, we take appropriate security measures to protect your data from accidental loss and from unauthorised access, use, alteration and disclosure. You yourself can also be involved in keeping your data safe. With your password, for example, you yourself are responsible for keeping it confidential. It happens that we transfer and/or store your personal data outside the European Economic Area ("EEA"). And that this data is processed by organisations outside the EEA working for us or one of our suppliers. Even then, we have taken appropriate measures to protect your personal data and process it in accordance with this statement. These protective measures include contractual provisions, such as the standard contractual provisions approved by the European Commission, and appropriate security measures.

Data retention

We keep your personal data for as long as necessary for the purposes we talk about in this privacy statement and for compliance with laws and regulations. After that, we will delete your personal data. In case we still want to use data for analytical, historical or other business purposes afterwards, we will make your data anonymous.

About cookies and similar technologies

Cookies are small data files stored on your computer, laptop or smartphone while browsing the internet. We use cookies to recognise you when you visit us. And to ensure that our websites and mobile apps work properly. Cookies also make your visit to our sites more interesting. Cookies allow us to show you holidays that we know will appeal to you. Want to read more? You can do so in our separate Cookie Statement.

Links to other websites

Our websites and mobile apps may contain links to websites operated by other organisations with their own privacy notices. Please ensure that you read the terms and conditions and privacy statement carefully before entering personal data on another organisation's website; we accept no responsibility or liability for the websites of other organisations.

Social media features

Our websites and mobile apps features include social media functions such as Facebook and Instagram, which have their own privacy notices. It is important to read their terms and conditions and privacy statement carefully before entering your personal data; we accept no responsibility or liability for these features.

Accessing and updating your personal data; complaints

Of course, you can always access your own personal data on our websites. This data is linked to your account or to the booking of your trip. If you wish, you can request in writing a copy of the personal data we have stored about you. Should you do so, please provide us with information that allows us to identify and look up your personal data for you. We will do this free of charge, unless you request several copies. In that case, we charge a fee based on administration costs. We want to make sure that the personal data we hold about you is correct and up-to-date. If there are any details that are not correct, please let us know. You can always ask us to correct or delete your personal data. You can also object to the processing of your personal data, and if it is technically possible, you can also ask us to transfer your personal data to another organisation. We will update or delete your data unless we need to keep it for business or legal purposes. We do our best to handle your personal data as well as possible. If you do have a complaint about the way we collect, store or use your personal data, please let us know by addressing your written question or complaint to the Legal Affairs Department/ Data Protection Officer:

Address:
Avila Reizen B.V.
Nieuwe Gracht 78
2011 NJ Haarlem

E-mailadres:
info@avila.world

If you are subsequently not satisfied with our response, you can lodge a complaint with the national Personal Data Authority: www.autoriteitpersoonsgegevens.nl.
Before we process your request or complaint, we may ask you for additional information to confirm your identity. Similarly, if you contact us on behalf of someone else, we may ask you for additional information. We do this to ensure that you are entitled to submit a request or complaint in this way.

Legal basis for processing personal data

We only process your personal data in the following situations:

We have your permission;

Example: customer account
When you create an account, by agreeing to this privacy statement, you give us permission to process your personal data.
It is necessary in connection with an agreement we have with you, or to take steps at your request before we enter into an agreement with you;

Example: to deliver the products and services you request
We need your personal data to book your holiday or provide you with the products and services you want to buy. We also need your data to make payments.

We have to comply with a legal obligation;

Example: sharing personal data with regulatory authorities
In order for you to travel, we are required to transfer your personal data if government authorities at the point of departure or arrival require it. They often want to know this for immigration, border control, security and anti-terrorism purposes or for other purposes that these authorities deem important.

It is necessary to protect your own vital interests or those of another natural person;

Example: in an emergency
Your insurance company, their intermediaries and medical staff may exchange relevant personal data and certain categories of personal data with us if we/they need to act on your behalf, for example in an emergency or in the interests of other customers.
It is in the public interest or we have official authorisation for a task in the exercise of public authority;

Example: security operations
We may use personal data during security operations, accidents or similar incidents, for medical and insurance purposes, among others.
It is in the legitimate interests of us or third parties, and these interests outweigh your interests or rights.

Example: to personalise your user experience
By looking closely at your personal data, we better understand what your interests are. So we try to predict what other products, services and information you might be interested in. And we can make our marketing communications more relevant and interesting to you.

If we need to process medical data (or other special categories of personal data), we only do so in one or more of the above situations. For example, if we have your explicit consent, if it is necessary to protect your vital interests or those of someone else and you are physically or legally incapable of giving consent, if it is necessary to file, exercise or defend legal claims, or if it is for reasons of substantial public interest.

Changes to this statement

This statement supersedes all previous versions. We may update this statement at any time, so please check our website(s) regularly for updates. If the changes are substantial, we will post a clear notice on our website(s), possibly with an electronic notification about the changes to the privacy statement.
Last updated: April 2025

Key terms

Controller: the controller determines the purposes and means of processing personal data.
European Economic Area (EEA): the EU Member States plus Norway, Iceland and Lichtenstein.
Online advertisements: marketing messages you see on websites.
Special Categories of Personal Data: These are personal data about racial or ethnic background, political opinions, religious or philosophical about Avila membership of a trade union, genetic information, the unique biometric data by which a natural person can be identified, medical data, and data about a natural person's sex life or sexual orientation.
Caricom API Data: Some or all of the Caricom countries have entered into a border security agreement with the US. Briefly, this agreement means that these countries transfer passenger data before travel. The US Department for Homeland Security then processes this data on behalf of these Caricom countries. You can read more about this on the Caricom website.
US Secure Flight Data: The Transportation Security Administration (TSA) requires you to provide your full name, date of birth and gender for screening, using a checklist. You can also provide your Redress number, if available. If you do not provide details, you may not be allowed to board or enter the boarding area. The TSA may share your details with law enforcement agencies, intelligence agencies or other organisations listed in the public statement on their data system. You can read more about this on the TSA's website.