Privacy policy

Privacy Policy AVG / GDPR

Casita Travel is responsible for the processing of personal data as described in this privacy statement.

Contact details:
- Company name: Casita Travel B.V.
- Address: Linie 574-G, 7325 DZ, Apeldoorn
- Chamber of Commerce (KvK) number: 70513864
- E-mail: info@casitatravel.nl
- Telephone: +31 (0)55 35 62 339

2. What personal data do we process?
We process personal data that you provide to us yourself, or that we obtain in the course of providing our services. This concerns the following categories:

a) Bookings and travel services:
- First name and surname (all details regarding the lead booker)
- Date of birth
- Address details
- Telephone number
- E-mail address
- Passport/ID details (if required for the destination)
- Travel preferences and specific requirements (e.g., medical information if provided by you)
- Payment details

b) Newsletter:
- E-mail address
- Name (of the recipient)

c) Online check-in (via Checkin):
- Identification details (name, date of birth, nationality)
- Contact details
- Passport/ID information and, in some cases, a copy of the passport/ID
- Signature (digital)

d) Website visits:
- IP address
- Browser type and device details
- Cookie data (see section 8)

3. For what purposes do we process your data and on what legal basis? We process your personal data for the following purposes:
- Performance of your booking/travel agreement — Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
- Invoicing and payment processing — Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
- Legal obligations (tax, administration) — Legal basis: Legal obligation (Art. 6(1)(c) GDPR)
- Online check-in and transmission to Spanish authorities — Legal basis: Legal obligation (Art. 6(1)(c) GDPR)
- Sending the newsletter — Legal basis: Consent (Art. 6(1)(a) GDPR)
- Improving our website and services — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
- Customer service and answering inquiries — Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

4. Online check-in via Chekin
To ensure a secure and smooth check-in process, we partner with Chekin (chekin.com). Chekin acts as a data processor on behalf of Casita Travel. When processing personal data—whether via AI or otherwise—Chekin operates in compliance with the European GDPR and, more specifically, the Spanish Data Protection Act (LOPDP). It limits processing to the data strictly necessary for the purpose for which we engaged Chekin: managing the check-in process. This is further detailed in Chekin’s own privacy policy.

During online check-in, your personal data (identification details, contact information, and in some cases, a copy of your travel document) are processed via the Chekin platform. In accordance with Spanish legislation (*Ley Orgánica de Protección de la Seguridad Ciudadana*), this data is automatically forwarded to the competent Spanish authorities. The legal basis for this is compliance with a legal obligation (Art. 6(1)(c) GDPR). Chekin does not retain copies of travel documents for longer than legally required.

5. Sharing with third parties
We only share your personal data with third parties when necessary to provide our services or when we are legally required to do so. This includes:
- Travel partners and accommodation providers (for the fulfillment of your booking)
- Chekin (online check-in; see section 4)
- Spanish government authorities (legal obligation regarding check-in)
- Accountants and tax advisors (legal obligation)
- IT service providers and hosting companies (website management)

6. Transfers outside the EU/EEA
In principle, we process your data within the European Economic Area (EEA). Should a transfer to a country outside the EEA be necessary, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g., standard contractual clauses or an adequacy decision).

7. Retention periods
We do not retain your personal data longer than strictly necessary:
- Booking details: 7 years after the trip ends (statutory tax record-keeping obligation)
- Copy of travel document (check-in): In accordance with Spanish law
- Newsletter details: Until you withdraw your consent
- Website data/cookies: See cookie statement (section 8)
- Customer service correspondence: 2 years after the last contact

8. Cookies and website tracking
Our website uses cookies. Functional cookies are necessary for the website to function properly. Analytical and/or marketing cookies are only placed with your consent. Please see our Cookie Policy here.

9. Your rights
Under the GDPR, you have the following rights:
- Right of access — You can request information on the data we process about you.
- Right to rectification — You can have incorrect data corrected.
- Right to erasure — You can request the deletion of your data.
- Right to restriction — You can request a temporary restriction on processing.
- Right to data portability — You can receive your data in a standard format.
- Right to object — You can object to processing based on legitimate interests.
- Right to withdraw consent — If you have given consent (e.g., for the newsletter), you can withdraw it at any time. This does not affect the lawfulness of processing carried out prior to the withdrawal.

You can submit your request via info@casitatravel.nl. We will respond to your request within four weeks at the latest. We may ask you to provide proof of identity.

10. Filing a complaint
Do you have a complaint regarding the processing of your personal data? Please contact us first at info@casitatravel.nl. If we are unable to resolve the issue together, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens
PO Box 93374, 2509 AJ The Hague
www.autoriteitpersoonsgegevens.nl

11. Security
We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, or disclosure. Examples include encrypted connections (SSL/TLS), access restrictions, and secure storage.

12. Changes
We reserve the right to amend this privacy statement. The most current version is always available on our website. We will actively inform you of any significant changes.

Casita Travel, Apeldoorn 2026