Last updated: January 2025
1. Data Controller
FraVeRa Journey B.V.
Address: Amsterdam, Netherlands
Email: info@fraverajourney.com
KvK: 12345678
VAT: NL123456789B01
2. What Data We Collect
We collect the following personal data:
- Name and contact information (email, phone)
- Country of residence
- Health goals and treatment preferences
- Travel preferences (dates, duration)
- Any additional information you provide
3. Why We Collect Your Data
We process your personal data for the following purposes:
- To provide personalized sanatorium recommendations
- To facilitate contact with chosen facilities
- To coordinate your stay and provide support
- To send newsletters (with your consent)
- To improve our services
4. Legal Basis for Processing
We process your data based on:
- Consent - when you fill out our contact form
- Contract - when providing our services
- Legitimate interest - for service improvement
5. Data Sharing
We share your data only with:
- The sanatoriums you choose to contact
- Service providers necessary for our operations (hosting, email)
We never sell your data to third parties.
6. Data Retention
We retain your personal data:
- For active inquiries: until the service is completed
- For marketing: until you withdraw consent
- Maximum retention: 3 years after last contact
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
8. Cookies
We use cookies for:
- Essential website functionality
- Analytics (with your consent)
- Marketing (with your consent)
You can manage cookie preferences through our cookie banner.
9. Security
We implement appropriate technical and organizational measures to protect your data, including encryption and access controls.
10. Contact
For privacy-related questions or to exercise your rights, contact us at info@fraverajourney.com
11. Complaints
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.