Your personal information
SURFACE ADMINISTRATION No Ka Oi AB // YOGIA ACADEMY AUM TRAVELS AB ("we", "us") knows how important it is with integrity for our customers and website visitors, and our goal with this policy is to describe clearly and transparently for you how we collect, use, display, transmit and store your information so that you feel confident that your personal data is in secure storage. We do all the processing of personal data in accordance with the EU Data Protection Regulation GDPR. to us or we collect personal data from you, the data will be processed in accordance with this personal data policy.
You can contact us at firstname.lastname@example.org // email@example.com.
Collection of personal data
What a personal information it is
Personal data is any kind of information that can be directly or indirectly attributed to a natural person who is alive. This applies, for example, to names, social security numbers, addresses, e-mail addresses and telephone numbers. This also applies, for example, to booking numbers and encrypted data and various types of electronic identities, such as IP numbers, if they can be linked to natural persons.
How we collect personal information and what information we collect
We collect personal data in several ways, but primarily directly from you.
Information collected in connection with booking and travel
When you book a trip on Surfakademin.se // Yogiakademin.se, we collect personal information from you in order to fulfill your order. There are details of names, date of birth, age and gender of all travelers on the booking, and address and contact details of the main traveler. In connection with booking we also collect payment details for the main traveler.
If the booking includes children, we collect the same information as above regarding the child.
If you make a booking that includes several persons, you should ensure that all the persons concerned know this personal data policy and allow you to submit their personal data to us.
When you make a trip with us, we also collect information about your trip. In addition to the above information, booking number, destination, travel length and what other services you chose to use during the trip.
Information collected through personal contact
We collect personal information from you when you contact us, for example through customer service, e-mail, telephone or other means. First and foremost, we collect the personal information needed to answer your question or handle your case. There are details of names and booking numbers. Depending on how you choose to contact us, we may also collect contact information such as e-mail address or telephone number.
In personal contact, we also collect the other personal information that you yourself choose to provide to us. It can, for example, be information about allergies, health conditions or other information about you or other people on your trip or booking.
Information collected when you subscribe to an email containing inspiration and offers
If you choose to subscribe to an email containing inspiration and offers from us, we collect your name and email address in order to send an email to you. If you choose to leave, we also collect information about your postal code and country of residence.
Information collected from someone other than you
When booking and when contacting us in various cases, it appears that a person provides personal information about one or more other persons in a travel company. We assume that the person providing the information has the consent of all travelers to provide this personal information. If you have not made a booking yourself, but someone else has made a booking where you are included, we collect personal information about you from that person. The same applies if someone else has been in contact with us on your behalf.
In order to keep your personal data up to date and correct, we supplement and update your personal data through the collection of private and public records. This applies, for example. address details and social security numbers.
Handling and storage of personal data
Surf Academy // The legal basis of the Yoga Academy to process your personal information
We process your personal data legally. It may happen that the same personal data is processed both on the basis of the fulfillment of the travel agreement, specifically by consent or on the basis that the information is necessary to fulfill other legal obligations. This means that even if you revoke your consent and the treatment based on the consent ceases, the personal data may still remain with us for other purposes. In essence, we process your information in order to fulfill an agreement to which you are a party, such as the travel conditions, or based on a legitimate interest, for example for marketing purposes.
If you buy a gift card or have a gift card issued to you, we will handle your personal information to display and administer the gift card. We use the recipient's email address or mobile phone number to send out digital gift cards and the customer's email address to be able to send a copy of the confirmation. We use your name, address and telephone number to be able to exhibit and deliver physical gift cards. We handle your payment information in order to process the payment.
If you buy a gift card through a company, we use the personal information you provide regarding the customer, delivery recipient and invoice address to be able to issue gift cards and carry out invoicing.
If you choose to enter personal information in the message field, we collect it.
We use your personal information to provide you with service if you contact us with questions, comments or eg. complaints. We use your name and booking number to identify you and your trip. We use your contact information, such as e-mail address and telephone number to contact you in connection with questions and cases. We may also use all the other personal information we collect about you to handle your question or case depending on what is relevant in each case.
Transmission of information
Once you have booked a trip with us, we use your personal information to send a booking confirmation, important information about your upcoming trip and offers related to the trip. Such mailings will be sent to the e-mail address provided in connection with booking.
Marketing and personification
If you have chosen to receive emails containing inspiration and offers from us, we use your personal information to send e-mails to you and to adapt the contents of the mail to you. It is both your email address and partly your travel history, your user pattern and your preferences. By using this information we can give you the offers that we think you have the greatest interest and benefit from.
Finally, processing of your personal data may also take place in order for us to be able to fulfill obligations under laws and regulations, such as applicable security and accounting.
periods of retention
Surf Academy // The Yogi Academy follows good practice in the travel industry. We will store your personal data for as long as is necessary for the purpose of the processing.
We store all the personal information we collect in our customer database. In the customer database, personal data and travel history are stored for two (2) years if you have not agreed that we can save your information anymore. If you specifically agree to it, we will store your personal data for up to 10 years.
If you advertise within two years of your last trip, we save all your information for ten years.
If you subscribe to emails containing inspiration and offers, your contact information will be saved as long as you choose to continue to receive such emails.
The same personal data can be stored in several different places for different purposes. This may mean that a data that has been removed from a system because it is no longer necessary may remain in another system where it is stored with the support of consent or for another purpose where the personal data is still needed.
Disclosure of personal data
Contract partners and IT suppliers
We use a number of different IT services and IT systems in our operations. In some of these, personal data is stored and handled. We care about your privacy and the security of your information in all such handling. Some systems are installed locally with us and only our staff have access to the data. In these cases, no transfer is made to a third party. However, some systems are cloud solutions or installed at the supplier and mean that we transfer personal data to the supplier. In these cases, the supplier is our personal data assistant and handles the information on our assignment and according to our instructions.
Internal IT systems
Internally, we handle personal data in our customer database, in our booking and sales support systems, in our customer service system and in a system for data management and data improvement. These systems are designed to deliver the services you have ordered from us and to handle questions and customer care in connection with the execution of these services. In these systems, all the personal data we collect may be handled.
Payment solutions and gift cards
We use external suppliers to handle payments and gift cards. These providers have access to personal data in the form of names, addresses and payment information. This handling is necessary in order for us to deliver the services you have ordered from us.
Necessary handling of personal data and handling with the support of consent Personal data processing that is necessary for us to execute an agreement with you, for us to fulfill a legal obligation, or which is
necessary with regard to our legitimate interest is allowed without consent. However, in order for us to collect and process your personal data for any other purpose, you must consent to the processing. You consent to the handling of your personal data in connection with the use of our services at Surfakademin.se // Yogiakademin.se.
Withdrawal of consent
You can choose to withdraw your consent at any time by contacting us at the contact details above. If you revoke your consent, we will delete the personal data and discontinue the processing that was the subject of the consent.
It may happen that the same personal data is processed both with the support of consent and with the support of the information being necessary or with the support of other rules. This means that even if you revoke your consent and the treatment based on the consent ceases, the personal data may still remain with us for other purposes.
Right to get information and right to control your information
If you would like information about what information we have registered about you, you can apply in writing at the above address. The excerpt is provided on request and is free once a year.
You have the right to request that the information about you be deleted, supplemented or corrected. You also have the right to request that the processing of your personal data be limited to certain purposes and, for example, not used for direct mail or so-called. profiling.
What happens if you do not want us to handle your personal information
We must process certain personal information in order to be able to deliver the services and products you have requested from us. If you make a reservation on the web yourself, this information is marked so that you can clearly see who it is. Should you not wish to submit such information or request that we delete such information, we will not be able to provide the service or product.
If you request that we do not process your personal information for marketing or profiling, you will not be able to receive customized offers and communications from us and some digital services may not be used or not functioning properly in all respects.
If you want to complain
Anyone who believes that a company violates the GDPR can turn to the Data Inspectorate. Read more on the Swedish Data Inspectorate's website