Personal Data Processing

Scope and Purpose of this Notice

On Tour places great importance on protecting your privacy and is committed to ensuring the security of your personal data. The purpose of this personal data processing notice (hereinafter referred to as "Notice") is to provide you with relevant information regarding how we manage your personal data when you visit our website or when you provide us with your personal data in various ways, such as through phone number, email address, CV, during the purchase of tourism services, when you subscribe to our mailing list, when you participate in a trip or when you request offers from us, and others.

Please note that this website is intended exclusively for adults, and the only situations in which we collect data about children are related to booking tourism offers for them.

This Notice aims to provide you with details regarding the personal data processing operations (as defined in relevant legislation, including the General Data Protection Regulation 2016/679, hereinafter referred to as "GDPR") carried out by On Tour.

Contact details of the Data Protection Officer

The operator of your personal data is On Tour S.R.L., with its registered office in Sat. Lapusel, Com. Recea, Str. Rozelor, Nr.8, Jud. Maramures, CUI: 45149569, trade registry number J24/1856/2021 (hereinafter referred to as "On Tour," "we" or "our" in this Notice).

In accordance with current legal regulations, On Tour has appointed a Data Protection Officer.

For any questions or requests related to this Notice, including requests regarding the processing of your personal data or the exercise of your legal rights, please contact the Data Protection Officer using the following contact information:

Email: office@ontour.ro
Postal address: Sat. Lapusel, Com. Recea, Str. Rozelor, Nr.8, Jud. Maramures.

It is essential that the personal data we hold is accurate and up to date. Please inform us if any of the details you provide to us change during your relationship with us.

The personal data we collect about you

According to current law, the term "personal data" refers to any information related to an identified or identifiable natural person. When you visit our website, communicate with us, or benefit from tourism or other services, we may process the following types of personal data:

Contact and/or identification data, such as name, surname, address (domicile or residence), telephone number, email address, series and number of the identity document, personal numerical code, as well as the information contained in these documents, voice, call history.
Information regarding requested or provided services, which includes details related to desired or provided services, as well as information regarding financial transactions between you and us, including bank details.
Candidate data, in case of recruitment, which includes detailed information about candidates, such as email address, current location, previous employment history, education, qualifications and all details from the curriculum vitae.
Information used for advertising, marketing and promotion purposes, such as name, surname, images, voice recordings, feedback received, social media identifiers and profiles.
Special categories of personal data, which may include dietary requests revealing religious or philosophical beliefs and information related to health status.

The data mentioned above is collected and processed exclusively when it is essential for the provision of the tourism services purchased by you.

Source of personal data

Personal data may be collected from several sources, including:

Directly from you when:

You request a travel offer or use the tourism services offered by us.
You subscribe to our newsletter or other publications.
You send feedback.
You participate in contests organized by us.
You apply for an available position within our company.
Through activities carried out during the period when you benefit from the tourism services offered by us.

From third parties, such as:

Your personal data received from third parties who request tourism services (people traveling with you or other travel agencies).

Purpose of personal data processing

On Tour collects, processes and uses personal data for various purposes, including:

For providing offers or rendering tourism services.
For fulfilling the purposes related to On Tour's activity and for complying with legal obligations.
For initiating and conducting contractual relationships with you.
To allow you to participate in contests and events organized by On Tour.
For exercising the rights and fulfilling the obligations provided in the signed contracts.
In the context of advertising, marketing and promotional activities.
For the purpose of protecting the interests of the parties in judicial proceedings.
For exercising On Tour's rights in accordance with legal provisions.
For ensuring compliance with legal provisions regarding data and document retention and archiving.
For general purposes related to the provision of tourism services.

It is important to mention that On Tour will not use your personal data for advertising, marketing and promotional purposes without your consent.

Disclosure of personal data

Your personal data will be disclosed within On Tour only to management and to other individuals who need access to your personal data (on a need-to-know basis) to perform their specific duties for the purposes mentioned above or where this is necessary or permitted by applicable law.

On Tour may also provide your personal data to third parties who provide services related to the requested tourism services, IT support services or technical and organizational services, or to legal, audit or other consultants or suppliers of On Tour, only for the purposes mentioned in this Notice.

On Tour may also disclose your personal data to authorities, as required or permitted by legal provisions, insurance entities, external consultants and/or courts.

Transfer of data outside the EU or EEA

Many of our external tourism service providers are located outside the European Union (EU) or the European Economic Area (EEA), which means that processing your personal data will involve transferring data outside the EU or EEA.

In the event that you have made a reservation for tourism services that are located or are to be carried out outside the EU or EEA, we are obliged and authorized to transfer your personal data to the service provider you have purchased, outside the EU or EEA, for the purpose of fulfilling the contract we have with you.

Please contact us if you would like further information about the specific mechanism we use when transferring your personal data outside the EU or EEA.

External links

This site may contain links to other sites or applications managed by third parties. If you access these links or use these applications, third parties may collect or share data about you. We do not exercise control over these sites or applications managed by third parties and are not responsible for their policies regarding the processing of personal data.

Legal basis for processing personal data

The legal bases for the personal data processing operations mentioned in this Notice include: (i) the performance of a contract to which you are a party or its preparation, (ii) the protection of our legitimate interests and/or the necessity of concluding or executing a contract, in accordance with data privacy regulations, and (iii) obtaining your consent.

Our legitimate interests or those of a third party may include the use of your personal data for legal purposes, such as litigation, authority investigations, data processing for advertising, marketing or promotional purposes, or other purposes permitted by applicable law.

Duration of processing / storage of personal data

We intend to keep your personal data accurate and up-to-date and to store it only for the periods strictly necessary to fulfill the purposes mentioned in this Notice or to comply with legal requirements.

Please note that OnTour retains your personal data throughout the duration of the contract concluded with us and for a period provided by applicable law after the termination of the relationship between you and OnTour.

In the event that you are a candidate for a position offered by OnTour (without a formalized relationship with OnTour), your personal data provided will be retained for 1 year.

In certain circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely, without prior notice to you.

Use of personal data for promotional, marketing and advertising purposes

The creation of images (photos or video recordings) or their use is permitted only with prior consent, and in the case of minors, parental consent is required.

If consent is given, we limit the use of images to our website and main social media platforms, such as Facebook, Twitter, Instagram, WhatsApp, or web pages associated with Ontour, as well as for promotional, marketing and advertising purposes at our premises, events or presentations.

There are situations, such as group trips or events, where the creation and processing of images or videos may occur, and these will be announced in advance. If you do not wish your personal data to be processed for promotional, marketing or advertising purposes, you can unsubscribe from receiving newsletters using the link available at the bottom of the newsletter.

Your rights in relation to personal data

According to applicable personal data regulations, we inform you about the following rights you have:

Right of access to personal data: You have the right to request confirmation of the processing of personal data concerning you and, if so, access to this data.
Right to rectification or erasure: You have the right to request the correction of inaccurate personal data or the completion of incomplete data.
Right to restriction of processing: You have the right to obtain the restriction of the processing of your personal data in certain cases.
Right to lodge a complaint: You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing and to address the competent courts.
Right not to be subject to automated decisions: You have the right not to be subject to automated decisions, including profiling.
Right to data portability: You have the right to request the movement, copying or transfer of your data in a structured format.
Right to object to processing: You have the right to object to the processing of your data on grounds relating to your particular situation.

Changes to the Notice

If we make significant changes to our personal data practices or to this Notice, we will publish a revised version thereof and/or take other measures to inform you about these changes, in accordance with applicable legal provisions.