General Data Protection Regulation

1. Introduction

Welcome to Treasure Bali. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our services. By using our platform, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

NOVA Group Sp. z o.o.

Żurawia 6/12 lok. 745, 00-503 Warszawa, Poland

TAX ID: PL7011215529

REGON: 529224431

3. Information We Collect

We may collect and process the following types of personal data:

•Identity Data: First name, last name, passport number.

•Contact Data: Email address.

•Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

•Profile Data: Purchases or orders made by you.

•Usage Data: Information about how you use our website, products, and services.

•Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

4. How We Use Your Data

We use your personal data for the following purposes:

•To provide our services: Including processing your orders and managing your account.

•To improve our services: Understanding how our services are used and how we can improve them.

•To communicate with you: Sending you updates, notifications, and information regarding our services.

•For marketing purposes: Sending promotional materials, offers, and information about new services or events (with your consent).

•To comply with legal obligations: Ensuring compliance with applicable laws and regulations.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

•Contractual necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

•Legitimate interests: Processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.

•Consent: You have given your consent to the processing of your data for specific purposes.

•Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

6. Data Sharing

We may share your personal data with:

•Service providers: Companies that provide services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

•Business partners: Trusted partners who offer services jointly with us or assist us in our marketing efforts.

•Legal authorities: When required by law or necessary to comply with a legal process.

•Bali Provincial Government: For the sole purpose of issuing the Bali tourist levy, we share the personal data you provide directly with the Bali Provincial Government.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses approved by the European Commission.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

9. Data Retention

We will retain your personal data only as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

10. Your Rights

You have the following rights regarding your personal data:

•Access: Request access to your personal data.

•Correction: Request correction of your personal data if it is inaccurate or incomplete.

•Erasure: Request deletion of your personal data.

•Restriction: Request restriction of processing your personal data.

•Portability: Request transfer of your personal data to another party.

•Objection: Object to the processing of your personal data where we are relying on a legitimate interest.

To exercise any of these rights, please contact us via the methods provided on our website.

11. Cookies

We use cookies to enhance your experience on our website. For more information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us via the methods provided on our website.