The responsible body for this data processing within the meaning of the European General Data Protection Regulation 2016/679 (GDPR) is Xplore, trading as part of Klub Group Ltd, 12 Bury Street, Stowmarket, Suffolk IP14 1HA, United Kingdom (info(at)xploretheworld.com).
Information we collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information from and about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When booking a programme, it is necessary to provide us with a billing address and email address. The email address is used, among other things, to send the confirmation of purchase as well as instructions and information around the setup of the product. In order to process the payment corresponding information is necessary. The exact data that is collected in each specific case can be reviewed via the respective input forms.
Xplore uses the personal data of the user to provide our services (Article 6 (1) (b) GDPR), to comply with our legal obligations (Article 6 (1) (c) GDPR) and/or to protect the vital interests of the Xplore user (Article 6 (1) (d) GDPR).
We use the information we collect in various ways, including to:
- to ensure access to our products and services
- to contact the Xplore customer in order to provide necessary customer services
- to personalise, measure and improve our advertising
- to contact the user by e-mail under applicable law, to offer coupons, discounts and promotions, to collect their opinion through surveys or questionnaires, and to inform about our services;
- to provide Xplore users with targeted marketing, service updates and promotional offers
- to monitor and improve the information security of our services.
Use of Payment Service Providers
Xplore processes payments made by the user via the following payment service provider:
Sage Pay Europe Limited, North Park, Newcastle Upon Tyne, NE13 9AA, United Kingdom
xploreactivitycamps.com follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
Xplore uses Google Analytics services provided by Google. Google Analytics are web analytics services offered by Google Ireland Ltd.
Google Analytics store cookies which enable an analysis of the surfing patterns of website visitors. We only use these Google Services with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google Analytics uses this information to evaluate the use of the website, to compile reports on website activity for website operators and to report other website activity and internet-related services. Google Optimize will use this information on our behalf to improve the attractiveness, content and functionality of our website by enabling us to offer new features and content to a percentage of our users and to statistically evaluate changes in usage.
You can prevent data collection via Google Analytics by clicking this link: Opt-Out-Link
An “Opt-out Cookie” shall then be applied to your website which shall prevent any future collection of your data when visiting this website.
Additional information on how Google handles personal data in its advertising network can be found here: Advertising and Privacy.
Xplore also uses the cross-device capabilities of Google AdWords from the provider Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This feature allows the Google Analytics remarketing ad groups described above, to be linked to the cross-device features of Google AdWords. In this way, interest-based, personalised advertising messages that have been adapted to the particular user based on their previous usage and browsing behaviour on one terminal (e.g., cell phone) may also be displayed on another user’s terminal (e.g., tablet or PC).
Once the user has given their consent, Google links the web and app browsing history to the corresponding Google account for this purpose. In this way, the same personalised advertising messages can be displayed on each device on which the user logs on with his Google Account. To support this feature, Google Analytics collects Google-authenticated IDs of users who are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion. The site visitor can permanently object to cross-device remarketing / targeting by disabling personalized ads in their Google Account: https://www.google.com/settings/ads/onweb/. If the site visitor wishes to object to Google’s general tracking process, the conversion tracking cookies can be disabled by setting the browser to block cookies from the domain www.googleadservices.com: https://www.google.de/settings/ads.
The aggregation of the collected data in the Google account of the site visitor takes place exclusively on the basis of his consent, which he can give or revoke on Google (Article 6 (1) (a) GDPR). For data collection operations that are not merged into the user’s Google Account (for example, because they do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) GDPR. The legitimate interest arises from the fact that Xplore has an interest in the anonymous analysis of the website visitors for advertising purposes.
Xplore uses the web analysis service Hotjar on its xploreactivitycamps.com website.
With this tool, movements on the websites (so-called heat maps) can be understood and thereby, feedback to be obtained directly from the users of the website. Hotjar allows Xplore to gain valuable information regarding the use of our websites so that we can make our websites faster and more customer friendly. The portions of our websites where personally identifiable information is displayed/entered by the Xplore user or third parties, are automatically hidden from Hotjar and are therefore not traceable.
By visiting Hotjar’s opt-out page and clicking on the option “Deactivate Hotjar” you can prevent Hotjar from collecting your data on our website. This deactivation is possible at any time. For details about data processing by Hotjar, please refer to https://www.hotjar.com/privacy.
Storage duration of personal data
GDPR – Data Protection Rights
According to the relevant legislation, including the GDPR, the site visitors have certain rights in relation to their personal data that is processed by Xplore. In particular, they have a right to information, correction, transferability or deletion of their data.
Right to access (Article 15 GDPR), right to rectification (Article 16 GDPR)
We are happy to inform you, which personal data we have stored on you, as well as any fees incurred under applicable law. The information will be processed by us within four weeks and is usually sent via email. In order to receive detailed information, please inform us as far as possible as to the type of personal data requested.
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure (Article 17 GDPR)
You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing (Article 18 GDPR)
You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to data potability (Article 20 GDPR)
You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
Right to object (Article 21 GDPR)
The xploreactivitycamps.com site visitor may object to the future processing of their data in accordance with Article 21 GDPR at any time, for the future.
Exercising your rights
In order to exercise these and other data subject rights an affected party may, at any time, contact Xplore via the following contact address info(at)xploretheworld.com.
Right to lodge a complaint
The visitor of our website has the right to lodge a complaint with a relevant supervisory authority in accordance with Article 77 GDPR, if the user is of the opinion that the processing of his personal data has not occurred in accordance with the provisions of the GDPR.
Our users’ information is protected by technical and organisational security measures to minimise risks associated with their loss, misuse, unauthorized access, unauthorized disclosure and alteration of their and all user’s data. For example, we use firewalls and data encryption, as well as physical access restrictions for our data centres and data access authorisation controls.
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
xploreactivitycamps.com does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.