The protection of your personally identifiable information is most important to us.
In the following, we provide information about the collection of personally identifiable information while using our website. Personally identifiable information is all data that relates to you personally, such as name, address, e-mail addresses, or users behavior.
Continuous technological development, changes in our services or the legal situation, and other reasons may require adjustments to our data protection notice. For that reason we do reserve the right to change our privacy policy at any time and kindly you to keep yourself regularely informed of the current state.

The responsible party for data processing is according to article 4 (7) of the EU General Data Protection Regulation (GDPR), MyFloresTour, 86754 Labuan Bajo, Nusa Tenggara, Indonesia
E-Mail: info@myflorestour.com
Phone: +62 813 3930 5917

MyFloresTour data protection contact point
You can reach our data protection contact point any time at info@myflorestour.com please add ” Data Privacy”.

Your rights on MyFloresTour
With respect to the personally identifiable information concerning you have the following rights:

General rights 
You have the right to information, correction, deletion, limitation of processing, opposition to processing, and data portability. If processing is based on your consent, you have the right to revoke it with effect for the future.

Your rights in the processing of data based on legitimate interests
According to Article 21 (1) of the GDPR, you have the right to file an objection at any time for reasons arising out of your particular situation against the processing of personally identifiable information relating to you, pursuant to Article 6 (1) of the GDPR (data processing in the public interest) or Article 6 par. 1 f GDPR (data processing for the protection of a legitimate interest); this also applies to a profiling based on this provision. In the event of your objection, we will no longer process your personally identifiable information unless we can establish compelling and legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing aids the enforcing, exercising or defending of legal claims.

Your rights in direct advertising
If we process your personally identifiable information for the purpose of direct advertising, you have the right according to Article 21 par. 2 GDPR to object at any time to the processing of personally identifiable information relating to you for the purpose of such advertising; this also applies to profiling, where appropriate, insofar as it is associated with such direct advertising.
In the event of your objection to processing for the purpose of direct advertising, we will no longer process your personally identifiable information for these purposes.

Which personally identifiable information we do collecting when visiting our website
If you are only using the website for informational purposes, i.e., if you do not enroll or otherwise provide us with information, we will only collect the personally identifiable information that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and ensure its stability and security. Only in the case of suspected misuse in connection with bookings would we use this link information to facilitate the identification of the person responsible. The legal basis for this is Article 6 (1) (f) GDPR:
–IP address, date and time of the inquiry, time difference to Greenwich Mean Time (GMT), content of the request (concrete page), access status/HTTP status code, amount of data transferred in each case, website that receives the request, browser, operating system and its interface, language, and browser software version.

Contact with contact form or by e-mail
When you contact us by e-mail or through a contact form, we will store the data you provide. Such as your e-mail address, possibly your name and telephone number. So we can answer your questions. This information serves to substantiate your inquiry and improve the handling of your request. A statement of this information is also provided on a voluntary basis and with your consent, art. 6 par. 1a GDPR. As far as this concerns information about communication channels, such as your e-mail address or telephone number, you also agree that we may also, where appropriate, contact you via this communication channel to answer your request. You may of course revoke this consent for the future at any time.
We delete the data that arises in this context after saving is no longer required, or limit processing if there are statutory retention requirements.

MyFloresTourNewsletter
General information
With your consent under Art. 6 par. 1 a GDPR, you can opt in to our newsletter, which will inform you about our current deals. 
To sign up for our newsletter, we use the “double opt-in” method. This means that after you have signed up, we will send you an e-mail to the e-mail address specified, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your sign-up within [24 hours], your information will be locked and automatically deleted after one month.
In addition, we save the IP addresses you used and the times of sign-up and confirmation. The purpose of the procedure is to verify your sign-up and, if necessary, to inform you about possible misuse of your personal data.
The only requirement for sending the newsletter is your email address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is art. 6 par. 1 a GDPR.
You may revoke your consent to the sending of the newsletter at any time and opt out of the newsletter. You can declare the revocation by clicking the link provided in each newsletter e-mail or by contacting the aforementioned data processing point of contact.

Use of social plug-ins on MyFloresTour
This website uses the named provider’s social plug-ins:
•    - Facebook, Instagram (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
•    -YouTube (YouTube LLC 901 Cherry Avenue, San Bruno, CA 94066, USA)
•    -Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)

These plug-ins typically collect data from you as standard, and transmit it to the respective vendor’s server. We have taken technical measures to ensure the protection of your privacy, which guarantee that your data cannot be collected by the vendors of the respective plug-ins without your consent. These will initially be deactivated when you visit a site connected to the plug-ins. The plug-ins will not be activated until you click on the respective symbol, and by doing so, you give your consent to have your data transmitted to the respective vendor. The legal basis for plug-in use is article 6, par. 1 a and f of the GDPR.
Once activated, the plug-ins also collect personally identifiable information, such as your IP address, and send it to the respective vendor’s server, where it is saved. Activated social plug-ins also set a cookie with a unique identifier when you visit the respective website. This allows the vendor to generate profiles of your user behavior as well. This occurs even if you are not a member of the respective vendor’s social network. If you are a member of the vendor’s social network and you are logged into the website during your visit, your data and information about your visit to the website can be linked with your profile on the social network. We do not have any influence over the exact extent to which your data is collected by the respective vendor. For more information about the extent, nature, and purpose of data processing and about the rights and setting options for protecting your privacy, please see the data protection notices for the respective social network vendor. These can be found at the following addresses:
•    -Facebook: https://www.facebook.com/policy.php
•    -Instagram: https://help.instagram.com/519522125107875?helpref=page_content
•    -YouTube: https://support.google.com/youtube/topic/2803240?hl=en&ref_topic=6151248

Facebook Connect / Pixels
We offer you the option of signing in through your Facebook account. If you enroll via Facebook, Facebook will ask you for your permission to release certain data in your Facebook account to us. This may include your first name, last name, and e-mail address so your identity and gender can be verified, as well as general location, a link to your Facebook profile, your time zone, your date of birth, your profile picture, your “Like” information, and your friends list.
This data will be collected by Facebook and transmitted to us in compliance with the policies in the Facebook privacy policy. You can control the information that we receive from Facebook through the privacy settings in your Facebook account.
This data will be used to establish, provide, and personalize your account. The legal basis is article 6, par. 1 a, b, and f of the GDPR.
If you enroll with us through Facebook, your account will automatically be connected to your Facebook account and information about your activities on our website, if applicable, will be shared on Facebook and published on your timeline and news feed.

Use of cookies on MyFlorestour
Cookies will be stored on your device during the use of our website. Cookies are small text files that are stored on your hard drive assigned to the browser you use, and through which the place where the cookie is set accrues certain information. Cookies cannot run any programs or transmit any viruses to your device. They serve to make the website more user-friendly and efficient overall. We also use cookies to be able to identify you in subsequent visits.
Users have the opportunity to access our offer without cookies. For this purpose, the corresponding settings must be changed in the browser. Please refer to the help function of your browser, how cookies are deactivated. 

However, please be aware that this may interfere with some features of this website and reduce its ease of use. The https://www.aboutads.info/choices/ (US) and https://www.youronlinechoices.com/uk/your-ad-choices/ (Europe) sites allow you to manage online ad cookies.

For more information about Terms of Use and Privacy, please visit https://www.google.com/analytics/terms/en.html or https://www.google.com/intl/en/policies/.

This website uses the following types of cookies, whose extent and function are explained in the following:

Transient cookies
These cookies are automatically deleted when you close your browser. This includes session cookies in particular. These save a “session ID” with which different requests from your browser can be assigned to the joint session. This allows your device to be recognized again when you return to our website. Session cookies are deleted when you log out or close your browser.

Persistent cookies
These cookies are automatically deleted after a set duration that can vary depending on the cookie. You can delete cookies in your browser security settings at any time.

Flash cookies
Flash cookies used are not collected through your browser, but through your Flash plug-in. In addition, we use HTML5 storage objects that are stored on your terminal. These objects save the necessary data independent of the browser you use and have no automatic expiration date. If you do not want Flash cookies processed, you must install a suitable add-on, such as “Better Privacy” for Mozilla Firefox, https://addons.mozilla.org/en, or Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode.

Legal bases and storage period
The legal bases for possible processing of personally identifiable information and its storage period vary and are described in the following sections.

Analysis
For the purposes of analyzing and optimizing our websites, we use different services that are described in the following. This allows us to analyze, for example, how many users visit our site, which information is requested the most, and how users find the website. The data that we collect includes the websites from which a person in question arrives at a website (“referrer”), which subpages on the website are accessed and how often, and the length of time for which a subpage is viewed. This helps us to develop and improve our website to be more user-friendly. The data collected does not serve to personally identify individual users. Anonymous or highly pseudonymous data will be collected. The legal basis for this is article 6, par. 1 f of the GDPR.

Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). This use covers the Universal Analytics operating mode. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.
Google Analytics uses cookies that allow your use of the website to be analyzed. The information generated by the cookie through your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be truncated in advance within the member states of the European Union or other contracting states party to the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted from your browser in the context of Google Analytics will not be conflated with other Google data. Google will use this information in this website operator’s order to evaluate your use of the website so that reports about website activity can be compiled and other services connected to website and internet use can be rendered for the website operator. Our legitimate interest in data processing is also for these purposes. The legal basis for the use of Google Analytics is article 6, par. 1 f of the GDPR. The data sent by us and connected to cookies, user information (such as user ID), and promotional IDs are deleted after 14 months after the last use of our services. Data whose storage period has expired is automatically deleted once a month. More information on the terms and conditions of use and data protection can be found at https://www.google.com/analytics/terms/us.html and https://policies.google.com/?hl=en.
You can prevent cookies from being stored through the relevant setting in your browser software; however, please note that if you do so, not all functions of the website may be able to be used to their full extent. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing https://tools.google.com/dlpage/gaoptout?hl=en. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent Universal Analytics collection across various devices, you must perform the opt-out on all systems in use. Set the opt-out cookie by clicking here: Deactivate Google Analytics.

Google Tag Manager
For transparency reasons, we would like to mention that we use Google Tag Manager. Google Tag Manager does not itself collect any personally identifiable information. Tag Manager makes it easier for us to incorporate and manage our tags. Tags are small elements of code that serve to measure traffic and user behavior, record the effects of online advertising and social channels, establish remarketing and focus on target groups, and test and optimize websites, among other things. If you have deactivated, this will be taken into account by Google Tag Manager. For more information about Google Tag Manager, see: https://www.google.com/analytics/tag-manager/use-policy/

PayPal
The PayPal service is provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When paying by PayPal, you will be redirected to PayPal's website. For the use of this service, PayPal collects, stores and processes your personal data such as your name, address, telephone number and e-mail address as well as your credit card or bank account details. PayPal alone is responsible for the protection and handling of data collected by PayPal. In this respect, the PayPal Terms of Use apply, which you can access at www.paypal.com. For more information about how to handle your information and to hire third parties, please refer to the PayPal Privacy Policy available at https://www.paypal.com/webapps/mpp/ua/privacy-full

Stripe
We use Stripe for payments, analytics, and other business services.  Stripe may collect personal data including via cookies and similar technologies.  The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, loss prevention, authentication, and analytics related to the performance of its services. 

How does Stripe use personal data to improve its products and services?
Stripe collects data, including personal data, while providing services to its users.  Stripe uses some of the data it collects to improve its products and services, including by training the models it employs for fraud and loss prevention and to analyze the performance of Stripe’s products as permitted by applicable law and agreements.  
Personal data is required to train Stripe’s fraud and loss prevention models, including those employed by Stripe Radar and Stripe Identity.  These products rely in part on their ability to recognize certain characteristics that help determine whether a transaction is fraudulent or unlikely to complete.  For example, they compare Personal Data presented in a specific transaction to Personal Data collected in the past to identify when a fraudster is attempting to perpetrate fraud, including to impersonate a Stripe User or their End Customers.  
In addition to using Personal Data to train its fraud and loss prevention models, Stripe also uses transaction data to assess the functioning of its current products and proposed product improvements.  For instance, Stripe uses data collected by its java script library stripe.js to assess the performance of the checkout surfaces it provides to Business Users, and payment authorization data to evaluate ways to improve authorization rates for Business Users. Stripe uses Personal Data, such as IP address, to identify which pages and features a user interacted with during a checkout session, so that it can assess the effect different features have on the outcome of a checkout session.  
Stripe uses pseudonymized or aggregated transaction data for these purposes in certain circumstances.  When Stripe communicates the results of its product performance analytics to Business Users or for advertising purposes, it does so only in aggregated or de-identified form that does not permit third-parties outside of Stripe to associate that data with any particular End Customers.
You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

Advertising
We use cookies for marketing purposes to approach our users with advertising that is more tailored to their interests. We also use cookies to reduce the likelihood of ads playing and to measure the effectiveness of our advertising measures. This information may also be shared with third parties, such as ad networks. The legal basis for this is article 6, par. 1 a and f of the GDPR. The goals intended in data processing serve the legitimate interest of direct marketing. You are entitled to file an objection to the processing of your data for the purposes of such advertising at any time. We provide the following opt-out options for the respective services for this purpose. Alternatively, you can prevent cookies from being set in your browser- and App settings
We use Google AdSense, a service for integrating ads. Google AdSense uses cookies and web beacons (invisible graphics). These web beacons allow the analysis of information such as visitor traffic on the pages of this website. The information generated by cookies and web beacons via the use of this website (including user IP addresses) and the distribution of ad formats is transferred to a Google server in the USA and stored there. Google can pass this information on to their affiliates. However, Google will not conflate your IP address with your other stored data. Users can prevent cookies from being installed through the relevant setting in their browser software and App settings; however, please note that if this is done, not all functions of the website may be able to be used to their full extent. By using this website, the user agrees to the processing of their data collected by Google in the manner and for the purpose described above.

Google Ads and Conversion Tracking
To draw attention to our services, we place Google display ads and, within this context, use Google conversion tracking for the purposes of personalized online ads based on interests and location. The option to anonymize IP addresses is controlled through Google Tag Manager, via an internal setting that is not visible in the source of this page. This internal setting is set so that the anonymization required by privacy laws covers IP addresses.
Ads are displayed based on search requests on websites in the Google ad network. We have the ability to combine our ads with certain search terms. With the use of cookies, we are able to place ads based on previous user visits to our website.
When a user clicks on an ad, Google places a cookie on the user’s device. For more information on the cookie technology used, please see Google’s statements on website statistics and their data privacy policy.
With the use of this technology, Google, and we as their customer, receive the information that a user has clicked on an ad and was redirected to our websites. The information acquired this way is solely used for statistical analysis related to ad optimization. We do not receive any information that would allow us to personally identify a visitor. The statistics provided to us by Google include the total number of users who have clicked on one of our ads and, where applicable, whether they were redirected to a page on our website that has a conversation tag. These statistics allow us to track which search terms most often lead to our ads receiving clicks, and which ads lead to the user contacting us via the contact form. 
If you do not want this, you can prevent the storage of the cookies required for this technology by, for example, using the settings in your browser or your App. Should you do so, your visit will not be incorporated into user statistics.
You also have the option to choose the types of Google ads or deactivate interest-based ads on Google through ad settings. Alternatively, you can deactivate third-party use of cookies by using the Network Advertising Initiative’s opt-out tool.
However, we as MyFloresTourand Google will still receive statistical information about how many users visit this site and when. If you do not want to be included in these statistics either, you can prevent this by using additional programs for your browse.

If you do not want to receive any user-based advertising, you can disable the placement of ads by using Google’s ad settings.
For more information about how Google cookies are used, please refer to Google’s privacy statement.

Data transmission on MyFloresTour
Your data will not be transmitted to third parties as a general rule unless we are legally obligated to do so or the transfer of data is necessary for implementing the contractual relationship or you have given prior express consent to have your data transferred.
External service providers and affiliated companies, such as online payment vendors communication agents, will only receive your data to the extent necessary to process your data. In these cases, however, the extent of data transmitted is kept to the necessary minimum. If our service providers come into contact with your personally identifiable information, we will make sure that this complies with the regulations of data protection laws in the same way through the course of processing the order in accordance with article 28 of the GDPR. Please note the vendor’s respective data privacy policy as well. The respective vendor is responsible for the content of third-party services, although we review services for compliance with legal requirements to a reasonable extent.
We emphasize processing your data within the EU/EEA. However, it may happen that we use service providers who process data outside the EU/EEA. In these cases, we make sure that a reasonable level of data protection is established with the recipient before transmitting your personally identifiable information. This means that a level of data protection is reached through EU standard contracts or an adequacy decision that is comparable to the standard within the EU.

Data security on MyFloresTour
We have taken extensive technical and operational security precautions to protect your data from being accidentally or intentionally manipulated, lost, destroyed, or accessed by unauthorized persons. Our security measures are reviewed regularly and updated in keeping with technological advances.

Last updated August 2024

Copyright 2024 MyFloresTour | All rights reserved.