Privacy Policy
Pure Flights respects your privacy and processes personal data strictly in accordance with the GDPR (General Data Protection Regulation) and Dutch implementation law. This policy describes which data we collect, why, and what rights you have.
Laatst bijgewerkt · May 2025
Data Controller
Pure Group B.V., trading as Pure Flights, established in Amsterdam, is the data controller responsible for the processing of your personal data as described in this policy.
Contact: info@pure-concierge.com · +31 6 20 87 83 16
What data we collect
We collect only the data strictly necessary to handle your request and booking:
- Name and salutation
- Phone number and email address
- Address details (when relevant for the booking)
- Travel and booking preferences
- Passport or ID details (only when required for visa, ticketing or security, always stored encrypted)
- Payment details (processed via secure payment providers, we do not store these ourselves)
- Communication history (WhatsApp, email, phone calls when recorded)
Purpose of processing
We process your data exclusively for:
- Handling your booking and the related travel arrangements
- Communication about your trip (confirmations, changes, last-minute updates)
- Processing payments
- Meeting legal obligations (administration, fiscal retention requirements)
- Improving our services, exclusively on the basis of anonymised data
Legal basis
The processing of your data takes place on the basis of:
- Performance of the contract we entered into with you
- Your explicit consent, where applicable
- Our legitimate interests (e.g. fraud prevention, quality assurance)
- Legal obligations (e.g. seven-year fiscal retention requirement)
Sharing with third parties
We share your data only with parties strictly necessary to fulfil your trip: airlines, hotels, charter operators, chauffeurs and comparable partners. All these parties are contractually bound by confidentiality and may not use your data for any other purpose.
We never sell your data to third parties. We do not share your data with marketing agencies, data brokers or comparable parties.
Retention periods
Personal data is not kept longer than strictly necessary:
- Booking details: maximum 7 years (fiscal retention requirement)
- Communication: maximum 2 years after last contact
- Marketing data: until you unsubscribe
- Passport / ID details: deleted immediately after the trip, unless required by law to be retained
Cookies
Our website uses cookies minimally. We only use functional cookies that are necessary for the site to operate (such as remembering your language preference). We do not use tracking cookies, advertising cookies or third-party analytics without your consent.
Your rights
Under the GDPR you have the following rights:
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure of your data (the 'right to be forgotten')
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw your consent at any time
You can submit a request via info@pure-concierge.com. We respond within four weeks. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Security
We have taken appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. All communication runs over encrypted connections (TLS / HTTPS) and sensitive data is stored encrypted.
Changes
This privacy policy may be updated periodically to reflect changes in legislation or in our services. The most current version is always available on this page.
Contact
Do you have questions about this privacy policy or the way we handle your data? Get in touch directly: