THE TYPE OF PERSONAL INFORMATION WE COLLECT We currently collect and process the following information:
Personal identifiers, contacts and characteristics (for example, name and contact details) Supplied postal and email addresses. Contact telephone numbers. Information relevant to your holiday booking
HOW WE GET THE PERSONAL INFORMATION AND WHY WE HAVE IT Most of the personal information we process is provided to us directly by you to provide you with a service. We also receive personal information indirectly, from third-party sites where we advertise.
We use the information that you have given us to manage your holiday booking and send you necessary information.
We will not share your data with any third party, unless instructed to do so in writing by you.
Under the UK General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting email@example.com
(b) We have a contractual obligation.
(c) We have a legal obligation.
HOW WE STORE YOUR PERSONAL INFORMATION Your information is securely stored in UK based Microsoft cloud servers.
We keep your data for a period not exceeding 3 years. We will then dispose your information by removing it from our servers. You may also request your data is deleted sooner if you wish.
YOUR DATA PROTECTION RIGHTS Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at firstname.lastname@example.org if you wish to make a request.
HOW TO COMPLAIN If you have any concerns about our use of your personal information, you can make a complaint to us at email@example.com.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF