Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases. We are registered with the ICO under the Data Protection Register.
If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Under the GDPR your rights are as follows. You can read more about your rights in details here:
You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data. We handle subject access requests in accordance with the GDPR.
Personal information is information that relates to an identifiable natural person. An identifiable natural person is someone that can be identified both directly and indirectly by their name, location data, identification number or by factors specific to the social, cultural, physiological, genetic, mental or economic identity of the natural person. Personal Information does not include any information that has been anonymised so that it can no longer be used to identify a natural person.
When you use our travel services, we do collect some personal information from you and any devices you use. Personal identifying information can include your name, telephone numbers, address, email addresses and financial information such as card details (in connection with online transactions). Provision of any other personal information is voluntary on your account, but it may become necessary in order to use some of our services, such as when you complete a transaction online.