What is considered personal information and why would it be collected?
When we refer to personal data, we mean any information which relates to an identified or identifiable individual.
In order to respond to an enquiry, manage your booking, or send you promotional material, we need to process personal data we obtain from you. This personal data may be obtained from you directly or through any travel agency with whom you make your booking or booking enquiry.
To book a tour, the personal data we need to collect and process will include:
- Full names of all people travelling
- Contact details of the person making the booking, these details include: Telephone number, postal address and e-mail
- Passport information and travel insurance details of all people travelling
- Dietary information where applicable
- Emergency contact (name and telephone number) for all people travelling
- Information in respect of any medical condition, disability or reduced mobility which may affect you or anyone travelling with you – this comes within special categories of personal data (see below)
- For a general enquiry, the personal information we will need to process is likely to include only the name and email address of the person making the enquiry.
For a booking or booking enquiry, we will process your personal data (other than any data which comes within special categories of personal data – see below) on the basis that this is necessary process the booking and operate your tour. We may also need to do so to comply with a legal obligation to which we are subject or in order to protect your vital interests (for example, in an emergency situation).
If you wish to receive brochures or other promotional material from us, we will need your name and the contact details applicable to the form of communication you have consented to.
For example, if you wish to receive information by e-mail, we will need your e-mail address.
What are special categories of personal data?
Personal data which concerns your health or which reveals your racial or ethnic origin or your sexual orientation are special categories of personal data. Other information also comes within special categories but this is unlikely to be relevant to the booking and provision of travel arrangements.
Generally speaking, the processing of special categories of personal data requires your explicit consent.
Accordingly, information concerning any disability, medical condition or restricted mobility which may affect your travel arrangements (and related requirements) as well as dietary restrictions which may disclose your religious beliefs are special categories of personal data. We will ask for your consent to our processing this information at the time you make your booking or your booking enquiry.
With whom do we share your personal information?
When you make a booking, appropriate personal data will be passed on to the relevant suppliers of your chosen arrangements together with any other third party who needs this information so that we can operate your tour.
Suppliers and other third parties are likely to include the following, depending on the arrangements booked:
- Local transport companies
- Hotels and the providers of other forms of accommodation
- Local tour guides
- Tour operators
- Travel insurance providers
The information may also be provided to government / public authorities such as customs or immigration if required by them, or as required by law.
We may also make personal data available to other companies who provide services on our behalf, such as mailing brochures and marketing material.
We only provide third parties with the personal data they require in order to deliver their services. Other than in relation to government / public authorities (over whom we have no control), we will take appropriate steps which are intended to ensure that anyone to whom we pass your personal data for any reason agrees to keep it secure, only uses it for the purposes of providing their services and does not collect any personal data from you in the course performing their services.
Where will we process your personal data?
Your personal data will be processed within the UK and Colombia. In Colombia, we will transfer only the necessary personal data required by any of the third parties mentioned above in order to provide the services included in the tour. We will require these third parties to process and maintain appropriate security to protect your personal data.
How is your personal data protected?
We take appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data, which is appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures.
Can we use your personal data to send you information about our holidays or other services in the future?
We will only retain and use your personal data for marketing purposes where you have specifically consented to this or we are permitted to do in accordance with data protection laws (including as set out below).
We may send you e-mail marketing where we comply with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). PECR permits us to e-mail you information about the travel services we offer where you have previously provided us with your e-mail address in the course of entering into a contract with us for holiday / travel arrangements or negotiations for such arrangements and we wish to e-mail you marketing material about our similar services or products. You will of course be given the opportunity to opt out of receiving such e-mail marketing communications when you first provide us with your e-mail address and whenever we send you any e-mail marketing.
Where you have previously requested or agreed to receive information about our travel services from us by post, we may continue to send you such information in the same way until you ask us not to (which you can do by telephone, e-mail or post). Everything we send you will tell you what you should do if you no longer wish to hear from us. We will send you this information as this is necessary for the purposes of our legitimate interests in communicating with you unless it is or becomes clear that our interests are overridden by your interests or fundamental rights and freedoms in which case we will cease communicating with you.
You may provide your consent to receiving marketing information from us by opting to receive marketing material either on-line or by telephone. You may also choose in what ways you are happy to receive communications from us. You may, for example, be happy to receive information and offers by post and e-mail but not by telephone.
Can you withdraw your consent to our processing your personal data?
Yes, you can withdraw your consent to receiving marketing material or other communications from us, either generally or in any particular way, at any time by e-mailing us at firstname.lastname@example.org.
How can you find out what information we are holding about you?
You are entitled to ask us by e-mail, letter or telephone what personal data of yours is being held or processed, for what purpose and to whom it may be or has been disclosed. No fee will be charged for responding to this request unless it is obviously unfounded or excessive or we have previously provided the same information.
We promise to respond to your request without delay and in any event within 1 month unless the request is complex or you have made numerous requests in which case we may be able to extend our response time by a further 2 months.
What should you do if the personal data we are holding is inaccurate, out of date or incomplete?
If you believe this is the case, please tell us by e-mail as soon as possible to rectify the problem.
How long can we retain and process your personal data?
We will not process your personal data in a form which enables you to be personally identified for any longer than is necessary in order to fulfill the purpose for which it was originally collected or for any other legitimate business purpose.
Where your personal data has been provided for the purpose of the holiday arrangements or other services you have contracted, we are entitled to retain this data for a period of 6 years after those arrangements have been completed. In certain limited circumstances, we may be able to retain it for a longer period.
If you have consented to receiving marketing communications from us, we may continue to use your personal data for this purpose until you withdraw your consent or otherwise for as long as we reasonably consider your consent remains valid and effective.
Can you ask us to delete your personal data?
Yes, you can ask us to erase your personal data in certain circumstances, for example where you have withdrawn your consent to further marketing material where the data in question has only been processed for this purpose. However, this is not always the case. Please see the previous paragraph for further information on the period of time we may retain personal data.
Not, at the moment we are not using cookies in our website.
If you have any complaint about the way we process your personal data, please send us an email to email@example.com. We will investigate and respond to you as soon as we can. If you remain dissatisfied, you may complain to the Information Commissioner’s Office. For further details, see www.ico.org.uk.
Do you have any question?