1. Collection of information
2. How we use your personal information and the basis on which we use it
3. Your rights over your personal information
5. Sharing your personal information
6. Information Security and Storage
7. International Data Transfer
8. Changes to the policy
9. Contact us
- Collection of information
We will collect personal information about you from a variety of sources, including information we collect from you directly (e.g. when you provide us information for booking purposes), and information we collect from you from other sources, described below.
Please note that we may be required by law to collect certain personal information about you, or as a consequence of any contractual relationship we have with you. Failure to provide this information may prevent or delay the fulfillment of these obligations. We will inform you at the time your information is collected whether certain data is compulsory and the consequences of the failure to provide such data.
- Information you give to us. During all bookings we collect and store all the personal information that you provide us via the Internet and/or telephone for booking purposes, including customer name, mobile number, e-mail address, passport data, payment information and other data required for making purchases. When booking flights on someone's behalf please ensure you have that person's permission to provide us with their personal information.
- Information we may collect about you. We may also obtain information automatically about your use of our services as described in our cookies policy.
- Information we receive about you from third parties. We work closely with our affiliated entities, service providers and business partners and we may also receive information about you from them.
- How we use your information and the basis on which we use it
We use information collected through our services to:
- Provide you with and personalise our Services, for example to send booking confirmations and notifications of flight cancellations and delays;
- deal with enquires and complaints;
- keep the Services secure and prevent fraud;
- contact you with marketing and offers and information relating to our other products and services which may be of interest to you (unless you have opted out of marketing, or we are otherwise prevented by law from doing so);
- inform about current promotions;
- send you Service related communications, including announcements and administrative messages;
- comply with legal obligations to which we are subject and cooperate with regulators and law enforcement bodies
Please note that your card details are only needed to pay for the Services that you have selected through our Website. This process is completely automated and does not require an operator to participate.
We must have a legal basis to process your personal information. In most cases the legal basis will be one of the following:
- To fulfill our contractual obligations to you, for example to provide you with the Services, and to contact you with messages, notifications or alerts that are necessary in order to deliver our Services such as booking confirmation emails. Where you have created an account with us, we will use your information to maintain and administer it to ensure that it is kept up-to-date and accessible.
- To comply with our legal obligations, or for compliance, regulatory and auditing purposes. For example, we may retain information where we are required by law, or if we are compelled to do so by a court order or regulatory body.
- To meet our legitimate interests, for example to understand how you use our Services and to enable us to derive knowledge from that and to enable us to develop new services. This includes understanding and evaluating how, when and why people are using the website, monitoring the numbers of users who make bookings with us and analyzing what aspects of our Services are being used. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms. For more information about the balancing test we carry out to process your personal information to meet our legitimate interests, please contact us at the details below.
- Your rights over your personal information
You have certain rights regarding your personal information, subject to local law. These include the following rights to:
- Access your personal information
- Rectify the information we hold about you
- Erase your personal information
- Restrict our use of your personal information
- Object to our use of your personal information
- Receive your personal information in a useable electronic format and transmit it to a third party (right to data portability)
- Lodge a complaint with your local data protection authority.
If you would like to discuss or exercise such rights, please contact us at the details below.
We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.
We will contact you if we need additional information from you in order to honour your requests.
If you no longer wish to receive non-transactional communications from us, please click the "unsubscribe" link in any email from us, update your marketing preferences in your account, or contact us at the address below.
- Sharing your personal information
We do not rent, sell or share personal information about you with other people or non-affiliated companies except to provide or improve the products or services you have requested, when we have your permission, or under the following circumstances:
- with our Service Providers, who we engage to help us provide the Service and our services to you, including payment processing, fraud prevention, business analysis, marketing research and customer assistance.
- when required by law to comply with requirements of law enforcement authorities, e.g. police, or with judicial proceedings, court orders or other legal processes as well as for evidential purposes or enforcement of our legal rights;
- when we have a good-faith belief that such disclosure is necessary to investigate, prevent or take measures with regard to illegal or allegedly illegal activity of third parties;
- for protection and assertion of the rights, property and safety of OneTwoTrip, our customers or third parties; and
- to execute corporate transactions, such as mergers, consolidations or asset sales.
Because we operate as a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the Services). See the section on "International data transfer" below for more information.
We may also generate, use and disclose aggregated and/or anonymized information and statistics about the Services for marketing and strategic purposes and share these with third parties. However, no visitor to our Services will be individually identifiable from these aggregated and/or anonymised information and statistics.
- Information security and storage
OneTwoTrip takes the security and confidentiality of your personal information very seriously. For this reason, we have implemented a combination of corresponding administrative and technical solutions, security practices and processes to maintain the confidentiality of your personal data that you provide us:
- all personal information is stored in an encrypted form;
- we use encryption to transfer your personal data between our servers and your browser;
- we monitor access activity, changing passwords regularly;
- we use antivirus software and intrusion detection systems to prevent unauthorised access to personal data.
We implement technical and organizational measures to ensure a level of security appropriate to the risk to the personal information we process. These measures are aimed at ensuring the on-going integrity and confidentiality of personal information. We evaluate these measures on a regular basis to ensure the security of the processing. We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:
- Maintain business records for analysis and/or audit purposes
- Comply with record retention requirements under the law
- Defend or bring any existing or potential legal claims
- Deal with any complaints regarding the services
We will delete your personal information when it is no longer required for these purposes. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.]
- International Data Transfers
Your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information by the European Commission.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to ensure that your data is adequately protected. For more information on the appropriate safeguards in place, please contact us at the details below.
- Contact Us
OneTwoTrip Travel Agency LLP is the controller responsible for the personal information we collect and process.
Our Data Protection Officer can be contacted at: firstname.lastname@example.org FAO Data Protection Officer
Last Updated: 25 May 2018
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to the data protection authority of the country in which you are a resident using their website.