Privacy Policy(en)2019-03-21T12:31:32+01:00

jtb-logo

PRIVACY POLICY

PLEASE READ THIS PRIVACY POLICY CAREFULLY

1. OUR PRIVACY STATEMENT

The protection of your personal data is of great importance to Kuoni Travel Investments Ltd. (“Company”), and its affiliates (together, the “JTB Europe Group”) as well as to JTB Corporation and its affiliates (together, the “JTB Group”). This privacy policy (the “Privacy Policy”) therefore intends to inform you about how the Company, a Swiss company active in the provision of travel services, acting as data controller, and the JTB Europe Group, collect and processes your personal data that you submit or disclose to us. We also act as data processor when we process your personal data received or obtained through third-parties. We process this personal data in accordance with the applicable EU and Member State regulations on data protection, in particular, the General Data Protection Regulation No 2016/679 (the “GDPR”).
We encourage you to read this Privacy Policy carefully. If you do not wish your personal data to be used by us as set out in this Privacy Policy, please do not provide us with your personal data. Please note that in such a case, we may not be able to provide you with our services, you may not have access to and/or be able to use some features of the Website, and your customer experience may be impacted.
If you have any queries or comments relating to this Privacy Policy, please contact dpo@jtb-europe.com.

2. HOW DO WE USE YOUR PERSONAL DATA?

We will always process your personal data based on one of the legal basis provided for in the GDPR (Articles 6 and 7). In addition, we will always process your sensitive personal data, for example, concerning your trade union membership, religious views, or health condition, in accordance with the special rules provided for in the GDPR (Articles 9 and 10).
We may collect and process your personal data for the purposes set out below and disclose your personal data to the JTB Europe Group affiliates and JTB Group affiliates for business purposes and also to companies and our service providers who act as ‘data processor’ on our behalf. These purposes include:
a. Fulfilling the contract with you and legal obligations (Articles 6(1)(b) and (c) of the General Data Protection Regulation (“GDPR”): In order for you to travel abroad, it may be mandatory as required by government authorities at the point of departure and/or destination to disclose and process your personal data for immigration, border control and/or any other purposes. Also we need to provide airlines/accommodation providers with your name, passport number, contact details, and other related information in accordance with their terms and conditions. If you do not provide us with this personal data, we might not be able to offer our services to you.
b. Fulfilling your and our legitimate interests (Article 6(1)(f) of the GDPR): Where it is in both your and our benefit that we further process your personal data as part of our business administration, maintaining service quality, customer care, business management, risk assessment/management, security, and operation purposes.
c. Consent: For marketing purposes and other similar data processes that may require your authorization for their processing (Article 6(1)(a) of the GDPR). We will usually inform you before collecting your data if we intend to use your data for such purposes or if we intend to disclose your personal data to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we used to collect your data.
d. Explicit consent (Article 9(2)(a) of the GDPR): Information which is considered to be ‘sensitive personal data’ under the GDPR. This personal data might include information necessary to arrange bookings and travel plans, including your allergies, disabilities, and other relevant health information. We collect it to provide you with our services, cater to your needs or act in your interest, and we are only prepared to accept sensitive personal data on the condition that we have your positive consent.
We will process your data for these specified, explicit and legitimate purposes, and will not further process the data in a way that is incompatible with these purposes. If we intend to process personal data originally collected for one purpose in order to attain other objectives or purposes, we will ensure that