GDPR POLICY

Airbeas Travel is devoted to safeguarding your personal information and respects your right to privacy. In accordance with this Privacy Statement, we verify and secure your personal information whenever you visit our website or call us. It also contains information about your privacy rights and how UK law protects you under the GDPR policy.

This policy is organised in layers, and you may quickly reroute to the particular regions listed below. Please refer to the Glossary at the end of the document for a clearer explanation of some of the words used in this policy.

• Important information about who we are
• The ways with which we collect your data
• How is your personal data collected?
• How we use your personal data
• Disclosures of your personal data
• International transfers
• Data security
• Data retention
• Your legal rights
• Glossary

1. IMPORTANT INFORMATION AND WHO WE ARE

PURPOSE OF THIS PRIVACY NOTICE

This privacy statement informs you of how we gather and use the personal information you voluntarily supply on our website, such as when you subscribe to our newsletter or make a reservation. It also applies to the information gathered when you call us. Only clients who are at least 16 years old are eligible to use this website and our services. Except for the data required to complete a booking made by an adult, we knowingly do not collect data on children. You must read this privacy notice and any other fair processing notices that may be provided at the time we acquire personal information about you. By doing this, we can guarantee that you are aware of how we utilise the information we gather. The other notices are completed by this privacy notice, which is not meant to revoke them.

CONTROLLER

All personal information that you enter on our website is controlled by airbeas travel Holidays Private Ltd, to which we, "us," and "our" all refer. This company's registration number in England and Wales is 07445398. The data controller and owner of this website is the business stated here in the UK. If you have any inquiries concerning this privacy statement or wish to exercise any of your legal rights, please get in touch with us using the information provided below:

CONTACT DETAILS

Full Name of Legal Entity: Airbeas Travel Ltd

Email address: info@airbeastravel.co.uk

Postal address: 128, City Rd, London EC1V 2NX, United Kingdom

Telephone number: 020 4515 8077

If you have any concerns about how we use your personal information, you may file a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority in charge of handling data-related concerns. (www.ico.org.uk) However, we'd want to take the opportunity to discuss and address any worries before you contact the ICO. So please get in touch with us first if you have any problems.

CHANGES TO THE PRIVACY POLICY & YOUR RESPONSIBILITY TO INFORM US OF ANY CHANGES

Make sure you are familiar with the most recent version of this privacy policy by periodically reviewing it. For us to fulfil your bookings and provide our service, it is essential that the personal information we possess about you is correct and up-to-date. Before finalising your reservation, kindly let us know if your personal information changes.

THIRD-PARTY LINKS

This website contains certain apps, plug-ins, and links to other websites. Third-party websites are able to gather or share information about you when you click on any of these links or enable the associated websites. These third-party websites are not within the jurisdiction of airbeas travel, thus we are not liable for their privacy policies. We suggest you to read the privacy notice again when you come back to our website after leaving.

DATA WE COLLECT ABOUT OUR CUSTOMERS

Any information about an individual that we, as a service provider, may use to identify a person is considered personal information. If the identity has been concealed, it is not included here. Data that is anonymous is this. We gather, utilise, keep, and transfer the following categories of personal information about you:

• Identity Data contains information such a username, first and last name, passport number, marital status, job title, birthdate, and gender. We might need a copy of your passport in order to obtain all of this information.
• Your billing address, delivery address, email address, and phone number are among the information in Contact Data.
• Details in financial data include bank account and credit card information. Your financial information is not given to us; payments are conducted through WorldPay.
• All Transaction Data consists of information about payments as well as other specifics about the services that were acquired from us.
• The technical data on the device you used to access this website comprises your IP address, login information, the kind and version of your browser, your location, time zone setting, and other settings.
• Username, password, interests, preferences, feedback, and survey results are all examples of profile data.
• Usage Data contains details on the products and services you use on our website.
• Information about your preferences for getting marketing and for communicating with others is contained in marketing and communications data.

We collect, use and share Aggregated Data such as statistical or demographic data for marketing and other purposes. Aggregated Data is usually derived out from personal data but is not considered personal data. This is because under the law this data does not reveal your identity. For example, we may know the details regarding your Usage Data and from that, we can calculate the percentage of users accessing a specific website feature. But in case we combine Aggregated Data and personal data and identify you then it is treated as the combined data as personal data which will be used in this privacy notice.

We gather the information required under Special Categories of Personal Data in order to provide you with the services you purchase from us. These services include information on your health, dietary needs, and any requirements for specialised medical care (e.g. oxygen or wheelchairs). Additionally, in order to travel with a medical condition, including pregnancy that has lasted longer than 28 weeks, we may need a note from your doctor. Other than that, we don't gather any data on your racial or ethnic background, religion, sexual preference, or other personal characteristics.

IF YOU FAIL TO PROVIDE US WITH PERSONAL DATA

If you refuse to disclose personal information that is necessary for us to provide you with the bookings you have requested or that is required by law for us to collect, we may not be held liable for our failure to do so. However, if this is the case and we need to cancel your request at that time, we will let you know.

3. HOW IS PERSONAL DATA COLLECTED?

different methods are used to collect data from you. This includes:

• Direct interactions: You provide us with your Name, Contact and Financial Data while you fill in forms with us by post, phone, email or otherwise including:
• Services booked through us;
• Account creation on the website;
• Sign up or subscribe with us;
• Request marketing emailers to be sent; or
• Give us some feedback

We divulge to third-party vendors personal information regarding your travel plans and needs. To coordinate with flights booked directly with the airline, this is necessary.

• We automatically gather Technical Data about your browsing device, activities on the site, and usage trends whenever you interact with our website. You can learn more about how we gather this data in our Cookies Policy. We do so using cookies and other similar technologies. If you visit other websites that use our cookies, we receive the Data.
• unbiased or widely accessible sources. As stated below, airbeas travel may obtain your personal information from third parties.
• Technical Data:

  (a) analytics [such as Google];

  (b) advertising networks; and

  (c) search information providers

• Information on contacts, finances, and transactions collected by payment and delivery providers like WorldPay

We request personal information and other travel preferences when you make a reservation with us on someone else's behalf. Prior to giving us their information and preferences, you should get their permission. They can get in touch with us directly if they wish to change or remove their information; otherwise, it will only be available through your account.

4. HOW WE USE YOUR PERSONAL DATA

In order to process your personal data, we must have a legal basis for doing so, per the law. We only make use of your personal information where it is permitted by law. In the following situations, we utilise your personal data::

Legitimate Interest

We have a genuine interest in conducting business and managing our company so that we can provide you with the greatest service and a secure experience. Before processing your personal data, we consider any potential effects on you and your rights. We take precautions to ensure that we do not utilise your personal information for purposes at odds with your interests (unless we have your consent). By contacting us, you may learn more about how we weigh our legitimate interests against any potential effects on you with respect to particular activities.

PERFORMANCE OF CONTRACT

This refers to the need to handle your data in order to carry out and provide the service to which you are a party or to take action to fulfil your request prior to such a contract. Processing your personal data in order to comply with a legal or regulatory requirement to which we are subject is intended.

With the exception of sending you emails with direct commercial messages from third parties, we do not use permission as our only legal justification for processing your personal data. If you decide that you do not want to receive it, you may revoke your marketing permission at any time by getting in touch with us using the information provided.

PURPOSE TO USE YOUR PERSONAL DATA

The methods we intend to utilise your personal information are described below. We have outlined our legitimate interests for your information under the same heading. Depending on the intended use of the data, we treat your personal information on more than just legal bases.

Purpose/Activity	Type of data	Lawful basis for data processing including legitimate interest
New customer registration	(a) Identity (b) Contact	Complete the requested services with you
complete your travel booking including: Managing payments, fees and charges Providing you with information such as status updates about the service you have booked through us Sharing booking information with suppliers so that they can fulfil your booking Collecting any payments that you owe us	(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications	(a) Complete the requested services (b) Necessary for legitimate interests or to recover due payments
Customer relationship management including: (a) Notify regarding any changes in terms or privacy policy (b) Asking you to write a service review	(a) Identity (b) Contact (c) Profile (d) Marketing and Communications	(a) Complete the requested services (b) Necessary to comply with but under a legal obligation (c) Necessary under legitimate interests to keep our data updated and insights on how customers use our services.
To protect our business or the website (which includes troubleshooting, data analysis, testing, system maintenance, support, data hosting)	(a) Identity (b) Contact (c) Technical	(a) Necessary for our legitimate interests to run our business, network security, fraud prevention (b) Necessary to comply with under a legal obligation
Deliver website content and advertisements to customers and to measure or understand the effectiveness of the served advertisement	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical	Necessary for legitimate interests to know how the customers use our services, to grow the business and to enhance our marketing strategy
Use data analytics to improve our website, services, marketing, customer relationships	(a) Technical (b) Usage	Necessary for legitimate interests to define types of customers, to keep the website updated and relevant, business development
Suggestions and recommendations about services of your interest	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile	Necessary for our legitimate interests to develop our services and business growth

MARKETING

Regarding the use of your personal information, notably for marketing and advertising, we provide you options. You are free to choose the marketing materials you want to receive from us or to opt out of getting them.

PROMOTIONAL OFFERS FROM US

Your Name, Contact, Usage, and Profile Data are used by us. Using this, you may decide what you might desire, need, or be interested in. We make decisions about the services and offers that may be relevant for you based on this information. We send marketing emails to the information you provided when you requested information from us or information about the booked travel services. You have not chosen to stop receiving our promotional emails in this situation.

THIRD-PARTY MARKETING

We will only disclose your personal information for any reason with any firm outside the airbeas travel group with your opt-in consent.

OPTING OUT

By going onto the website and changing your marketing settings, you can at any moment request that we or the third party cease sending you emails. You may also contact us using the information given to accomplish this.

Your personal information that we obtain for making reservations or engaging in other transactions will not be affected if you choose not to receive marketing communications.

CHANGE OF PURPOSE

Unless we reasonably believe that we need to use your personal data for another reason that is consistent with the original purpose, we only use it for the purposes for which we obtained it. Please get in touch with us if you'd want further information about the new purpose's procedure.

In case we use your personal data for an unrelated purpose, we will notify you.

5. DISCLOSURES OF YOUR PERSONAL DATA

We might divulge your information to those parties for the aforementioned goals.

• Internal Third Parties: Businesses inside the Airbeas Travel Group that serve as joint controllers, offer IT and system management services, or carry out leadership reporting.
• External Third Parties:
• Enterprises that provide travel services, such as airlines, hotel chains, and similar companies, will fulfil your booking request.
• Data processors or service providers with offices in the UK or the European Economic Area (EEA),
• Specific third parties that are listed in the table in [paragraph 4]
• Third parties to whom we transfer, sell, or merge our assets or our company. We could combine with or buy other companies, in which case we'll provide their staff access to your information.

All third parties connected to us respect the confidentiality of your personal information and handle it in accordance with the law or as specified in this Policy. Your personal information may only be used by third parties for the purposes listed in our instructions.

6. INTERNATIONAL TRANSFERS

Within the airbeas travel Group, we exchange your personal information. This covers sending your information beyond the EEA.

We ensure that all of our group companies handling your personal data adhere to the same standards of security and privacy. As "binding corporate regulations," they are known. Visit European Commission: Binding Corporate Rules for further details.

The hotels and airlines we use are external third parties with locations outside the EEA. Your personal information may be handled by them and transferred beyond the EEA. If we send your personal information outside of the EEA, we guarantee that the same level of protection is provided and that the following security measures are in place:

• Personal data transmission to nations that the European Commission considers to have a sufficient degree of protection for personal data.
• We may utilise data that has been authorised for use by the European Commission if we engage service providers. You will have the same protection under this as there is in Europe. See European Commission: Model contracts for the transfer of personal data to third countries for any more information.
• If we utilise US service providers, we send data to them if they are Privacy Shield compliant. In accordance with this, they offer comparable protection to personal data transferred between Europe and the US. See European Commission: EU-US Privacy Shield for further details.

In certain situations, we think the transfer is essential to upholding our end of the bargain with you. For instance, we could have booked a reservation for you with a vendor outside the EEA with your permission, which we would advise you of. If you would like more information on the precise method we employ for transferring your personal data outside of the EEA, get in touch with us.

7. DATA SECURITY

We have sufficient security measures in place to guard against unauthorised access to or unintentional use of your personal information. As a result, we restrict access to your personal information to those of our employees and partners who have a need to know for the purposes of conducting business with us. They follow our instructions when using your personal information, and this Policy places an obligation of secrecy on them. We have put in place mechanisms to handle suspected data breaches, and we'll let you know if we see anything suspicious.

8. DATA RETENTION

We save your information for as long as is required. This is done in order to provide the services you requested, including any requisites for reporting, accounting, or law. The possible risk of harm from unauthorised use is taken into account as the determining factor for disclosure of your personal data in order to determine the precise retention period for personal data. In order to give you the best service when you make another reservation with us, we use the information gathered from our prior transactions. The law requires us to preserve your basic information for six years. You no longer qualify as customers after that, and this is just done for tax reasons. We will remove your information if you don't book with us for more than six years.

You have the right to request that we remove your data under specific conditions. Your personal information could occasionally be anonymized and used for statistics or research purposes. In this situation, we make use of this data without further informing you.

9. YOUR LEGAL RIGHTS

You may have rights relating your personal data under certain conditions under data protection regulations. This allows you to:

Request access to your personal information, sometimes called a "data subject access request." This allows you to get a copy of the personal information we have on you and determine whether we are processing it lawfully.

You can request that we update your personal information. You have the right to request the correction of any incomplete or incorrect data under this. After ensuring that the new data is accurate, we will carry out the necessary procedure.

Ask to have your personal info deleted. You can ask us to cease processing it if you do this for no good reason.

However, please take note that there may be circumstances in which we are unable to abide by your request to delete for legal reasons; in such cases, we will notify you at the time of request.

We intend to treat your personal data based on a legitimate interest and the specific circumstances of your objection. You must have a basis for believing that this might affect either your freedom or a basic right. If you have objections to the use of direct marketing, you may also have the right to object. In situations like this, we might be able to show that we have good reason to handle your information.

You can ask that the processing of your data be limited. You have the right to request that we stop processing your personal data in the following situations: (a) while we determine the accuracy of the data; (b) while we investigate whether the use of the data is lawful; (c) while we no longer need the data in order to exercise or defend legal claims; or (d) while you have objected to the use of your data but we must first determine whether there are legal justifications for doing so.

You always have the right to end your consent for the processing of your personal data. This won't, however, alter the legality of any processing done prior to your withdrawal. However, your withdrawal could prevent us from being able to offer you some services. When you withdraw your consent, we will let you know about it. Please get in touch with us if you still want to exercise any of the aforementioned rights.

WHAT WE MAY NEED FROM YOU

In order to verify your identity and establish that you have the right to access your personal data, we ask you for particular information (or any of your rights). For us, this is a security step to ensure that personal information is not revealed to anybody who does not have a right to it. In order to expedite the response and procedure, we will get in touch with you and obtain further information regarding your request.

TIME LIMIT TO RESPOND

Within one month from the time the request was made, we respond to all valid inquiries. However, if your request is complicated or you have made several requests, it can take more than a month. In this scenario, we'll keep you informed.