Introduction and background
The purpose of this policy is to outline how Osprey Travel Ltd has established measures to protect your privacy and information rights.
Your rights
We recognise that you have rights as a ‘data subject’, and that we have an obligation to uphold these.
This privacy notice aims to outline how we maintain these rights. In particular, it outlines:
- How we collect and process your information
- Why we do this
- How you can exercise your rights;
- Who to contact in the event you’re unhappy with our performance.
Depending on why we have collected your information, your information rights could include:
| Right | Explanation |
| Right to be informed | This encompasses the obligation for us to be transparent in how we collect and use your personal data. |
| Right of access | You have the right to access your personal data and supplementary information. |
| Right to rectification | If the information we hold on you is inaccurate or incomplete, you can request we correct this. |
| Right to erasure | You can request we delete or remove personal data where there is no compelling reason us to continue processing |
| Right to restrict processing | You have the right to request we cease processing your data, if:
· You consider it inaccurate or incomplete; · Where you object to processing and we are considering whether we still have a legitimate interest to process it. · Where we don’t need the data for the original reason we collected it, but may need it to support a legal claim |
| Right to data portability | · Where you have consented to our processing your data, or where the processing is necessary for us to deliver a contract, you can request a copy of that data be provided to a third party in electronic form. |
| Right to object | You have the right to object to our processing under certain circumstances. For example, you can object to:
· direct marketing (including profiling); and · processing for purposes of scientific/historical research and statistics |
| Rights relating to automated decision making including profiling | · Where we apply automated decision making, we must
· give you information about the processing; · introduce simple ways for you to request human intervention or challenge a decision; · carry out regular checks to make sure that our systems are working as intended
Information related to automated decision making is contained later in this notice. |
| Information we collect | Why we collect this | How we process this |
| We collect your contact details in order to process your enquiry or booking and any information needed to make your booking eg number in your party | We collect this information in order to provide your holiday through contractual obligation. | We process your contact details to keep in touch with you from the time of your initial enquiry to completion of our contract. If you opt in to our newsletters, we will send occasional mailings (1-2/year typically) |
| We collect your payment details
|
We collect this to complete our contract. | We share them with an authorised provider as per PCIDSS. |
| We collect your credit card details and hold them securely and anonymously.
|
We hold this information to fulfil our contractual obligations to the villa owners.
|
We do not process this information unless we need to claim against your security deposit. We will always speak to you about this first.
If no claim is made, we shred the information on completion of our contract.
|
Transfer of data
Only the essential information is given to your villa manager in relation to your booking in order to fulfill our contractual obligation. Your name, place of residence and number in party are advised to the villa manager.
We will not give your personal information out to any other third party. We will take all steps necessary to ensure this data which may be passed outside of the EU is kept private.
Retention of data
Osprey Travel Ltd retains information for seven (7) years from our point of last contact. We hold this information to support our legal and regulatory requirements. If you object to this retention, please contact us – details provided in the ‘Contact’ section.
Securing your information
Osprey Travel Ltd applies technical and organisational security measures to protect your information.
Contact details
We recognise that you may have questions on how we process and/or store your data, or may want to change either the data we hold on you or how we communicate with you in the future.
If you have given consent for processing, you are free to withdraw that consent. To let us know this is the case email [email protected].
If you have any questions in respect of this notice, or would like to exercise your rights as a data subject (for example, to correct data or to exercise your right to access):
- Osprey Travel Ltd as data controller, can be contacted as follows: [email protected].
If you are unhappy that we have responded to your query adequately, of if you have a further complaint, The Information Commissioner’s Office can be contacted.