Updated: 24-May-2018 Introduction
Welcome to the privacy centre of Ski Armadillo, where you can find details on how we sensitively handle the personal information you provide when you interact with us via the website, sales and customer service team or in other ways. We appreciate there is a lot of information contained here, but we wish you to be fully informed of your rights and hope that we can answer any questions you have. Ski Armadillo is a data controller. We are a company registered in England (no. 06944745) registered address; Pavilion View, 19 New Road, Brighton, East Sussex, BN1 1EY
As Data Controller we must:
- use your personal information fairly and lawfully
- only use your personal information for the purposes it has been provided for, unless required to by law
- only collect as much personal information as needed for the services you require
- keep your personal information accurate and up to date
- only keep your information for as long as necessary
- use your personal information in accordance with your rights
- keep your personal information safe and secure
- not transfer your personal information outside the European Economic Area unless adequate levels of protection are in place
What is personal information?
Personal information is defined as any information which relates to a living individual who can be identified either:
- from the information we hold, or
- from the information combined with any other information which is already in the possession of, or likely to come into the possession of, the person or organisation holding the information
Personal information also includes any expression of opinions about an individual, and any indication of the intentions of the data controller (i.e. the Company) or any other person in respect of the individual.
How long will we keep your personal information?
We will only keep your personal information for as long as necessary. At the end of the retention period, or the life of a particular record, it will be reviewed and deleted, unless there is any special reason for keeping it.
What is our legal basis for using your personal information?
To use your personal information there must be a lawful basis to do this. These are, consent, contract, legal obligation, vital interest, public tasks and legitimate interest. In most cases the processing must also be necessary. The legal bases upon which we hold your information include consent, contract and legitimate interest. The specific legal basis will depend upon the reason or reasons why we collected and need to use your information.
he GDPR sets a high standard for consent to use people’s information. Consent requires a positive opt-in. Pre-ticked boxes or any other consent method by default is no longer allowed. We will not generally rely on consent as a basis for processing personal data. In the limited circumstances where we may rely upon consent, we will specifically obtain this in the course of collecting the data. When we state “we”, “us”, or “our” in this privacy statement, we are referring to “Ski Armadillo”. Please note that the information given here equally applies if someone else makes arrangements on your behalf and provides us with your details. If you handle the arrangements for other travellers, please ensure that they are aware of the information contained within this Privacy Centre.
Ski Armadillo take your privacy extremely seriously and we are committed to doing everything we can to protect any personal information provided to us when enquiring about or booking a holiday or other travel service with Ski Armadillo, visiting our website or through other means. This statement describes what, why and how we collect and use your personal information, how we protect it and how you can contact us.
- Session cookies allow you to carry information across pages of our site and avoid having to re-enter information plus allow you to carry information through to our online booking system.
- Persistent cookies allow your computer to remember your login and the searches you have made plus to compile anonymous, aggregated statistics that allow us to understand how users use our site and to help us improve the structure of our website.
Session cookies remain in the cookie file of your browser until you leave the site. Persistent cookies remain in the cookie file of your browser for much longer. In addition, 3rd parties may serve cookies via this site. These may be used to serve advertisements and track whether these advertisements are clicked on by users and to tailor content to your preferences. We cannot identify you personally from this information – a cookie cannot read your hard drive or perform any commands on your computer and does not contain your name, address, telephone number, or email address.
Subject Access Request
Should you wish to raise a question or concern over how your personal data has been processed, or wish to correct an inaccuracy, you have the right to request further information. Full contact details can be found in the “Contact us” section of our Privacy Statement, however, you can email firstname.lastname@example.org to raise such queries, which we are obliged to respond to within one month, subject to satisfactorily confirming your identity.
Where you’ve given your consent
To contact you with information or offers regarding our upcoming events, products or services – this may be via email, via push and web notifications, via SMS, or social media platforms. You can change your marketing preferences at any time, see “Your choices and rights” section below.
Your Choices & Rights
- Your choices Where you have given us your consent, you can withdraw it by doing the following.
- To stop receiving our marketing you can change your preferences within your account, follow the unsubscribe instructions in any of the emails we send you or contact us and we will do it for you.
Your Rights What are your rights?
Your individual rights are set out in law. Subject to some legal exemptions, you have the following rights:
Right to be informed
You have the right to know about the collection and use of your personal information, including:
- Why it is collected
- How it is used
- Who it is shared with
- How long it is kept for
Right of access
You have the right to obtain a copy of your personal information and supplementary information to understand how and why we are your information and that we are using it lawfully. This is commonly known as a Subject Access Request (SAR). This should be made in writing to the Data Protection Officer (DPO) whose contact details are set out in section 15. You should give details of your name and postal address and details of your request and any details which would help us to locate the information, for example, booking reference. In addition you will need to provide us with proof of identity, e.g. copy of your birth certificate, passport or driving licence.
Right to rectification
You have the right to have inaccurate personal information rectified. You also have the right to have incomplete personal information completed – although this may depend on the reasons for using your personal information.
Right to erasure
In certain circumstances you have the right to have your personal information erased. This is also known as the ‘right to be forgotten’. The right to erasure does not apply to all cases such as complying with a legal obligation, performing a task set out in the public interest or for the establishment, exercise or defence of legal rights.
Right to restrict processing
You have the right to request the Company to restrict using your personal information in some circumstances. This may be because you are challenging the accuracy of the information and we are verifying the accuracy of the data. In most cases we will not need to restrict using your personal information indefinitely but will need to have the restriction in place for a certain period of time.
Right to data portability
You have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format. Individuals also have the right to request that a controller transmits this data directly to another controller – this is commonly used for banking and insurance purposes when wanting to switch providers.
Right to object
You have the right to object to the Company using your personal information. The right to object only applies in certain circumstances and requests to object to our using personal information will be considered on an individual basis. The Company will be unable to stop using personal information if it is needed to carry out a statutory function.
Rights in relation to automated decision making and profiling
Automated individual decision-making is a decision made by automated means without any human involvement. An example of this would be an online decision to award a loan. Profiling can be used to find out about individuals’ preferences, predict behaviour or make decisions about people. The Company will not make any solely automated decisions on you that have any legal or similarly significant event on you.
If you would like to exercise your rights in relation to your personal information, then please feel free to contact us; By email: email@example.com By telephone: +44 (0) 1799 668596 In writing: Pavilion View, 19 New Road, Brighton, East Sussex, BN1 1EY