It also informs you how you can exercise Your Rights (including the right to object to some of the data handling we carry out). More information about your rights and how you can exercise them is set out in the section below.
When you visit the Website and use our Service (you as a "User") we collect the categories of personal data as follows:
The provision of the above personal data, where requested, is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested services.
It is important that all the personal data you give us when you register as a User or otherwise when you use the Website is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email) details at all times.
Please note that we may collect and use information of children only as provided by their parent or guardian or with their consent. If we become aware that we have processed information of a child without the valid consent of a parent or guardian, we reserve the right to delete it.
In general terms, we use your personal data to provide you with the services you request, send you marketing and promotional communications, notify you about important changes to our Website and to deliver our content and ads which we think may be of interest to you. More specifically:
|Why?||On which legal basis?|
|A. To create and maintain the contractual relationship established for the provision of the Service requested by you in all its phases and by way of any possible integration and modification (e.g. responding to your questions and concerns; administering your account).||To fulfil a contract, or take steps linked to a contract|
|B. To meet the legal, regulatory and compliance requirements and to respond to requests by government or law enforcement authorities conducting an investigation.||To comply with the law|
|C. To carry out anonymous, aggregative statistical analyses so that we can see how our Website, products and services are being used and how our business is performing.||
To pursue our legitimate interest(i.e. improving our Website, its features and our products and services)
|D. To send you (in cases permitted by law excepting where you did not object) advertising material via email or, where permitted by the law, other equivalent electronic communication regarding products and services similar to those already purchased by you and offered on our Website. On some occasions, we may send you a personalised and tailored version of the aforementioned advertisement materials.||
Soft Opt-in/To pursue our legitimate interest(i.e. marketing)
Where you give your consent(by ticking the appropriate check box)
|F. Passing your data to LM Forward Ltd to collect and obtain the information about your bookings from the Data Controller with which you have contracted, in turn authorising this company to share this information to LM Forward Ltd; this will facilitate the search and location of bookings you have made with any company of LM group on any of the Websites of the LM group through the APP or the personal area.||
Where you give your consent(when you register or log into the APP or personal area)
|G. To keep our Website and systems secure and to prevent and detect fraud, security incidents and other crime.||
To pursue our legitimate interest(i.e. ensuring the security of our Website)
|H. To verify compliance with our terms and conditions and for the establishment, exercise or defence of legal claims.||
To pursue our legitimate interest(i.e. compliance with our terms and conditions, protection of our rights in the event of any dispute or claim)
Where you give your consent(i.e. through the cookie banner or by your browser's settings)
The complete list of parties to which your personal data may be disclosed is available at our registered office and may be requested by writing to firstname.lastname@example.org.
|Document||Retention period||Starting date|
|Account information (see My Area):
- User, password
- Social login
- Purchase data
|10 years||From the date of the last interaction|
|Customer care emails (confirmation, schedule change/cancellation, quotation, penalties quotation, payment reminder, refund choice, voucher/payment, massive communications), including customer requests/claims via email||10 years||From date on which email is sent|
|Customer care phone records for contractual reasons||3 years||From the date of the recording|
|Recorded calls for quality purposes||1 month||From the date of the call|
|Chat (Customer/User)||3 years||From the date of the request|
|Reports or claims|
|Contractual documentation (log of the acceptance)||10 years||From the date of the purchase|
|Credit card data||Not retained|
|Finance/transactional information||10 years||From completion of financial transaction|
|Transactional fraud check data||5 years||From rejection of transaction for fraud|
|Surveys||1 month||From the date of the survey|
|DATA USED FOR MARKETING PURPOSES (CRM)|
|Data used for marketing activities to Users subject to the consent or under soft-opt in||5 years||From the consent or the renewal of the consent via interaction with marketing communications|
|DATA COLLECTED VIA TAG|
|Technical cookies||Max 3 years||From the date of browsing on our websites|
|Non-technical Cookies||Max 1 year||From the date of consent|
You can exercise the rights provided by the Regulation EU 2016/679 (Articles 15-22), including the right to:
|Name of the right||Content|
|Right of access||To receive confirmation of the existence of your personal data, access its content and obtain a copy.|
|Right of rectification||To update, rectify and/or correct your personal data.|
|Right to erasure/right to be forgotten and right to restriction||To request the erasure of your data or restriction of your data which has been processed in violation of the law, including whose storage is not necessary in relation to the purposes for which the data was collected or otherwise processed; where we have made your personal data public, you have also the right to request the erasure of your personal data and to take reasonable steps, including technical measures, to inform other data controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.|
|Right to data portability||To receive confirmation of the existence of your personal data, access its content and obtain a copy.|
|Right to data portability||To receive a copy of your personal data you provided to us for a contract or with your consent in a structured, commonly used and machine-readable format (e.g. data relating to your purchases) and to ask us to transfer that personal data to another data controller.|
|Right to withdraw your consent||Wherever we rely on your consent (see p. 3 - F, G and J), you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes.|
|Right to object, at any time||You have the right to object at any time to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement (see p. 3-D, H, I), or where we are using your data for direct marketing (p. 3-E).|
You can exercise the above rights at any time by:
Your rights in relation to your personal data might be limited in some situations. For example, if fulfilling your request would reveal personal data about another person or if we have a legal requirement or a compelling legitimate ground we may continue to process your personal data which you have asked us to delete.
You also may have the right to make a complaint if you feel your personal information has been mishandled. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant Data Protection Supervisory Authority.