Privacy Policy
Personal data processing by SC LUYOU SERVICES SRL
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.
Processing covers a wide range of operations performed on personal data, including by manual or automated means. It includes the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
On 25th May 2018, the Regulation (EU) 2016/679, the European Union’s new General Data Protection Regulation (GDPR), entered into force and regulates the processing by an individual, a company or an organisation of personal data relating to individuals in the EU. Therefore, in order to provide you with the tourist services or packages, we want and need your written consent to process this data safely. Therefore, in making any booking, you consent to this information being passed to relevant persons/suppliers. Based on your agreement, LUYOU SERVICES SRL may offer, make bookings and commercialize these tourist services such as accommodation, transportation, medical insurance, sport and cultural tickets, leisure and other related events.
We collect your personal data when you contact us by e-mail, by the contact form from the website, by telephone, by signing a contract with us. Please note that if you refuse us to collect and process your data, we cannot provide tourist services that you require.
For the processing of the personal data of a minor, we ask for your written consent when signing the Contract for tourist services commercialization.
Lawfulness of processing
According to Art. 6 (1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data, and repealing Directive 95/46/EC, processing shall be lawful only if and to the extent that at least one of the following applies:
The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- Processing is necessary for compliance with a legal obligation to which the controller is subject;
- Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
- Personal data processed by LUYOU SERVICES SRL may be the following: first and last name, serial number and number of the identity card, serial and number of the passport, personal identification number, date of birth, home address, telephone number, Wechat ID, e-mail, workplace, first and last name and age of child/children, personal travel preferences, health conditions, dietary requirements, degree of kinship for rooming list, driving license number, religion, IP address, VAT registration number if applicable.
The purpose of personal data processing is to provide you with tourist services and to maintain correspondence with you in order to obtain feedback and/or to keep you abreast of the news offers and promotions of the agency, so we process the data that is necessary to fulfil the obligations assumed under our contract with you.
We transmit your personal data to natural or legal entities from the European Union or outside the European area (depending on the contractual services) who are co-operating with our travel agency and without whom the tourist services requested by you cannot be fulfilled (accommodation units, tour-operators, transport companies, tour guides, leisure service providers) or to national or international authorities (local and central public authorities, judicial authorities, police, customs, immigration offices, and others in these categories).
The length of processing of your personal data. Your data can be processed before and/or during the course of the ordered tourism activity, but after also, until you exercise your right to be forgotten and your data will be deleted, unless data processing is imperative in carrying out legal obligations. Your data is archived according to the national and internal regulations of the agency.
According to the legal provisions on personal data protection, you have the right to:
- Information about the processing of your data;
- Obtain access to the personal data held about you;
- Ask for incorrect, inaccurate or incomplete personal data to be corrected;
- Request that personal data be erased when it’s no longer needed or if processing it is unlawful;
- Object to the processing of your personal data for marketing;
- Request the restriction of the processing of your personal data in specific cases;
- Receive your personal data in a machine-readable format and send it to another controller (data portability)
- Request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to contest the decision.
- File a complaint with the National Supervisory Authority for Personal Data Processing;
- Right of withdrawal of consent. You may withdraw your consent at any time, but the effect prior to the withdrawal of consent remains valid. From the date of receiving your written request to withdrawal of your consent we reserve the right to delete your data within 30 days, due to operational and technical reasons.
You may exercise these rights at any time by submitting your application in writing to our head office or by email at office@romaniatouragency.com. For any other requests, please contact us.
Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data, and repealing Directive 95/46/EC, the controller may either:
- Charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or<
- Refuse to act on the request.
|
