The Travel Corporation Australia | COVID-19 Privacy Notice

AAT Kings Covid-19 Privacy Notice (also applies to Inspiring Journeys)

Last updated September 2020

Due to the current public health situation, AAT Kings may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.

AAT Kings will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. AAT Kings comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data AAT Kings collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

Who are we?

AAT Kings Tours Pty Ltd is a company registered in Australia (ABN 91 079 722 464). Our registered address is 82-86 Bourke Rd Alexandria, NSW, 2015 AUSTRALIA. All references to AAT Kings 'we', 'us', 'our' are references to AAT Kings Tours Pty Ltd, its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or AAT Kings Tours Pty Ltd personal data policies or practices, please contact us either by e-mail to marketing@aatkings.com.au, telephone on 1300 228 546, or by post to 82-86 Bourke Rd Alexandria, NSW, 2015 AUSTRALIA.

We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.

What personal data do we collect?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where authorised by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your medical insurance information, as required by tourism and travel regulations.

Why do we collect personal data?

Depending on the situation, we collect and process your personal data for the

Following purposes:

To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers;
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate;
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety;
To record your medical insurance information as required by health regulations.

What are our legal grounds to collect and process your personal data?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.
To perform the contract you have with us;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions;
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals;
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

Special category data

Depending on the circumstances, we rely on the following legal bases to collect and process your health information:

Your explicit consent;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health;
To protect your vital interests, when you are not legally or physically able to give consent.

Who are we sharing your personal data with?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so;

Our providers, including qualified health professionals in line with local regulations,

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA);
We have the legal obligation to do so.

How long do we keep your data for?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel;
15 days to one month after your visit to our premises, unless a longer period is required by law;
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims;

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

How do we protect your data?

We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.

The information you share with us under the scope of this Privacy Notice will be secured by additional technical and organisational measures and only staff required to see this information will be able to access it on a “need-to-know” basis.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

What are my rights and how do I exercise them?

You have the right to:

be informed of any data processing;
access to your personal data;
rectify your personal data;
erase your personal data, in some circumstances;
restrict processing of your personal data, in some applicable circumstances;
data portability, in applicable circumstances;
object to the processing of your personal data, in some circumstances;
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to marketing@aatkings.com.au, telephone on 1300 228 546, or by post to 82-86 Bourke Rd Alexandria, NSW, 2015 AUSTRALIA.

You will not have to pay a fee to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances and we will explain the reasons in our response to you.

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Notice which this Notice supplements.

Adventure World Travel Covid-19 Privacy Notice

Last updated September 2020

Due to the current public health situation, Adventure World Travel may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.

Adventure World Travel will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Adventure World Travel comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data Adventure World Travel collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

Who are we?

Adventure World Travel Pty. Ltd is a company registered in Australia (ABN 39 130 586 515). Our registered address is Level 1, 35 Grafton Street, Bondi Junction, NSW, 2022, Australia. All references to Adventure World Travel 'we', 'us', 'our' are references to Adventure World Travel Pty. Ltd its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Adventure World Travel personal data policies or practices, please contact us either by e-mail to marketing@adventureworld.com.au, telephone on 1300 295 049], or by post to Adventure World Travel Pty Ltd, Level 1, 35 Grafton Street, Bondi Junction, NSW, 2022, Australia.

We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.

What personal data do we collect?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where authorised by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your medical insurance information, as required by tourism and travel regulations.

Why do we collect personal data?

Depending on the situation, we collect and process your personal data for the

Following purposes:

To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers;
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate;
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety;
To record your medical insurance information as required by health regulations.

What are our legal grounds to collect and process your personal data?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.
To perform the contract you have with us;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions;
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals;
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

Special category data

Depending on the circumstances, we rely on the following legal bases to collect and process your health information:

Your explicit consent;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health;
To protect your vital interests, when you are not legally or physically able to give consent.

Who are we sharing your personal data with?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so;

Our providers, including qualified health professionals in line with local regulations,

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA);
We have the legal obligation to do so.

How long do we keep your data for?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel;
15 days to one month after your visit to our premises, unless a longer period is required by law;
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims;

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

How do we protect your data?

We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

What are my rights and how do I exercise them?

You have the right to:

be informed of any data processing;
access to your personal data;
rectify your personal data;
erase your personal data, in some circumstances;
restrict processing of your personal data, in some applicable circumstances;
data portability, in applicable circumstances;
object to the processing of your personal data, in some circumstances;
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to marketing@adventureworld.com.au, telephone on 1300 295 049], or by post to Adventure World Travel Pty Ltd, Level 1, 35 Grafton Street, Bondi Junction, NSW, 2022, Australia

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Notice which this Notice supplements.

Contiki Holidays Covid-19 Privacy Notice

Last updated September 2020

Due to the current public health situation, Contiki Holidays may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.

Contiki Holidays will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Contiki Holidays comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data Contiki Holidays collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

Who are we?

Contiki Holidays (Australia) Pty Ltd is a company registered in Australia (ABN 18 002 525 340). Our registered address is Travel House, Level 3, 35 Grafton St, Bondi Junction NSW. All references to Contiki 'we', 'us', 'our' are references to Contiki Holidays (Australia) Pty Ltd, its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Contiki’s personal data policies or practices, please contact us either by e-mail to Marketing@contiki.com.au , by telephone on 1300 266 845 or by post to Travel House, Level 3, 35 Grafton St, Bondi Junction NSW 2022.

We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.

What personal data do we collect?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where authorised by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your medical insurance information, as required by tourism and travel regulations.

Why do we collect personal data?

Depending on the situation, we collect and process your personal data for the

Following purposes:

To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers;
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate;
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety;
To record your medical insurance information as required by health regulations.

What are our legal grounds to collect and process your personal data?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.
To perform the contract you have with us;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions;
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals;
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

Special category data

Depending on the circumstances, we rely on the following legal bases to collect and process your health information:

Your explicit consent;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health;
To protect your vital interests, when you are not legally or physically able to give consent.

Who are we sharing your personal data with?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so;

Our providers, including qualified health professionals in line with local regulations,

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA);
We have the legal obligation to do so.

How long do we keep your data for?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel;
15 days to one month after your visit to our premises, unless a longer period is required by law;
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims;

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

How do we protect your data?

We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

What are my rights and how do I exercise them?

You have the right to:

be informed of any data processing;
access to your personal data;
rectify your personal data;
erase your personal data, in some circumstances;
restrict processing of your personal data, in some applicable circumstances;
data portability, in applicable circumstances;
object to the processing of your personal data, in some circumstances;
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to Marketing@contiki.com.au , by telephone on 1300 266 845 or by post to Travel House, Level 3, 35 Grafton St, Bondi Junction NSW 2022.

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Notice which this Notice supplements.

Insight Vacations Covid-19 Privacy Notice (also applies to Luxury Gold)

Last updated: 21 August 2020

Due to the current public health situation, Insight Vacations may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.

Insight Vacations will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Insight Vacations comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data Insight Vacations collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

WHO ARE WE?

Insight Vacations, LTD., LTD. is a company incorporated under the law of the applicable jurisdiction. Our incorporation address or registered office is 131 New North Road., Auckland, New Zealand. We are an allied member of TAANZ (member no.3487). All references to Insight Vacations, 'we', 'us', 'our' are references to Insight Vacations, LTD. its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Insight Vacations’ personal data policies or practices, please contact us either by e-mail to compliance@ttc.com, or by post to 131 New North Road., Auckland, New Zealand.

WHAT ARE MY RIGHTS AND HOW DO I EXERCISE THEM?

If you wish to exercise any of your rights, please contact us either by e-mail to compliance@ttc.com, or by post to 131 New North Road., Auckland, New Zealand.

WHAT PERSONAL DATA DO WE COLLECT?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where you have accepted to take rapid SARS-CoV-2 medical testing, the date and time of the test. If it is negative, we will not record the result of the test, which will only be processed by a qualified health professional in accordance with local regulations. If the result is positive and results in us being unable to continue to provide you with our services, we will retain the information for as long as is necessary to demonstrate that our withdrawal of services was reasonable.
Where authorised by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
If you have agreed to the use of facial recognition, we may collect your biometric information to access certain areas. We will always offer an alternative, such as badges, to the use of facial recognition. Our facial recognition features are not implemented on our CCTV systems, and will always be offered as a separate system.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your information regarding pre-existing health conditions, when you choose to share this information with us. We will only record the existence of such pre-existing health condition, and no detail on your health condition itself. Any detailed information will be processed through a qualified health professional in accordance to local regulations.
Your medical insurance information, as required by tourism and travel regulations.

WHY DO WE COLLECT PERSONAL DATA?

Depending on the situation, we collect and process your personal data for the Following purposes:

To offer to our customers, on a voluntary basis, rapid SARS-CoV-2 medical tests;
To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers;
To offer to our customers, on a voluntary basis, an alternative contact-less authentication method, such as facial recognition;
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate;
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety;
To record your medical insurance information as required by health regulations.

WHAT ARE OUR LEGAL GROUNDS TO COLLECT AND PROCESS YOUR PERSONAL DATA?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.;
To perform the contract you have with us;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions;
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals;
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

SPECIAL CATEGORY DATA

Depending on the circumstances, we rely on the following legal bases to collect and process your health and biometric data:

Your explicit consent;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health;
To protect your vital interests, when you are not legally or physically able to give consent.

WHO ARE WE SHARING YOUR PERSONAL DATA WITH?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so;
Our providers, including qualified health professionals in line with local regulations, and our biometric solutions providers.

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA);
We have the legal obligation to do so.

HOW LONG DO WE KEEP YOUR DATA FOR?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel;
15 days to one month after your visit to our premises, unless a longer period is required by law;
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims;

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

HOW DO WE PROTECT YOUR DATA?

We will always collect and process your data, in particular health and biometric information, with due care and we will keep this data separate from our other regular business processing activities.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

WHAT ARE MY RIGHTS AND HOW DO I EXERCISE THEM?

You have the right to:

be informed of any data processing;
access to your personal data;
rectify your personal data;
erase your personal data, in some circumstances;
restrict processing of your personal data, in some applicable circumstances;
data portability, in applicable circumstances;
object to the processing of your personal data, in some circumstances;
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to compliance@ttc.com, telephone on 1 888 680 1241 or by post to 5551 Katella Ave. Cypress, CA, 90630.

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Notice which this Notice supplements.

Trafalgar Tours Covid-19 Privacy Notice (also applies to Costsaver)

Last updated September 2020

This Privacy Notice supplements our standard Privacy Notice and should be read in conjunction with that Notice. This Privacy Notice gives specific details about how we will deal with personal information in light of Covid-19.

Due to the current public health situation, Trafalgar may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data”.

Trafalgar will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Trafalgar comply with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data Trafalgar collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

Who are we?

The Travel Corporation NZ Limited is a company registered in 131 New North Road., Auckland, New Zealand under the registration number (09) 300 1560. Our registered address is 131 New North Road., Auckland, New Zealand. All references to Trafalgar, 'we', 'us', 'our' are references to Trafalgar, its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Trafalgar’s personal data policies or practices, please contact us either by e-mail to marketingnz@ttc.com, or by post to PO Box 68-640, Auckland, 1145.

We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.

What personal data do we collect?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where authorised by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your medical insurance information, as required by tourism and travel regulations.

Why do we collect personal data?

Depending on the situation, we collect and process your personal data for the

Following purposes:

To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers;
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate;
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety;
To record your medical insurance information as required by health regulations.

What are our legal grounds to collect and process your personal data?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.
To perform the contract you have with us;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions;
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals;
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

Special category data

Depending on the circumstances, we rely on the following legal bases to collect and process your health information:

Your explicit consent;
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health;
To protect your vital interests, when you are not legally or physically able to give consent.

Who are we sharing your personal data with?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so;

Our providers, including qualified health professionals in line with local regulations,

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA);
We have the legal obligation to do so.

How long do we keep your data for?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel;
15 days to one month after your visit to our premises, unless a longer period is required by law;
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims;

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

How do we protect your data?

We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

What are my rights and how do I exercise them?

You have the right to:

be informed of any data processing;
access to your personal data;
rectify your personal data;
erase your personal data, in some circumstances;
restrict processing of your personal data, in some applicable circumstances;
data portability, in applicable circumstances;
object to the processing of your personal data, in some circumstances;
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to marketingnz@ttc.com, or by post to PO Box 68-640, Auckland, 1145.

You will not have to pay a fee to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances and we will explain the reasons in our response to you.

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Notice which this Notice supplements.

Uniworld Boutique River Cruise Collection Covid-19 Privacy Notice

Last updated September 2020

This Privacy Notice supplements our standard Privacy Policy and should be read in conjunction with that Policy. This Privacy Notice gives specific details about how we will deal with personal information in light of COVID-19.

Due to the current public health situation, Uniworld may temporarily collect additional information from customers, including health or biometric information. In some countries, such information is considered as “sensitive” or “special categories of personal data.”

Uniworld will always treat the information we collect from customers, in particular health and biometric information, with the highest standards of care and in line with all applicable legal requirements and guidelines from public authorities. Uniworld complies with the EU General Data Protection Regulation 2016/679 (GDPR), the UK Data Protection Act 2018 and all amendments, any other legislation relating to personal data and all other local or national legislation and regulatory requirements in force from time to time which apply to us relating to the use of your personal data.

The purpose of this specific privacy notice is to inform our customers of what personal data Uniworld collects, for which purposes and under which legal grounds we may process it during the SARS-CoV-2 pandemic.

Who are we?

Uniworld River Cruises, Inc. is a company incorporated under the laws of California. Our incorporation address is 17323 Ventura Boulevard, 3rd Fl., Los Angeles, CA 91316. All references to Uniworld, 'we', 'us', 'our' are references to Uniworld, its group, subsidiaries and sister companies. If you have any questions or concerns about this privacy notice, or Uniworld’s personal data policies or practices, please contact us either by e-mail to compliance@ttc.com, telephone on (800) 687-1002, or by post to 5551 Katella Ave. Cypress, CA, 90630.

We are the Data Controller for the purposes of the matters detailed in this Privacy Notice.

What personal data do we collect?

Depending on the situation, we may collect the following information:

Your name and contact details.
Where authorized by local regulations or where you agree, we may collect your temperature before giving you access to our services/premises or to a public area. On such occasions we do not record this information, which is deleted immediately, unless the readings are not within acceptable levels in which case we may refuse access and we may retain the data in order to demonstrate that our refusal of access was reasonable.
When you have accepted or where required by local regulations, we may collect your name, contact details, date, time and location of your presence in the premises we manage for contact tracing purposes. If you notify us that you have been tested positive, we will not record this information, but only the date, time and location of the risk in order for us be able to notify the relevant customers that may have been exposed, unless otherwise required by law.
Your medical insurance information, as required by tourism and travel regulations.

Why do we collect personal data?

Depending on the situation, we collect and process your personal data for the following purposes:

To check body temperature prior to giving access to public areas and our premises, to protect the health and safety of our customers, staff, contractors and suppliers.
To record attendance in certain premises we manage, in order to notify our customers if they have been exposed to a risk and to recommend to self-isolate.
If you choose to share such information with us, to record if you have a particular risk to your health so we can take any additional measure appropriate to ensure your safety.
To record your medical insurance information as required by health regulations.

What are our legal grounds to collect and process your personal data?

We rely on the following legal bases to collect and process your personal data:

Your explicit consent.
To perform the contract you have with us.
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions.
To protect your vital interest: when required by the circumstances, we may process your data to protect your vital interests or the vital interests of other individuals.
Our legitimate interests: we may process your data because it is our legitimate interests to do so, or the legitimate interests of others.

Special category data

Depending on the circumstances, we rely on the following legal bases to collect and process your health information:

Your explicit consent.
To comply with a legal obligation: when we are required to collect and process your information because we have a legal requirement to do so in some jurisdictions, in particular to protect and safeguard public health.
To protect your vital interests when you are not legally or physically able to give consent.

Who are we sharing your personal data with?

We will not share data with third parties other than as documented in our regular privacy notice. However, in some circumstances, your data may be shared with:

Public authorities, in particular health authorities, if we have a legal obligation to do so.
Our providers, including qualified health professionals in line with local regulations.

We will not share your data outside of the European Economic Area (EEA) except when:

It is necessary to perform your contract with us (for instance, because you are travelling outside the EEA).
We have the legal obligation to do so.

How long do we keep your data for?

We will endeavour to record your personal data, especially your health data, only for the time strictly necessary for the purposes set out in this privacy notice. This includes the following periods:

For the time of your tour or travel.
15 days to one month after your visit to our premises unless a longer period is required by law.
For as long as necessary to comply with our legal obligations, contractual requirements or the establishment, exercise or defence of legal claims.

We will delete/destroy your personal data immediately after the relevant retention period above is reached.

How do we protect your data?

We will always collect and process your data, in particular health information, with due care and we will keep this data separate from our other regular business processing activities.

Paper-based records will be kept securely in locked cabinets. Digital records will be kept in encrypted and separate databases or folders with strict access controls in place.

What are my rights and how do I exercise them?

You have the right to:

be informed of any data processing.
access to your personal data.
rectify your personal data.
erase your personal data, in some circumstances.
restrict processing of your personal data, in some applicable circumstances.
data portability, in applicable circumstances.
object to the processing of your personal data, in some circumstances.
to withdraw consent to the processing of your personal data, where applicable.

If you wish to exercise any of your rights, please contact us either by e-mail to compliance@ttc.com, telephone on (800) 687-1002, or by post to 5551 Katella Ave. Cypress, CA, 90630.

You also have the right to make a complaint at any time to the relevant supervisory authority, for example the Information Commissioner’s Office in the UK.

Further information about your rights is included in our standard Privacy Policy which this Notice supplements.

AAT Kings Covid-19 Privacy Notice (also applies to Inspiring Journeys)

Adventure World Travel Covid-19 Privacy Notice

Contiki Holidays Covid-19 Privacy Notice

Insight Vacations Covid-19 Privacy Notice (also applies to Luxury Gold)

WHO ARE WE?

WHAT ARE MY RIGHTS AND HOW DO I EXERCISE THEM?

WHAT PERSONAL DATA DO WE COLLECT?

WHY DO WE COLLECT PERSONAL DATA?

WHAT ARE OUR LEGAL GROUNDS TO COLLECT AND PROCESS YOUR PERSONAL DATA?

SPECIAL CATEGORY DATA

WHO ARE WE SHARING YOUR PERSONAL DATA WITH?

HOW LONG DO WE KEEP YOUR DATA FOR?

HOW DO WE PROTECT YOUR DATA?

WHAT ARE MY RIGHTS AND HOW DO I EXERCISE THEM?

Trafalgar Tours Covid-19 Privacy Notice (also applies to Costsaver)

Uniworld Boutique River Cruise Collection Covid-19 Privacy Notice

Contact us with any questions you may have. We're here to assist you!