Our Commitment to GDPR Compliance
Honorable Travel Bound is committed to protecting your personal data and complying with the European Union's General Data Protection Regulation (GDPR). This document explains your rights and our obligations under GDPR.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: You have given clear consent for specific processing activities
- Contract: Processing is necessary to fulfill our travel services contract
- Legal Obligation: We must process data to comply with legal requirements
- Vital Interests: Processing is necessary to protect your vital interests or those of others
- Legitimate Interests: We have legitimate business interests that don't override your rights
Your Rights Under GDPR
Right to Information
You have the right to know what personal data we collect, how we use it, and who we share it with.
Right of Access
You can request a copy of all personal data we hold about you, including:
- Confirmation that we process your data
- A copy of your personal data
- Information about processing purposes and legal basis
- Information about data recipients
- Data retention periods
Right to Rectification
You can request correction of inaccurate or incomplete personal data. We will make corrections within one month of your request.
Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data when:
- The data is no longer necessary for the original purpose
- You withdraw consent and there's no other legal basis
- You object to processing and there are no overriding legitimate grounds
- Data has been unlawfully processed
Right to Restrict Processing
You can request limitation of processing when you contest data accuracy, processing is unlawful, or you need data for legal claims.
Right to Data Portability
You can receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling.
How to Exercise Your Rights
To exercise your GDPR rights, contact us at:
Response Timeframes
We will respond to your requests within one month. In complex cases, we may extend this period by two additional months with explanation.
Data Protection Officer
Our Data Protection Officer oversees GDPR compliance and can be contacted at:
Email: [email protected]
Data Transfers Outside the EU
When we transfer data outside the European Economic Area, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard contractual clauses
- Binding corporate rules
- Certification schemes
Data Breach Notification
In case of a data breach likely to result in high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.
Children's Data
We do not knowingly process personal data of children under 16 without parental consent. If you believe we have collected data from a child, please contact us immediately.
Complaints
If you're unhappy with how we handle your personal data, you can lodge a complaint with:
- Our Data Protection Officer (contact details above)
- Your local supervisory authority
- The Information Commissioner's Office (ICO) if you're in the UK
Updates to This Information
We may update this GDPR information to reflect changes in law or our practices. We will notify you of significant changes.
Last updated: January 2024
