(1) Processing purpose

We process your personal data, which you provide to us by e-mail, contact form, etc., to answer and complete your inquiries. You are not obliged to provide us with your personal data. But we cannot reply to you by e-mail without noticing your e-mail address.

(2) Legal basis

a) If you have given us an explicit consent to the processing of your data, Art. 6 para. 1a) GDPR is the legal basis for this processing.

b) If we process your data to carry out pre-contractual measures, Art. 6 para. 1b) GDPR is the legal basis.

c) In all other cases (especially when using a contact form), Art. 6 para. 1f) GDPR is the legal basis.

WILDERSPRRIGHT: You have the right to process data based on Art. 6 (1) (f) GDPR and does not serve to object to direct advertising for reasons arising from your particular situation at any time.

In the case of direct advertising, however, you can object to the processing at any time without giving reasons.

(3) Legitimate interest

Our legitimate interest in the processing is to communicate with you in a quick way and to answer your inquiries at low cost. If you inform us of your address, we reserve the right to use it for direct postal advertising. You can interest in data protection by means of an economical transfer of data (e.g. Use of a pseudonym).

(4) Recipient categories

Hosting providers, shipping service providers for direct marketing

(5) Storage period

Your data will be deleted if it can be inferred from the circumstances that your request or the facts in question have been finally clarified.

However, if a contract is concluded, the data required by commercial and tax law will be kept by us for the periods specified by law, i.e. Section 257 HGB, Section 147 AO).

(6) Right of withdrawal

In the case of processing, you have the right to withdraw your consent at any time on the basis of your consent.

 

Section 3 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards us as the controller:

 

 

1. Right to information

You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

 

2. Right to rectification

If the information concerning you does not (any longer) is corrected, you can request a correction pursuant to Art. 16 GDPR. If your data is incomplete, you can request a completion.

 

3. Right to deletion

You can request the deletion of your personal data under the terms of Art. 17 GDPR.

 

4. Right to restriction of processing

Within the scope of the provisions of Art. 18 GDPR, you have the right to request a restriction of the processing of the data concerning you.

 

5. Right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller.

 

6. Right to withdraw the data protection declaration of consent

You have according to Art. 7 para. 3 GDPR, you have the right to revoke your data protection declaration of consent at any time. The legality of the processing carried out on the basis of the consent until the revocation is not affected.

 

7. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement pursuant to Article 77GVO).

 

 

Please also note your right to object pursuant to Art. 21 GDPR:

 

a) General: reasonable opposition required

Processing of personal data concerning you

– to safeguard our overriding legitimate interest (legal basis according to Art. 6 para. 1f) GDPR) or

– in the public interest (legal basis according to Art. 6 para. 1e) GDPR),

you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

 

In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

 

b) Special case direct marketing: simple objection is suffised

If the personal data concerning you are processed for direct marketing purposes, you have the right to object to this processing at any time and without giving reasons; this also applies to profiling, insofar as it is related to such direct marketing.

 

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

 

Data Controller:
ND Travel Cardiff – Nikolay Dankov
2 Pavin Court ,Heol Y Pavin
CF52FQ,Cardiff
Phone: +442921690096
bookings@ndtravelcardiff.com