Data Protection Policy

  • Home
  • Data Protection Policy

Policy on Data Protection

Here is a preview

The Booknextrip Privacy Notice explains how your personal data is handled and how you can exercise your privacy rights under existing laws governing the protection of personal information.

In the first scenario, when individuals (employed by an organisation which is a client of Booknextrip) provide us with their personal information on behalf of their employer or travel sponsor, Booknextrip will handle it accordingly.

If your employer or travel sponsor purchases travel services for you through Booknextrip as an agent, the relevant service provider will be responsible for ensuring the security of the personal data it receives, as well as complying with applicable laws and regulations.

By sharing your personal information with us, you are acknowledging that this Notice will be applicable and authorizing us to handle your personal information. This also implies that you are giving us permission to collect, use, and disclose your personal information as outlined in this Notice. If you do not agree with any aspect of this Notice, kindly refrain from providing us with your personal information. Please note that not providing us with your personal information or withdrawing a previously given consent may impact our ability to offer services to you or limit the services we can provide. For instance, when making travel arrangements, we require the full name of the traveler along with contact details and proper identification (such as passport details). Without this information, we cannot make bookings on your behalf.

2. The purpose of the project

In this privacy notice, we intend to provide you with clear information about how Booknextrip collects and processes your personal data, including information provided by your employer or travel sponsor. It is also our intention to inform you about how, when, and why we process your personal data through this notice.

3. The data we collect

An individual's personal data is any information that can be used to identify that individual. It excludes data where the individual's identity has been removed and made anonymous. Below is a list of the types of personal data we may collect, use, store and transfer about you;

Data related to identity

A person's identity data includes their full name, username or similar identifier, marital status, title, date of birth, and gender.

Contact information

There are four types of contact data: billing address, delivery address, e-mail address, and telephone number.

Data on travel

The Travel Data includes passport numbers, identity documents used for domestic travel, and seaman's books, if applicable.

Data related to finances

Any information required to process financial transactions, such as payment card details and bank accounts, falls under the category of financial data.

The Transactional Data

Our Transactional Data includes details of the products and services you have purchased from us, as well as information about payments to and from you.

Data about the profile

Your Profile Data includes your username and password, purchases made by you, preferences regarding airline, hotel, and feedback responses.

Data related to marketing and communications

Data relating to marketing and communications includes your preferences for receiving marketing from us and your communication preferences, including your contact information.

A statistical analysis of the data

In addition, we collect and distribute compiled information, such as statistical data, for the purpose of reporting. This data is generated from your personal information but does not fall under the legal definition of personal data, as it does not disclose your identity directly or indirectly. For instance, we may combine your travel details to create Management Information Reports. However, if this aggregated data is merged with your personal information in a way that allows for identification, we will handle it as personal data and manage it in accordance with our privacy notice.

Data for Special Categories

As part of defining services such as meal preferences, we collect special categories of Personal Data about you, including details about your health and religion.

4. How are your personal data collected?

In compliance with your local data protection laws, we will only collect personal information from you. We collect this information directly from you as part of our relationship with you. When you complete surveys or provide feedback to us, or if you choose to do so anonymously or under a pseudonym, we may collect your personal information.

Interactions on a direct basis

Contacting us directly. You may provide us with your Identity, Contact, and Financial Data by filling out forms electronically or by writing, phoning, or emailing us.

Data provided by Client Contract Relationships

For the purpose of providing services, your company or travel sponsor may provide you with personal data. Booknextrip explicitly states in all its contractual client dealings that it is the client's responsibility to obtain authorisation for the use of their personal data in order to perform its responsibilities. If Booknextrip receives an authorised travel request, it will assume that this permission has been sought and granted.

Sources that are publicly available

Publicly available identity and contact information.

What we do with your personal information

Your personal data is only used where;

For the purposes of processing your case and providing you with our services, we require this information.

In order to comply with our legal obligations, the processing is necessary;

If the processing is necessary to protect our legitimate interests or those of any third parties to whom your personal information is disclosed

Details.

When contacting us about a travel booking or query, whether on your behalf or on the behalf of your company or travel sponsor, our main goal is to assist you in obtaining travel advice and/or booking travel and related services. As we act as an agent for various travel service providers, such as airlines and hotels, when you book or arrange travel through us, we will collect your personal information in order to provide the requested services. This may involve sharing your information with the relevant provider for their own purposes in addition to using it internally as outlined in this Notice.

As part of our services, we may share your information with our travel partners, such as hotels, airlines, car rental companies, and other providers, in order to fulfill your travel bookings. Please keep in mind that these partners also have their own privacy policies and may contact you for additional information or to assist with your reservations. We recommend reviewing the privacy policies of any third-party providers whose products you purchase through us. These policies are usually available on their websites; however, if not, we are happy to provide them upon request.

It is not possible for us to list in this Notice all of the travel service providers for whom we act or their locations because we act as agents for or on behalf of thousands of them around the world.

Your personal data will be used for the following purposes:

We have set out below, a description of all the ways in which we intend to use your personal data (whether on our own behalf or acting on behalf of your employer or travel sponsor), as well as the legal basis upon which we intend to do so. In addition to identifying our legitimate interests, we have also identified our legitimate interests.

Register as a traveler

Information that we collect about you includes your name, email address, phone number, employer, physical address, passport number, additional documents, such as your driver's license or seaman's book, gender, and date of birth. Your travel companions may also be collected similar information if we book their travel. You may choose to provide additional information when setting up your traveller profile, including request traveller credentials, and emergency contact information.

Legitimate Interest: Fulfillment of a contract with you, your employer, or your travel sponsor.

Book travel services

In addition to above (the information required to build your profile), we collect travel information (such as arrival and departure location, airline, hotel, car rental) and other information that may be needed to book your travel. Providing accessibility, meal preferences, or other services requires special categories of information.

Basis & Legitimate Interest: Fulfilling a contract with you, your employer, or your travel sponsor.

Process and deliver services

Your travel services will be processed and delivered;

Managing payments, fees, and charges

We collect and recover money owed to us

Additionally, we collect payment card information and details necessary to process payments.

Performance of a contract with you, your employer or travel sponsor, as well as legitimate interest in recovering dues.

Management of relationships

Managing relationships involves notifying you of changes to our terms and privacy policies, or about incidents and advisory e-newsletters. We collect Identity, Contact, Profile and Marketing & Communication data.

Performance of a contract with you, your employer or travel sponsor, compliance with legal and statutory obligations, and our legitimate interests in keeping our records updated and studying and analyzing how customers use our products.

Participation in surveys and competitions

In order to conduct surveys or competitions, Identity, Contact, Profile, and Marketing and Communications data are required.

Compliance with legal & legitimate interests to build customer relationships and grow the business: Performance of a contract with you, your employer or travel sponsor, compliance with legal & legitimate interests.

Development of businesses

Exploring and seeking new business opportunities using Identity & Contact data.

The purpose of this collection is to grow our business and engage in marketing activities for the legitimate purpose of growing our business.

Analyzing statistical data

For analytical purposes, Identity, Contact, Travel, Financial, and Transactional Data are aggregated.

Legal Basis & Legitimate Interest: Execution of a contract with you, your employer or travel sponsor and to advance our legitimate interests (to define types of customers for our products and services, keep our website current, develop our business, and inform our marketing strategy), grow our business and engage in marketing activities.

The disclosure of personal information

It is possible for Booknextrip to share your personal information with third parties, such as airlines, hotels, and end-users of services, for the purposes outlined above.

It is explicit in our understanding, in law, that if travel or associated services are purchased for you pursuant to an arrangement between your employer or travel sponsor and Booknextrip, then, due to Booknextrip's status as an agent, the relevant service provider is responsible for the security of the personal data it receives and for compliance with applicable law; Booknextrip is not responsible for these service providers' actions or omissions.

Data Transfer Overseas

In order to perform a contract between Booknextrip, your company or travel sponsor, we share your personal data with Booknextrip, its local TMC Partners, and Services Providers. As a result, your data will be transferred outside of national borders, including to the European Economic Area (EEA).

The Service Providers are located outside the defined national boundaries, including the EEA, so your data will be transferred to them. Our company ensures the same level of protection is afforded to your personal data whenever it is transferred overseas by implementing one or more of the following safeguards:

We will only transfer your personal data to countries that provide adequate protection for personal data

When we use certain service providers, we may use contracts that provide the same protection for personal data as we do

In some cases, information may be transferred to an overseas recipient (other than any of our overseas related entities) in a jurisdiction that does not have an equivalent level of data protection as your jurisdiction and where you cannot seek redress under your local data protection laws. As long as your local data protection laws permit, we will not be liable for the way in which these overseas recipients handle, store, and process your personal information.

Security of data

Your personal data is protected by appropriate security measures to prevent accidental loss, unauthorised access, alteration, or disclosure.

Control of site access

Ensure that unauthorized persons cannot access data processing sites.

Control of system access

Ensure that data processing systems are not misused.

Control of data access

It is important to ensure that only those authorized to use a data processing system have access to the data they are authorized to access, and that the data cannot be read, copied, modified, or removed without authorization during processing, use, or storage.

Control of disclosures

Check where and to whom data can be transferred using data transmission facilities.

Control of input

Maintain audit logs to determine whether and by whom data has been entered, modified, or removed from the data processing system.

Control of orders

Ensure that personal data processed on behalf of a customer is handled strictly in accordance with the customer's instructions.

Control of availability

Protect data from accidental destruction or loss.

Control of notification

In the event of a material breach of any of the controls above, customers are promptly notified. Any breach of confidential data is notified within 72 hours of discovery.

Retention of data

Your personal data will be kept for the timeframe necessary to fulfill our initial purposes for collecting it, which includes meeting any legal, accounting, or reporting obligations. Our assessment of the appropriate retention period takes into account the type and amount of your personal information, the potential risk of unauthorized access or disclosure, and whether we can achieve our objectives through alternate methods. We also consider applicable legal requirements.

In accordance with the law, we are required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a period ranging from six to seven years, depending on the regulations in each country, after they cease to be customers. After a specified period of not using our services, you may request that we anonymize your personal data.

The rights you have

Data protection laws give you certain rights with respect to your personal data. These rights include:

Request access to your personal data (also known as a "data subject access request"). This allows you to see what data we hold about you and to ensure that it is being used lawfully.

We may need to verify the accuracy of the new information you provide to us before we can correct any incomplete or inaccurate information we hold about you.

Kindly submit a deletion request for your personal data. This allows you to ask us to remove your information if there is no valid reason for us to continue processing it. You also have the option to request that we delete your data if you have previously objected to its processing, if it was processed unlawfully, or if local laws require its erasure. Please be aware that we may not always be able to fulfill your erasure request due to certain legal obligations, which will be communicated with you at the time of your request, if applicable.

Please be aware that if you ask us to limit or cease using your personal information or revoke your consent for its processing, it may potentially hinder our ability to offer services to you or have a negative impact on the range of services we can provide. This is due to the fact that most travel arrangements require full name of the passenger, contact information, and proper identification (such as passport details). Without this information, we are unable to make bookings on your behalf.

Contact information

Contact us at support@booknextrip.com

Please contact us through email at support@booknextrip.com if you have any questions about how we process your personal information.