The following policy has been established by Smart Travel Karlstad AB (corporate identity no. 556774-8891) for processing of personal data.
We protect your privacy. You should be able to feel safe when you give your personal data to us. That is why we have established this policy. The policy is based on current data protection legislation and explains how we work to protect your rights and your privacy.
The purpose of this policy is that you should understand how we process your personal data, what we use the data for, who sees your data and under which circumstances, and how you can protect your rights.
We process your personal data primarily to meet our obligations towards you. Our starting point is that we will not process more personal data than that which is required for each situation, and we always aim to use data that is least sensitive in terms of privacy.
We also need your personal data to give you good service, for example for ordering travel and when providing follow-up and information.
WHAT PERSONAL DATA DO WE PROCESS?
We only process personal data when it is required to meet our commitments in accordance with agreements and the law. The following list contains examples of the personal data that we process:
- E-mail address
- Telephone number
- Telefax number
- Date of birth
- User name
- Photographs / passport copies
- Payment card number, credit card number and other bank-related information
- Information that you have registered yourself and give voluntarily
- Content that you publish, such as user-generated content, for example special requests for reservations (seating) and requests for special food (flights).
HOW DO WE RECEIVE YOUR PERSONAL DATA?
We will never collect your personal data without consent. We ensure this by letting you fill in explicit consent clauses through traveller profile forms.
You have the right to withdraw your consent at any time. When you have withdrawn consent, we will no longer process your personal data or obtain new data, provided that it is not necessary to fulfil our obligations under agreements or law. Withdrawal of consent may mean that we cannot fulfil the obligations we have in relation to you. You can withdraw the personal information stored by us by sending an e-mail to firstname.lastname@example.org and requesting a withdrawal. Your personal data will be deleted in full within 2-3 working days.
We gain access to your personal information as follows:
- Data that you provide to us directly (traveller profile)
- Data that we receive when you make arrangements with one of our employees
- Data that we receive when you contact us, seek employment with us, visit us or otherwise contact us
WHAT DATA WILL WE GIVE TO YOU?
When we collect your personal data for the first time, we will inform you of what we will use it for, what rights you have under the Data Protection Ordinance (GDPR) and how you may protect your rights. You will also be informed of who is responsible for personal data processing and how to contact us if you have questions or need to provide a request or question regarding your personal information and / or rights.
IS YOUR PERSONAL DATA PROCESSED IN A SAFE WAY?
We establish routines and methods to ensure that your personal data is handled safely. The starting point is that only employees and other persons within the organization who need personal data to perform their duties should have access to personal data.
With regard to sensitive personal data, we have established special competencies, to ensure enhanced protection of your personal data.
Our security systems are developed with your personal privacy in focus and provide a high level of protection against infringement, damage and other changes that could endanger your privacy.
We have several IT security policies to ensure that your personal data is processed safely.
We do not transfer personal data in cases other than those expressly stated in this policy.
WHEN DO WE DISCLOSE YOUR PERSONAL DATA?
Our starting point is not to disclose your personal data to third parties unless you have consented to it or if it is not necessary to fulfill our obligations in agreements or by law.
Smart-Travel Karlstad AB has responsibility for personal data, which means we are responsible for the processing of your personal data and the protection of your rights.