The protection of your personal data is important to Indochina Kite Travel<\/strong>. This Privacy Policy therefore intends to inform you about how Indochina Kite Travel<\/strong>, whose entities may act as data controllers or processors, collect and processes your personal data that you submit or disclose to us, in the case where the General Data Protection Regulation<\/strong> (\u201cGDPR\u201d)<\/strong> applies to such collection or processing.<\/span><\/p>\n Indochina Kite Travel<\/b> routinely collects, uses, stores and transfers a variety of data, including <\/span>Personal Data<\/b>. <\/span>Indochina Kite Travel<\/b> is committed to ensure the privacy of Personal Data throughout its business, and to make sure its employees and business partners also take the necessary measures to protect Personal Data.<\/span><\/p>\n This <\/span>Privacy Policy<\/b> sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Our Privacy Policy applies to you in the case where the GDPR applies to such collection or processing and is available on our website and through other channels.<\/span><\/p>\n We encourage you to read this Privacy Policy<\/strong> carefully. If you do not wish for your personal data to be used by us as set out in this Privacy Policy<\/strong>, please do not provide us with your personal data. Please note that in such a case, we may not be able to provide you with our services, and your customer experience may be impacted.<\/span><\/p>\n 1.PERSONAL INFORMATION<\/b><\/p>\n This refers to a combination of personal data such as your name, address, passport number, telephone number, email address, travel preference and special needs\/disabilities\/dietary requirements that you supply us or is supplied to us, including your social preference, activities and any information about other persons you represent such as those on your booking. Your personal data is collected when you contact us, make a booking, use our website(s)\/apps, link to or from our website(s)\/apps, connect with us via social media and any other engagement we or our business partners have with you.<\/span><\/p>\n 2.PROCESSING YOUR PERSONAL DATA<\/b><\/p>\n Data processes<\/span><\/i><\/p>\n We may collect and process your personal data for the purposes set out below and disclose your personal data to Indochina Kite Travel companies or subcontractors for business purposes and also to our service providers who act as \u2018controller\u2019 or \u2018processor\u2019 on our behalf.\u00a0\u00a0<\/span><\/p>\n These purposes include:<\/span><\/i><\/p>\n Fulfilling the contract with you and legal obligations <\/span>(Articles 6(1)(b)<\/b> and <\/span>(c)<\/b> of the <\/span>GDPR<\/b>: In order for you to travel abroad, it may be mandatory as required by government authorities at the point of departure and\/or destination to disclose and process your personal data for immigration, border control and\/or any other purposes. Also, we need to provide airlines\/accommodation providers with your name, passport number, contact details, and other related information in accordance with their terms and conditions. If you do not provide us with this personal data, we might not be able to offer our services to you.<\/span><\/p>\n Fulfilling your and our legitimate interests <\/span>(Article 6(1)(f) of the GDPR)<\/b>: Where it is in both your and our benefit that we further process your personal data as part of our business administration, maintaining service quality, customer care, business management, risk assessment\/management, security, and operation purposes.<\/span><\/p>\n Consent:<\/b> For marketing purposes and other similar data processes that may require your authorization for their processing <\/span>(Article 6(1)(a)<\/b> of the GDPR). We will usually inform you before collecting your data if we intend to use your data for such purposes or if we intend to disclose your personal data to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we used to collect your data.<\/span><\/p>\n Explicit consent (Article 9(2)(a) of the GDPR):<\/b> Information such as health or religion may be considered \u2018sensitive personal data\u2019 under the GDPR. This personal data might include information necessary to arrange bookings and travel plans, including your allergies, disabilities, and other relevant health information. We collect it to provide you with our services, cater to your needs or act in your interest, and we are only prepared to accept sensitive personal data on the condition that we have your positive consent.<\/span><\/p>\n We will process your data for as long as possible in order to fulfil our service to you and comply with the applicable fiscal, tax, securities and commercial law regulations on retention of business and financial documentation.<\/span><\/p>\n Children<\/b><\/p>\n Our products and services are intended for adult customers.\u00a0 However, we may knowingly collect and process personal data on children under sixteen (16) if they are travelling with adults or as part of a group or for other reasons. On these occasions, we will take account of this event when processing the personal data of children and implementing the legal basis for such processing.\u00a0 For example, where the processing of personal data of children is based on their consent such as the processing of his\/her sensitive personal data, we will seek the consent of parents, tutors, or other adults holding parental responsibility over children, if required under the <\/span>GDPR<\/b>.<\/span><\/p>\n Links to other sites<\/b><\/p>\n We may propose hypertext links from our websites to third-party websites or Internet sources. We do not control and cannot be held liable for third parties\u2019 privacy practices and content.\u00a0 Please read their privacy policies carefully to find out how they collect and process your personal data.<\/span><\/p>\n Data transfers<\/b><\/p>\n Indochina Kite Travel<\/b><\/p>\n When we process your personal data, we will store it in our systems located outside the EEA.\u00a0 In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal data to the relevant third party.<\/span><\/p>\n Your data may also be processed by staff operating outside the EEA who work for us or for one of our suppliers (e.g., travel guides, transportation services). Such staff may be engaged in, among other things, the provision of support services.<\/span><\/p>\n Service providers<\/b><\/p>\n For the purpose of providing you with our services, including your booking of flight, hotel, security, incident\/accident management etc., we may disclose and process your personal data outside of the EEA countries. In order for you to travel abroad, it may be mandatory as required by government authorities at the point of departure and\/or destination to disclose and process your data for immigration, border control and\/or any other purposes. Also, we need to provide airlines\/accommodation providers with your name, passport number, contact details, etc. in accordance with their terms and conditions.<\/span><\/p>\n Legal compliance and security<\/b><\/p>\n It may be necessary for us \u2013 by law, legal process, litigation, and\/or requests from public and governmental authorities within or outside your country of residence \u2013 to disclose your personal data.\u00a0 We may also disclose your personal data if we determine that, due to purposes of national security, law enforcement, or other issues of public importance, the disclosure is necessary or appropriate.<\/span><\/p>\n We may also disclose your personal data if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.<\/span><\/p>\n Safeguards to protect your personal data<\/b><\/p>\n Where we share your data with a data processor or store your data, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.<\/span><\/p>\n By submitting your personal data, you agree to this transfer, storing or processing of your data.<\/span><\/p>\n 3.Our Records of Data Processes<\/b><\/p>\n We handle records of all processing of personal data in accordance with the obligations established by the <\/span>GDPR (Article 30)<\/b>, both where we might act as a controller or as a processor.\u00a0 In these records, we reflect on all the information necessary in order to comply with the <\/span>GDPR<\/b> and cooperate with the supervisory authorities as required <\/span>(Article 31)<\/b>.<\/span><\/p>\n 4.Security Measures<\/b><\/p>\n We process your personal data in a manner that ensures their appropriate security, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage.\u00a0 We use technical or organisational measures to achieve this level of protection.<\/span><\/p>\n We will retain your personal information for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.<\/span><\/p>\n 5.Notification of Data Breaches to the Competent Supervisory Authorities<\/b><\/p>\n In case of breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed, we have the mechanisms and policies in place in order to identify it and assess it promptly.\u00a0 Depending on the outcome of our assessment, we will make the requisite notifications to the supervisory authorities and communications to the affected data subjects, which might include you <\/span>(Articles 33 and 34 GDPR)<\/b>.\u00a0<\/span><\/p>\n 6.Processing Likely to Result in High Risk to your Rights and Freedoms<\/b><\/p>\n We have mechanisms and policies in place in order to identify data processing activities that may result in high risk to your rights and freedoms <\/span>(Article 35 of the GDPR)<\/b>.\u00a0 If any such data processing activity is identified, we will assess it internally and either stop it or ensure that the processing is compliant with the <\/span>GDPR<\/b> or that appropriate technical and organizational safeguards are in place in order to proceed with it.<\/span><\/p>\n In case of doubt, we will contact the competent <\/span>Data Protection Supervisory Authority<\/b> in order to obtain their advice and recommendations (Article 36 GDPR).<\/span><\/p>\n 7.Your Rights<\/b><\/p>\n You have the following rights:<\/span><\/i><\/p>\n You also have the right to obtain from us a copy of the Binding Corporate Rules or of any Standard Contract Clauses that we use if we transfer your personal data outside the EEA and take such arrangements.<\/span><\/p>\n To exercise your rights, or if you require further information about how your personal data is used by us, you can contact the staff member in charge of your travel or write to us at <\/span>info@indochinakitetravel.com<\/span><\/a>.<\/span><\/p>\n Following is the procedure when you want to execute these rights;<\/b><\/p>\n 8.When you want to complain about your personal data<\/b><\/p>\n We have appointed appropriate staff with management support to oversee and ensure compliance with the GDPR.<\/span><\/p>\n\n
\n