PRIVACY POLICY

                                                                                                              (last updated : 09 December 2023)
‍
WHAT OUR PRIVACY POLICY COVERS
‍
We want you to feel safe online. For that reason, we want to explain how we use the personal information we collect from users of the site, with a URL at www.crossatlantrip.com. By providing personal information on the site, you explicitly agree to our collection and use of all information as described in this privacy statement.

1. BOOKING TRAVEL
‍
1.1 What information do we collect ?

‍Personal information has the meaning given under your local data protection law, and, the meaning of personal data given under the GDPR, where applicable. Generally, the type of personal information we collect about you is the information that is needed to facilitate your travel arrangements and bookings and to arrange travel related services and/or products on your behalf.
‍
We therefore typically process the following types of personal information about you:
‍
• Contact information (such as name, residential/mailing address, telephone number, email address);
• Passport details;
• Payment account information (credit/debit card details, including card type, card number, security number and expiry date);
• Information about your dietary requirements and health issues (if any);
• Insurance details;
• ISIC information (where applicable);
• Travel and accommodation preferences;
• Comments you provide us.

When you make contact with us for other purposes, we may also collect personal information about you in relation to those purposes. For example, we may collect your personal information so we can contact you about a competition you have entered (e.g. if you win) or to respond to an enquiry or feedback you have sent to us. We also collect information that is required for use in the business activities of CrossAtlanTrip, including for example, financial details necessary in order to process various transactions and other relevant personal information you may elect to provide to us.
‍
1.2 HOW DO WE USE THAT INFORMATION ?
‍
We will only collect personal information in compliance with your local data protection laws. We usually collect your personal information from the information you submit during the course of your relationship with us. Generally, this collection will occur when you:
‍
• Contact us in person, by telephone, letter, email;
• Visit our website;
• Connect with us on social media.

We may collect personal information about you when you:
‍
• Purchase or make enquiries about travel arrangements or other products and services;
• Enter competitions or register for promotions;
• Subscribe to receive marketing from us (e.g. e-newsletters);
• Request brochures or other information from us; or
• Provide information, or use our services, on social media.

Unless you choose to do so under a pseudonym or anonymously, we may also collect your personal information (except sensitive information) when you complete surveys or provide us with feedback. In some circumstances, it may be necessary for us to collect personal information about you from a third party. This includes where a person makes a travel booking on your behalf which includes travel arrangements to be used by you, and vice versa (i.e. a group booking made for you by your friend or a group making made for a friend by you). Where this occurs, we will rely on the authority of the person making the travel booking as the Lead passenger to act on behalf of any other passenger on the booking. The Lead Passenger agrees to have obtained the consent of the other person for CrossAtlanTrip to collect, use and disclose the other person’s personal information in accordance with this Policy.

You should let us know immediately if you become aware that your personal information has been provided to us by another person without your consent or if you did not obtain consent before providing another person’s personal information to us.

We strive to maintain the accuracy of your personal information that we store, however, you can assist us with this considerably by promptly contacting us if there are any changes to your personal information or if you become aware that we have inaccurate personal information relating to you. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal information that you, or a person acting on your behalf, provide to us.
‍
1.3 WHY DO WE USE THAT INFORMATION ?
‍
‍We will only process your information, where:
‍
• you have given your consent to such processing (and may withdraw at any time);
• the processing is necessary to provide our services to you;
• the processing is necessary for compliance with our legal obligations; and/or
• the processing is necessary for our legitimate interests or those of any third party recipients that receive your personal information

In detail: When you contact us in relation to a travel booking or query, we collect your personal information generally to provide you with travel advice and/or to assist you with booking travel and/or travel related products and services. However, the purpose for collection may differ depending on the particular circumstances as disclosed in this Policy (e.g. collection of your personal information for the purpose of your participation in a competition, provision of feedback, etc.).

When you book or otherwise arrange travel related products and services through us, we usually act as an agent for the relevant travel service providers (e.g. for a hotel). In this case, we process your personal information as necessary so as to provide the services you requested from us. This usually includes collecting personal information about you both for our internal purposes as described in this Policy and for the travel service provider for whom we act as agent (e.g. to provide you with the booked services). For example, if you book pre-accommodation through us, then we use your personal information to enable your accommodation to be booked and disclose it to the hotel solely for this purpose.

We may therefore share your information with our travel service providers such as hotel, airline, car rental, or other providers, who fulfil your travel bookings. We encourage you to review the privacy policies of any third-party travel service providers whose products you purchase through us. We will provide you with copies of all relevant travel service provider terms, conditions and privacy policies on request.
‍

2. PAYMENT DETAILS
‍

2.1 What information do we collect ?

Your payment information (credit/debit card details, including card type, card number, security number and expiry date). The transaction is processed by STRIPE to ensure fast and secure payment which meets the PCI DSS v3.1 requirements. We accept all major credit and debit cards (VISA, Mastercard, American Express) as well as bank transfers.

You will be able to enter your payment details at the time of your placing of your booking using a valid credit or debit card (VISA, Mastercard, American Express). The applicable amount will immediately be reserved on your card but will not be debited until you get confirmation email from us.

All information is encrypted using client-side encryption and sent to Adyen B.V via secure servers (SSL/HTTPS). Camoshort reserves the right to check the validity of the credit or debit card, its credit status in relation to the order value and whether the address data that you have provided correlates with the address data of the credit or debit card. CrossAtlanTrip may refuse orders depending on the result of these controls. In light of the above, it is advisable to make sure that you have sufficient funds on your credit or debit card before you place your order. Credit card companies may block foreign online purchases for security reasons why you need to contact your credit card company and ask them to remove such blocks if applicable.
‍
2.2 How and why we use that information ?

• Take payment and issue refunds : We’ve got to do this to perform our agreement with you and accept payment for a booking you place. And we would also like to be able to give you your money back if you decide to cancel your booking.
‍
• Fraud prevention and detection : To prevent and detect fraud against either you or us. Unfortunate, but absolutely necessary.
‍
3. TRACKING TECHNOLOGIES & COOKIES

‍We may use third-party web analytics services on our websites and mobile apps (such as Google, Facebook, affiliate tracking etc.). The analytics providers that administer these services use technologies such as cookies and web beacons to help us analyse how visitors use our websites and apps.
‍
When you access our website, open electronic correspondence or communications from us, our servers may record data regarding your device and the network you are using to connect with us, including your IP address. An IP address is a series of numbers which identify your computer, and which are generally assigned when you access the internet. We may use IP addresses for system administration, investigation of security issues and compiling anonymised data regarding usage of our website and/or mobile applications. We may also link IP addresses to other personal information we hold about you and use it for the purposes described above (e.g. to tailored online advertising, provided you have opted in).

• WHAT IS A COOKIE?
‍
A Cookie is small file that is stored on a user’s computer which is designed to hold a modest amount of data specific to a particular client and website and can be accessed either by the web server or the client computer. While you visit a particular website, a cookie may be used to track the activities of your browser as well as provide you with a consistent, more efficient experience.

• HOW DOES CROSSATLANTRIP USE COOKIES?

Cookies may be used to help speed up the booking process so you do not need to re-type the same information. We may use cookies to measure website usage such as number of visitors on a certain page, entry and exit points of visitors, and details of activities and searches performed with related information. If you are making a purchase, we may also use cookies to keep track of the transaction from one page to the next. We do not store any personal information in the cookie or use it for any other purpose.

‍
4. YOUR RIGHTS
‍
‍
You have a lot of rights relating to your personal information. First and foremost, you’re protected by The EU General Data Protection Regulation (GDPR) which we aim to follow to the point. Among others, this is what we believe is your most important rights:

• The right to be informed about how your personal information is being used (like this notice!)
• The right to access the personal information we hold about you
• The right to request the correction of inaccurate personal information we hold about you (although you most likely will be able to do this through your account)
• The request to request that we delete your data, or stop processing it or collecting it, in some circumstances
• The right to stop receiving direct marketing messages, which you can do through your account, at the bottom of each email or by contacting us
• The right to request that we transfer or port elements of your data either to you or another service provider

In compliance with the Children’s Online Privacy Protection Act, we do not collect any information from anyone under 13 years of age. In addition, we do not permit individuals who are under the age of 18 to purchase products on our Site. Our Site, products, and services are all directed to people who are at least 18 years old or older. If you’re under the age of 18, you should not use our Site or purchase any of our servicess from our website.

4. CHANGES TO OUR PRIVACY POLICY

The use of your information is subject to the privacy policy in effect at the time of use. We may amend this privacy policy from time to time. We post the current effective date of this policy at the top of the policy. Changes to the policy will be posted in the revised privacy policy with a new effective date on our website. We encourage you to review our privacy policy periodically because by visiting our Site you agree to accept any such changes.

If we make significant changes, we will make that clear on the Site, or by some other means of contact such as email, so that you are able to review the changes before you continue to use our website and services.