Data Protection Policy

 

The Data Protection Act 1998 came into force 1st March 2000 and describes how organisations must collect, handle and store personal information.  These rules apply regardless of whether data is stored electronically or on paper.

 

Every organisation that processes personal information has to register with the Information Commissioner’s Office (ICO), unless they are exempt.

 

Greatdays Hoidays Ltd appears on the Data Protection Register as ZA109286

 

There are 8 principles governing the processing of personal data:

  • Must be processed fairly and lawfully

  • Obtained only for specified and lawful purposes

  • Subject to appropriate technical and company measures to protect against unauthorised use, loss, destruction or damage.

  • Be adequate, relevant and not excessive in relation to the purpose for which it is obtained

  • Be accurate and kept up to date

  • Not be kept longer than necessary

  • Processed in accordance with the rights of data subjects under the Act

  • Shall not be transferred outside of the EU unless that country ensures adequate level of data protection.

 

Personal Data is defined as “data which relates to a living individual who can be identified from the data”.

 

The following Personal Data is held by Greatdays to maintain our database and interact with suppliers in order to deliver your holidays booked with us.

  • Contact details (name, address, email, phone number)

  • Dietary or Disability Special Needs

  • Passport and/or date of birth(where provided)

 

We sometimes need to share the above personal information we hold with hotels, airlines or other transportation services as required to comply with their needs to plan your arrival and special requests, and comply with other legal requirements.

 

Subject Access Requests (SAR)

 

Your rights

  1. We will take all reasonable steps to retain personal data only for the duration of the purpose for which it was obtained. The maximum retention period is 7 years, to comply with legal objectives.  When that period has expired or when requested by you to do so, we will delete personal information from current operational systems where it is no longer required. In limited circumstances we may need to continue to hold some details about you after your relationship with us has ended, for example for legal and regulatory reasons.

  2. You have the right to receive certain information from us about the personal data as set out in the GDPR Act 2018 that we hold about you. In certain circumstances you are also entitled to object to the processing of your personal data and have certain rights of access, rectification and/or removal of your personal data. To exercise these rights you should write to us at: Greatdays Travel Group, Data Protection Officer, Chapel House, 1 Borough Road, Altrincham, Cheshire, WA15 9RA.

  3. You have the right to complain to the ICO should you think that your personal data is not being handled correctly.

All Holidays on this website are operated by Greatdays Holidays Ltd, ATOL 4279 / ABTA YO380
All flight inclusive holidays on are financially protected by the ATOL scheme. When you pay you will be supplied with an ATOL Certificate. Please check to ensure that everything you booked (flights, hotels and other services) is listed correctly and if you have any queries please contact us. For more information about financial protection and the ATOL Certificate go to: www.atol.org.uk/ATOLCertificate.
All non-flight inclusive package holidays are financially protected by the ABTA scheme. Greatdays Holidays Ltd is a member of ABTA which means you have the benefit of ABTA’s assistance and code of conduct – http://www.abta.co.uk/
If you buy other travel arrangements such as accommodation only this protection does not apply.
Please see Greatdays Holidays Ltd booking conditions for further information.

Accepted Payment Methods ABTA ATOL