1. About the Privacy Policy
The purpose of the Privacy Policy (hereinafter: "Privacy Policy") is to familiarize the users of the services of Adventure Roads Limited, 299A Bethnal Green Road, London E2 6AH (hereinafter: the Company), and other persons (hereinafter: individuals) with the purposes and basis of the processing of personal data by the Company and the rights of individuals in this area.
The Company places particular emphasis on the security of your personal information. All transmitted personal data are treated as confidential and used only for the purpose for which it was transmitted. We handle your personal data with utmost care, bearing in mind the applicable legislation and the highest standards of processing. In order to protect your personal data as effectively as possible, we use appropriate organizational measures, work procedures and advanced technology solutions, as well as external experts. We also use an adequate level of protection and reasonable physical, electronic and administrative measures to protect the collected data from unintentional or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access to personal data that has been downloaded, stored or otherwise processed.
At the same time, this Privacy Policy further explains the consent you have given us for the processing of your personal information.
In compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR), the Privacy Policy covers the following information:
- contact information of the company,
- purposes, bases and types of processing of various types of personal data of individuals,
- the time of retention of individual types of personal data,
- the rights of individuals relating to the processing of personal data,
- the right to lodge a complaint concerning the processing of personal data,
- transfers of data to third parties and outside European Union.
2. The personal data controller
The controller of personal data processed in accordance with this Privacy Policy is the Company, Adventure Roads Limited, 299A Bethnal Green Road, London E2 6AH.
3. Categories of individuals whose personal data are processed
This Privacy Policy applies to all individuals who use or are subscribed to our services, or have submitted inquiries, as well as everyone who visits our website.
4. Personal data collected by the company
If you are only a visitor to a website, we only collect your data using cookies. If you are a service user or a subscriber to a service provided by the Company, we also collect other personal information that we need to provide the services you use or are subscribed to.
This personal data include, but are not limited to, your name, sex, birth date, address, country of residence, phone number, e-mail address, emergency contact information, passport information (where required), trip evaluations, travel and accommodation preferences, comments you provided us, trip destination information, and payment-related information.
5. The purpose and bases for data processing
5.1. Processing on the basis of a contract:
In the context of the execution of contractual rights and the fulfilment of contractual obligations, the Company processes your personal information for the following purposes:
• identification of the individual,
• preparation of an offer,
• conclusion of a contract,
• provision of ordered services, where the Company may also need to transfer your personal information to travel suppliers and other third parties, including where a third party is based outside of the EEA, if necessary for the purpose of providing the Company's services;
• notification of any changes, additional details and instructions for the use of services;
• solution of any technical problems, objections or complaints,
• billing of services, and
• other purposes as required for the implementation or conclusion of the contractual relationship between the company and an individual.
5.2. Processing on the basis of the law:
The Company collects, uses or discloses your personal information for the purposes of offering or booking travel services on your behalf.
In accordance with the law, the Company may forward personal data to business partners, the police, or to other competent authorities.
5.3. Processing on the basis of legal interests:
The Company collects and uses your personal information on the basis of legal interests, which includes direct marketing.
On the basis of legitimate interest, the Company may contact you for the purpose of improving the Company's services or obtaining the clients' feedback regarding the services rendered.
The Company has a legal interest in keeping and using the data for further marketing activities, business strategy analysis and research.
5.4. Processing on the basis of consent for the processing of personal data:
Data processing can also be based on your consent, which you have provided to the Company.
Consent may, for example, relate to the notification of offers, benefits and improvements of the services provided by the Company. The purpose of this information is to tailor the services to your needs and desires as closely as possible and to thereby increase the practical value for you. Communication is carried out via the channels that you have selected in your consent.
You can either revoke or alter your consent at any time, in the same way as you gave it or otherwise as defined by the Privacy Policy, whereby the company reserves the right to identify the customer.
The revocation or alteration of consent refers only to data processed on the basis of your consent. The most recent consent that has been received from you is valid. The possibility of revoking your consent does not constitute a resignation from the business relationship with the company.
6. Restrictions on the transmission of personal data
6.1. Transmission of personal data to third parties
The Company may transfer your personal information to travel suppliers and other third parties (e.g. hotels, air companies...), if that is necessary for the purpose of providing you with the Company's services or to other companies and individuals who perform the certain tasks that complement our services (e.g. accounting services, marketing, IT services...).
For external processors, such data will only be transmitted or made accessible to the extent required by a specific purpose.
On the basis of a reasoned request, companies also provide personal data to the competent state authorities on a legal basis. This could also involve the state authorities of another EU Member State.
6.2. International transfers of personal data
In accordance with the law, your personal data may be transferred, processed or stored by third parties outside of the EEA.
7. Period of retention of personal data
The data retention period is determined according to the category of the individual data. We keep the data for as long as necessary to achieve the purpose for which it was collected or further processed, or until the expiration of the limitation period for the fulfilment of the obligation or the statutory retention period.
For the purpose of fulfilling contractual obligations, the accounting data and the associated contact details of individuals may be kept until the full payment for the service or at the latest until the expiration of the limitation period in respect of an individual claim, which may legally last from one to five years. Invoices are kept for 10 years after the expiration of the year the invoice relates to in accordance with the law governing the value added tax.
Other information that we have obtained on the basis of your consent are kept for the duration of the business relationship and for two years after the termination, unless the law provides for a longer retention period. If an individual who has given consent to the processing of personal data has not entered into a business relationship with us, their consent is valid for 2 years from delivery or until revocation.
After the expiry of the retention period, the data is deleted, destroyed, blocked or anonymised if the law does not specify otherwise for the particular type of data.
8. The rights of individuals relating to the processing of personal data
We guarantee the exercise of your rights regarding the processing of your personal information without undue delay. We will decide on your request within one month of receiving it. In case of complexity and a greater number of requests, the deadline may be extended by up to two additional months. If we extend the deadline, we will notify you of any such extension within one month of receiving the request along with the reasons for the delay.
We accept requests regarding the exercise of your rights at info@mototourseurope.com, or by post at Adventure Roads Limited, 299A Bethnal Green Road, London E2 6AH.
When submitting an application by electronic means, we will, whenever possible, provide you with information electronically, unless you request otherwise.
Where there is reasonable doubt as to the identity of the individual who submits a claim relating to one of their rights, we may request the provision of additional information necessary to confirm the identity of the data subject.
Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the company may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or it may refuse to act on the request.
You have the following rights regarding the processing of your personal information:
• the right to access data,
• the right to rectification,
• the right to erasure ("right to be forgotten"),
• the right to the restriction of processing,
• the right to data portability,
• the right to object.
8.1. The right to access data
You are always entitled to know whether personal data is processed in relation to you and, if so, you are also entitled to access your personal information, as well as the following information:
- the purposes of the processing,
- the types of personal data being processed,
- the users or categories of users to whom the personal data has been or will be disclosed;
- the foreseen period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period,
- the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of processing your personal information, or the existence of the right to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- if the personal data is not collected from the data subject, any available information as to its source.
8.2. The right to rectification
You have the right to have any correction of inaccurate personal information relating to you performed without undue delay and, taking into account the purposes of the processing, the right to complete any incomplete personal data, including the submission of a supplementary statement.
8.3. The right to erasure ("right to be forgotten")
You have the right to have your personal information deleted without undue delay, if one of the following reasons applies:
- the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
- you revoke the consent on the basis of which the processing takes place and there is no other legal basis for processing,
- you object to the processing of data and there are no overriding legitimate reasons for processing it,
- personal data has been processed unlawfully,
- personal data has to be deleted in order to fulfil a legal obligation in accordance with EU law or Croatian law.
8.4. The right to restriction of processing
You have the right to limit the processing of your personal information when one of the following applies:
- you are contesting the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
- we no longer need your personal data for the purposes of the processing, but it is required by yourself for the establishment, exercise or defence of legal claims;
- you have filed an objection regarding processing based on the legitimate interests of the company, until it is verified whether our legitimate reasons outweigh your reasons.
8.5. The right to data portability
You have the right to receive your personal information, which you have provided us, in a structured, widely used and machine-readable form, and the right to forward this information to another controller without the Company hindering you from doing so, when the processing is based on your consent and the processing is carried out using automated means. At your request, when technically feasible, personal data may be transferred directly to another controller.
8.6. The right to object
Whenever your data is processed on the basis of a legitimate interest for marketing purposes, you may object to such processing at any time.
We will stop processing your personal data unless we prove necessary grounds for processing that prevail over your interests, rights and freedoms, or to establish, enforce or defend legal claims.
9. The right to lodge a complaint concerning the processing of personal data
Any complaint regarding the processing of your personal data may be sent to the e-mail address info@mototourseurope.com or by post to the address of the company Adventure Roads Limited, 299A Bethnal Green Road, London E2 6AH.
If we do not decide on your request within the legal deadline or if we reject your request, you have the option to lodge a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Croatian or EU regulations in the field of personal data protection.
If you have exercised the right of access to the information and if, after receiving the decision, you believe that the personal data you received is not the personal information you requested or that you did not receive all the required personal information, you can lodge a reasoned complaint before submitting a complaint to the Information Commissioner with the company within 15 days. We need to decide on your complaint as a new request within five business days.
10. Final Provisions
Any matter not governed by this Privacy Policy is subject to applicable laws.
The Company reserves the right to change this Privacy Policy.
If the Company will make a change to the Policy, the revised version will be posted on the Company's website. Please refer to this Privacy Policy for the latest information about the Company's personal information practices.
This Privacy Policy shall enter into force on the 1st November 2019.
London, 01.11.2019 Adventure Roads Limited
