Data protection

PRIVACY POLICY OF TRAVEL GROUP LUXEMBOURG

 

1. Who is responsible for your data?

The protection of your privacy and your personal data is important to us. This privacy policy explains how Travel Group Luxembourg collects and uses your personal data when providing our services or when visiting our website.

References in this Privacy Policy to "TGL", "we", "us" or "our" refer to Travel Group Luxembourg s.à.R.l. (a company registered in Luxembourg under the number B.254425 with its registered office in Luxembourg at the address given below).

For the scope of this document, we determine how we collect your personal data and for what purposes your personal data will be used, since we are the "controller" as defined in the GDPR Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "the Regulation").

 

More responsible:

Travel Group Luxembourg s.à.r.l.

1A, rue Jean Piret, L-2350, Luxemburg.

Luxemburg

T : +352 50 10 50 1000

E: gdpr@tgl.lu 

 

The data protection officer of TGL can be contacted at the above address.

2. Personal Data we collect about you

When we use the term "personal Data" in our Privacy Policy, we mean information about you that allows us to identify you either directly or in combination with other information that we may have. For example, your personal data may include your name, contact details, information about your travel itinerary (e.g. your booking reference number) or information about how you use our websites and applications or how you interact with us.

We collect certain personal data from you, for example, when you book a trip with us, use our websites or applications, use our services or contact us. We may also receive your personal data from our providers who provide services to you on our behalf (for example, if you provide feedback on our Services), from our partners when you purchase their travel-related products, or from third parties acting on your behalf, for example, travel agencies or other parties who book a trip for you. If you book a trip on behalf of another person, you will need their consent to the use of their personal data.

 

We process your personal data only if you have given your consent, if this is necessary for the performance of a contract that you have concluded with us, or for the performance of a legal obligation to which we are subject. We can only process personal data on the basis of our legitimate interest if this interest does not outweigh your fundamental rights and freedoms. For more information about the parties with whom we share your personal data or from whom we receive your personal data, please see section 8 below.

 

If you use the "Contact us" form to get in touch with us, your data will be used exclusively to process your request. None of the data sent to us via the contact form is stored in a database on our servers.

 

Categories of data we collect

We may collect and process the following categories of data about you:

Your first and last name and your contact details (e-mail address, telephone number and postal address).    

  • When you create an account on our website.

  • When you book a trip.

  • If you participate in our competitions or

  • When you select an offer that we make available on our websites.

Information about your bookings and your itinerary in case you need special assistance or have special dietary needs. This information may include changes to your bookings and the travel products associated with your booking (for example, if you take out travel insurance, rent a car or book a hotel at the same time as your travel booking).

When you book your trip or manage travel plans.

 

Information about your health if you have a medical condition that could affect your trip (for more information, see the "Sensitive Personal Data" section below).

If you provide us with this information before boarding a plane or embarking on a trip.

 

Information about other travelers in your booking and the age group of children traveling with you.

When you make a booking for other passengers.

 

Information about your transaction, including the details of your credit card payment.

When you buy products or services from TGL.

 

Advance information about the traveler. This information includes your full name, nationality, date of birth, gender (if necessary), the number and type of your travel document (for example, passport or identity card), its expiration date and the country in which it was issued.

When you register for certain itineraries.

 

Information about your travels and our services related to your travels (e.g. automatic luggage storage, lost luggage reporting).

When you book a trip through TGL.

 

Information about your purchase of travel-related products and services from our partners.

When you purchase such products or services.

 

Communications that you exchange with us (e.g. your e-mails, letters, calls or messages in our online chat service).

When you contact TGL or are contacted by TGL.

 

Your posts and messages on social media addressed to us.

When you interact with us through our social media.

 

Ihr Feedback.

When you respond to our feedback requests or participate in our customer surveys.

 

Information about how you use our websites or mobile applications, such as your travel searches.

When you browse our websites or use our mobile application services.

 

Sensitive Personal Data

As part of the services we provide to you, we may collect information that may reveal your racial or ethnic origin, physical or mental health, religious beliefs, or the commission or alleged conviction of criminal offenses. This information is considered "sensitive personal data" within the meaning of the Regulation. We only collect this information if you have given your express consent and this is absolutely necessary, or if you have obviously made this information public.

 

For example, we may collect this information in the following circumstances:

  • For your safety: if you have a certain medical condition, you must inform us about it and - if necessary - present a medical certificate.

  • If you request special assistance during a trip, this may reveal information about your health (for example, if you request a wheelchair). If you inform us about your particular dietary needs, this could possibly indicate that you have certain religious beliefs.

  • If you do not allow us to process sensitive personal data, this means that we may not be able to provide all or part of the services you have requested.

Personal data of the applicant

Your personal data will be stored and processed in accordance with the Luxembourg Law of 1 August 2018 and the EU General Data Protection Regulation 2016/679 (GDPR). Your data will be treated as strictly confidential. Your personal data will be processed by us exclusively for the evaluation of your application. They will only be passed on to third parties who process your application for our purposes if solid security measures are in place. If you submit an application for an open position, data that includes, but is not limited to, your name, address, telephone number and e-mail address will be collected in order to process your online application.

Your application will be processed by the responsible authorities in due course. If we cannot find a vacancy that matches your profile, we will inform you about it and delete all your personal data. However, if we are interested in your profile, but there is no vacancy corresponding to your profile at the time of submitting your application, and you give your consent, we will keep the details of your application for a period of 12 months.

3. How and why we use your personal data

We use your personal data for the following purposes:

  • To manage your travel bookings and to offer you our services.

If you take a trip with us, we will use your data to carry out our services related to your trip, for example, to issue your tickets, check you in, issue your boarding pass in case of a trip and take you safely to your destination. We also use them to change your travel bookings when you request it.

  • To communicate with you and to manage our relationship with you.

Occasionally we may need to contact you for administrative or operational reasons (e.g. by email and/or SMS), e.g. to send you confirmation of your bookings and payments, to inform you about your itinerary or to notify you of disruptions and changes to your trips. If you use our mobile applications, we may also send you application notifications for these purposes.

Please note that these communications are not for advertising purposes and that for this reason you will continue to receive these communications even if you refuse to receive promotional communications.

We will also use your personal data if we contact you after you have sent us a request or filled out a web form via our website.

Your opinion is very important to us, so we can contact you (e.g. by e-mail or SMS) to ask for your opinion.

We will use the communications you share with us and the feedback you give us to manage our relationship with you as a customer and to improve our services and experiences for customers.

  • To personalize and improve your customer experience.

We may use your personal data to tailor our services to your needs and preferences and to provide you with an individual customer experience. For example, when you inform us about your preferred destinations.

We may also collect information about how you use our websites, which pages of our websites you visit most often, which destinations you search for and which products you buy in order to understand what you like. We may use this information to customize the content and offers you see on our website and, if you have consented, to receive promotional communications.

If you are currently making a booking with your account and are leaving our website before you have placed your order, we may contact you to help you complete your booking in an easy way.

  • To inform you about news and offers that may be of interest to you.

We may send you promotional communications for our trips and travel products if you have indicated that you would like to receive these communications, for example, if you create an account on our website or make a booking with us and do not express that you do not want to receive these communications. If you would like to receive promotional communications, we will send you messages from us, e.g. about new products that may interest you or about offers that you may like.

In addition, we will also send you communications that promote products and services of our partners that may be related to your travel arrangements, if you have indicated that you would like to receive them.

Please note that we will not pass on your contact details and other personal data to these partners or other companies for advertising purposes.

If you do not want to receive information about our products and services, just let us know by selecting the appropriate option before confirming your booking. You may also opt out of receiving promotional communications at any time by clicking on the relevant unsubscribe link at the bottom of any commercial email you may receive from us. If you prefer, you can also call our customer service and express your wish to stop receiving promotional communications.

  • To improve our services, to fulfill our administrative purposes and to protect our business interests.

The business purposes for which we use your data include accounting, invoicing and auditing, credit or other payment card verification, fraud detection, security and legal purposes, statistical analysis and marketing, testing, system maintenance and development.

  • To comply with our legal obligations.

For example, to comply with our obligation to disclose your data to national authorities if necessary.

4. Request for information about your personal data

You have the right to request information about the personal data that we have stored about you. This may be information about bookings in connection with trips that you have made with us.

If you would like to request a copy of your personal data or have any questions about your personal data, please send a letter to the appropriate contact person as described in section 11 "Contact Information".

5. Security of your personal data

We undertake to take appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful processing as well as from accidental loss, destruction or damage to the personal data.

This means that we adhere to high security standards to protect the data of your payment card when you provide us with this data. Our security measures are subject to a continuous improvement process and our data protection guidelines are constantly being revised.

As described in this Privacy Policy, we may share your personal data with third parties in certain cases. If TGL passes on your personal data to a third party, we require that this third party has taken appropriate technical and organizational measures to protect your personal data.

In some cases, we may be required by law to disclose your personal data to a third party, and we have limited control over how that data is protected by the third party. The data that you provide to us will be stored in our systems, which are located on our premises or on the premises of a commissioned third party. We may also allow other third parties who work for us for the purposes described in this Privacy Policy or for other purposes approved by you to access your data. We will keep your personal data for as long as we need it to fulfill our purposes set out in this Privacy Policy or to comply with the law. Further information on specific retention periods is available on request.

6. Notification in case of violation of your personal data

In the unlikely event of a security breach that results in the destruction, loss, alteration, unauthorized disclosure or accidental or unlawful access to your personal data (such as sending personal data to an incorrect recipient or losing the availability of personal data), we undertake to make an informed decision as to whether we will notify the competent supervisory authority within 72 hours and you, if the personal data breach is likely to result in a high risk or a risk to your rights and freedoms, without undue delay.

7. Data collection on our website

SSL or TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version

  • operating system used
  • Referrer URL
  • Hostname of the accessing computer

  • Time of the server request

  • IP address

This data will not be merged with other data sources.

 

The basis for data processing is Art. 6 Par. 1 lit. f. GDPR, which enables the processing of data for our legitimate interest in the proper functioning of our website.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 Par. 1 lit. a. of the GDPR). You can revoke this consent at any time. An informal message by e-mail to the following address is sufficient for this gdpr@tgl.lu . The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods - remain unaffected.

Registration on our website

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration. For important changes, such as the scope of the offer or for technically necessary changes, we will use the e-mail address provided during registration to inform you in this way. The processing of the data entered during registration takes place on the basis of your consent (Art. 6 Par. 1 lit. a. of the GDPR). You can revoke your consent at any time. For this purpose, an informal message by e-mail to the following address is sufficient: gdpr@tgl.lu . The legality of the data processing that has already taken place remains unaffected by the revocation.

 

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 Par. 1 lit. b. of the GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only to the extent necessary to enable or bill the user for the use of the service.

 

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission at the conclusion of the contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution responsible for payment processing.

A further transmission of the data will not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 Par. 1 lit. f. of the GDPR, which allows the processing of data for our legitimate interests in order to ensure the correct functioning of our website.

8. Cookies or other tracking technologies

In order to improve our Services, provide you with more relevant content and analyze how visitors use our websites and applications, we may use technologies such as cookies, pixels or tracking software. Please note that in most cases we will not be able to identify you based on the information we collect using these technologies.

For example, we use software to monitor customer traffic patterns and website usage so that we can further develop the design and layout of the website to improve the experience of visitors to our website.

We also use cookies on our websites, in our mobile applications or in our emails. Cookies are small pieces of information that are stored by your browser on the hard drive of your computer. They allow you to navigate through our websites or applications and allow us to provide features such as storing aspects of your recent travel searches to make the following searches faster. You can refuse and delete cookies if you wish. While some cookies are required for viewing and navigating our websites or applications, most of the features are accessible even without cookies.

Most of the cookies we use are so-called ”session cookies". They are automatically deleted after the end of your visit (session). Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 Par. 1 lit. f of the GDPR is stored. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, they will be treated separately in this privacy policy.

In any case, the data resulting from cookies will be deleted after a period of twelve months.

  • Category 1: Strictly necessary cookies

These cookies enable services that you have specifically requested.

These cookies are essential to enable you to move around the TGL websites and use their functions, such as accessing secure areas of the website. Without these cookies, the services you have requested, such as electronic invoicing, may not be able to be provided.

  • Category 2: Performance-related cookies

These cookies collect anonymous information about the pages visited.

These cookies collect information about how visitors use the TGL websites, e.g. which pages visitors visit most often and whether they receive error messages from websites. These cookies do not collect any information that can be used to identify a visitor. All the information collected by these cookies is aggregated and therefore anonymous. They are used exclusively to improve the functioning of the TGL websites.

  • Category 3: Functional cookies

These cookies remember the choices you have made in order to improve your experience.

These cookies allow the TGL websites to remember the choices you have made (such as username, language or travel preferences) and to provide improved and more personalized features. For example, by providing you with the prices for local airports or reminding you to check in online. These cookies can also be used to save changes that you have made to the text size, fonts and other parts of the web pages that you can customize. Strictly necessary, performance- and function-related cookies.

We need to use these three categories of cookies to maintain the efficiency and usability of the TGL websites and to provide you with a consistent experience. We have therefore not provided any possibility to deactivate them independently, and by using our website and our online services, you agree that we may place these types of cookies on your PC.

  • Category 4: Cookies for targeting/advertising

These cookies use information about your surfing behavior to make the advertising more relevant to you and your travel needs.

These cookies are used to deliver advertising that is more relevant to you and your travel needs. They are also used to limit the number of times you see an advertisement, as well as to help measure the effectiveness of our digital advertising campaigns. They are placed by third-party advertising networks on our behalf and with the permission of TGL. They remember that you have visited the TGL websites, and this information is shared with other organizations, such as media owners.

You can reject them and continue to use the website.

This website uses cookies. We use cookies to personalize content and ads, to provide social media features and to analyze our traffic. We also share information about your use of our website with our social media, advertising and analytics partners, who may combine it with other information that you have provided to them or that they have collected from your use of their services. You agree to our cookies if you continue to use our website. Cookies are small text files that can be used by websites to make the user experience more efficient.

According to the law, we may store cookies on your device if they are absolutely necessary for the operation of this website. We need your consent for all other types of cookies.

This website uses different types of cookies. Some cookies are set by third-party providers that appear on our pages.

You can change or withdraw your consent at any time in the cookie statement on our website or send an informal email to the following address: gdpr@tgl.lu .

For more information about who we are, how you can contact us and how we process personal data, please see our Privacy policy.

Please provide your consent ID and the date when you contact us regarding your consent.

Your consent applies to the following domains: travel-inspirations.lu

9. Analysis tools and advertising on our website

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the U.S. and stored there. The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f. of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on our website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Google Analytics opt-out. For
more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Order data processing

We have concluded an order data processing agreement with Google and fully implement the strict requirements of the data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

 

Within the framework of Google AdWords, we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

 

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not want this tracking cookie to be used, you can object to its use by deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. a. of the GDPR. The legal basis for this processing is your consent via the cookie banner.

 

More information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

10. Plugins and tools on our website

Typeform

Our website uses Typeform, a third-party service provider, to enhance user engagement and streamline data collection. More specifically, when you interact with the “Request” plug-in on our website, your personal information, such as your name, email address, phone number and travel preferences are collected. This is only for the purpose of providing you with the requested quote for your trip. You can find more information on how TypeForm processes your personal data in their privacy policy.

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR.

For more information on the handling of user data, please refer to YouTube's privacy policy at: https://policies.google.com/privacy?hl=en&gl=en.

Vimeo

Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on the handling of user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy.

Google Web Fonts

Our website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR.

If your browser does not support web fonts, a default font is used by your computer.

For more information on Google Web Fonts, please 

visit https://developers.google.com/fonts/faq and see Google's privacy policy: https://www.google.com/policies/privacy/.

Google Maps

Our website uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

11. Our social network pages

Every time you access our social network pages (Facebook, Instagram, LinkedIn, YouTube), various data is generated, such as the amount of data transferred, the IP address used or the time of access. The technical access as well as the further use of these data, which accrue in the course of accessing the social network sites, are generally the responsibility of the operators of these social networks. We have neither access to the usage data collected nor can we determine how this data is used by the various operators. Accordingly, we are not responsible for the further handling of this data from a data protection perspective. However, we must point out that the data processing by Facebook, Instagram, LinkedIn or YouTube may take place outside the EU or the European Economic Area. For further details on the handling of data collected by the operators, please contact the respective operator itself.

We only receive statistical and anonymous evaluations from the social network operators regarding access to our opened social network pages. In addition, we - like any other user - see the posts made by the individual persons on these pages. No further evaluation of this data is carried out by us.
We would like to point out that contributions posted by you on our individual social network pages can generally be accessed worldwide.

 
For more information on how Facebook processes your data, please click here: https://www.facebook.com/full_data_use_policy.
Further information on the processing of your data by Instagram can be found here: https://help.instagram.com/519522125107875?helpref=page_content
Further information on the processing of your data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy
Further information on the processing of your data by Youtube can be found here: https://www.youtube.com/static?template=terms

12. Disclosure of your personal data

We may share some of your personal information with, or receive your personal information from, the following categories of third parties:

  • Airports, government agencies, law enforcement and regulatory authorities when necessary to get you to your destination or required by law. For example, for certain travel routes, we are required by law to provide border control agencies with information about your travel documents and itinerary. This information is known as "Advanced Traveller Information".
  • Credit and Debit Card Companies. TGL shares some of your personal information, which includes information about your payment method and travel booking, with the credit or debit card company that issued the card you used to make your booking. To ensure the security of your transactions and to prevent or detect fraudulent transactions, we may also share your information with our fraud detection partner.
  • Our partners who offer travel-related products and services on our websites, promote offers or co-host contests on our websites.
  • From time to time, we make certain third party offers available on our websites or post contests that are co-organized by third parties. If you choose to purchase products or services offered by third parties on our websites, accept offers, or enter a contest, some of your personal information, such as your contact and billing information, may be collected directly by or shared with that third party. Thus, if you purchase their products or services, your information may be collected or shared with those parties. Note: Our partners have their own privacy policies and terms of use over which TGL has no control. Although TGL carefully selects these partners, TGL is not responsible for their privacy policies, terms of use, or the way they process your personal information. Please ensure that you read the relevant privacy policies and terms of use of these partners before purchasing their goods or services, using their websites, applications or services, or providing them with personal data.

  • Our contractors and other subcontractors for the provision of our travel agency services, such as our IT service providers, websites, booking and travel applications, and our compliance service providers.
  • Your data may also be shared within our group of companies (1). 

International transfer of personal data

Your data may be transferred to countries outside the European Economic Area. In this case, we will take steps to ensure that appropriate safeguards are in place to protect that data. Appropriate safeguards may include a data transfer agreement with the data recipient based on the European Commission's Standard Contractual Clauses (SCC) or another appropriate mechanism under Chapter V of the GDPR. For more details about the transfers described above and the appropriate safeguards used in connection with those transfers, please contact us at gdpr@tgl.lu

 

Authorities

We may disclose your personal information if required to do so by the law of any jurisdiction to which TGL may be subject. On our websites, we provide links to third-party websites that are subject to separate privacy policies. Please be advised that this Privacy Policy does not apply to those websites and that TGL is not responsible for the information that third parties may collect on those websites.

 

(1) Our company is part of the following groups:
- SLG, 4, rue Laangwiss, L-4940 Bascharage RCS Luxembourg B.78631.
- emile weber, 15, rue d'Oetrange, L-5411 Canach, RCS Luxembourg B.16639.

13. Your rights

In summary, you have the following rights granted to you by the Ordinance, namely

  • Right to access the personal data provided to us and, if applicable, to receive a copy of this data.
  • Right to request that your data be corrected or completed if you consider it to be inaccurate or incomplete.
  • Right to request the deletion of your data, unless there is a compelling legitimate reason for keeping your data.
  • Right to object to the processing of your data at any time, unless there is a legitimate reason that overrides your interests, rights and freedoms.
  • Right to request that the processing of your data be restricted.
  • Right to portability of certain data, i.e. the right to receive this data in a structured, common and machine-readable format so that it can be forwarded to another "responsible party".
  • Right to complain to the supervisory authority..

 

We will endeavor to respond to your request quickly and within one month of receiving it. Depending on the complexity of the request and the number of requests to be processed, we have the option to extend this response period by two months. You will be notified of any such extension and the reasons for the delay within one month of receipt of the request. We reserve the right to deny the request if we are unable to make your identification or if we believe the request is excessive or unfounded. You will be notified of the reasons for the denial within one month of receipt of the request. We may also require payment of a reasonable fee for unfounded or excessive requests, particularly if they are made repeatedly.

 

If you are not satisfied with the processing of your request, you may file a complaint with the National Commission for Data Protection (for information, please visit www.cnpd.public.lu). If you are not satisfied with the processing of your personal data, you may lodge a complaint by sending a message, email or letter as described in Section 11 "Contact Information".

14. Updates to our privacy policy

We may update this Privacy Policy from time to time to reflect changes in our privacy practices or applicable law. We will post a notice on our websites that refers to this Privacy Statement to notify you of material changes to the way we collect and use your personal information.

This privacy policy was last updated on: 07.07.2023

15. Contact information

Questions, comments and requests regarding this privacy policy should be directed to our external data protection officer at gdpr@tgl.lu