...spice up your life...
If you are our customer, a recipient of news about our company, or a visitor to our website, you entrust your personal data to us. We are responsible for protection of this personal data and for its security. Please familiarize yourself with the personal data protection principles and the rights you are entitled to in relation to the GDPR (General Data Protection Regulation).
We are the Exotic India Tourism Company, with registered office at Connaught place G-22, New Delhi, Republic of India, and we operate a travel agency with a website at www.exoticindiatourism.com. We process your personal data as the data controller, i.e. we determine how your personal data will be processed and for what purpose, for how long and we also choose potential additional processors to help us with this processing.
If you wish to contact us while your personal data is being processed please call +91 11 233 48 043, or +91 989 132 54 29 or send an e-mail to: firstname.lastname@example.org.
We declare that we process all personal data in compliance with the valid legislation and meet all legally stipulated requirements, particularly those determined by the EU Act on Protection of Personal Data and the GDPR, and therefore that:
We process your personal data, which you personally provide to us, for the following reasons (for the following purposes):
Your personal data in the following scope: name, surname, date of birth, address, e-mail and telephone number, which we require for performance of a contract – performance of travel agency services.
If you are our customer, we require your personal data in order to meet statutory requirements for issuing and keeping records of tax documents.
Your personal data (e-mail and name), sex, what you click on in the e-mail and when your most frequently open e-mails, are used for the purpose of direct marketing – sending personal messages. If you are our customer, we do this for our justified interests, because we have reason to assume that our news is of interest to you, for a period of 5 years from the time you place your last order.
We can only send you inspirational offers by third parties or use your e-mail address for remarketing and targeted advertising on Google or Facebook on the basis of your consent, for a period of 5 years after you grant this consent. You can naturally withdraw your consent at any time using our contact details.
If you are our customer and are a participant of one of our package holidays, then we also use photo and video documentation for marketing purposes.
We keep your personal data until the statute of limitations expires, unless the law determines that this data must be kept for a longer period or we specify otherwise in specific cases.
Cookies for targeted advertising will only be processed on the basis of your consent.
We protect personal data as securely as possible using technologies and security on the corresponding level of technological development. We protect this data as if it were our own. We have accepted and maintain all possible (currently known) technical and organisational measures, which prevent misuse, damage or destruction of your personal data, particularly:
Only the owner of Exotic India Tourism and our colleague assuring administration of the website have access to your personal data.
In order to assure specific processing operations, which we are unable to assure ourselves, we use the services and applications of data processors who are capable of protecting data on an even higher level than we can assure and specialise in this specific method of processing.
These are the providers of the following platforms:
We may decide to use other applications or processors in the future in order to make the process simpler and improve its quality. However, in such cases we promise to impose at least the same requirements on security and the quality of processing on these processors, as we do on ourselves.
We store data in the European Union or in countries assuring the corresponding level of security on the basis of a decision by the European commission. We also use your personal data for due performance of a contract in the Republic of India.
You have a number of rights in relation to protection of personal data. If you want to exercise any of these rights, please contact us by sending an e-mail to: email@example.com or firstname.lastname@example.org.
You are entitled to information. This right is fulfilled by this information page containing the principles for the processing of your personal data.
Thanks to your right to access you can submit a request to us at any time and we will provide you with information about which personal data we process and why, within a time limit of 30 days.
If anything changes or you find that your personal data is no longer current or is incomplete, you are entitled to supplement and change your personal data.
You can exercise your right to restrict processing if you believe that we are processing your inaccurate data, you believe that we are processing your data illegally, but you do not want to delete all your data, or if you have submitted an objection against the processing of your data.
You can restrict the scope of your personal data or the purposes of processing. (For example, by de-registering from the newsletter you restrict the processing of your data for sending business information.)
Right to transferability
If you want to take your personal data and transfer it to someone else, we will proceed as if you had exercised your right to access – with the difference that we will provide you with your information in machine-readable format. We need at least 60 business days to meet this requirement.
The right to deletion (to be forgotten)
Another right is your right to deletion (to be forgotten). We do not want to forget you, but you are entitled to this if you want us do so. In such cases we will delete all your personal data from our system and from the systems of all individual processors and backups. We need 30 business days to assure your right to deletion.
In some cases we are bound by a statutory duty and we must keep a record of the issued tax documents for the statutory period for example. In this case we will therefore delete all your personal data that is not affected by another law. We will inform you by e-mail when deletion of your data is completed.
Complaints to the Personal Data Protection Office
If you feel that we are not handling your data in compliance with the law, you are entitled to submit a complaint to the relevant office at any time. We would appreciate if you inform us of your suspicion first of all so that we can do something about it and potential remedy any potential mistakes.
De-registering from receipt of newsletters and business messages
If you are our customer we send you e-mails with inspiration, articles or services on the basis of our justified interests.
If you are not yet our customer, we only send these e-mails to you on the basis of your consent. In both cases you can stop us from sending you this information by sending us an e-mail to our e-mail address.
We would like to assure you that our employees and co-workers who will be processing your personal data are required to keep personal data and security measures, disclosure of which could endanger the security of your personal data, confidential. This duty of non-disclosure remains applicable even after termination of any contractual relationships with us. Your personal data will not be disclosed to any third party without your consent.
These principles for the processing of personal data are valid from 6 August 2018.