CREIGIAU TOURS AND SKI

​

Who are Creigiau Tours and Ski?

Creigiau Tours and Ski is a partnership between Julie Wood, Wayne Smith and Lisa Olafsdottir and we are based in Cardiff. We are classed as a Tour Operator whose business is the selling and facilitating of bespoke package tours for schools and groups. We at Creigiau Tours and Ski are committed to safeguarding and protecting your personal data. This Privacy Notice meets the high standards of the new European data protection law, known as the General Data Protection Regulation (GDPR). 

What does this mean?

This privacy notice explains how personal information is collected, used, and disclosed by Creigiau Tours and Ski.

Creigiau Tours and Ski is the data controller and we take full responsibility for safeguarding your personal data. We understand that you expect your data to be secure and we are committed to ensuring that it remains safe with us. Please read this notice carefully to understand how we use your data to provide you with an exceptional and personalised experience.

 

Overview

Our privacy notice explains:

• The types of personal information Creigiau Tours and Ski collect and why we collect it.

• What we will do with your information once we collect it.

• When and how we may share personal data with other organisations.

• What legal basis do we have for collecting your personal data.

 

What information do we collect?

During the booking process, we may ask for personal data to provide services. This refers to information that you supply us or is supplied to us, including any information about other persons on your booking. Your information is collected when you request information from us, or contact us (and vice versa). You are responsible for ensuring that other members of your party are aware of the content of our Privacy Policy and consent to your acting on their behalf in all your dealings with us. We will update your information whenever we can to keep it current, accurate and complete. Following is the information we need from you:

• Personal details, including your name, school address, email address, phone number and date of birth.

• Passenger information, passport details, and other ID document details.

• Relevant medical data and any special dietary, religious or disability requests.

• Other relevant personal data such as height, weight, shoe size, head measurements and skiing/snowboarding ability.

 

Other sources of data:

• We may use data from other sources such as specialist companies that supply information, retail partners and public registers.

• Your insurance company, their agents and medical staff may exchange relevant personal data and special categories of data with us in circumstances where we/they need to act on your behalf or in the interests of other customers or in an emergency.

• We may use photographic or motion images, provided to us by your and your group's consent.

 

Personal data you provide about other individuals:

• We use personal data about other individuals provided by you, such as those people on your booking.

• By providing other people’s personal data, you must be sure that they agree to this and that you are allowed to provide it. You should also ensure that, where appropriate, they understand how their personal data may be used by Creigiau Tours and Ski.

• We need your personal information to process your booking, provide you with the desired goods and services, and help you with any queries related to your existing bookings. It is an essential aspect of managing and improving our products, services, and daily operations. 

• We monitor our services to safeguard your data and prevent fraud.

• We may utilise personal data to respond to and manage security operations, accidents, or similar incidents, including medical and insurance purposes.

 

If you do not consent to us using your information, we cannot proceed with your booking as these are vital for us to plan and book your holiday.

 

How Creigiau Tours and Ski personalise your experience?

We aim to make sure that the marketing communications you receive regarding our products and services are tailored to your interests. To achieve this, we may use your personal information to better understand your preferences, so that we can customise our communications to make them more relevant and engaging for you. If you do not wish to receive a personalised service from us, you can update your preferences by calling or emailing us at any time. We will make sure to update our records as soon as possible.

 

How Creigiau Tours and Ski make contact and interact with you?

We strive to enhance your customer experience, which is why we may use your personal data to assist you when you contact us via email, post, or telephone. Rest assured that we do not share or sell your personal data to any third-party entities.

 

Marketing communications:

You will receive service related communications, e.g. confirming bookings you make with us. We may send you relevant offers about our products and services by email. If you prefer not to receive these, you can let us know either by telephone or email.

 

How Creigiau Tours and Ski shares your personal data?

To provide the products and services requested by you, we may need to share your personal data with suppliers involved in your travel arrangements, such as coach and ferry companies, hotels, ski equipment providers, and other transport companies. Additionally, Creigiau Tours and Ski work with carefully selected companies that perform certain functions on our behalf, such as IT services, data storage and analysis, marketing, payment processing, and product delivery. We may also share personal data to establish, exercise, or defend our legal rights, including providing data to others for the purpose of preventing fraud and reducing credit risk. When we share personal information with other organisations, we ensure that they keep it safe and secure, and they must not use your personal data for their own marketing purposes. We only share the minimum amount of personal data required for our suppliers and retail partners to provide their services to you and us.

 

Sharing personal data with regulatory authorities:

When travelling, you may be required by government authorities at your point of departure and/or destination to disclose and process your personal data for immigration, border control, security, anti-terrorism, or other purposes that they deem necessary. Some countries may allow travel only if you provide your advance passenger data. These requirements may vary depending on your destination, and we suggest that you check before travelling. Even if it is not mandatory, we will offer assistance where appropriate. We may share the minimum personal data required with other public authorities if the law requires us to do so, or if we are legally permitted to do so.

 

Protecting your personal data:

We at Creigiau Tours and Ski understand how important it is to protect and secure your personal data. We take appropriate security measures to help protect your personal data from accidental loss and from unauthorised access, use, alteration and disclosure. The personal data that we collect from you may be transferred to, and stored at the destination inside European Economic Area (“EEA”). It may also be processed by organisations operating inside the EEA, who work for us, for one of our suppliers.

 

Data retention:

Our commitment is to keep your personal information only for as long as it is required for the purposes outlined in this privacy notice or to comply with legal and regulatory obligations. Once this period has elapsed, we will securely delete your personal data.

 

Social media features

Our website may contain social media features such as Facebook and Instagram that have their own privacy notices. Please ensure you read their terms and conditions and privacy notice carefully before providing any personal data, as we do not accept any responsibility or liability for these features.

 

Legal basis for processing personal data:

We will only collect and use your personal data if at least one of the following conditions applies:

• We have your consent, for example, by receipt of the first deposit. You give us permission to process your personal data when you make a holiday booking through us. Having your personal data is necessary to provide the products and services you request.

• It is necessary for us to comply with a legal obligation; for example when sharing personal data with regulatory authorities.

 

When you travel, you may be required by government authorities at the point(s) of departure and/or destination to disclose and process your personal data for immigration, border control, security, anti-terrorism, or other purposes as they deem necessary.

• It is necessary to protect your vital interests or those of another individual; for example in an emergency. Your insurance company, their agents and medical staff may need to exchange relevant personal data and special categories of personal data with us in circumstances where we/they need to act on your behalf or in the interest of other customers or in an emergency.

• It is in the public interest or where we have official authority. Those could include scenarios such as security operations where we may need to use personal data to respond to and manage security operations, accidents or other incidents, including medical and insurance purposes.

• It is in our or a third party’s legitimate interests and these are not overridden by your interests or rights.

 

Data Protection Impact Assessments link to websites:

We at Creigiau Tours and Ski are aware of the need, in some cases under the GDPR, to conduct a DPIA or appoint a DPO (Data Protection Officer), in the case that a company’s activities require the large scale processing of special categories of data. Whilst we are responsible for processing special categories of data, e.g. details of a person’s medical history, we do not conduct large scale processing of this data. It is for this reason that we do not require a data protection officer, or a data protection impact assessment in this case. Our processing of this particular data is not likely to result in a high risk to individuals’ interests and we will keep our decision on this policy under constant review.

 

Children:

We at Creigiau Tours and Ski understand the importance of protecting children's personal data as they may not fully understand the risks involved. When we process children's personal data, we always prioritise their protection and design our systems and processes accordingly. We use an appropriate lawful basis for processing children's data to provide the best protection for them. We never use children's data for marketing or profiling purposes. Children have the same rights as adults over their personal data, including the right to access it, request corrections, object to processing, and have it erased. If the information you provide is about children, you must have permission from their parent or guardian, and they should understand how we will use their child's personal data.

 

Changes to our Privacy Policy:

The Privacy Policy may need to be changed at any time so please check it regularly on our website for any updates.

 

Creigiau, Cardiff November 2023