Privacy policy

Elysian Travel respects the privacy of its visitors and is committed to protecting the personal data it processes. This policy explains how we collect, use, store and protect this data.

Who we are

Elysian Travel (www.elysiantravelagency.com) is the controller of personal data. For questions regarding this policy or data processing, you can contact us at hello@elysiantravelagency.com.

What data do we collect?

We collect the following categories of data:

• Name and surname
• Contact details (email, phone)
• Travel preferences (destinations, budget, period)
• Browsing data (IP address, browser type, cookies)
• Any other information voluntarily provided through forms or communications.

We may also collect and subsequently process certain information regarding your behavior while visiting our website, in order to provide you with offers tailored to your profile.
On our website we may store and collect information in cookies and similar technologies, according to the Cookie Policy.
We do not collect or otherwise process sensitive data, included by the General Data Protection Regulation in special categories of personal data.

Purposes of data processing

The data is processed for:

• to respond to requests and provide personalized offers;
• organizing travel and related services;
• improving the experience on the website;
• marketing communications (only with prior consent);
• compliance with legal obligations.

Legal basis for processing

 Data processing is based on:

• consent;
• the execution of a contract;
• fulfillment of legal obligations;
• to defend our legitimate interests
  There may be situations where we will use or share information to protect our rights and business. These may include:
  Measures to protect the site and platform users from cyber attacks;
  • Measures to prevent and detect fraud attempts, including the transmission of information to the competent public authorities;
  • Measures to manage various other risks.

Data storage

The data is retained for as long as necessary for the stated purposes or as required by law. You may request that we delete certain information or close your account at any time and we will comply with such requests, subject to the retention of certain information, including after the account is closed, where required by applicable law or our legitimate interests.

Disclosure of data to third parties

 Where appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:

• courier service providers;
• payment/banking service providers;
• marketing service providers;
• market research service providers;
• IT service providers.

If we are subject to a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

Data transfer outside the EU

If necessary, data will only be transferred to countries that offer adequate data protection guarantees.

How we protect the security of your personal data

The transmission of your personal data is done using state-of-the-art encryption algorithms, and the servers on which they are stored are secured.
Despite the measures taken to protect your personal data, we draw your attention to the fact that the transmission of information via the internet is not completely secure, there is a risk that the data may be seen and used by third parties, in which case we cannot be held liable.

What rights do you have?

The General Data Protection Regulation recognises a number of rights in relation to your personal data. You can request access to your data, the correction of any errors in our files and/or you can object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to seek legal action. Where applicable, you can also benefit from the right to request the erasure of your personal data, the right to restrict the processing of your data and the right to data portability.
To exercise your rights, you can contact us using the contact details on the site. Please note the following if you wish to exercise these rights:

Identity

We take the privacy of all records containing personal data seriously. For this reason, we ask that you submit your requests regarding such records to us using the email address used when opening your account.

Fees

We will not charge you a fee to exercise any of your rights.

Response time

We aim to respond to any valid requests within a maximum of one month, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of two months.

Third party rights

We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.

Rights concerned

access

You can ask us:

• to confirm whether we are processing your personal data;
• to provide you with a copy of this data;
• to provide you with other information about your personal data, such as what data we have, what we use it for, who we disclose it to, etc.

correction

You can ask us to rectify or complete your inaccurate or incomplete personal data.

Data deletion

You can ask us to delete your personal data, but only if:

• they are no longer necessary for the purposes for which they were collected or
• you have withdrawn your consent or
• you exercise a legal right to object or
• they have been processed illegally or
• We have a legal obligation to do so.

We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary:

• to comply with a legal obligation or
• for the establishment, exercise or defense of a right in court.

Restriction of data processing

You can ask us to restrict the processing of personal data, but only if:

• the processing is unlawful, but you do not want the data to be deleted or
• they are no longer necessary for the purposes for which they were collected, but you need them to establish, exercise or defend a right in court or
• you have exercised your right to object, and the verification of whether our rights prevail is ongoing.

Data portability

You can ask us to provide your personal data in a structured, commonly used and machine-readable format or you can request that it be "ported" directly to another data controller, but in each case only if:
• the processing is based on your consent or on the conclusion or performance of a contract with you and
• processing is done by automatic means.

opposition

You may object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest.

Automated decision making

You can request not to be subject to a decision based solely on automated processing, but only when that decision:
• produces legal effects regarding you or
• affects you in another similar way and to a significant extent.

Complaints

You have the right to file a complaint with the Supervisory Authority regarding the Processing of Your Personal Data. In Romania, the contact details of the Supervisory Authority for Data Protection are as follows: National Authority for the Supervision of Personal Data Processing (B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania), Telephone: +40.318.059.211 or +40.318.059.212, E-mail: anspdcp@dataprotection.ro

Contact

Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance and we promise that we will make every effort to resolve any issue amicably.
For any questions related to this policy or to exercise your rights, you can contact us at hello@elysiantravelagency.com.