Last updated July 2020
We recognise the importance of protecting your privacy and your rights with regards to data protection. The Internet is a very powerful medium when it comes to transmitting personal information; for that reason, we and all other companies belonging to the lastminute.com group (“lm group”) undertake the serious task of respecting the current laws regarding the protection of personal data and the security of the same, with the aim of guaranteeing secure, controlled and confidential navigation for its users and customers who visit and/or use the Website and/or use our Comparison Service (you as a "User") or then purchase or register on our services, download our app and/or give us their consent for a specific purpose (you as a "Customer").
1. Who is the controller of your data?
2. What categories of your data do we collect and use?
3. Why and how do we collect your data?
4. Who sees, receives and uses your data and where?
5. How long do we retain your data?
6. What are your data protection rights and how can you exercise them?
7. Contact details of the data controller
8. Contact details of our data protection officer
9. Information about cookies
10. Privacy notice for Facebook
12. Data Security
14. Force Majeure
15. Governing Laws and Jurisdiction
It also informs you of how you can exercise Your Rights (including the right to object to some of the data handling we carry out). More information about your rights and how you can exercise them is set out in the section below.
We, being an entity located in India, are subject to Indian law regarding the protection of personal data.
When you visit the Website and use our Comparison Service (you as a "User") or then purchase or register to our services (you as a "Customer") we collect the categories of personal data as follows:
2.1. Personal data provided by you
The personal data that you share with us including when you register for an account, subscribe to marketing communications and which you provide to us when using our services, downloading our app, including the information entered into our booking platform and included in your comments, reviews or messages sent via telephone to our Customer Care Team, or through the Live Chat or through social media channels.
When you subscribe to the personalised marketing services (“Be inspired!” Service) you may provide us with: Your personal details (email address), information about when you click on our adverts, the way you access the website, including IP address, online identifiers and browsers details. You may also provide us with your browsing behaviour or your personal interests. Please note that some of this information might be collected automatically in accordance with p. 2.2.
The provision of the above personal data, where requested, is necessary for the adequate performance of the requested service and to allow us to comply with our legal obligations except when we rely on consent as legitimate basis for processing and or our legitimate interest. Without it, we may not be able to provide you with all the requested services.
It is important that all the personal data you give us is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email) details at all times.
2.2. Personal data collected automatically from our Website, from communication we send, and/or from third parties
We collect information about your visits to and use of the Website, such as information about the device and browser you are using, your IP address or domain names of the computers connected to the Websites, uniform resource identifiers for requests made, the time of request, the method used to submit the request to the server, the size of the archive obtained as a response, the numerical code indicating the status of the response given by the server (correct, error, etc.) and other parameters relative to the operating system and the computer environment used, the date and time that you visited, the duration of your visit, the referral source and website navigation paths of your visit and your interactions on the Website including the Services and offers you are interested in. Please note that we may associate this information with your account.
We may use this style to also understand how you engage with communication material that we send to you, such as emails, including the action you take such as any links in them that you click on, your duration and frequency of your engagement with the email.
To the extent permitted by the applicable law wherein we receive additional information about you, such as fraud detection information and warnings from third party service providers and/or partners for our fraud prevention activities.
In general terms, we use your personal data to provide you with the services you request, send you marketing and promotional communications, notify you about important changes to our Website and to deliver our content and ads which we think may be of interest to you. More specifically:
To meet the legal, regulatory and compliance requirements and to respond to requests by government or law enforcement authorities conducting an investigation.
On which legal basis? To comply with the law (i.e. to share personal data with regulatory authorities)
To carry out aggregative statistical analyses on anonymised groups or to analyse identifiable individuals behaviour so that we can see how our Website, products and services are being used and how our business is performing.
On which legal basis? To pursue our legitimate interest (i.e. improving our Website, its features and our products and services)
To send you personalised and profiled marketing communications
Only with your previous consent, to share with you via email, and on our website or third party ones (e.g. using ads) the best deals and offers on products and services we think you might find interesting because they are suited to your interests. The individualised service or the offers can be marketed by us or our partners or business partners operating in the following sectors: tourism, leisure, entertainment, high technology, fashion, decoration, consumer goods, food and beverage, finance, banking, insurance, energy, environment, communication, mass media, real estate, pharmaceuticals, clothing and textiles, education and training, energy, publications and publishing, information and communications technology, retail, sport, telecommunications and general services.
For this purpose we may:
- analyse your personal information to create a profile of your interests and preferences so that we can tailor and target our communications in a way that is timely and relevant to you.
- combine the information you give us via cookies with information related to your purchases and information we receive from third parties that collect your data through various means agreed by you. You can find information about third parties on this link.
- analyse information about the way you engage with communication material you receive from us, such as data on when emails have been opened or to determine if you have viewed or interacted with an ad, to record the number of times you have viewed each ad, to prevent a single ad being shown to you too frequently etc.
- temporarily share an encrypted version of your email address, with carefully selected partners who may combine this information with other forms of online identifiers or other personal data in order to present you with our offers cross device or cross channel, for example on social networks (Facebook, Pintrest, Instagram, twitter ).
On which legal basis? Where you give your consent
To keep our Website and systems secure and to prevent and detect fraud, security incidents and other crime.
On which legal basis? To pursue our legitimate interest (i.e. ensuring the security of our Website)
To verify compliance with our terms and conditions and for the establishment, exercise or defence of legal claims.
On which legal basis? To pursue our legitimate interest (i.e. compliance with our terms and conditions, protection of our rights in the event of any dispute or claim)
On which legal basis? Where you give your consent (i.e. through the cookie banner
or by your browser's settings)
4.1. Categories of recipients of your data
Our authorised employees and/or collaborators that assist and advise us on administration, products, legal affairs, and information systems, as well as those in charge of maintaining our network and hardware/software equipment;
Our third-party service providers (including other entities of the lmastminute.com group), which process your personal data on our behalf and under our instructions for the purposes described hereinabove acting as data processors, such as those providing us with IT and hosting services and customer support, analytics and administration services etc.
Competent authorities when we are required to do so by the current law.
Third parties that receive the data (e.g. business consultants, professionals for delivering due diligence services or assess value and capabilities of the business) when it is necessary in connection with any sale of our business or its assets (in which case your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners.
The complete list of parties to which your personal data may be disclosed is available at our registered office and may be requested by writing to email@example.com.
4.2. International transfer of your data
Users’ and/or Customers’ personal data is processed in the Data Controller’s registered office (see point 1), on the lm group servers, and at the offices of other entities to which data may be provided in order to provide the services requested of the Data Controller.
Given the fact that we are an international travel company, we also transfer your personal data to:
we disclose your data to autonomous data controllers such as airlines, hotels, car hire companies, tour operators etc. that might process your data outside India in order to provide you with the requested services.
we disclose your data to our service providers who act as data processors on our behalf that might be located in a country outside India, including Morocco, Albania, UK, European Economic Area, Switzerland and Tunisia. Our providers, acting as data processors, may be engaged in, among other things, the fulfilment of your service request, the processing of your payment details, the provision of advertising and marketing services on our behalf and the provision of support services through electronic communications or call centres.
Should you want to obtain further details about the safeguards put in place, you can contact us by writing to firstname.lastname@example.org.
You can exercise the rights provided by the Information Technology Act, 2000 read with the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, including the right to access, update and object and the other rights as granted by the applicable legislation.
You can exercise these rights and the other rights as granted under the applicable privacy and data protection legislation at any time by:
Contacting us via email at email@example.com.
As for direct marketing, please note that you can also object at any time by clicking the unsubscribe link which we provide in each communication sent to you
In case you exercise any of the above rights, please note that we will attend your request considering the personal information held by all the companies within the lm group where Bravoventure India Private Ltd holds, directly or indirectly, 100% of the shares.
Your rights in relation to your personal data might be limited in some situations. For example, if fulfilling your request would reveal personal data about another person or if we have a legal requirement or a compelling legitimate ground we may continue to process your personal data which you have asked us to delete.
You also may have the right to make a complaint if you feel your personal information has been mishandled. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant Data Protection Supervisory Authority
The contact details of the Data Controller of the data processing described hereinabove are:
Bravoventure India Private Ltd, a Indian company belonging to the lm group,with registered office at Level II, Valence Block, Prestige Tech Park-3, Sarjapur-Marathahalli Outer Ring Road, Kadubeesanahalli, Bangalore – 560 103.
For any information about Cookies please visit the following webpage https://in.lastminute.com/info/cookies-policy.html
10.1. Facebook Custom Audiences - Facebook pixel
We use the remarketing function “Custom Audiences” of Facebook Inc. (1601 Willow Road, Menlo Park, California 94025) or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This function allows us to show our Users and/or Customers of our website interest-based ads when they visit Facebook (“Facebook ads”), and to analyze such Facebook ads for statistical and market research purposes, which helps us optimize future advertising. This allows us to serve more relevant advertising.
For this purpose we use the so-called Facebook pixel for our website.
When a User or a Customer visits our website and takes an action (for example, buying something), the Facebook pixel is triggered and reports this action. This way, we will know when a customer took an action after seeing our Facebook ad. We will also be able to reach this customer again by using a Custom Audience. Therefore, this pixel allows user behavior to be tracked after they have been redirected to our Website by clicking on a Facebook ad. This way, we will know when a customer took an action after seeing our Facebook ad. We will also be able to reach this customer again by using a Custom Audience.
Therefore, this enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy. Such data may allow Facebook and its partners to show ads on or off Facebook. A cookie may also be stored on your computer for these purposes.
While aiming to guarantee a secure, confidential, safe handling of your personal data, we use certain physical, managerial, technical or operational safeguards as per industry standards and established best practices to protect the information we collect. We use reasonable security practices and procedures and use secure servers as mandated under applicable laws for protection of your information. We review our information collection, storage and processing practices, including physical security measures to guard against unauthorized access to systems. However, as effective as these measures are, no security system is impenetrable. We cannot guarantee the security of our database, nor can we guarantee that the information you supply will not be intercepted while being transmitted to us over the internet. You accept the inherent security implications of data transmission over the internet and the world wide web cannot always be guaranteed as complete secure. Therefore, your use of the website will be at your own risk. If you have any concerns please feel free to contact the Data Protection Officer at the details given above.