GENERAL DATA PROTECTION REGULATION (GDPR) TERMS AND CONDITIONS

1 Introduction

1.1 These General Data Protection Regulation (GDPR) terms and conditions apply to the processing of personal data by Travel Bright Tours Ltd. websites in accordance with the GDPR.

1.2 In these terms and conditions, „we“, „us“ and „our“ refers to Travel Bright Tours Ltd., and „you“ and „your“ refers to the individual whose personal data is being processed.

2 Personal Data Collection

2.1 We may collect and process personal data from you, such as your name, address, email address, phone number, and other relevant information necessary for the provision of our travel-related services.

2.2 We will only collect and process personal data that is necessary for the purpose of providing our travel-related services and will not use your personal data for any other purposes without your consent.

2.3 We will take all necessary steps to ensure that the personal data we collect and process is accurate, up-to-date, and securely stored.

3 Legal Basis for Processing Personal Data

3.1 We will only process your personal data where we have a legitimate interest, contractual obligation, legal obligation, or your consent.

3.2 Where we process personal data based on your consent, you may withdraw your consent at any time.

4. Subject Rights

4.1 You have the right to request access to, correction of, deletion of, and restriction of processing of your personal data.

4.2 You also have the right to object to the processing of your personal data and the right to data portability.

4.3 To exercise your data subject rights, please contact us using the contact details provided on our website.

5. Data Breach Notification

5.1 In the event of a personal data breach, we will notify you without undue delay and within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms.

6. Data Retention

6.1 We will retain your personal data for as long as necessary to provide our travel-related services and to comply with legal obligations.

6.2 Where we no longer need to process your personal data, we will securely delete or anonymize your personal data.

7. Governing Law and Jurisdiction

7.1 These GDPR terms and conditions are governed by and construed in accordance with the laws of England and Wales.

7.2 Any disputes arising from these GDPR terms and conditions or the processing of your personal data shall be subject to the exclusive jurisdiction of the courts of England and Wales.