GDPR

This notice adds to the Privacy & Data Rights page for people in the European Economic Area, the United Kingdom, and Switzerland. It is our Article 13 / Article 14 notice under the EU GDPR, and the same under the UK GDPR. Bijali Tours & Travels is the controller. Contact booking@bijalitours.com or +91 98300 00000. We have not appointed an EU representative; write to that desk and we will handle the request.

• Contract (Article 6(1)(b)): preparing a quotation you asked for, and performing a booking.
• Legal obligation (Article 6(1)(c)): tax, accounting, and answers to lawful authority requests.
• Legitimate interests (Article 6(1)(f)): securing the site, preventing fraudulent payment proofs, and keeping a record of what was agreed. You may object where your situation outweighs those interests.
• Consent (Article 6(1)(a)): newsletter email, and any optional sensitive detail you volunteer (for example a medical or meal need). You may withdraw consent at any time.

Passport and permit details are used because the booking cannot be delivered without them. Please do not send health information unless the hotel or airline has asked for it.

We are established in India. The European Commission has not issued an adequacy decision for India. When we process your data in India, or send it to a hotel or airline in another country for your trip, we rely on the derogations in Article 49 GDPR where the transfer is necessary to perform the booking you requested, or on your explicit consent when a derogation is not available. We tell the supplier to use the data only for that service.

• Access to the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure, where the law allows it.
• Restriction of processing in the cases Article 18 lists.
• Portability of data you provided, where processing is by automated means and based on contract or consent.
• Objection to processing based on legitimate interests, and an absolute right to object to direct marketing.
• Withdrawal of consent, without affecting earlier lawful processing.
• A complaint to your local supervisory authority or, in the UK, the Information Commissioner’s Office.

Email booking@bijalitours.com with the subject “GDPR request”. We respond within one month, or we tell you why we need up to two further months on a complex request. We may need to confirm your identity before we release a file.

Retention periods are the same as on the Privacy & Data Rights page. We do not make decisions that produce legal effects about you by solely automated means. A human on the travel desk reads every enquiry and payment proof.