Privacy policy

1. Introduction
2. The personal data we collect
3. What we do with your personal data
4. Sharing your personal data
5. Your rights
6. Cookies
7. Contact information
8. Changes to the Privacy Policy

Introduction

This website is operated by CITYTRAVEL DMCC. The company handle a variety of personal data, such as names, email addresses and other travel related information in it’s daily businesses. Therefore, we take data security and adherence to data protection legislation very seriously. This privacy policy explains how we collect, store, use and disclose any personal data we collect about you when you use this website and app, as well as how we protect the privacy and confidentiality of your personal information. Your privacy matters to us so whether you are new to our service or a long-time user, please do take the time to get to know our practices – and contact us if you have any questions.

CITYTRAVEL DMCC, reg. no. DMCC178974 (“we”, “us” or “our”) is the so-called “data controller” of your personal data and is therefore responsible for the lawfulness of what we do with your personal data.

The personal data we collect

Generally, the type of personal data we collect is the information that we need to enable you to make your travel arrangements and bookings. This includes information such as your first and last name, date of birth, telephone number, email address, passport details, information about bonus card. The personal data we must receive to provide you with the travel arrangement you booked via our website and app is the only data that is mandatory to provide. Depending on the kind of travel services you use, we may also collect your frequent flyer number, insurance and other details which are relevant to your travel arrangements or which are required by another travel service provider (such as airlines and hotels). This is not an exhaustive list. Should you call or write our support, we will collect the data you provide during our communication. As you can see below, our cookies also collect some information.

If you make a reservation for someone else through our website, we will request personal data about that individual. In those circumstances, we rely on you to advise those individuals about this privacy policy.

What we do with your personal data

To be allowed to handle your personal data, the applicable data protection legislations obligate us to have a so-called “legal basis” for each of our purposes to process your personal data. For this reason, we have drafted the below table to show our legal basis for each of our purposes.

What we do (our purposes with handling your personal data)	Our legal basis	Storage time
If you have chosen to create a user account on our website, we will make such account available to you. The account includes access to information on your previous travel arrangements and bookings. We will also store your username and password.	Performance of our contract with you.	Your user account data, as well as personal information related to your previous travel arrangements and bookings, will be stored until you decide to cancel your user account via our website.
We will provide you with additional information related to your specific travel arrangement after completing the purchase.	Performance of our contract with you.	Your user account data, as well as personal information related to your previous travel arrangements and bookings, will be stored until you decide to cancel your user account via our website.
Record information which we collect during our communication via phone calls and messages.	Our legitimate interest to (i) improve our service through internal education, and where applicable (ii) solve your potential requests or claims.	Information from the phone calls and messages will be stored until you decide to cancel your user account via our website.
Use of cookies to for example improve the usability of this website, provision of a personalized experience and for collecting usage statistics. We also use session cookies to improve the security of this website.	Our legitimate interest to (i) improve our website, (ii) show you offers of interest to you, and (iii) have a secure service offering and website. If you don’t want us to store cookies on your computer, you may change the settings in your browser at any time.	Depending on the type of cookie.

Sharing your personal data

We will only share your personal data where necessary for the purposes listed in this privacy policy. This may be to our trusted business partners. For example we may share your personal data with business partners such as airlines, hotel providers, insurance companies to enable your travel arrangements and bookings.

Each partner is responsible for its own handling of your personal data after it has received it from us, meaning that you must contact the partner in question for any requests related to your rights under applicable data protection legislation. We recommend that you read the partners’ respective privacy policies for information on their handling of your personal data.

We will also share your personal data with other companies (so-called “data processors”) needed to deliver the services you requested, such as service providers running our call centers and our other suppliers and vendors that will handle your personal data when providing their services to us (for example external storage).

Your rights

According to the applicable data protection legislation, you have certain rights as a so-called “data subject”. Below, we have listed your rights. Your rights include the following:

• Right to access – You are entitled to access the personal data that we handle. You are also entitled to receive certain information about what we do with the personal data. Such information is provided in this document.
• Right to rectification – You are entitled to correct inaccurate personal data concerning you and to have incomplete personal data completed. Please note that we might not be able to correct inaccurate personal data provided by you due to e.g. the airlines rules, and that such particular change may incur a cost.
• Right to erasure – Under certain circumstances, you are entitled to have your personal data erased.
• Right to restriction of processing – Under certain circumstances, you are entitled to restrict how we use your personal data.

Cookies

A cookie is a small text file that is stored on your computer, some only until you close down your browser (so-called “session cookies”) and some for an extended period of time (so-called “permanent cookies”). If you do not wish to allow storage of cookies on your computer, you can change the settings in your browser. Note however that in a few cases some of our website features may not function properly and some content may not be displayed correctly as a result.

This website uses cookies for a number of reasons, including for provision of a personalized experience, for improving the usability of this website and for collecting usage statistics. We also use session cookies to improve the security of this website.

In some cases when using cookies, we share data with third parties. For example, we use Google Analytics.

How to contact us

If you have any questions relating to our handling of your personal data or our use of cookies, or if you would like to invoke any of your rights under applicable data protection legislation, please send an email to: [email protected] or use the following details:

CITYTRAVEL DMCC
U.A.E., Dubai, P.O. Box 337522

Changes to the privacy policy

If we change how we handle your personal data or how we use cookies, we will promptly update this privacy policy and publish it on this website.