The regulations require communicating clear purposes for information use. To achieve this, travel companies, especially those collecting data for sophisticated personalization, must organize an information audit.
GDPR For Travel Agencies
Build trusting relationships with customers, providing valuable propositions to them. Get your GDPR Ready status in just one week!
5 cornerstones of your successful GDPR compliance
with Defendocs Practical recommendations for travel companies
Audit the data you store
with Data Protection Scope
Review existing contracts
with the My Documents ModuleMassive data exchanges via APIs are a common practice in the travel industry. One of the most important steps for wholesalers today is to upgrade contracts in a place that contains provisions about the protection of individual rights. Companies should understand how their partners inform data subjects about the transfers they make.
Be ready to respond to user requests
with the Data Subject Requests ModuleAccording to regulatory rules, all users have the right to ask companies:
- - For a list of the data stored about them;
- - To define the purposes for data collection and uses cases;
- - To outline the duration for which the personal data will be stored;
- - To send a copy of all their data that is held by the company;
- - To delete the data about them.
Each company is obligated to supply this information and process such requests.
Appoint a Data Protection Officer
in the My Documents ModuleAccording to the GDPR, organizations must appoint a data protection officer (DPO) in certain circumstances. Specifically, the appointment of a DPO is mandatory when:
- 1. The organization is a public authority or body.
- 2. The organization engages in regular and systematic monitoring of individuals on a large scale, for instance, online behavioural tracking.
- 3. The organization engages in the large scale processing of special categories of data (sensitive personal data) or data relating to criminal convictions and offenses.
There is no exception for small and medium-sized companies. However, each EU country can individually determine other cases in which they must appoint a DPO.
The DPO could be an existing staff member who takes the responsibility for data protection compliance or companies can hire an external expert for this role.
Give users access to the personal data you stored about them using
Defendocs Privacy Notice and Cookies Consent Management ToolsAccording to regulatory rules, all users have the right to ask companies:
- - For a list of the data stored about them;
- - To define the purposes for data collection and uses cases;
- - To outline the duration for which the personal data will be stored;
- - To send a copy of all their data that is held by the company;
- - To delete the data about them.
Each company is obligated to supply this information and process such requests.
Why Us and why right now?
Save Thousand on Legal Fees
Why spend a fortune on a lawyer when you can use Defendocs’s team of attorneys to be compliant! Send us a letter
Easy to Install and Use
Once you’ve created all your policies and consent forms, you’ll have them forever! No need to make hundreds of copies and versions and to keep them all on your computers!
Always Up-to-Date
We’ll automatically update all of your documents to meet the requirements of any new laws or regulations.
Ready to become GDPR Compliant?
You'll definitely need to conduct trainings for your colleagues and present your GDPR Compliance Action Plan to the Board of Directors