GDPR & Data Protection
Your rights under European data protection laws
Last updated: 2024-01-31
Access
Get a copy of your personal data
Rectification
Correct inaccurate information
Erasure
Request deletion of your data
Portability
Transfer data to another service
What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union law that gives you control over your personal data. It applies to all companies that process personal data of EU residents, regardless of where the company is located.
Key Principles
- • Lawful, fair, and transparent processing
- • Purpose limitation - data used only for stated purposes
- • Data minimization - only necessary data collected
- • Accuracy - data kept accurate and up-to-date
- • Storage limitation - data not kept longer than necessary
- • Security - appropriate technical and organizational measures
Your Rights Under GDPR
You have the right to know what personal data we hold about you and how we use it.
What you can request:
- Copy of all your personal data
- Information about how we use your data
- Who we share your data with
- How long we keep your data
Response time: Within 1 month (free of charge)
You can ask us to correct or complete inaccurate or incomplete personal data.
Examples:
- Correcting your name or email address
- Updating your travel preferences
- Adding missing information to your profile
You can update most information directly in your account settings.
You can request deletion of your personal data in certain circumstances.
When this applies:
- Data no longer necessary for original purpose
- You withdraw consent
- Data processed unlawfully
- You object and there are no overriding legitimate grounds
You can ask us to limit how we use your data while we resolve an issue.
When you can request this:
- You contest the accuracy of data
- Processing is unlawful but you prefer restriction to deletion
- We no longer need the data but you need it for legal claims
- You object to processing while we verify legitimate grounds
You can get your data in a machine-readable format to transfer to another service.
What's included:
- Data you provided to us
- Data generated by your use of our service
- Structured in commonly used formats (JSON, CSV)
Only applies to data processed based on consent or contract.
You can object to certain types of processing of your personal data.
You can object to:
- Processing for direct marketing (absolute right)
- Processing for legitimate interests
- Processing for research or statistics
- Automated decision-making including profiling
Making a Complaint
If you're not satisfied with how we handle your data protection concerns, you have the right to lodge a complaint with a supervisory authority.
Exercise Your Rights
Response Time: Within 30 days
Cost: Free of charge
Contact: dpo@triptune.com
Data Protection Officer
Additional Resources
Learn More
External Resources
Support
File a Data Protection Complaint
If you believe we have mishandled your personal data, you can file a complaint with us or your supervisory authority.