GDPR Policy

B2B Bali DMC DMC (TM) Private Limited , Parent Company to B2B Bali DMC DMC, accessible from https://b2bbalidmc.com/ ,recognizes the importance of data privacy and respect the privacy of our user and visitors on all our platforms (channels).

Refund Policy

These GDPR Policy outline the rules and regulations for the use of B2B Bali DMC Private Limited Website, located at https://b2bbalidmc.com/ recognizing Your Rights under the General Data Protection Regulation.

Context

The General Data Protection Regulation (Regulation (EU) 2016/679), known as the GDPR, is a new regulation which, from May 25th 2018, replaces the Data Protection Regulation (Directive 95/46/EC). This regulation, applying to all EU member states and their citizens, enhances privacy rights for individuals and provides a strict framework within which commercial organisations can legally operate.

The UK government has signalled its intention for the GDPR to remain part of UK law and has accordingly introduced a Data Protection Bill to replace the current Data Protection Act. Your rights under the GDPR are set out below. This policy sets out how B2B Bali DMC, as “Data Controller” in respect of the personal data detailed below, obtain and use your personal data as well as your rights regarding our possession and processing of such data.

Who we are

B2B Bali DMC is a smart tech-driven AI platform enables users explore new places, prioritize their goals when traveling, and create unique itineraries that suit their interests and tastes at affordable prices. It enables users to intelligently compare prices, saving them time, effort, and ensuring satisfaction and quality of service for their trips for business and vacation.

1. We collect the personal data of the following types of people to allow us to undertake our business.


2. Details of passengers on booked packages required to facilitate bookings


3. Employees at companies tendering and providing the services we require to fulfil the requirements of our packages


4. Employees at companies who provide services directly to B2B Bali DMC

When and how we obtain your Personal Data

We will collect information from you

1. when you request B2B Bali DMC quote you for a package


2. when recording phone calls for training and monitoring purposes


3. in order to fulfil the contractual obligation of your confirmed (by means of a signed contract) booking


4. when you tender to provide a service to B2B Bali DMC, including, Hotel accommodation, Coach bookings, Ferry bookings, experience bookings


5. when you sign up for our mailing list either through one of our websites or at a convention or exhibition


6. when you download any B2B Bali DMC resource file


7. when you apply to work at B2B Bali DMC, or as part of your contract of employment at B2B Bali DMC, we will collect information about you from a third party – e.g. References and DBS


8. when required to do so to fulfil our contractual obligations relating to a booked tour or visit, i.e. when you are on the passenger/guest list of a confirmed tour or placement


9. when you are providing a service as part of a tour or visit booked through B2B Bali DMC

How we process your Personal Data

At the enquiry/quoting stage we will collect and process the following personal data

1. Your name


2. Your Address


3. Your email address and telephone number

We may use your data to

1. create a quotation tailored to your group’s exact requirement


2. personalise the quotations we build and ensure these quotations reach you


3. communicate with you up to the point of confirming your booking

Once you confirm your booking or notify us you are not proceeding we will cease processing your data for this purpose.

Arranging/supporting your confirmed booking

Once you have confirmed your booking with us by means of signing our booking form, or electronically consenting to the same effect, we will collect and process the following personal information in order to fulfil our contractual obligations to you regarding your tour/visit.

1. Your name


2. Your Address


3. Your email address and telephone number


4. Full passenger list of all travelling on the tour/visit, including


5. Names as per passport


6. Passport number and date of expiry


7. Date of birth


8. Gender


9. Nationality


10. Emergency contact details


11. GP contact details


12. Medical information including details of allergies and conditions requiring specific assistance or consideration where necessary to fulfil tour/visi


13. Specific dietary requirements of passengers

To fulfil our contractual obligations in providing your tailored tour/visit we may use this data

1. to issue an invoice, an ATOL Certificate and insurance for your group


2. to book flights/ferry


3. to book visits/attractions specific to your tour. (Certain visits/attractions require the full passport information of your group for reasons of security)


4. to ensure hotels, coach companies, airlines are aware of the medical needs of passengers on the tour so they can provide any specific assistance required


5. to send details of dietary restrictions and requirements to hotels, restaurants, airlines, etc. to ensure


6. appropriate and suitable meals are provided for your group


7. to contact you upon your return to seek feedback following your tour


8. to ask if you would like to submit some photographs of your group

Following the completion of your tour, and allowing such time to complete the feedback and Photo Competition processes mentioned above and collect any remaining monies owed, we will cease processing your data for this purpose. B2B Bali DMC will continue to store your personal data after the end of a tour so as to comply with our legal obligations concerning your tour, and to establish, exercise or defend legal claims as required.

Marketing purposes

If you have subscribed to our email newsletter, made a booking with us, or requested a quote, brochure or other information from us, we may send you direct marketing that we think may be of interest to you, based on your subject interest or school location. For marketing purposes we will collect and process the following personal data

1. Your name


2. Your email Address

We use this data to contact you with, or make available to you, information relating to our services, brochures, new products, forthcoming events and special promotions. We will endeavour to tailor the information you receive or see so it is as relevant to your needs as we are able to make it. You have the right at any time to request we desist from such processing of your data. The mechanism for doing so is detailed below in Section 12 of this policy. Every marketing communication (email and postal) you receive will include details of how to exercise these rights.

Tendering for, or supplying services for, our tours/visits

When you tender to or supply a service to B2B Bali DMC, depending on the type of service you are providing, we will collect and process the following personal data

1. Name, address, email address, and telephone number of company owner


2. Name, email address, and telephone number of the transport manager


3. Names as listed on the operator’s licence


4. Names as listed on the insurance documents


5. Names and telephone numbers of all drivers on the tour


6. Your email Address

Hotels/Agents

1. Name, telephone number, email address and signature of the hotel manager or person in charge of groups


2. Names and signatures of persons responsible for public liability and insurance at the hotel


3. Names and signatures of persons responsible for Health and Safety and the completion of the hotel audits


4. Name, email address, telephone and mobile numbers of the director of the agency

We may use your data

1. to contact you regarding the tender process, to send confirmation of bookings, and to send necessary tour documentation


2. to contact you, including out of hours, should our groups require assistance in an emergency


3. to contact the drivers of vehicles providing transport during the tour to issue payment for services provided

Following the completion of the tour, and allow for a suitable period of time to ensure all payments are made and issues relating to any issues on the tours are resolved, we will cease processing your data for this purpose.

1. We will thereafter maintain your details on our system so as to comply with our legal obligations concerning any tours your supplied a service to, and to establish, exercise or defend legal claims as required, and so we are able contact you in future to request your tendering services to future tours.


2. You have the right at any time to request we desist from such processing of your data. The mechanism for doing so is detailed below in Section 12 of this policy.

Supplying a service to B2B Bali DMC

1. When you supply a service directly to B2B Bali DMC, whether on behalf of another company or personally, we may collect the following personal data


2. Your name


3. Contact details (may include your home address, email address and telephone number)


4. Bank details if we make payment directly to you

We may use your data

1. to contact you in order to make appointments for you to visit our premises


2. to issue payment for services supplied to B2B Bali DMC


3. to follow up on incidents relating to services provided by you to us

Following your successful provision of the services for which you were contracted, we will cease processing your data for this purpose. We will thereafter maintain your details on our system so as to comply with our legal obligations concerning the services you supplied, and to establish, exercise or defend legal claims as required, and so we are able contact you in future to request future services from you. You have the right at any time to request we desist from such processing of your data. The mechanism for doing so is detailed below in Section 12 of this policy.

Internal Practices – Staff

Recruitment Stage (incl. Interview)

1. When you apply for a position at B2B Bali DMC or you are forwarded as a candidate by a recruitment agency we will collect the following personal data


2. Your name


3. Your Address


4. Your email address and telephone number


5. Your CV detailing employment history


6. Details of medical conditions* which may require specific assistance or consideration when attending an interview

We may use your data

1. to contact you regarding your application, including to arrange an interview


2. to enable us to evaluate whether your skillset and experience match our requirements regarding the position you are applying for


3. to ensure all specific assistance and consideration you may require in order to attend an interview at our offices can be provided


4. to provide feedback to recruitment agencies and government bodies regarding your attendance of an interview, as required


5. to contact the references you provide ahead of making job offers to prospective employees

Following the application stage, whether you were successful or unsuccessful, B2B Bali DMC will cease processing your data for this purpose. We will however be required to hold data to comply with our legal obligations concerning the application process, e.g. confirming your attendance of interviews.

Employment Stage

As part of your employment at B2B Bali DMC we will collect and process the following additional items of personal data

1. Your signature


2. Your National Insurance number


3. Bank account information


4. Details of your next of kin, including name and contact details


5. Your pension number


6. Details relating to bonus payments and performance reviews


7. Details relating to any disciplinary or grievance issues


8. Details of annual leave requests, sickness or other absences


9. Training records


10. Accidents or incidents occurring at B2B Bali DMC or on B2B Bali DMC business


11. References given by third parties


12. Details of medical conditions which may require specific assistance or consideration in the workplace

B2B Bali DMC will cease processing your data for purposes relating to your employment once all contractual matters relating to your employment are concluded, including but not limited to final payments for your period of employment. However B2B Bali DMC may continue to process your data as and when we obliged to do so in order to comply with our legal obligations, or as requested by you, for instance to provide details of your period of employment to a third party.

Special Category Data

B2B Bali DMC will store and process special category data, including details of medical conditions, special dietary requirements, religious beliefs, and racial and ethnic origin, only when it is required that we do so, for example to fulfil our contractual obligations arranging and supporting your tour, or to provide such assistance or consideration as is required for you to visit our offices or facilitate your employment at B2B Bali DMC. We will only do so when we have your explicit consent by means including

1. Your signing a contact of employment with B2B Bali DMC


2. Our receiving a signed booking form confirming a tour with us

Once the reason for our processing this data is completed we will cease processing this data.

Storage and Security of Personal Data

Data we collect from you will be stored on B2B Bali DMC’s secure servers located in UK or secure cloud-based servers located within the UK Union at GDPR compliant cloud-storage providers. These include the following but does not preclude the use of other facilities that meet the aforementioned criteria: Ionos web services, Google, Microsoft O365, Microsfot Azure, Dot Digital.

We will store and process your Personal Data only for as long as it is reasonably necessary for us to perform the services/activities we are undertaking on your behalf or that fall within our legitimate interest, as well as to comply with our legal obligations. You may at any time request that we cease processing your data or remove it from our systems. Details for how to make such request can be found in Section 12 in this document.

As the transmission of information via the internet is not completely secure we cannot guarantee the security of your Personal Data in the course of being transferred to us; any transmission is at your own risk. Once we have received your Personal Data, we will use strict procedures and security features to try to prevent unauthorised access. Should such a breach occur we will, in compliance with articles 33 and 34 of the GDPR notify the supervisory authority and all affected individuals upon our discovering the breach.

Legal Basis for holding and processing your Personal Data

B2B Bali DMC will rely on the following legal bases for holding and processing your personal data

1. Necessary for the fulfilment a contract, i.e. booking a tour or visit

We have a legitimate interest to store and process your data in order to ensure the smooth organisation of your tour. We are unable to make the necessary arrangements for any tour without processing the data outlined in this policy.

1. Necessary for compliance with a legal obligation

We will hold information on you when we are required to do so to comply with B2B Bali DMC’s legal obligations. For example we hold details of passengers on tours and visits we organise against potential future legal actions resulting from these

1. Legitimate Interest.

We will hold and process your information for purposes relating to our legitimate interests. This includes the marketing of our services to you.

1. Consent

We will store and process your personal data when we have your explicit consent to do so. This includes your signing up to B2B Bali DMC’s mailing lists online or at an exhibition, etc.

With whom we share your data

No personal data will be shared with any third party prior, excepting our use of a GDPR compliant mailing company for the purpose of marketing (when the data used is restricted to your name and email address necessary to send marketing emails), to your confirming a booking with B2B Bali DMC by means of signing our booking form.

When you confirm a booking with B2B Bali DMC it will become necessary for us to share information with certain third parties so that we may fulfil the terms of the contract we have entered into with you. These third parties may include

1. Airlines


2. Coach companies


3. Ferry operators


4. Hotels


5. Visits and attractions


6. Insurance companies


7. Ground handling agents

Some of these parties may be based outside of the European Economic Area (EEA) or the list of countries considered by the European Union to provide an adequate level of data protection in accordance with Article 45 of the GDPR (details of this list can be found on the European Union website here https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en). Organisations that are based outside of the EEA may not be subject to the same level of controls in regard to data protection as exist within the UK and the EEA.

In order for you to travel overseas, we may be required to disclose some of your personal data to Government bodies or other authorities in the UK and in other countries, such as those responsible for immigration, border control, security and anti-terrorism. Even if it is not mandatory for us to provide information to such authorities, we may exercise our discretion to assist them where appropriate.

Your rights

A. Right of Access

Under Article 15 you have the right to access the personal data we hold about you and confirmation of how it is being processed by us

B. Right to Rectification

Under Article 16 you have the right to request that incomplete or inaccurate personal data information we hold about you is corrected.

C. Right to Erasure

Under Article 17 you have the right to have the personal data we hold about you deleted if

1. The personal data is no longer necessary for the purpose it was originally collected or processed for


2. B2B Bali DMC has no legitimate interest to continue to hold and process your data


3. When you have exercised your right to object to processing (see below)


4. B2B Bali DMC has processed your data unlawfully

B2B Bali DMC may refuse such a request if the storing of your data is required for

1. complying with a legal obligation


2. establishing, exercising or defending future legal claims

The right to erasure will not apply to special category data if

1. Its processing is necessary for public health purposes, e.g. for protecting against serious cross-border threats to health

Right to Restriction of Processing

Under Article 18 you have the right to restrict to our processing of your data if

1. You contest the accuracy of your personal data and/or you are verifying the accuracy of your data


2. You believe your data has been unlawfully processed by us


3. The personal data is no longer necessary for the purpose it was originally collected or processed for but you require us to hold your data for the establishment, exercise of defence of legal claims


4. You have lodged a request under Article 21, the Right to Object (see below), and this request is being processed

Right to Data Portability

Under Article 20 you have the right to request B2B Bali DMC to transfer such personal data we hold about you in a structured, commonly used, and machine readable format to you or another party as you request, should it be practical to do so.

Right to Object

Under Article 21 you have the right to object to our processing your personal data, as detailed above in section 4. This includes the right to object to our processing your data for direct marketing purposes B2B Bali DMC can refuse such a request if

1. We can demonstrate legitimate grounds for continuing to process personal data which overrides the interests, rights and freedoms of the individual


2. We require the processing of personal data to establish, exercise or defend legal claims

How to exercise your rights

The above rights can be exercised by contacting B2B Bali DMC;

By email: info@b2bbalidmc.com

By phone: +91 99-11-555-721 | +91 99-11-555-720

By post:INDIA : Gr.F 119 A, FIEE Complex, Okhla Ph-II, Okhla Industrial Estate, New Delhi, Delhi 110020

B2B Bali DMC will act upon all requests under GDPR without undue delay and will respond within one calendar month of receiving the request. In cases where the request is complex or when you have submitted multiple requests to us, we may extend this time by an additional two months. We would notify you in this eventuality within one calendar month of receiving the request.

If we have doubt over the identity of the individual making the request we will ask for additional information before proceeding. We will notify you within one month of receiving your request should we require more information. Failure to provide this information would result in your request being denied.

All requests will be made free of charge although if any request is deemed to be manifestly unfounded or excessive, B2B Bali DMC reserve the right to impose an administration fee of £50 to comply with the request.

B2B Bali DMC reserves the right to refuse to comply with a request if

1. it is deemed to be manifestly unfounded or excessive


2. we are unable to confirm the identity of the requestor


3. we request an administration fee which is not paid


4. doing so would prevent us complying with a legal obligation and establishing, exercising or defending future legal claims

The exercising of any of these rights under GDPR will not prejudice you in anyway regarding any other rights you have or the future levels of service you would expect to receive from us in the event of future enquiries or bookings.

Contact

Should you have any inquiries or doubts regarding our Privacy Policy or applied procedures feel free to contact us via the following e-mail: info@b2bbalidmc.com .