About Us

Blog

Faqs

Contact Us

Privacy Policy

Effective Date:

"At Holiday360, we are dedicated to ensuring the confidentiality and security of your personal data and upholding your privacy rights. Our policy outlines fundamental principles for managing personal data, emphasizing our unwavering commitment to safeguarding user information and prioritizing data protection according to the highest privacy standards. This policy reflects our transparency and accountability, fostering trust in our data security and privacy practices." 

Adherence to Data Protection Regulations:

Complying with the data protection laws is paramount, reflecting our commitment to safeguarding your privacy under the UAE Data Protection Law (Federal Law No. 45 of 2021). 

Key points include:

  • Our data center is situated within the UAE.
  • Supplementary safeguards are implemented when Standard Contractual Clauses (SCCs) are considered inadequate for ensuring secure international data transfers.
  • All suppliers accessing personal data processed by Holiday360 are bound by Data Processing Agreements.
  • We provide assistance in fulfilling your privacy obligations as data controllers.
  • Stringent technical and organizational measures are applied to ensure the utmost protection and security of your personal information.

Privacy Policy:

Greetings! Welcome to Holiday360 AE. Allow us to outline how we safeguard your personal information and honor your privacy.

1. Our Involvement in Safeguarding Your Privacy:

This policy is applicable to you whether you are a Holiday360 user, potential customer, tester, participant in a Holiday360 event, or simply browsing our website.

Our obligations: If you fall into any of the mentioned categories, we serve as the 'data controller' for your personal information when handling it for the purposes outlined in the "How and why we use your data" section below. Specifically for Holiday360 users associated with a company based in the United Arab Emirates (including foreign affiliates), your data will be jointly controlled by Holiday360 AE during such processing.

Your obligations:

  • Familiarize yourself with this Privacy Policy.
  • If you are a customer, also refer to the Terms and Conditions, as they may provide specifics on our collection and processing of your data as a 'data processor' acting on behalf of your employer.
  • If you disclose personal information about another person or if someone else discloses your information to us, we commit to utilizing that information solely for the purposes outlined herein. By providing us with this information, you affirm that you possess the right to allow us to use it in accordance with this Privacy Policy.

2. Collecting Data:

From the initial point of interaction with Holiday360, data collection begins. This process involves a combination of user-provided information and automatic data collection methods.

Time and Methods of Data Collection:

  • When you navigate any page on our website.
  • During your usage of Holiday360 services.
  • Identification of your status as a potential customer.
  • Upon receiving emails from us.
  • Collection of information from emails sent by travel suppliers when you request a demo of Holiday360.
  • When expressing interest in attending an event organized by Holiday360.
  • Opting in to receive marketing messages.

3. Categories of Data Collected:

  • Personal Contact Information: Your name, email address, your role within your company, and any other contact details voluntarily provided.
  • Professional Information: Information pertaining to your professional background and role.
  • Organizational Details: Information about the company, entity, or organization you are associated with, collaborate with, or represent.
  • Identifying Information: Data that serves to uniquely identify you.
  • Technical Details: Your login information, time zone settings, browser specifications, IP address, geo-location, operating system and information, identity document, and browser plug-ins.

4. Your Data Usage:

  • Data Usage on your Interaction with Holiday360: Information regarding your utilization of the Holiday360 website, including the products/services you peruse, page response times, encountered download errors, duration of page visits, specific actions taken on pages, frequency of actions, and other related activities.
  • Image and Voice Recording: In certain interactions with the Holiday360 team, such as calls with sales representatives, and customer care agents, or during product research sessions, there may be a recording of your image or voice.
  • Feedback Information: Additional personal data that you voluntarily share during customer feedback sessions, conducted through methods like screen sharing, direct interviews, or responses to feedback surveys.
  • Miscellaneous Information: Any supplementary information furnished in your requests for information or generated during the contractual relationship between your company, organization, or entity, and Holiday360. This encompasses a wide spectrum of data that may be pertinent to the ongoing association between the two entities.

5. Collection of Sensitive Data:

Policy on Sensitive Data: We do not routinely gather any form of "sensitive data" concerning you. This includes categories such as racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data, health-related information, data concerning your sexual life or orientation, as well as details related to offenses or alleged offenses. However, there may be instances where we seek your explicit consent to collect and process sensitive data. This occurs when you voluntarily disclose such information to us, typically for the purpose of requesting a specific service or engaging in a particular interaction. In such cases, your explicit consent serves as the basis for the collection and handling of sensitive data.

6. Data Collection for Minors:

Children's Information Handling: Holiday360 operates as a business-to-business service and is exclusively designed for individuals aged 18 and above. Our platform is not tailored for children, and individuals under 18 are not permitted to create Holiday360 accounts or directly request our services.

  • Exceptional Cases for Minor Data: In exceptional circumstances, users traveling with their children may need to provide the personal data of these minors to utilize our services. However, this is solely permissible when it is deemed necessary for the utilization of our services.
  • Consent for Children under 14: When dealing with children under the age of 14, the authorized adult must possess the legal authority to provide consent on behalf of the child.
  • Consent for Children between 14 and 18: For children between the ages of 14 and 18, the authorized adult is required to secure and present evidence of consent obtained directly from the child.

7. Utilization of Your Data:

Data Usage Procedures: Our use of your data is confined to specific purposes and is contingent upon having a legal foundation to do so. These purposes are categorized as follows:

a. Management of Contractual Relationships:

Objective: Executing, fulfilling, monitoring, and ensuring compliance with terms and conditions; generating invoices and cost reports for customers and facilitating payment collection. This extends to personal data of individuals who agree to the Terms and Conditions of Holiday360 or are authorized to engage our services on behalf of the customer.
Legal Basis: Contract.
Data Categories: Contact details, Professional information, other information.

b. Handling Prospective Contractual Relationships:

Objective: Managing information requests about our company or services, processing service requests for Holiday360 on behalf of your company, entity, or organization, and overseeing potential business relationships between Holiday360 and your company, entity, or organization.
Legal Basis: Pre-contractual processing.
Data Categories: Contact details, Professional information, Data that identifies you

c. Promotional Messaging:

Objective: Disseminating commercial and promotional communications related to Holiday360’s services or products similar to those requested or of interest. This may involve electronic or telephone communications. In compliance with applicable regulations, we may also send commercial communications about products or services relevant to your company.
Legal Basis: Consent (where legally required), Legitimate interest - developing and expanding our business with clients.
Opt-Out Option: You have the right to object to receiving such communications at any time by using the unsubscribe link in the message. No cost is associated with requesting to unsubscribe from commercial communications.

d. Integration and Collaboration Hub:

Objective: Sharing your contact details with our Integrated Partners upon obtaining your consent.
Legal Basis: Consent.
Data Categories: Contact details, Professional information.

e. Improving Holiday360:

Objective: Managing landing pages, heat mapping our website, testing features, optimizing traffic, collecting feedback via platforms, questionnaires, and live sessions, anonymizing data for development, testing, and analytics, recording and reviewing calls for quality assurance, analyzing data using artificial intelligence and other techniques, and occasionally utilizing third parties for these purposes.
Legal Basis: Legitimate interests - (i) enhancing customer service tools and minimizing client claims, and (ii) analyzing business practices for informed decision-making and strategic development.
Data Categories: Contact details, Professional information, Data that identifies you, Data on how you use Holiday360, Image and voice, Feedback data.

f. Customer Support:

Objective: Sending notifications of service changes and addressing platform issues via email, phone, or chat.
Legal Basis: Legitimate interests - (i) fulfilling contractual obligations to clients, and (ii) enhancing brand reputation, protecting, and growing our business.
Data Categories: Contact details, Professional information, Data that identifies you, other information

g. Safeguarding Integrity:

Objective: Ensuring authorized use of services and website, detecting, investigating, and preventing activities against Holiday360 policies or laws.
Legal Basis: Legitimate interest - safeguarding assets and clients from cyber-attacks and malicious actions.
Data Categories: Contact details, Professional information, Data that identifies you, other information

h. Registering for and Participating in Events:

Objective: Planning and hosting events, including related communications, for registered or attending participants.
Legal Basis: Contract.
Data Categories: Contact details, Professional information.

i. Preventing Fraudulent Activities:

Objective: Detecting and preventing potentially prohibited or illegal activities, issuing invoices to customers, and complying with fraud prevention laws.
Legal Basis: Legitimate interest - protecting business and clients from fraudulent actions.
Data Categories: Contact details, Professional information, Data that identifies you, other information.

j. Meeting Legal Responsibilities:

Objective: Fulfilling valid requests from authorities and complying with regulations on terrorism prevention and other legal requirements.
Legal Basis: Legal obligation.
Data Categories: Contact details, Professional information, Data that identifies you, other information.

8. Your privacy Options and Entitlements:

Your Choices:

  • Opting Not to Provide Personal Data: You have the option to refrain from providing us with personal data. However, this choice may impact certain website functionalities, resulting in limited access to our website.
  • Cookie Management: You retain the ability to disable cookies. This can be achieved by adjusting your browser settings or using the cookie banner on our website. Furthermore, you can delete cookies via your browser settings. Please note, certain services may be affected if cookies are deactivated.
  • Marketing Preferences: You can request us not to utilize your data for marketing purposes. In instances where we rely on your consent (which you can withdraw at any time), we will inform you about the intention to use your information for marketing, including any involvement of third parties. To opt out of marketing, you can object by clicking the unsubscribe link in the message.

Your Rights:

  • For Holiday360 Users: As a Holiday360 user, you can exercise your privacy rights through your company's designated Holiday360 account administrators. These administrators, acting on behalf of the data controller (your company), can handle tasks such as data deletion and updating personal information directly within the Holiday360 platform. They may also request additional information from us if necessary.
  • For Prospective Customers, Product Testers, Event Attendees, or Visitors: If you fall into the categories of prospective customers, product testers, Holiday360 event attendees, or visitors, you can assert your rights by forwarding your request to info@holiday360.com.

(i) Right of Erasure of Personal Data:

You have the right to request the deletion of any personal information we hold about you if it is no longer necessary for your engagement with Holiday360. While this may not always be feasible, especially if there is an existing contract in place, we will communicate any limitations to you.

Procedure for Holiday360 Users: If you are a Holiday360 user seeking to delete your user account, kindly direct your request to an administrator within your company's Holiday360 account. Company administrators are empowered to manage and delete user accounts directly from the Holiday360 platform.

(ii) Correction of Personal Data Rights:

Correction Procedure: If the information we have on record about you is inaccurate, kindly rectify it through your Holiday360 account. For non-Holiday360 users or administrators, please submit your correction request to info@holiday360.com.

(iii) Accessing Information Held about You:

Right to Information Access: You retain the right to request further details regarding:

  • Data categories subject to processing.
  • Purposes behind data processing.
  • Categories of third parties with whom the data might be shared.
  • Duration of data retention (or the criteria used for determining this).
  • Your additional rights pertaining to our utilization of your data.

Response Timeframe: We commit to addressing your request for information within 30 days. However, in cases where disclosing such information could jeopardize the rights and freedoms of others, such as confidentiality or intellectual property rights, we may not be able to comply. If this is the case, we will notify you accordingly.

(iv) Objecting to Data Profiling:

Right to Object: You have the right to oppose the utilization of your data for profiling purposes. It's essential to note that we refrain from making decisions that could significantly impact you solely through automated processing of your data. Our decision-making procedures concerning your requests involve human intervention to ensure fairness and accuracy.

(v) Data Portability Right:

Right to Transfer Your Data: You have the right to receive a copy of your data in a commonly used digital format that allows seamless sharing with another service. It's important to note that we are unable to share data concerning another individual without obtaining their explicit consent.

(vi) Right to File a Complaint Regarding Our Data Usage:

Addressing Concerns: If you have any apprehensions or issues, please communicate them to us initially for resolution. In the event that we are unable to resolve your concern satisfactorily, you retain the right to submit a complaint to the United Arab Emirates Data Protection Regulator at the UAE Data Office located in Abu Dhabi Global Market (ADGM), the Galleria Al Maryah Island. Alternatively, you can contact them by calling +971 2 333 8888. Detailed instructions on filing a complaint can be found on their website: ADGM Office of Data Protection.

(vii) Right to Contest Automated Decision-Making:

Objecting to Automated Decisions: Individuals hold the right to object to decisions made about them that rely on automated processes. Additionally, they are entitled to seek human intervention for a review of decisions that were based on automated processing.

9. Data Security Measures:

Ensuring Data Safety: We have implemented a robust security program to safeguard your personal data.

  • Certified Data Center: Our data center holds certifications, including ISO 27001, ISO 27701, ISO 27017, ISO 27018, and BSI’s C5.
  • Encryption Protocols: Encryption is employed during data transmission and storage, both within the platform and at the Holiday360 endpoint.
  • Firewalls Implementation: We have implemented firewalls on both the Network and Application Layers.
  • Data Transmission Disclaimer: Providing personal data is done at your own risk, as no data transmission can be guaranteed to be 100% secure.
  • User Credentials Responsibility: You are accountable for your username and password; it is essential to keep them confidential and secure.
  • Privacy Breach Reporting: In case of a suspected privacy breach, please promptly contact us at info@holiday360.com.
  • Third-Party Links Advisory: Our content may contain links to third-party websites and apps. Kindly note that this privacy policy does not extend to these external platforms. We bear no responsibility for the privacy policies or practices of any third-party websites or apps. Before disclosing any personal data on these platforms, we recommend reviewing their respective policies.

10. Utilizing Cookies:

Enhancing Interaction: We employ cookies to enrich your engagement with Holiday360. These cookies may fall into the categories of 'session' cookies, which are eliminated upon leaving our website, or 'persistent' cookies, which endure on your device and enable us to recognize you upon your return, facilitating a personalized experience.
Blocking Cookies: To prevent cookies, activate a browser setting that allows you to decline their installation. Alternatively, you can manage your preferences using our cookie banner or delete cookies through your browser settings. However, be aware that disabling, rejecting, or blocking cookies (including essential cookies) through your browser may result in certain segments of our website or app not operating optimally. In
some instances, access to our website may be restricted. Please note that we lack control over how third parties employ cookies when they are utilized.

11. Third-Party Data Processing:

Sharing Your Data Responsibly: We may collaborate with various companies or organizations to process your data, and this is done for the following purposes:

If there arises a need to share your data with any other category of third parties in the future, we will promptly inform you.

  • Data Processors: We may share your data with service providers who assist us in delivering our services effectively. These providers encompass tools for customer service, marketing, operational optimization, cybersecurity, financial services, and affiliates of Holiday360. Agreements are established with these providers to ensure the safeguarding of your privacy.
  • Professional Advisors: Your information may be shared with professional advisors, including accountants, auditors, insurers, and law firms, as it pertains to the professional services they offer.
  • Integration Partners: If you express interest in the products or services of our integration partners, we may share your contact information to facilitate communication as a representative of your company. This disclosure is essential for meeting your specific request.
  • Public Bodies: In compliance with legal requirements or to assert legal claims, we may share your data with government and law enforcement agencies, courts, and tribunals. This is undertaken to protect our rights or the rights of others, including you.

12. Data Retention Duration:

Storage Duration: Your personal data will be stored for the duration of your association with Holiday360. Upon the termination of this relationship, regardless of the cause, your personal data will be restricted throughout all applicable statutory limitation periods concerning the processing. This measure is taken to substantiate our adherence to legal and contractual obligations. Following the expiration of these timeframes, we will proceed to either delete or anonymize your personal data.

13. Data Storage Location:

Storing Personal Data: The personal data we gather is stored on our servers situated in the UAE. Additionally, we engage third-party suppliers who may process personal data beyond the borders of the UAE.
International Data Processing: When processing your data outside the UAE, we undertake requisite legal measures to ensure the continued protection of your privacy rights, as elucidated in this Privacy Policy. This entails a thorough assessment of the data transfer risks and the obligation for our suppliers to endorse the latest version of the United Arab Emirates Federal Law No. 45 of 2021 (the UAE Data Protection Law).

14. Changes to Our Privacy Policy:

We regularly review and update our privacy policy, with changes posted on this web page.

15. How to Contact Us:

For questions about our privacy policy or to exercise your data protection rights, contact us at info@holiday360.ae or call +971-508223931 or fill our website form.