General Data Protection Regulation (GDPR)

The European General Data Protection Regulation (GDPR) came into effect on May 25 2018. It is a set of legislation with the intent of protecting the personal data of EU residents and those travelling to, from and via the European Union.

GDPR obligations apply to Globetrotter Corporate Travel because we offer services to citizens in the EU and to those travelling to, from and via the EU, and we process personal data for specified, explicit and legitimate purposes and with the express consent of the organisations we work for. We do this in the performance of our contracts and service level agreements and to comply with legal and moral obligations (such as traveller safety).

Globetrotter does not monitor individuals systematically or regularly on a large scale, and therefore does not need to appoint a Data Protection Officer (DPO).

Globetrotter processes travel data through Galileo, our Global Distribution System. Galileo is a hosted system, with operations in Denver, CO, USA. The US has a safe-harbor/privacy shield provision, compliant with the principles of the GDPR, which allows us to use cross-border services and send data to and from the US.

Staff sign and adhere to stringent policies pertaining to the use and transfer of personal information. Globetrotter understands the GDPR’s “right to be forgotten”. Globetrotter stores personal data only as long as necessary. Our clients may at any time request and receive a copy of their personal data in machine-readable format.

Globetrotter does not fully automate any of our processes, and a human is always included in any decision to provide, or not provide a good or service.

IATA Data Protection Notice

Data Protection Notice: your personal data will be processed in accordance with the applicable carriers privacy policy and – if your booking is made via reservation system provider (GDS) – with its privacy policy.

These are available at http://www.iatatravelcenter.com/privacy or from the carrier or GDS directly. You should read this documentation which
applies to your booking and specifies, for example, how your personal data is collected, stored, used, disclosed and transferred. (Applicable for interline carriage)

If you have any questions or require further information about this or other policies, please speak to your travel consultant or CRM.