This Privacy Notice (“Notice”) sets out how Bayan-Auul Trails promoting its business as Maral Expedition, as a private company incorporated in the Bayan-Ulgii Province, Western Mongolia
Bayan-Auul Trails is one of the local travel agencies and the member of Bayan-Ulgii Tourism Association.
We need to collect, use and disclose personal information in order to perform our business functions and activities, including making and managing travel bookings on behalf of our customers. We are firmly committed to protecting the privacy and confidentiality of personal information and to maintaining various physical, electronic and procedural safeguards to protect personal information in our care.
For the provision of retail travel services by Bayan-Auul Trails, we will be the data controller and this Notice shall apply. Likewise, for the purpose of all our marketing activities (both business travel/event management and retail travel services) we will be the data controller and this Notice shall apply.
By providing personal information to us, you agree that this Notice will apply to how we handle your personal information and you consent to us collecting, using and disclosing your personal information as detailed in this Notice. If you do not agree with any part of this Notice, you must not provide your personal information to us. If you do not provide us with your personal information, or if you withdraw a consent that you have given under this Notice, this may affect our ability to provide services to you or negatively impact the services we can provide to you. For example, most travel bookings must be made under the traveler’s full name and must include contact details and appropriate identification (e.g. passport details). We cannot make bookings for you without that information. There may be instances where your local data protection laws impose more restrictive information handling practices than the practices set out in this Notice. Where this occurs we will adjust our information handling practices in your jurisdiction to comply with these local data protection laws.
What personal information do we collect?
Personal information generally means information which relates to a living individual who can be identified from that information, or from that information and other information in a person’s possession, including any expression of opinion, whether true or not, and whether recorded in material form or not, about an identified or reasonably identifiable individual, and any indication of intention in respect of an individual.
Generally, the type of personal information we collect about you is the information that is needed to facilitate your travel arrangements and bookings and to arrange travel related services and/or products on your behalf. Therefore we typically process the following types of personal information about you:
- contact information (such as name, residential/mailing address, telephone number, email address);
- payment account information (credit/debit card details, including card type, card number, security number and expiry date);
- passport details;
- information about your dietary requirements and health issues (if any); and
- other details relevant to your travel arrangements or required by the relevant travel service providers (e.g. airlines and accommodation or tour providers).
Sensitive information may include (without limitation) your racial or ethnic origin, philosophical or religious beliefs or affiliations, sexual preferences or practices, criminal record and the alleged commission of an offence, membership of political, professional or trade associations, biometric and genetic information, passwords and financial information and health information, and (in the USA) any personal information relating to a child under the age of 13. We will only collect sensitive information in compliance with your local data protection laws, with your explicit consent and where it is reasonably necessary for, or directly related to, one or more of our functions or activities (e.g. to make travel arrangements), unless we are otherwise required or authorized to do so by law. We will not use sensitive information for purposes other than those for which it was collected, unless we subsequently receive your consent to use it for another purpose.
How do we collect personal information?
We will only collect personal information in compliance with your local data protection laws. We usually collect your personal information from the information you submit during the course of your relationship with us. We will collect this information directly from you unless it is unreasonable or impracticable to do so.
Generally, this collection will occur:
- when you deal with us either in person, by telephone, letter, email;
- when you visit any of our websites; or
- when you connect with us via social media.
We may collect personal information about you:
- when you purchase or make enquiries about travel arrangements or other products and services;
- when you enter competitions or register for promotions;
- when you subscribe to receive marketing from us (e.g. e-newsletters);
- when you request brochures or other information from us; or
- when you provide information, or use our services, on social media.
Where you make a travel booking on behalf of another person (e.g. a family or group booking or a travel booking made for an employee), you agree you have obtained the consent of the other person for Bayan-Auul to collect, use and disclose the other person’s personal information in accordance with this Notice and that you have otherwise made the other person aware of this Notice.
You should let us know immediately if you become aware that your personal information has been provided to us by another person without your consent or if you did not obtain consent before providing another person’s personal information to us.
How do we use your personal information?
We will only process your information, where:
- you have given your consent to such processing
- the processing is necessary to provide our services to you;
- the processing is necessary for compliance with our legal obligations; and/or
- the processing is necessary for our legitimate interests or those of any third party recipients that receive your personal information
Should you no longer wish to receive promotional/marketing material from us, participate in market research or receive other types of communication from us, please refer to the “Feedback / Complaints / Contact” section below (section 13). You can unsubscribe from receiving electronic marketing materials by following the unsubscribe prompt in your email, SMS, MMS, iM or other form of electronic marketing. Please also see the “Your rights” section of this Notice to learn about your ability, at any time, to opt out or limit the use of your browsing behaviour for online behavioural advertising purposes (section 8 below).
Is personal information disclosed to third parties?
We do not and will not sell, rent out or trade your personal information. We will only disclose your personal information to third parties in the ways set out in this Notice and, in particular, as set out below, and in accordance with your local data protection laws. Note that, in this Notice, where we say “disclose”, this includes to transfer, share (including verbally and in writing), send, or otherwise make available or accessible your personal information to another person or entity.
On our websites, you may choose to use certain features that can be accessed through, or for which we partner with, other entities that are not otherwise affiliated with us. These features, which include social networking and geo-location tools, are operated by third parties, including social networks, and are clearly identified as such. These third parties may use or share personal information in accordance with their own privacy policies. We strongly suggest you review the third parties’ privacy policies if you use the relevant features.
Social Media Integrations
Our websites and mobile applications may use social media features and widgets (such as “Like” and “Share” buttons/widgets). These are provided and operated by third party companies (e.g. Facebook) and either hosted by a third party or hosted directly on our website or mobile application. If you are logged into your account with the third party company, then the third party may be able to link information about your visit to and use of our website or mobile application to your social media account with them. In addition, the third party company may send us information in line with their policies, such as your name, profile picture, gender, friend lists and any other information you have chosen to make available, and we may share information with the third party company for the purposes of serving targeted marketing to you via the third party social media platform. You can manage the sharing of information and opt out from targeted marketing via your privacy settings for the third party social media platform.
Tracking Technologies / Cookies
We may use third-party web analytics services on our websites and mobile apps, such as those listed in our Cookies Policy. The analytics providers that administer these services use technologies such as cookies and web beacons to help us analyse how visitors use our websites and apps.
Feedback / Complaints / Contact
If you have any enquiries, comments or complaints about this Notice or our handling of your personal information, please contact your consultant or the Data Protection Officer using the details set out below and we will responds as soon as practicable.
Post: Customers Service Manager
Usny 8, 822. 13-3r bagh, Jana Auul
Olgii soum 83000, Bayan-Olgii
- Changes to our Notice
We may amend this Notice from time to time. If we make a change to the Notice, the revised version will be posted on our website. We will post a prominent notice on our website to notify you of any significant changes to our Notice and indicate at the end of the Notice when it was most recently updated. It is your responsibility, and we encourage you, to check the website from time to time in order to determine whether there have been any changes. If we update our Notice, in certain circumstances, we may seek your consent.
This Privacy Notice was last updated on 09 August, 2018.