Many of our external third parties are based outside the UK so their processing of your personal data will involve a transfer of data outside the UK.
Where you have requested a booking for travel arrangements which are located or otherwise due to be fulfilled outside the UK, we will have to transfer your personal data to the suppliers fulfilling or providing those travel arrangements outside the UK in order to make your booking and for those suppliers to be able to provide you with the travel arrangements you have booked.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
• Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.
Where we are unable to rely on one of the safeguards outlined above when transferring data to those suppliers outside the UK, we may rely on a derogation under Article 49 of the UK GDPR in order to transfer your personal data so that we can perform the contract we have with you. We will only do this where the transfer of personal data is necessary to perform our contract with you, and where it is proportionate for us to rely on the exemption. You acknowledge that where your personal data is transferred outside the UK, controls on data protection may not be as wide as the legal requirements within the UK.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.