Information presented on this website is advertising in nature

Our Commitment to Data Protection

brook-ware is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.

Data Controller

brook-ware Travel Services acts as the data controller for personal information collected through this website and our travel services. This means we determine the purposes and means of processing your personal data.

Data Controller: brook-ware Travel Services
Address: 47 Piccadilly Gardens, Manchester M1 2AP
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

Contract Performance

When you book travel services with us, we process your personal data to fulfil our contractual obligations. This includes arranging flights, accommodation, transfers, and other travel services.

Legitimate Interests

We may process data based on our legitimate business interests, such as improving our services, preventing fraud, and ensuring security. We always balance these interests against your rights and freedoms.

Consent

Where required, we obtain your explicit consent before processing personal data. This applies to marketing communications and certain types of cookies. You can withdraw consent at any time.

Legal Obligation

We may process data to comply with legal requirements, such as financial reporting, tax obligations, and regulatory requirements.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. We will make corrections without undue delay.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You can request that we limit how we use your data in certain situations, such as when you contest its accuracy or object to processing based on legitimate interests.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection team:

Email: [email protected]
Post: Data Protection Officer, brook-ware Travel Services, 47 Piccadilly Gardens, Manchester M1 2AP

Please include sufficient information to verify your identity and specify which right you wish to exercise. We may request additional information to confirm your identity before processing your request.

Data Transfers

In providing travel services, we may need to transfer your personal data to countries outside the UK and European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place, such as:

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary based on the type of data and legal requirements:

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Data Breach Notification

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay and inform the Information Commissioner's Office (ICO) within 72 hours where required.

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

We encourage you to contact us first so we can try to resolve any concerns directly.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact Us

For any questions about GDPR compliance or data protection, please contact:

brook-ware Travel Services
Data Protection Team
47 Piccadilly Gardens
Manchester M1 2AP
United Kingdom

Email: [email protected]