In the following, we inform you about how your personal data is processed if you contact us using the contact form on our website www.travel.ploom.com. 

1. Controller

The controller within the meaning of the Swiss Federal Act on Data Protection and the EU  General Data Protection Regulation (“GDPR”) is JT International SA (hereinafter “JTI,” “we,” “us”), Rue Kazem Radjavi 8. 1202 Geneva, Switzerland. As the controller, JTI determines the purposes and means of processing your personal data and is responsible for your personal data being processed in accordance with this Privacy Notice.

2. Personal data processed

When you contact us using the contact form on our website, we process the personal data you provide us with in the contact form, i.e. your first name and surname, email address, telephone number and the personal data you provide us with in your message (free text field).

3. Purpose of processing

We use your personal data to respond to requests you have submitted using the contact form, and to contact you for this purpose. For this purpose we rely on our legitimate interest in responding to your request and providing sales-related services to our customers.

4. Recipients of personal data and transfer abroad

We may appoint third parties to provide us with the technical and/or organisational services we need to carry out our business activities. In this context, these third parties may process your personal data. Your data can be shared with the following categories of data recipients:

• Companies within the JTI Group;
• Service providers who help us provide you with our products and offers, carry out our business activities and/or comply with our legal obligations (e.g. hosting providers, email delivery providers, etc.);
• Business partners and suppliers who support us in fulfilling our contractual obligations (e.g. advertising agencies, courier services, etc.).

The third parties that process your personal data are contractually obliged to process it solely on our behalf and in accordance with our instructions. We also oblige the third parties to comply with technical and organisational measures that ensure your personal data is protected in accordance with the applicable data protection regulations.

Your personal data may be transferred to the following countries:

• Switzerland
• EU and EEA countries
• USA
• UK

In particular, this is ensured in the following ways:

• The FDPIC or the Federal Council has certified that the state can provide adequate protection; and/or
• Standard data protection clauses that have been approved, issued or recognised by the FDPIC in advance are agreed; and/or
• Any other safeguards and means provided by applicable privacy laws; and/or
• Disclosure is directly related to the conclusion or processing of a contract between us and you or between us and one of our service providers in your interest.

5. Retention period of personal data

We need  your personal data for responding and following up to your request and will delete or anonymize once your case is closed.

6. Data security

We take technical and organisational measures to ensure that your personal data is protected against unauthorised and/or unlawful loss, alteration, disclosure or access – and contractually obligate all of our recipients of your personal data to do so too. Please note that it is unfortunately not possible to guarantee complete security when transferring personal data and information in general over the Internet or by other electronic means.

7. Your rights

Under certain circumstances, you have rights under data protection laws in relation to your information:

• Request access or a copy of your personal data.
  
• Request correction of your personal data where there is incomplete or inaccurate information.
• Request erasure of your information where there is no good reason for us to be processing your information, or where you have successfully exercised your right to object to processing of information.
• Object to processing of your information where we are relying on legitimate interests (or those of a third party) and you believe this impacts on your fundamental rights and freedoms.
• Request restriction of processing your information.
• Right to lodge a complaint regarding the processing of your personal data with the data protection authority.

If you wish to exercise any of the rights set out above, please send us an email at [email protected].

8. Amendments to the Privacy Notice

We reserve the right to change, supplement, amend or otherwise update this Privacy Notice at any time. Amendments are published on the website. Amendments apply from the time they are published on the website.

Geneva, July 2024