Fred. Holidays is a trading name of Fred. Olsen Travel. Fred. Olsen Travel is committed to being transparent about how we use the personal data of everyone we deal with.
This Privacy Notice is intended to inform you (collectively “you”, “your”, “yours” or “yourself”) how Fred. Olsen Travel ("we”, “us” or “our”) will collect and use your personal data when you do any of the following:
The personal data we collect about you depends on whether you are making an enquiry, you are, or may be, a customer, visiting our website or you are, or may be, a supplier. We will collect and use some or all the following personal data about you (and if you are making a booking, all persons to be included in that booking):
In order to facilitate a booking we are also obligated to obtain personal data of a special category such as contagious disease vaccination information, health and medical information and information that could reveal your race or ethnicity.
We realise that your emergency contact may not have heard of Fred. Olsen Travel previously, and so we ask you to inform them that you will be sharing their information with us. If they have any queries, they can contact us using the details we have provided in this Notice.
You are required to provide personal information to us before we can confirm your booking. If you fail to provide us with this information, then you will not be able to book your holiday.
We are proud to have a wide network of travel partners. If you have concerns that we may have received your information in error or would like to find out where we have received your information from, please contact us using the details in this notice.
We process your data for a variety of purposes. As a Travel Agent, we process personal data primarily to facilitate bookings and providing holidays. We always process personal data with a legal basis and the table below demonstrates our intended purposes and the legal basis we use to process your data.
We do not target our website or offer any of our products or services for sale to anyone under the age of 18 (a “Minor”), nor do we knowlingly collect personal data from a Minor. Any adult that submits information about a Minor may only do so on the basis that they are the parent or legal guardian of that Minor and waive all claims in relation to that Minor.
We use software and tools containing Artificial Intelligence (AI) for business efficiency and analytical purposes. AI helps us may manage emails and content you provide and process documents from suppliers related to your booking, enquiry and/or query. Personal data is only used in line with the original purposes for which it was provided and processed in accordance with this notice.
We share information for a variety of reasons, including when you request us to do so, for the prevention and detection of crime, where required by law and regulation, for us to deliver our services, to enhance, improve, develop, and promote our services, and otherwise conduct our business. The list below provides information on the types of third parties that we share information with.
We book travel and holiday arrangements for destinations across the world. When liaising with a travel or accommodation provider within Europe, the EEA, and countries on the European Commission’s data protection ‘adequacy’ list, we use the countries’ own data protection regulation as the safeguard for your data over and above the technical and organisational measures we have put in place to secure your data when transferring to them. For recipients outside of this list, we use either our standard contractual clauses with a provider where applicable, or the fulfilment of our contract with you as the appropriate safeguard.
We will never sell your data to any third party.
We retain your personal data for only as long as it reasonably necessary for the uses set out in this Privacy Notice and/or to meet legal, regulatory, and financial reporting requirements.
This includes the data relating to your booking for a minimum of 3 years, which is a requirement for legal purposes.
Information relating to the monetary value of your booking will be retained for a minimum of 6 years from the date of the transaction, to comply with statutory financial reporting requirements.
We retain your contact details until such time where you no longer wish to be contacted by Fred. Olsen Travel.
These retention periods are not inclusive of how long the recipients of your personal information may retain your data.
We are always happy to fulfil any one of your rights wherever possible. Your rights with respect to the personal data that we process on you are:
You can invoke any of your rights at any time using the contact details listed in this Notice, subject to us having to keep the data for legitimate business or legal reasons. Please be aware that we can ask for identification documents to confirm we are disclosing information to the correct person. If you elect a representative to invoke these rights on your behalf, we will request that the representative can demonstrate they have the authority to act on your behalf and their identity.
We do not conduct any automated decision making or profiling when you make a booking with us.
This is an addendum to Fred. Olsen Travel privacy notice. It explains how Fred. Olsen Travel (as Data Controller) may use your personal data, specifically in relation to the Covid-19 (Coronavirus) Pandemic and to support the NHS Test& Trace scheme in England and NHS Scotland’s Test and Protect service.
To operate safely and effectively, we may need to ask you for sensitive personal information that you have not already supplied, or use data you have already provided, including whether you have any underlying illnesses or are what is classed as vulnerable.
If we already hold information regarding vulnerability, we may share this for vital health reasons, emergency planning purposes and to protect your vital interests by sharing with services both inside and outside Fred. Olsen Travel.
Personal data relates to a living individual who can be identified from that data. Some of your personal data is classed as 'special category personal data' because this information is more sensitive e.g. health information, ethnicity and religion etc.
We may share your information with other public authorities, emergency services, and other stakeholders as necessary, and only when necessary, in a proportionate and secure manner. Contact with you to obtain consent before sharing will not be required for all the reasons described in this notice. Please be assured that protection of personal data remains a priority at this time after the health and safety of everyone.
We will only share your personal information where the law allows, and we always aim to share the minimum data necessary to achieve the purpose required. Further, the information will only be used for the purposes listed and retained for limited specific times.
Data protection laws allow us to share information for a wide variety of reasons. These are known as our 'legal bases to process data'.
Data protection laws are written to facilitate valid information sharing, especially in times of emergency which often requires more collaborative working. The legal bases for processing data at Fred. Olsen Travel while Covid-19 continues to present significant health risks are:
· Protect the public
· Satisfy legal and regulatory requirements
· Provide extra support for individuals with a disability or medical condition
· Safeguard children and individuals at risk
Fred. Olsen Travel will apply the following sections of the General Data Protection Regulation and Data Protection Act 2018 (other elements may be applied dependent upon emerging events):
This condition is met if the processing
a) Is necessary for the reasons of public interest in the area of public health and
b) Is carried out -
I. by or under the responsibility of a health professional, or
II. by another person who in the circumstances owes a duty of confidentiality under an enactment or rule of law
SCHEDULE 1, (Special categories of Personal Data), Part 2, Substantial Public Interest Conditions
Paragraph 16, Support for individuals with a disability or medical condition
This condition is met if the processing
d) can reasonably be carried out without the consent of the data subject
e) is necessary for reasons of substantial public interest
(1) This condition is met if the processing is
a) necessary for the purposes of
I. protecting an individual from neglect or physical, mental or emotional harm, or
II. protecting the physical, mental or emotional well-being of an individual,
b) the individual is
I. aged under 18, or
II. aged 18 or over and at risk,
c) the processing is carried out without the consent of the data subject for one of the reasons listed in sub-paragraph (2), and
d) the processing is necessary for reasons of substantial public interest.
(2) The reasons mentioned in sub-paragraph (1) c) are —
a) in the circumstances, consent to the processing cannot be given by the data subject
b) in the circumstances, the controller cannot reasonably be expected to obtain the consent of the data subject to the processing
(3) For the purposes of this paragraph, an individual aged 18 or over is "at risk" if the controller has reasonable cause to suspect that the individual —
a) has needs for care and support,
b) is experiencing, or at risk of, neglect or physical, mental, or emotional harm, and
c) as a result of those needs is unable to protect himself or herself against the neglect or harm or the risk of it.
Fred. Olsen Travel Ltd is a data controller. We collect and process data for several purposes outlined in this Notice. If you ever need to contact us, you can by using the details below:
Address: Fred. Olsen House, 42 White House Road, Ipswich, Suffolk, IP1 5LL
Phone: (+44) 0808 250 8793
If you have a specific query relating to how we process your personal data, you can contact our Data Protection Officer on:
Email: dataprotection@fredolsen.co.uk
We have appointed a European representative to act on our behalf regarding EU General Data Protection Regulation compliance, and to deal with any supervisory authorities or individuals based in the EEA.
Our European representative is:
Natural Power Consultants (Ireland) Limited
Address: Suite 6, The Mall, Beacon Court, Sandyford, Dublin 18, D18 A3W8, Ireland
Phone: +353 1 697 1344
Email: eu_representative@naturalpower.com
We may change this privacy notice from time to time. You are encouraged to revisit our website from time to time to view the current version of this notice.
Agents operating within the travel industry who are interested in becoming affiliated with Fred. Holidays can sign up for the agent portal by completing the registration process provided on our official website. The registration process requires agents to provide accurate and up-to-date information, including contact details and agency credentials.
Upon completion of the registration process, Fred. Holidays will review the submitted information to determine eligibility. We reserve the right to approve or deny an agent's registration at our discretion, based on the established criteria and the compatibility of the agent's services with our company values.
Agents signing up for the Fred. Holidays agent portal will automatically opt into our all marketing communication channels. These channels may include, but are not limited to, email, phone calls, SMS, postal mail, and in-person meetings.
Opt-In: By default, agents will be considered opted-in to receive marketing communications through all available channels. Agents may choose to opt out of specific channels if they prefer not to receive marketing messages through those channels. Please email us with such requests.
Opt-Out: Agents can exercise their right to opt out of any or all marketing channels at any time by contacting our designated support channels. Opt-out requests will be processed promptly and without any undue delay.
Fred. Holidays is committed to adhering to all applicable laws, regulations, and industry guidelines related to marketing communications. We will ensure that our marketing practices comply with relevant legislation, such as data protection laws, anti-spam regulations, and other applicable requirements.
Agents' personal information and communication preferences will be handled in accordance with Fred. Holidays' overarching privacy policy. We will take appropriate measures to protect the confidentiality and security of agents' personal data, ensuring that it is not shared with third parties for marketing purposes without explicit consent, where required by law.
Any violations of this policy will be subject to appropriate disciplinary actions, which may include but are not limited to, warning, account suspension, or termination of access to the Fred. Holidays agent portal.
This policy will be reviewed periodically to ensure its ongoing relevance and effectiveness. Any necessary updates or amendments will be made in accordance with internal processes and communicated to agents as required.
By signing up for the Fred. Holidays agent portal, agents acknowledge that they have read, understood, and agreed to comply with the terms and conditions outlined in this policy.
