Note: This Data Privacy Framework section applies only to personal data processed pursuant to the EU-US Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively the “DPF”).
Important Notice for Individuals of the European Economic Area and Switzerland
Fareportal complies with the DPF requirements, as set forth by the US Department of Commerce. Fareportal has certified to the Department of Commerce that it adheres to the EU-U.S. DPF Principles with respect to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Fareportal has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the policies in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification page, please visit https://www.dataprivacyframework.gov/.
Fareportal is subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”).
EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Complaints
In compliance with the DPF Principles, Fareportal commits to resolve complaints about your privacy and our collection or use of your personal data transferred to the United States pursuant to the DPF Principles. European Union, United Kingdom, or Swiss individuals with inquiries or complaints regarding this Privacy Policy should first contact Fareportal at
privacy@fareportal.com with the subject line, “Data Privacy Framework.”
Fareportal has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, the JAMS Alternative Dispute Resolution (ADR) under theData Privacy Framework., Located in the United States, JAMs is the world’s largest private ADR provider.. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit
www.jamsadr.com/submit/
for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Data Privacy Framework Annex 1 at https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.
Onward Transfer to Third Parties
Like many businesses, we hire other companies to perform certain business-related services. We may disclose personal data to certain types of third-party companies but only to the extent needed to enable them to provide such certain business-related services on our behalf as our “agents” (as such term is utilized under the DPF). The types of companies that may receive personal data and their functions are: hosting services, technical assistance, database management/back-up services, information security and fraud detection services, analytics and marketing providers, and contact centers. All such third parties function as our agents, performing services at our instruction and on our behalf pursuant to contracts which require they provide at least the same level of privacy protection as is required by this Privacy Policy and implemented by Fareportal and notify us if they are no longer able to provide such protections, at which point we will take reasonable remedial steps. We may also disclose personal data to our affiliates in order to support marketing, sale and delivery of any services, or other business operations as disclosed in this Privacy Policy. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Fareportal’s accountability for personal data that it receives under the DPF and subsequently transfers to a third party is described in the DPF Principles. In particular, Fareportal remains responsible and liable under the DPF Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Fareportal proves that it is not responsible for the event giving rise to the damage.
Opt-In and Opt-Out to Certain Onward Transfers
Individuals have the opportunity to opt-out of sharing of their personal data with third parties other than our agents or before we use it for a purpose other than which it was originally collected or subsequently authorized. To limit the use and disclosure of your personal data, please submit a written request to privacy@fareportal.com, with the subject line “Data Privacy Framework.”
We will not disclose your sensitive personal data to any third party without first obtaining your opt-in consent. You may provide your consent by sending us an email at privacy@fareportal.com.
In each instance, please allow us a reasonable time to process your response.
Your DPF Rights
Upon request to privacy@fareportal.com with the subject line, “Data Privacy Framework,” we will provide you with confirmation as to whether we are processing your personal data pursuant to the DPF, and have such data communicated to you within a reasonable time. You have the right to access, correct, amend, or delete the personal data processed pursuant to the DPF where it is inaccurate or has been processed in violation of our privacy disclosures to you, except where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question, or where the rights of persons other than the individual would be violated. We may require payment of a non-excessive fee to defray our expenses in this regard. Please allow us a reasonable time to respond to your inquiries and requests.
Retention of Personal Data
We will retain the personal data processed pursuant to the DPF in a form that identifies you pursuant to our retention policy above. We may continue processing such personal data for longer periods, but only for the time and to the extent such processing reasonably serves the purposes of archiving in the public interest, journalism, literature and art, scientific or historical research and statistical analysis, and subject to the protection of our privacy disclosures. After such time periods have expired, we may either delete your personal data or retain it in a form such that it does not identify you personally.
How We Protect Your Data
Fareportal takes very seriously the security and privacy of the personal data that it collects pursuant to the DPF. Accordingly, we will implement reasonable and appropriate security measures to protect your personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of such data, and to comply with applicable laws and regulations.
For the privacy policies of our other websites, please click here:
//www.cheapoair.com/info/privacy, www.cheapoair.ca/info/privacy/,
www.onetravel.com/info/privacy-policy/