私隱政策 – RVG Tours

Privacy Policy for this website, RVGTOURS.COM

1. About the Content of this Policy

This document (our “Privacy Policy”) sets out how we use personal information relating to individuals who interact with us (such as customers and website users). It reflects our commitment to protecting your personal data.You must read this Privacy Policy, as well as any other privacy notices we may provide to you whenever we collect and process personal data, so that you are fully aware of how and why we use your data.

2. Our Commitment

We respect your right to privacy, and our aim is to ensure you have a trustworthy experience with us, including when using our website or shops, and when making bookings with us or through us.We understand that you are concerned about how we use your personal data, and we wish to share with you the policies and practices we have adopted. In this way, you can feel reassured about how we handle your personal data.

3. Legal Basis for Processing

We will process your personal data in accordance with all applicable laws and contractual obligations. More specifically, we will not process personal data unless at least one of the following conditions is met:

您已同意為一個或多個特定目的處理您的個人資料;

the processing is necessary for the performance of a contract to which you are a party (for example, a booking you have made), or to take steps at your request prior to entering into a contract (for example, when you ask us for a quote);

Processing is necessary for compliance with a legal obligation to which we are subject (e.g. a visa application);

Processing is necessary to protect your vital interests or those of any other individual (for example, if you encounter any problems whilst travelling);

Processing is necessary for the legitimate interests pursued by us or a third party (for example, to protect our customers, our staff and other individuals, and to safeguard their safety, health and welfare); To promote, market and publicise our products and services; To understand customers“ behaviour, activities, preferences and needs;To improve existing products and services and develop new ones; To prevent, investigate and detect criminal offences, fraud or anti-social behaviour, and to prosecute offenders, including through cooperation with law enforcement agencies;Handling customer enquiries, complaints or disputes; Managing customers” insurance claims; Protecting us, our employees and customers, and taking appropriate legal action against parties who commit criminal offences or breach their legal obligations to us;To effectively handle any legal claims or regulatory enforcement actions brought against us; To fulfil our responsibilities towards customers, colleagues, shareholders and other stakeholders). The following is an indicative, non-exhaustive list of processing activities for which we may rely on our legitimate interests:

Processing activities based on legitimate interests

Direct marketing activities, including tracking, analysis, segmentation and communication across multiple channels; please see Section 8.8 for the legitimate interest of promoting relevant services and products based on your relationship and interactions with us

Record-keeping and reporting (see Section 8.6): our legitimate interest in understanding and improving our business

Statistical analysis of customer data; see Sections 8.7 and 8.9: legitimate interest in understanding and responding to customer behaviour and preferences

Provision of customer data to insurers, border authorities and other law enforcement agencies; see Sections 11.4 and 11.7: legitimate interest in protecting and safeguarding the safety of guests and staff; legitimate interest in taking appropriate legal action in the event of a dispute

Processing guest preferences and other information voluntarily provided by guests prior to travel; see Section 8.3: Legitimate interest in personalising and improving our services and product delivery

Processing customer data as part of prize draws, competitions, raffles and surveys; see Sections 6.4 and 6.5: legitimate interests in interacting with customers and promoting our products

Processing customer data in the course of managing and maintaining our website and systems; see Sections 6.8 and 8.7: legitimate interests in operating our business and improving our systems

4. Changes to the purpose

We will only use your personal data for the purposes for which we obtained it. If we reasonably need to reuse your personal data, we will ensure that the reason is consistent with the original purpose. Please contact us if you require an explanation of how the new purpose of processing is compatible with the original purpose. We may process your personal data for unrelated purposes based on our legitimate interests.

In certain circumstances, the purpose of processing personal data may extend beyond the original purpose for which it was collected. Where this is likely to occur, we will do our utmost to inform you in advance and, where appropriate, seek your consent.
Where we may have other secondary purposes, we may process existing data you have provided as part of a contract, such as booking information. Purposes for further processing may include conducting market insights and data analysis to better understand our customers.
We will use an aggregated data model, which enables us to derive aggregated data from your personal information. Under the law, aggregated data is not considered personal data, as you cannot be identified either directly or indirectly.For example, we may use aggregated data to review performance statistics for our travel alliances/advisors and to gain insights into customer demographics in order to improve marketing and customer service.
However, if we merge or link aggregated data with your personal data in a way that directly or indirectly identifies you, we will treat the merged data as personal data and process it in accordance with the strict guidelines of the Australian GDPR.
We will not reuse sensitive or special categories of data without a lawful basis, and where we rely on legitimate interests, we will ensure that we carry out a legitimate interests assessment (see Section 3) and an Australian Data Protection Impact Assessment (DPIA) prior to carrying out the proposed processing activities.

5. Who is covered by our Privacy Policy

5.1 Our customers

Our Privacy Policy sets out how we process the personal data of the following individuals:

those who book or enquire about travel services through us; or
Recipients of any travel services booked with us or through us (for example, you as the passenger on a booking, or a passenger for whom another person has made a booking enquiry); or
customers or prospective customers, or recipients of travel services, who may make a booking with us or through us.

We define personal data as any information relating directly or indirectly to an identified or identifiable individual, in particular information relating to identifiers such as name,identification numbers, location data, online identifiers, services obtained or considered, or one or more factors relating to that individual’s physical, physiological, genetic, mental, economic, cultural or social identity.

5.2 Examples of individuals covered by this Policy

This Privacy Policy covers the personal data we process in relation to:

individuals who make enquiries or bookings with us or through us, as well as individuals in respect of whom such enquiries or bookings are made (for example, friends, family members, tour group members, officials and employees of businesses and organisations making bookings with us or through us);
Individuals on whose behalf an agent makes an enquiry or booking with us;
where our customer is a business or organisation, employees or individuals acting on behalf of that business or organisation, as well as individuals associated with that business or organisation, such as owners, partners, shareholders and directors;
Individuals whose personal data has been obtained from other companies within the Group (for example, where you have consented to the disclosure of your personal data to other Group companies for marketing purposes).

5.3 Where we act solely as a data processor

Please note, however, that this Privacy Policy does not apply where we act as a data processor, strictly processing personal data as a subcontractor or on behalf of a third party, rather than on our own account. In such cases, you should refer to that third party and its privacy policy, as they will be responsible for how we process your personal data under their instructions.

5.4 Terms used in this Policy

When we refer to “you” and “your” in this Privacy Policy, we are referring to you and any such individuals whose personal data we process from time to time.

When we refer to the “processing” of your personal data, this includes obtaining, recording, storing or holding your personal data, as well as any actions we take in relation to it, such as organising, adapting or altering it, retrieving,consulting or using it, disclosing it or otherwise making it available to others, combining it with other data, and blocking, erasing or destroying it.

When we refer to “travel services”, this covers all products and services that can be booked with us or through us, such as bespoke holidays, package holidays, accommodation, tours, transport and transfers (whether by aeroplane, coach, bus, train, ferry, taxi or other means),car hire, cruises and charters, including:

all such products and services provided or operated by us (including those subcontracted by us); and
any such products and services provided by third parties that we book on your behalf (acting as an agent for you or for that third party). Travel services also include any travel-related services provided by us or third parties, such as obtaining visas, foreign exchange, and the provision of local representatives and support.

6. What types of personal data may we process?

This section outlines the types of personal data we process about you:

6.1 Data relating to you personally

We may collect the following information:

Name,
age,
gender,
Address,
telephone number,
Mobile,
Fax,
Email,
social media contact details, and any social media posts you have made about our trips and travel experiences.
Photographs,
proof of identity and address, a copy of your passport, driving licence and utility bills;
credit card and other payment details, as well as financial information;
Health information relating to your planned travel and the travel insurance you hold;
Search results carried out in relation to you (for example, to verify your identity, address and credit status);
your preferences;
Frequent flyer or travel partner programme affiliation and membership numbers.

You may withdraw your consent at any time by contacting us in the manner detailed in this Privacy Policy or in any direct marketing communications you receive. In any email you send, please include “Unsubscribe” in the subject line.

6.2 Business-related information

If you are an individual associated with one of our corporate clients or other organisations, your personal data may include the following information that we have linked to you:

Details of the business or organisation (such as name, address, telephone number, payment arrangements, financial information, etc.);
Your relationship with that business or organisation (e.g. owner, partner, director, shareholder, employee or agent); and
your contact details at that company (e.g. work address, work telephone and mobile numbers, work fax number and work email address).

6.2 Business-related information

If you are an individual associated with one of our client companies or other organisations, your personal data may include the following information that we have linked to you:

Details of the business or organisation (such as name, address, telephone number, payment arrangements, financial information, etc.);
your relationship with that enterprise or organisation (e.g. owner, partner, director, shareholder, employee or agent), and
your contact details at that company (e.g. work address, work telephone and mobile numbers, work fax number and work email address).

6.3 Enquiries and Booking Information

Information relating to enquiries and bookings for travel services made with us or through us, including where you made the enquiry or booking, or whether you are the recipient of the travel services covered by that enquiry or booking. This information may include:

a record of enquiries and searches for holiday and travel products made by you or on your behalf;
Details of your personal interests;
Requirements and other data relating to your enquiries;
Details of results, quotations, recommendations, estimates and other responses to enquiries;
Details of holidays, accommodation, travel, car hire and other travel services booked or enquired about;
Details of travellers/holidaymakers;
Details of travel service providers (e.g. travel agencies);
Travel dates and times;
Prices;
Payment details (including credit card details);
Passport and visa information;
foreign exchange requirements and arrangements; and
sensitive information, such as health, medical, dietary, mobility, disability or other requirements relating to the services you have enquired about or the contract you have entered into with us.

6.4 Information from investigations

Information collected or generated from any surveys we conduct.

6.5 Competition Information

Information collected or generated from any competitions or promotional activities we organise.

6.6 Account, Registration and Loyalty Information

Information relating to any of our accounts, registrations or memberships, or participation in any loyalty programme.

6.7 Communications

Correspondence, communications and information, including those between you and us and between us and third parties, relating to any booking or booking enquiry or the performance of any contract.

6.8 Website Usage Information

We may collect information about your visits to, browsing of and use of our website, unless your web browser blocks such information. The scope of the data we collect will depend on how you interact with our website.

This information may include:

your IP address (the unique identifier assigned to your computer when it connects to the internet);
details of your computer device (PC, tablet, smartphone, smartwatch, etc.);
The brand and version of the web browser you are using (e.g. Internet Explorer, Firefox, Safari, Opera, Chrome);
Your operating system (e.g. Windows, Windows Phone, OS X, iOS, Android, Linux, etc.);
Your time zone;
Your browser plug-ins;
Any web page from which you arrived, identified by your web browser as the referring web address;
cookies (in accordance with our cookie policy);
Identifiers assigned to you by third-party advertising providers and web beacons with which you interact;
Page response times;
Download errors;
the pages and sections of pages you visit;
Your use of this website, including enquiries and searches, as well as account registration, forums, etc.;
the services and products you browse;
Duration of visits to the website and pages;
Information regarding your interactions with pages (such as scrolling, keystrokes, mouse clicks, taps and mouse-overs).

Generally, this information will be collected and used anonymously and aggregated for analysis; your name and any characteristics that identify you will remain anonymous. However, our Privacy Policy will apply, and if this information is in any way linked to you personally, it will be treated as your personal data.

This information may also include:

Data entered into forms and fields;
Registration for any account;
forums,
feedback mechanisms;
social features;
newsletters or other features on our website;
username and password;
Login/logout history and settings;
actions taken in connection with any account or other registration, including viewing, updating and changing settings; and posting on any forums, feedback sections, comments or other social features on our website.

Such information will be treated as personal data and processed in accordance with this Privacy Policy.

7. How we collect or generate your personal data

This section sets out the ways in which we collect or generate personal data relating to you.

7.1 Visiting our website

By accessing and using our website, you or your computer may provide personal data. This includes: information automatically provided to our servers by your browser; information recorded on our web servers regarding your interactions with our website and the pages you browse;information we capture or place on your computer, or information generated through the use of cookies or other technologies on our website; and information you enter into forms and fields on our website. This is explained in more detail in our Cookie Policy

7.2 Information you provide

Your personal data will include the information you provide (or subsequently amend), whether:

Communications with us;
you provide to us verbally, either by telephone or in person;
filling in any fields or forms on the website;
by completing any printed forms we provide to you;
by email;
from documents you provide to us; and
any updates to the information you provide to us from time to time.

This includes when you:

register for or subscribe to any service, account, membership or loyalty scheme;
enquire about or book a holiday or other travel services in person, by telephone, via our website or by other means;
send us your comments or suggestions;
subscribe to any newsletter or other publication;

request sales and advertising information, including brochures.

7.3 User-generated content

We may process information or content you provide relating to your feedback or experiences regarding past, present or future travel with us.We will only use content and images that you submit via our social media channels or website, provided that you have consented to RVG TOURS and its subsidiaries processing this information for various activities. This may include any marketing activities, such as:

printed materials
On our website
Email campaigns
Social media posts
Images taken whilst travelling
Provide images to our trade partners for use on their websites, in email marketing and other marketing campaigns
Featured in our content feed
We will share images via email, in our content feed and in our image library, and through these channels with our trade partners
Any other information you provide to us or that relates to you personally.

7.4 Data obtained from third parties

We may obtain personal data about you from third parties, including:

providers of any holidays, accommodation and other travel services that have been enquired about or booked, and their intermediaries;
credit, fraud, identity and other checks we may carry out, including searches of public records, regulatory bodies and private organisations;
any business or organisation with which you are associated; telephone numbers identified by the telephone system when you call us.

7.5 Data Generated by Us

We and any suppliers or subcontractors working on our behalf may generate personal data relating to you, including:

responding to and processing any enquiries, bookings or complaints; or
fulfilling any booking or other contract entered into with you; or
by analysing your personal data; or
data obtained from your use of our website in accordance with our cookie policy.

For training and quality assurance purposes, we may record telephone calls with you.

8. How do we use your personal data?

This section sets out the purposes for which we use your personal data and the legal basis on which we do so.

8.1 Operating our website

To operate and provide our website’s search, booking, account, review, forum and other services, facilities and features. This includes managing any account or registration you hold on our website, and changing your settings and profile in accordance with your requests.

8.2 Providing information and responding to enquiries

To provide you with information about our website, systems and services, including responding to booking enquiries and holiday and travel searches, and to keep you up to date. We process your data because you have requested us to take steps necessary to enter into a contract, or because we are performing the services you have requested.

8.3 Bookings and Other Contracts

To enable you to make bookings, and to fulfil, provide, execute, manage and administer all bookings, orders and other contracts relating to you (including where you are a passenger on a booking made by another person), as well as to process any transactions relating to you that are authorised by us or carried out with us.We process your data because you have requested us to take steps necessary to enter into a contract, or because we are performing the services you have requested.

8.4 Payments

To collect and make payments due and to manage our accounts. This is necessary for the performance of any contract between us.

8.5 Communication with customers

To communicate with you regarding any enquiries, bookings, travel services provided, issues and complaints, and to respond to any submissions, enquiries or requests you make. We process your data because you have requested us to take steps necessary to enter into a contract, or because we are performing the services you have requested us to provide.

8.6 Record-keeping

To maintain internal records and reasonable archives, including enquiries, bookings, contracts, travel services and complaints. We do this on the basis of our legitimate interests to ensure our business is protected or operates effectively, or because we have a legal obligation to do so.

8.7 Managing and Improving Our Business

Analysing, auditing, providing, operating, managing, maintaining and improving our business, website, systems and services;

Conducting surveys and analysing the results;
organise promotional campaigns and competitions;
Conducting product or customer research and development;
To assist and help us improve our sales performance;
Carry out other business development and improvement activities;
Provide training for our staff, subcontractors and suppliers;
Editing, advertising and marketing processes, including sharing photographs in which you have voluntarily participated during your trip with us. These photographs may be shared on our social media channels, such as Facebook, Instagram, Twitter or LinkedIn. These images will not be shared for any purpose other than promoting our travel experiences.If you do not wish to be photographed, please ask to be excluded from group photographs organised by the tour guide;

For example, we may use your personal data to help us understand how customers use our website and book travel services through us. We may also use this information to identify interests so that we can better tailor our business offerings. We do this on the basis of our legitimate interests in ensuring the efficient running of our business.

8.8 Direct Marketing

To carry out direct marketing towards you, in particular to recognise you as a customer, identify your product and service preferences, and provide personalised content and advertisements, informing you of new or additional products, services and/or promotional activities that may be of interest to you.Depending on the details you have provided to us, we may carry out direct marketing via the following channels: text messages, telephone calls, targeted content on social media platforms on your personal computer and mobile devices, direct mail, post, online advertising, third-party applications and our own applications.Please refer to Section 10.1 for the types of products we may market to you in this way.

8.9 Advertising

We report aggregated information regarding the use of our website to our advertisers. We generally compile anonymous statistics on browsing behaviour and patterns that do not identify any individual.

8.10 Any matters to which you have expressly consented

For any purpose for which we have obtained your consent. We will only do so where you have the option to consent, you have control over this data, and you must take active steps to give your consent on an informed basis. If you wish, we will ensure that you can withdraw your consent at any time by providing a simple mechanism.

8.11 Consequences of not providing data

You are under no obligation to provide your personal information; however, if such information is necessary for us to provide our services to you

9. Retention Period for Your Data

We will only retain your personal data for as long as is necessary to fulfil the purposes for which we collected it, including to meet any legal, accounting or reporting requirements.

In determining the appropriate retention period for personal data, we will take into account the volume, nature and sensitivity of the personal data; the potential risk of harm arising from unauthorised use or disclosure of your personal data; the purposes for which we process your personal data and whether we can achieve those purposes by other means; and the applicable legal provisions.

If you would like further information about our data retention policy, please contact us.

10. Use of your personal data for direct marketing purposes

We will not use or disclose your personal data for direct marketing purposes unless:

we have obtained your consent, for example via an opt-in box on any of our forms or on our website; and/or
you have made a booking with us and we have a legitimate business interest in offering bookings for similar products or services.

If you no longer wish to receive direct marketing communications, you may contact us as detailed in this Privacy Policy or in any direct marketing communication you receive, or unsubscribe via the link at the end of each of our electronic communications to manage your communication preferences.

Where we use your personal information for direct marketing purposes, in addition to data protection legislation, we may also be subject to other rules governing direct marketing, such as the Australian Electronic Transactions Act 1999, where the term “direct marketing” essentially refers to direct marketing material or advertising directed at a specific individual.

10.1 Our Direct Marketing

We will use your personal data to send you marketing information (including advertisements and promotional details) relating to travel services:

provided by us;
which can be booked through us with a third party;
which can be booked with other companies within the Group (i.e. the Travel Company Group); and
provided by third parties selected by us. However, we will not pass on any of your details to third parties without your prior explicit consent.

Where applicable, we will only send you marketing communications relating to the categories of travel services you have selected. Furthermore, we will only contact you in the manner to which you have consented (for example, via email, text message, WhatsApp, WeChat, LINE, etc.).

10.2 Third-party direct marketing

We may, from time to time, disclose your contact details (namely your name, email address, postal address, telephone number, mobile number, fax number and preferences) to:

other companies within our travel group, which are subject to the same requirements set out in this Privacy Policy; and
other companies (“third parties”) that provide services which may enhance your travel experience or assist you with your travel arrangements.These third parties may then contact you directly to provide marketing information about the services and products they offer. These third parties are not part of the Travel Group and are not bound by this Privacy Policy. However, we ensure that our partners will only contact you with your consent and in the manner you have agreed to (e.g. via email or text message).

10.3 Opting out of direct marketing

You may contact us at any time in the manner detailed in this Privacy Policy, or follow the instructions in our marketing communications to stop receiving our marketing messages. If you send an email requesting to withdraw your consent, please include the words “Unsubscribe” in the subject line.

When you choose to stop receiving marketing communications, we will no longer share your information with any other third parties from that point onwards.

You may also notify at any time any third parties to whom we have previously passed on your contact details that you no longer wish to receive marketing communications from them.

11. Disclosure of your personal data to third parties

We will transfer your personal data to third parties in the following circumstances:

11.1 Credit checks, etc.

Where necessary, we may disclose your personal data to third parties (including intermediaries) to enable any checks to be carried out on your financial circumstances. The identity of these parties may change from time to time. They may include credit reference agencies and other companies for the purposes of credit decisions, fraud prevention and debt recovery.

11.2 Booking and performance of contracts

Where necessary, we may disclose your personal data to third parties (including intermediaries) in order to process any booking enquiries made by you or on your behalf, to make any bookings you have requested or which have been made on your behalf, to execute and manage any bookings on your behalf, or to enter into or manage other contracts with you or relating to you. This may include:

applying for a visa on your behalf;
collecting payments made by you;
investigating and responding to complaints;
executing any booking or other contract entered into with you.

Such third parties may include any suppliers or subcontractors and their agents (for example, airlines, coach operators, ferry or train operators, hotel operators, car hire companies, cruise lines, tour operators, etc.). The identity of these parties may change from time to time, enabling us to provide our services to you.We ensure that these third parties provide the same level of protection for your personal data whilst carrying out their tasks as you would expect from us.

11.3 Suppliers of travel and other services

We may disclose your personal data to any third party (such as suppliers, contractors or subcontractors) with whom we make any enquiries, or to whom we entrust or subcontract the fulfilment of any booking or other contract, including the provision of any travel, tour or other products or services that we have agreed to provide to you in fulfilment of our contract with you.

We may disclose your personal data to any supplier, such as a travel agent, acting as our agent (whether as your agent, your representative or a supplier) to make any enquiries on your behalf or to book any travel or other products and services for you.Details of any third-party travel agents or other third parties responsible for, or providing, the travel services you have booked or enquired about may be obtained from us on request and may be set out in any travel or other brochures we provide.

11.4 Insurance

If you apply for any travel or other insurance through us, we will pass your personal data to the insurer. The information you provide may be entered into a claims register and shared with other insurers to prevent fraudulent claims.

11.5 Outsourcing of Business Functions

Where we use third parties to host, provide, operate or supply any part of our website, databases, systems, business or services, or to carry out any of our business functions or activities on our behalf (including sending emails, processing payments, providing marketing support,providing customer and advertising analytics through third-party advertising technology providers, and providing customer service), we may provide your personal data to them as necessary to fulfil or process part of these purposes. We ensure that these third parties treat your personal data with the same care and responsibility as we do.

11.6 Public Forums, etc.

If any facility on our website is expressly designed to make your personal data public (for example, posts you publish on any public forum or comments section),then any personal data you provide in connection with that forum or other facility, where provided with the express intention of publication, will be disclosed to the public accordingly, subject to our review and the terms of this Privacy Policy.

11.7 Legal Requirements

Where necessary, we may provide personal data to government bodies or regulatory authorities in order to:

comply with legal requirements;
in response to requests from judicial or law enforcement authorities; or
for customs, visa and immigration purposes.

We may disclose your personal data where otherwise required or permitted by law.

11.8 Third-party direct marketing

We may disclose your personal data to third parties for the purpose of direct marketing to you, subject to your prior consent. Please refer to the section on direct marketing above for further information.

11.9 Business Customers (Non-Individuals)

If you are a business or organisation (“business customer”) and we hold personal data relating to any authorised representative (such as an employee’s representative, employee, manager, owner, partner or director), we may disclose such personal data to them.

Where a business customer makes a booking or booking enquiry on behalf of an individual and has been authorised to do so by that individual, we may disclose that individual’s personal data to our business customer in connection with that booking or enquiry or in response to a reasonable request made subsequently.

12. How third parties process your personal data

When we provide your personal data to a third party, one of the following two scenarios will apply:

12.1 Processing on our behalf

In certain circumstances, your personal data may be held and processed by others on our behalf. We have not included the names of our service partners, as these may change over time.We will remain responsible for their processing of your personal data, and they will only hold and process your personal data in accordance with our instructions and this Privacy Policy. Sharing your data is necessary to fulfil any contract we have with you and to provide our services effectively.

12.2 Processing on Our Own Behalf

In other circumstances, your personal data may need to be provided to third parties, who will hold and process it in their own right and on their own behalf. In such cases, they will be solely responsible for your personal data in accordance with their own privacy policy, and we will not be liable for their processing of such data following disclosure.This will only occur for the purposes of fulfilling a contract. Where this happens, the third party will notify you and provide you with their privacy policy.

13. Location of Your Personal Data

We (and any affiliated companies, subcontractors or other parties processing your personal data on our behalf) may transfer, store or otherwise process your personal data within the Australian Exclusive Economic Zone (“EEZ”).

We will only transfer your personal data within the Exclusive Economic Zone to companies within our group or to parties with whom we have a contractual relationship. We require all group companies to follow the same rules when processing your personal data to ensure that your personal data is protected.This means that, both within our group and with other organisations with whom we have contracts, we ensure that adequate safeguards are in place for such transfers within the Exclusive Economic Zone. You may contact us using the details provided in Section 16 of this Privacy Statement to enquire whether these safeguards are adequate.

14. Ensuring the security of your data

14.1 Our Security Measures

We take appropriate technical and organisational measures to protect your information against unauthorised or unlawful use, as well as accidental loss or destruction, including:

sharing and providing access to your information only to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and in an anonymised form where possible;
storing your information on secure servers;
verifying the identity of individuals authorised to access your information before granting them access;
Using Secure Sockets Layer (SSL) and Transport Layer Security (TLS) software or other similar encryption technologies to encrypt your personal and payment transactions.

Unfortunately, the transmission of information via email is not secure. If you submit any information to us via email over the internet, we will do our utmost to protect your personal data and have contractual arrangements in place with our service providers to safeguard your personal data.Once we have received your information, we will use relevant procedures and appropriate security measures to prevent unauthorised access.

To protect your own privacy, we encourage you to maintain anti-virus and other anti-malware software on your computer and other devices, and to take your own measures to safeguard your personal data. Please do not include sensitive personal information, including payment card details, in any emails you send to us.

We also encourage you to exercise caution when providing personal data to others. We will never contact you to request payment card details or sensitive personal data, such as passport numbers or login details, except in relation to a booking you are making or have made, either in person, via our website or by telephone.Please let us know if anyone claims to be contacting you on our behalf.

15. Your rights

Under data protection legislation, you have certain rights, which we have summarised below. If you contact us regarding these rights, we may ask you to provide proof of identity before we act on any request; if you do not provide such proof or your identity cannot be verified, we may refuse to take action.This is to ensure that your data is protected and remains secure. Further information regarding your rights and our obligations can be found on the official Australian website at https://www.oaic.gov.au/privacy-law/privacy-act/.

To exercise any of the following rights, please email your request to admin@www.rvgtours.com.au. You may request that we provide you with the following information:

whether we are processing your personal data;
What personal data we are processing, including the right to request a copy of your data;
the purposes for which we process the data;
the sources from which we collect the data;
To whom we disclose the data;

We will act within one month of receiving a valid request (i.e. once we are able to identify you as the data subject). If your request is complex, or if we are receiving a large number of requests, we may extend this period by a further two months. If this is the case, we will notify you.

The law does allow us, in certain circumstances, to refuse your request or to charge a reasonable administrative fee if we consider your request to be manifestly unfounded or excessive. Should this be the case, we will inform you at the time, along with the possibility of lodging a complaint with a supervisory authority and seeking judicial redress.

15.1 Rectification

If your personal data is inaccurate or incomplete, you have the right to request that it be rectified.

15.2 Right to Object

You have the right to object to the use of your personal data for direct marketing purposes, or where we claim to have a legitimate interest in using such data.

15.3 Erasure

You have the right to request the deletion or removal of your personal data in the following circumstances:

the data is no longer necessary for the purposes for which it was originally collected or otherwise processed;
where consent was the legal basis for the processing and you have withdrawn your consent;
the personal data has been processed unlawfully;
where you object to the processing and we do not have an overriding legitimate interest to continue processing;
Where erasure is required to comply with legal obligations; or
where the data relates to the provision of online services to children.

Where a request for erasure is valid, we will take reasonable steps to notify third parties who are processing the personal data you have asked us to erase.

We reserve the right to refuse a request for erasure where the data is necessary for the following purposes:

to exercise the right to freedom of expression and information;
to comply with legal obligations;
the establishment, exercise or defence of legal claims;

15.4 Data Portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller, in the following circumstances:

where the processing is based on consent or a contract; and
the processing is carried out by automated means.

15.5 Restriction of processing

You have the right to request that we restrict the processing of your personal data in the following circumstances:

you contest the accuracy of the personal data and allow us a reasonable period to verify its accuracy;
the processing is unlawful, and you object to the erasure of the personal data and request that its use be restricted;
we no longer need the personal data for the purposes of the processing, but the data is necessary for you to establish, exercise or defend legal claims;
You object to the processing pending verification of whether our legitimate grounds override your legitimate grounds.

Where the processing of your personal data is restricted (other than storage), we will only process your personal data with your consent, to establish, exercise or defend legal claims, to protect the rights of another person or organisation, or where we are required to do so by law.

We will notify you before lifting any restriction on processing.

15.6 Right to withdraw consent

You may withdraw your consent at any time where we rely on your consent as the legal basis for processing. Please contact us using the details set out in Section 16 of this Policy. For further details on how to object to our direct marketing communications, please refer to Section 10.3.

15.7 Right to lodge a complaint with a supervisory authority

The laws to which we are subject are regulated by the Australian Information Commissioner (GPO Box 5218, Sydney NSW 2001), or by telephone on 1300 363 992 or online at https://www.oaic.gov.au/privacy/privacy-complaints/,In other Member States, there are independent supervisory authorities responsible for overseeing the application of the regulations. In addition to your rights set out above, if you have a complaint or concern, you may also seek assistance from that supervisory authority, which has the power to compel us to comply with applicable laws and to impose fines for any breaches on our part.However, before you do so, we would like you to contact us first to discuss any complaints or concerns you may have. You can contact us using the details provided in Section 16 of this Privacy Statement.

Changes to this Privacy Policy

We review our Privacy Policy regularly to ensure it remains up to date and accurate. Where we make any changes, we will notify you by email. You can view the latest valid version at the top of this document.

Governing Law and Disputes

Our Privacy Policy is governed by Australian law, and any disputes may be adjudicated by the courts of Australia.

16. Contact Us

If you have any questions regarding our Privacy Policy or how we handle your personal data, including any requests or complaints, please contact us by email (info@rvgtours.com),by telephone (02 9880 2888) or by post to 1/F 774 Pacific Highway, Gordon NSW 2072, Australia

17. About Us

This is the privacy policy of Ran Deng Yuan (AUSTRALIA) PTY LTD, trading as RVG TOURS (hereinafter referred to as “we”, “us” or “our”). We are incorporated under Australian law.Our ABN is 74639327450, and our registered office is located at 1/F, 774 Pacific Hwy, Gordon, NSW 2072, Australia. We are a member of ATAS. We are also a member of the International Air Transport Association (IATA). For further details, please refer to the “About Us” page.

18. Copyright Notice

19. Web Cookie Policy

About this Policy

Web Cookie Legislation

There are no specific regulatory guidelines regarding cookies in Australia. However, the Australian Privacy Act 1988 sets out certain notification and consent obligations, which organisations should comply with in order to implement cookie consent banners that comply with the law.

Types and Uses of Cookies

Cookies can be categorised in various ways; one such classification relates to their lifespan, i.e. the length of time they are stored in your browser. According to this classification, cookies may be:

- Session cookies: temporary cookies used to identify and track users within our website. This information is automatically deleted by your browser when you close it or end your session; and
- Persistent cookies: These enable our website to ‘remember’ who you are and your preferences on our site. These cookies are stored in your browser for a period of time (the exact duration depends on the browser and its version).

How can I disable cookies?

As cookies are stored in the web browser used to access the website, users need to change the settings for their specific browser. Below are some of the most popular browsers, along with links to the respective providers’ guidelines on disabling cookies:

– Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer

– Firefox: https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature

– Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB

– Safari: https://support.apple.com/kb/PH5042?locale=en_GB

– Opera: https://www.opera.com/help/tutorials/security/privacy/

In addition, Google Analytics offers you the option to install opt-out browser plug-ins for Internet Explorer 11, Firefox, Chrome, Safari and Opera: https://tools.google.com/dlpage/gaoptout

Refusing cookies

Please note that disabling or rejecting cookies on our website may result in certain pages being inaccessible or not functioning correctly.

Further information

There are several websites that explain how cookies work and provide further details, such as www.aboutcookies.org和www.allaboutcookies.org. (We are not affiliated with these websites).