Privacy Policy

The person responsible for the processing of personal data on the websites srilanka-roundtrip.com and srilanka-rundreise.de, as well as in connection with the travel services offered, is:

Romesh Dharmaweera Srilanka-roundtrip" Galle, Sri Lanka Email: hello@srilanka-roundtrip.com

Both websites are operated by the same provider and are subject to this Privacy Policy.

This Privacy Policy explains which personal data Srilanka-roundtrip processes, for what purposes such data is processed, to whom data may be disclosed and what rights individuals have.

This Privacy Policy applies to:

srilanka-roundtrip.com;

srilanka-rundreise.de;

enquiries by email;

bookings and travel arrangements;

communication with customers and interested persons;

other business relationships with Srilanka-roundtrip.

Depending on how you use our websites and services, we may process the following personal data:

first and last name;

email address;

telephone number;

postal or residential address;

nationality, where required for travel arrangements;

travel dates;

information concerning travellers;

requested itinerary;

booking and payment information;

individual travel requirements;

contents of communications;

technical data relating to the use of our websites;

IP address;

date and time of website access;

device and operating system information;

browser information;

information about pages visited;

other information voluntarily provided by the user.

We generally process only the personal data that is necessary for the relevant purpose.

If you contact us by email, contact form, telephone or any other means, we may process the information you provide.

This may include:

your name;

email address;

telephone number;

travel dates;

requested travel services;

the content of your enquiry;

other information voluntarily provided by you.

We use this information to:

respond to your enquiry;

prepare a travel offer;

process your booking;

communicate with you regarding your trip;

contact you before, during and after your trip where necessary.

When you make a booking, we process the personal data required to prepare, perform and administer the contract.

This may include:

name and contact details;

travel dates;

number of travellers;

itinerary;

special organisational requirements;

payment information;

information required to provide the agreed travel services.

The data may be processed for the purpose of:

preparing the contract;

providing the agreed travel services;

communicating with the customer;

organising the trip;

processing payments;

handling changes or cancellations;

handling complaints;

complying with legal obligations.

Customers are generally requested not to provide sensitive personal data unless such information is necessary for the trip.

If certain information, for example health-related information, is required for the safe or appropriate provision of travel services, such information will only be processed to the extent necessary for the relevant purpose and where a corresponding legal basis or consent exists.

Personal data may be processed for the following purposes in particular:

handling enquiries;

preparing offers;

booking and providing round trips;

customer support;

communicating with customers;

organising transportation services;

processing payments;

handling cancellations and changes;

handling complaints;

complying with legal obligations;

preventing misuse and fraud;

providing and securing our websites;

improving our websites and services;

marketing and newsletters, where the applicable legal requirements are met.

Personal data will only be processed for other purposes where legally permitted or where appropriate consent has been obtained.

Where the Swiss Federal Act on Data Protection (FADP) applies, personal data is processed in accordance with the applicable provisions of Swiss data protection law.

Where the EU General Data Protection Regulation (GDPR) applies, processing may be based in particular on:

Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for pre-contractual measures;

Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation;

Article 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests;

Article 6(1)(a) GDPR, where consent has been given.

Where processing is based on consent, such consent may be withdrawn at any time with effect for the future.

Personal data is not sold.

However, personal data may be disclosed to third parties where this is necessary to provide our services, operate our websites, process payments, communicate with customers or comply with legal obligations.

Possible recipients may include:

IT and hosting providers;

email and communication service providers;

payment service providers;

technical service providers;

accounting and professional advisers;

authorities where required by law;

local service providers where necessary to organise and provide the booked travel services.

Third parties will generally receive only the data necessary for the relevant purpose.

In order to provide a booked round trip, it may be necessary to disclose certain personal data to local service providers or other persons involved in organising the trip.

This may include, for example, the customer's name, telephone number, travel dates or information necessary to organise the trip.

Such disclosure will only take place where it is necessary to provide the agreed travel services or otherwise permitted by applicable law.

Srilanka-roundtrip has its place of business in Galle, Sri Lanka, and the booked travel services are provided in Sri Lanka.

It may therefore be necessary to transfer or process personal data in Sri Lanka.

In addition, technical service providers may be located in other countries.

Where personal data is transferred to countries outside Switzerland or the European Economic Area, the applicable legal requirements for international data transfers will be observed.

Where required by applicable law, appropriate safeguards or other legally recognised mechanisms will be used for international data transfers.

Our websites are operated using servers and hosting provider by Infomaniak Network SA, Switzerland.

When you visit our websites, technical information required for the secure and stable operation of the websites may be processed.

This may include:

IP address;

date and time of access;

website visited;

browser type;

operating system;

technical access information.

This information may be used to ensure website security, analyse technical problems and provide the websites.

Our websites may use cookies and similar technologies.

Cookies are small files that may be stored on the user's device.

They may be used, for example, for:

technical website functions;

security;

storing preferences;

analysing website usage;

marketing and advertising, where such services are used.

Where consent is legally required for particular cookies or similar technologies, they will only be used after the required consent has been obtained.

Technically necessary technologies may be used where required for the operation of the website.

Where analytics or tracking services are used on our websites, information about website usage may be processed.

Such services may collect information about, for example:

pages visited;

time spent on the website;

device used;

geographical or technical information;

interactions with the website.

Specific analytics or tracking services will only be used where permitted under applicable data protection law or where the required consent has been obtained.

Our websites may contain content or technical functions provided by third parties.

These may include, for example:

maps;

videos;

fonts;

social media content;

analytics tools;

payment or booking systems;

external links.

When such content is accessed, the relevant third-party provider may receive personal or technical information.

We do not have complete control over the data processing practices of such third parties. Their own privacy policies may also apply.

Our websites may contain links to third-party websites.

Srilanka-roundtrip is not responsible for the content or privacy practices of external websites.

The processing of personal data on such websites is governed by the respective privacy policies of their operators.

If we offer newsletters or other electronic marketing communications, these will generally only be sent on the basis of consent or another legally permitted basis.

Recipients may unsubscribe from a newsletter at any time.

An appropriate unsubscribe option will generally be included in each newsletter.

Personal data is retained only for as long as necessary for the relevant purpose or as required by applicable statutory retention obligations.

The specific retention period depends in particular on:

the type of data;

the purpose of processing;

the duration of the business relationship;

statutory retention obligations;

potential legal claims.

Once the purpose of processing has ceased and any applicable retention periods have expired, the data will be deleted or anonymised unless another legal basis permits or requires further retention.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Despite appropriate security measures, the transmission of data over the Internet can never be guaranteed to be completely secure.

Depending on the applicable data protection law, individuals may have various rights.

These may include:

the right of access;

the right to rectification of inaccurate data;

the right to erasure;

the right to restriction of processing;

the right to object;

the right to data portability, where provided by law;

the right to withdraw consent;

the right to lodge a complaint with a competent data protection authority, where applicable.

The exercise of these rights may be subject to statutory limitations.

For questions concerning the processing of personal data or to exercise data protection rights, please contact:

Romesh Dharmaweera Sole Proprietorship "Srilanka-roundtrip" Galle, Sri Lanka Email: hello@srilanka-roundtrip.com

To prevent unauthorised disclosure of personal data, we may take reasonable measures to verify the identity of the person making a request.

Where processing is based on consent, the consent may be withdrawn at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal remains unaffected.

Individuals may object at any time to the processing of their personal data for direct marketing purposes.

Following such an objection, the data will no longer be used for direct marketing purposes unless another legal basis applies.

We generally do not intend to use personal data for automated decision-making that produces legal effects or similarly significant effects on individuals.

If such processing is introduced in the future, affected individuals will be informed in accordance with applicable legal requirements.

Our services are generally intended for adults.

Where personal data relating to minors is provided, it should generally be provided by a parent or legal guardian or with their consent where such consent is legally required.

We may update this Privacy Policy at any time if our data processing activities, technical systems, legal requirements or services change.

The current version will be published on the websites.

The version published at the time of use or data processing shall apply, to the extent permitted by applicable law.

The processing of personal data by Srilanka-roundtrip is generally subject to the data protection laws applicable to the relevant activity and location.

The applicable data protection legislation of Sri Lanka applies to our business activities in Sri Lanka.

Where the Swiss Federal Act on Data Protection or the EU General Data Protection Regulation applies due to the nature of the business relationship or the services offered, the applicable mandatory requirements will be observed.

This Privacy Policy applies to:

srilanka-roundtrip.com

and

srilanka-rundreise.de

Both websites are operated by the same data controller:

Romesh Dharmaweera, Sole Proprietorship "Srilanka-roundtrip", Galle, Sri Lanka.

Contact

Romesh Dharmaweera "Srilanka-roundtrip" Galle, Sri Lanka Email: hello@srilanka-roundtrip.com

Websites: srilanka-roundtrip.com srilanka-rundreise.de