1. This Privacy Policy on Personal Data Protection developed by the Agency (hereinafter referred to as “the Policy”) is integral part of the General Terms of Service, which is accessible at the following link: https://ctn.ttnbtm.com/en/content/agreement-bookings-creation-and-cancellation.html

• first name, patronymic, last name, date of birth, gender, citizenship, mobile phone number, postal address and email address;
• data of the documents necessary for identification purposes (e.g., number and series of passport, its expiration date);
• bank payment card data (payment card number, expiration date, CVC/CVV-code, and cardholder name), including data on the payment card of the individual, if applicable;
• logfiles (IP address, browser type, referring / exit pages on the Website and URLs, the number of clicks and methods of interaction with the Website, domain names, landing pages/content, pages/content viewed, device ID and device location);
• profile information (preferences, details of your historical searches, historic booking details, travel plans and other information);
• Agent’s content (feedback and comments that you upload to the Website);
• your behavior (your activity on the Website, time and location of login, comments and uploads);
• any other information which you leave voluntarily on the Website.

These personal data may be collected via cookies (please see below).

• ensure the provision of services and execution of contractual relationships with Suppliers/Carriers concerning the services ordered by Customers;
• to communicate with you concerning the ordered Services and send confirmation of the Booking;
• perform, process and edit the Booking;
• provide support and customer service in the use of the Website and the Website services;
• provide information on existing and future services and offers;
• improve the performance and quality of the Website; provide answers to requests and comments;
• encourage to participate in our surveys and provide feedback;
• find out the services which may be of interest to Customers;
• satisfy claims; notify of possible illegal or unlawful acts;
• solve any issues which may arise under or in respect of the fulfillment of the General Terms of Service and the Agency Agreement;
• for any other purposes necessary in order to fulfill our contractual obligations about which we will notify prior to the new processing takes place. If required, we will seek your consent before commencing the new data processing activity.

Payment card data shall be used to confirm payment for the Booking created by you on the Website.

• Suppliers/operators, e.g. hotels, airline carriers, bus carriers, GDS, railway carriers, etc. which render the services you booked. All the services on this Website, which are offered by third parties, are marked as such on our Website. We do not give your email address to Suppliers, unless it is required for the performance of the services which you booked through the Agency. The Suppliers may use such data for the purposes of rendering booked (or similar) services to the Travelers and other purposes, defined by the Suppliers. We do not impose any other restrictions on Suppliers with respect to the use or disclose of other types of personal data.  However, we recommend that you get acquainted yourself and acquaint Customers with the personal data protection policy of each Supplier that performs the services you booked on this Website. The Suppliers may contact you or Customer in order to obtain additional information on Customers, help you with the booking of services, or answer your requests. Please note that we do not supervise the data protection policy of the Suppliers;
• Independent operators (suppliers), which offer services and act on our behalf, as well as operators, which process payment card data, business analytics, customer service managers, marketing consultants, experts, who distribute questionnaires or other offers and are in charge of prevention of payment fraud. We may as well allow independent operators to use personal data on our behalf if it is required for the proper functioning of our Website or sending of online messages, which may be of interest to you. Independent operators obtain access and collect the information required for their operation. They are not allowed to share such data or use them for any other or their own purposes. They must, in the same manner as we, abide by the same data protection terms;
• Business partners, with whom we jointly offer products and services or their products and services on our Website. You may see whether the services, which you requested, belong to a certain independent company. In this case, only the business partner name is given or is accompanied by our name. If you accept their services, there is the possibility that we share your and the Customers’ information with such business partner. Please note that the Agency does not supervise the data protection policy of such business partners;
• We may also share Customers’ personal data to the Agency Affiliates, representatives, officers, agents, employees, or partners of the Agency in order to implement the terms and conditions set out in the General Terms of Service and the Agreement concluded with the Agent, as far as it is required to render ordered services.
• If applicable, you agree that in order to render the services you are contracting, Customers’ personal data will be included in a data file whose data controller is the Spanish company Amadeus IT Group, S.A. The Customer may exercise his/her rights of access and rectification by notice (preferably in English) to [email protected].

4.13. Cross-border transfer of data. The Customer confirms and agrees that in order to provide the services that you have requested, the Agency may transfer his/ her personal data to recipients located outside of the country of your company registration and Europe in order to obtain the proper level of the services ordered. Thus, Customers’ personal data may be accessed by the Agency Affiliates and data processors and service providers from countries that do not provide the same level of data protection as provided in the European Economic Area. The storage and processing of Customer’s personal data may be carried out on the servers and media owned/leased by the Agency, operators or independent contractors that may be located in any country of the world (including, but not limited to, the countries of the European Union or European Economic Area, the USA, Canada).
Any cross-border data transfer is be limited to those categories of data and recipients that are required to comply with the terms and conditions of the Agreement, these provisions, and to render the ordered services.