GDPR Compliance Policy
European General Data Protection Regulation (EU 2016/679)
1. Your Data Protection Rights Under GDPR
If you are a resident of the European Economic Area (EEA) or United Kingdom, you have specific data protection rights under the General Data Protection Regulation (GDPR):
- Right to Access: Request copies of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete details.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer required for regulatory fulfillment.
- Right to Restrict Processing: Request restrictions on how we process your information.
- Right to Data Portability: Request transfer of your data to another organization or directly to you.
2. Legal Basis for Processing Data
We process your data to fulfill contractual obligations (administering travel-package participation and coordinating services), comply with legal requirements, and pursue legitimate business interests (fraud prevention and secure payment verification).
3. Transaction and Participation Fee Terms
Exercising GDPR rights does not alter the published participation-fee policy. See the Participation Fee Policy for the terms that apply to payment.
4. Sub-Processors & Security
We utilize verified GDPR-compliant third-party services:
- Encrypted Payment Infrastructure: PCI-DSS certified payment processing.
- Transactional Email Services: Encrypted transactional email dispatch.
5. Exercise Your GDPR Rights
To submit a Data Subject Access Request (DSAR) or exercise your data rights, email info@fortunewin24.com.
.jpeg&w=1920&q=75)