1. INTRODUCTION
   We collect, use, process and share personal data in accordance with privacy laws to make sure your data protection rights are implemented and enforceable. We integrate various technical and organizational solutions to comply with applicable legislation related to personal data, privacy, and security protection in countries where we operate or where the applicable law applies to us. This Privacy Policy sets forth the basic rules and principles by which we process your personal data, and mentions our responsibilities while processing your personal data.

Our contact information:
Email: contact@hotels.tripswish.com

2. TERMS WE USE AS LEGAL GUIDELINES OF THE PROCESSING
   There are some legal bases for the processing of your personal data and we count on them to process your personal data. We use the main three bases to process your personal data: consent, and legitimate interest.

Consent – your clear agreement to the processing of your personal data for a specific purpose.

Legitimate Interests – the reason why the processing of your data is necessary which is based on the legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests and those interests have a specific purpose, they are necessary, and they are balanced.

Some applicable laws may indicate other legal grounds for the processing and when applicable we will count on such grounds.

3. CONSENT RULE AND INTERRELATION WITH OTHER LEGAL GROUNDS
   If you have given consent to the processing of your data you can freely withdraw such consent at any time by contacting us.

If you do withdraw your consent, and if we do not have another legal basis for the processing of your data, then we will stop the processing of the personal data and may delete it in specific situations, including in case if you request the deletion of your personal data and we are obliged to delete it.

If we have another legal basis for the processing of your data, then we may continue to do so, subject to your legal interests and rights.

4. OUR RESPONSIBILITIES
   When we process personal data, we have obligations according to the applicable laws. We act as a data controller when we determine the purposes and means of the processing of your personal data. As a data processor, we process personal data on behalf of the controller.
5. RECOMMENDATIONS FOR YOU

You should read this Privacy Policy carefully. We want to make sure that you understand all your rights. It is important for both of us that you maintain your personal data confidential and secure.

If you provide us with personal data about other individuals, we will only employ that data for the special reason for which it was provided to us. By sending the data, you shall be sure that you have the right to dispose of or process the personal data on your behalf in accordance with this Privacy Policy. In case you submit a third party’s personal data, be sure that you have a legal basis for the processing of such data.

According to the applicable law, you may become a data controller/processor and it will impose additional obligations on you.

6. PROCESSED DATA
   We process personal data when you interact with our website https://hotels.tripswish.com (the “Platform”), especially:

• you browse any page of the Platform;
• you subscribe to our newsletters/updates;
• you communicate with us;
• you use our services;
• you receive notification from us;
• we measure the Platform’s traffic;
• in cases which do not depend on you but we have a legal basis to collect such data.

We collect the following types of data:

• online browsing history;
• demographic details;
• email;
• data that identifies you such as your IP address, login information, browser type, and version, time zone setting, browser plug-in types, some location information about where you might be, operating system, and version;
• data on how you use the Platform such as your URL clickstreams (the path you take through the Platform), page response times, download errors, how long you stay on web pages, what you do on those pages, how often, and other actions;
• other personal data you share with us or personal data which we may legally obtain for our legitimate interests.

The recipients of the collected data are the highest management level of our company.

7. PURPOSES AND LEGAL BASIS FOR THE PROCESSING

We process the data for:

• Providing services accessible via the Platform. Legal basis: Consent; Legitimate Interests.
• Providing newsletters/offers which may be interesting to you. Legal basis: Consent; Legitimate Interests.
• Keeping the Platform running (managing your requests, remembering your settings, hosting, and back-end infrastructure). Legal basis: Legitimate Interests.
• Preventing fraud, illegal activity, or any violation of the terms or Privacy Policy. We may disable access to the Platform, erase or correct personal data in some cases. Legal basis: Legitimate Interests.
• Improving the Platform (testing features, interacting with feedback platforms, managing landing pages, heat mapping the Platform, traffic optimization, and data analysis and research, including profiling and the use of machine learning and other techniques over your data and in some cases using third parties to do this). Legal basis: Legitimate Interests.
• Customer support (notifying you of any changes to the Platform, services, solving issues, any bug fixing). Legal basis: Contract; Legitimate Interests.

8. YOUR RIGHTS AS A DATA SUBJECT
   You may ask us to refrain from using your data for marketing (when you opted-in). You can opt-out from marketing by contacting us via the contact form.

You can exercise the following rights by sending us a request via the contact form:

• Right to access information about you.
• Right to make us correct any inaccurate personal data about you.
• Right to object to profiling or automated decisions.
• Right to data portability.
• Right to be forgotten.
• Right to lodge a complaint with a national regulator.

9. SECURITY
   We have security and organizational measures and procedures to secure the data collected and stored. You acknowledge that no data transmission is guaranteed to be 100% secure and there may be risks.
10. LOCATION OF PROCESSING AND THIRD-PARTY SERVICE PROVIDERS
    The personal data is collected by our company incorporated in India. Our servers are provided by a hosting provider. We store your personal data on Google Cloud, based out of the United States of America.
11. RETENTION POLICY
    We store personal data as long as we need it. Our usual retention period is 18 months.
12. COOKIE POLICY
    We collect cookies to improve the user experience. You can block or delete cookies through your browser settings.
13. TRANSFER OF YOUR PERSONAL DATA
    If applicable, we ensure appropriate safeguards for data transfers.
14. CONTACT INFORMATION
    For any questions or clarifications, contact us:

Email: contact@hotels.tripswish.com