Privacy Notice

Effective date: 1 March 2022

This page informs you of our policies regarding the collection, use, and disclosure of personal data by Luxury Adventures ehf., Askalind 8, 201 Kópavogur, Iceland, Icelandic ID no. 461009-1580 („Luxury Adventures“, “us”, “we”, or “our”), when you use the www.lux.is website, use our services, do business with us, or communicate with us, as well as your rights associated with that data. This Privacy Notice is intended to provide transparency regarding what personal data Luxury Adventures may hold about you, how it will be processed and for how long.

Personal data is information relating to natural persons who can be identified or who are identifiable, directly from the information in question; or who can be indirectly identified from that information in combination with other information.

 

Information Collection

We collect several different types of information for various purposes to provide and improve our services. In particular, we collect personal data in the following instances:

1. When you use our services;
2. When you visit our website;
3. If you are a business partner, customer, supplier, or an employee thereof;
4. If you contact us via e-mail, social media, or through other means;
5. If you choose to submit other personal data to us.

Furthermore, we may receive personal data about you from third parties, for example in the course of provision of travel services carried out by a third-party service provider, customs or immigration authorities, airlines, hotels etc.

 

Types of Data Collected

Personal Data

The types of personal data collected by us include the following:

• First name and last name
• Address
• Email address
• Date of birth and/or ID number (kennitala)
• Gender
• Passport number
• Telephone number
• Account and/or payment information
• Cookies and Usage Data

Sensitive Personal Data

In certain circumstances, Luxury Adventures may need to process personal data which are considered sensitive (e.g. health data or data concerning race, ethnicity, religion etc.), in order to provide you with services. This may be the case e.g. where an additional service has been requested due to health issues or dietary requirements.

Usage Data

We may also collect information how our web service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address, browser type, browser version, the pages of our web service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our web service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of cookies we use:

Session cookies. We use session cookies to operate our service.

Preference cookies. We use preference cookies to remember your preferences and various settings.

Security cookies. We use security cookies for security purposes.

 

Use of Data

Luxury Adventures uses the collected data for various purposes:

• To provide you with requested travel services
• To honor our contractual obligations to our customers, business partners, and suppliers
• To satisfy legal and regulatory requirements
• To provide and maintain the web service
• To provide customer care and support
• To provide analysis or valuable information so that we can improve the web service
• To monitor the usage of the web service
• To detect, prevent and address technical issues

 

Legal basis

Icelandic law allows us to process personal information, so long as we have a ground under the law to do so. It also requires us to tell you what those grounds are. As a result, when we process your personal information, we will rely on one of the following processing conditions:  

• Performance of a contract: If you are (or are an employee of) a customer, supplier, or a business partner, we may need to process your personal information in order to provide you with the travel services or otherwise perform our obligations under a contract. For example, we will need to process information such as your name, contact information and payment information in order to process your order and to enable you to board flights and check-in at hotels;
• Legal obligation: We may be required to process your personal information in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to customs and immigration authorities, other public bodies or law enforcement agencies;
• Legitimate interests: We will process information about you where it is in our legitimate interest in running a lawful business to do so in order to further that business and improve our services, so long as it doesn’t outweigh your interests. We may elect e.g. to send you advertising or promotional material and use your data for market analysis;
• Vital interests: We may be required to process information to protect your or another person´s vital interests, for example if a medical emergency arises; or
• Your consent: In certain instances, you may have provided us with express consent to process your personal information for a specific purpose. If so, you may withdraw your consent at any time by contacting us at dataprotection@lux.is.

 

Transfer of Data

Luxury Adventures will never sell your personal data to a third party.

Your information, including personal data, may be transferred to various third parties in order to provide the services. These include our business partners, including airlines, hotels, payment service providers, booking agencies and other intermediaries. Furthermore, information will need to be shared with public authorities of the countries included in your travel itinerary. Other legal requirements may furthermore oblige us to provide your information to police or other public authorities.

We may furthermore in certain instances need to transfer your data to third parties in order to protect our legitimate interests. Such parties may e.g., include credit rating agencies, law firms, and courts of law.
We may also share your information with third parties who process data on our behalf, but only where we place obligations on them in relation to the security of the data and require them to use the data only as we instruct.
Luxury Adventures will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

 

Security of Data

The security of your data is important to us. We have put in place appropriate security measures to prevent accidental loss or unauthorized use, alteration or disclosure. Furthermore, access to personal data is restricted to those parties who have a business need to know. Our Data Protection Officer is Ólafur Þorgrímsson and can be contacted via the following email address dataprotection@lux.is.

 

Service Providers

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide services on our behalf, to perform services related to our web service or to assist us in analyzing how our service is used.

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

 

Links to Other Sites

Our web service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

 

Retention of Data

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. Hence, we aim to retain data only for so long as the information is necessary to comply with an individual’s request, to comply with legal or regulatory requirements or until that person asks that the information be deleted. All types of personal data listed above (except first and last name) are deleted after the use of our services. Cookie Data is stored for a maximum of 24 months from the time the user visited the website.

 

Your Rights

If Luxury Adventures process personal information about you, you have the following rights:

• Access and correction: You have the right to request a copy of the personal data that we hold about you. If we agree that you are entitled to copies of that information, we will provide them free of charge. Before providing personal information to you, we may ask for proof of identity and sufficient information about your interactions with us that we can locate your personal information. If the information we hold about you is incorrect, you are entitled to ask us to correct any inaccuracies in the personal information.
• Object to processing: you have the right to object to us processing your personal information if we are not entitled to use it anymore.
• Other Rights: In addition, you may have rights to have your information deleted if we are keeping it too long, or to have its processing restricted in certain circumstances.

You can make a request or exercise these rights by contacting Luxury Adventures at dataprotection@lux.is. We will make all reasonable and practical efforts to comply with your request, so long as it is consistent with applicable law.

 

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. We will notify you of any changes by posting the new Privacy Notice on this page.

You are advised to review this Privacy Notice periodically for any changes. Changes to this Privacy Notice are effective when they are posted on this page.

 

Contact Us

If you have any questions about this Privacy Notice, please contact us:

By email: dataprotection@lux.is

By phone number: +354 577 1155

 

If you´re dissatisfied with our handling of your personal data, please contact us via the above address. If you do not feel we have resolved your concerns, you also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd), www.personuvernd.is