Your data protection rights under UK GDPR
Last updated: January 2024
jolly-drift is committed to ensuring that your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides additional information about your rights and how we handle your data.
jolly-drift is the data controller responsible for your personal data. Our contact details are:
jolly-drift
42 Briggate
Leeds, LS1 6HD
United Kingdom
Email: [email protected]
Under UK GDPR, you have the following rights regarding your personal data:
You have the right to be informed about how we collect and use your personal data. We provide this information through our Privacy Policy and at the point of data collection.
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to valid requests within one month.
You have the right to request that we correct any inaccurate personal data we hold about you. You can also request that we complete any incomplete data.
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:
You can request that we limit how we use your personal data in certain circumstances, such as when you contest its accuracy or have objected to our processing.
Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to direct marketing.
You have rights related to automated decision making and profiling. jolly-drift does not currently use automated decision making that produces legal or similarly significant effects.
To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request.
We will respond to your request within one month. In complex cases, we may extend this period by a further two months, and we will inform you if this is necessary.
There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
We process your personal data under the following lawful bases:
We retain personal data only for as long as necessary for the purposes for which it was collected. Booking records are retained for seven years for legal and accounting requirements. Marketing data is retained until you withdraw consent.
To provide travel services, we may need to transfer your data to countries outside the UK. Where we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
We implement appropriate technical and organisational measures to protect your personal data, including:
We have procedures in place to detect, report, and investigate personal data breaches. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
We may update this GDPR information page from time to time. Any significant changes will be communicated to you where appropriate.