← Back to Home

Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

GDPR Compliance Notice: This privacy policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to protecting your privacy and personal data.

1. Data Controller Information

Company: Compliment Vacation
Contact: Available through our website contact form
Data Protection Officer: Available upon request

2. Information We Collect

We collect information you provide directly to us, including:

Personal Information:

  • Name (first and last)
  • Phone number
  • Email address
  • Destination preferences
  • Income information (for eligibility verification)
  • Age verification data

Technical Information:

  • IP address
  • Browser type and version
  • Device information
  • Website usage patterns
  • Cookies and similar technologies

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Consent: When you voluntarily provide information and consent to processing
  • Legitimate Interest: To provide our services and improve user experience
  • Contractual Necessity: To fulfill vacation package arrangements
  • Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use collected information to:

  • Process vacation package requests
  • Verify eligibility for programs
  • Communicate with you about services
  • Match you with appropriate resort partners
  • Improve our website and services
  • Send marketing communications (with consent)
  • Comply with legal obligations

5. Information Sharing and Disclosure

We may share your information with:

Resort Partners:

We share relevant information with resort partners to facilitate your vacation package, including name, contact information, and eligibility data.

Service Providers:

Third-party vendors who assist with website operation, data processing, and customer service under strict confidentiality agreements.

Legal Requirements:

When required by law, regulation, legal process, or government request.

6. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request limitation of processing
  • Portability: Request transfer of your data
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time

7. Data Retention

We retain personal data for as long as necessary to:

  • Provide our services
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

Generally, personal data is retained for 7 years from last contact, unless a longer retention period is required by law.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection
  • Secure data storage facilities

9. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses
  • Binding Corporate Rules
  • Certification schemes

10. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential website functionality
  • Performance analytics
  • Marketing and advertising (with consent)

You can manage cookie preferences through our cookie banner and browser settings. See our Cookie Policy for detailed information.

11. Marketing Communications

We may send marketing communications if you have:

  • Explicitly consented to receive them
  • Previously engaged with our services (legitimate interest)

You can unsubscribe at any time using the links in our emails or by contacting us directly.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

13. Changes to This Privacy Policy

We may update this privacy policy periodically. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending email notifications (where appropriate)
  • Updating the "Last Updated" date

14. Contact Information

For privacy-related questions, to exercise your rights, or to file a complaint, contact us through:

  • Website contact form
  • Email: (available upon request)
  • Postal address: (available upon request)

15. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable laws.

Important: By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.