Privacy Notice

I. Who we are

Details of the controller

Name

E Fly Tour Ltd, company ID (EIK) 206572832

Location

Sofia

Country

Bulgaria

Registered office / address for correspondence

6 Simeonovsko Shose Blvd., Lozenets, 1113 Sofia, Bulgaria

Phone

+359 89 555 5784

E-mail

sales@eflytour.com

E Fly Tour Ltd is the controller of your personal data as a user of our services. With regard to the personal data that you process while using our services, E Fly Tour Ltd acts as a processor (for example if you are a tour operator for whom we act as an agent, or a customer to whom we provide a linked travel service, such as a hotel booking or an airline ticket that you ask us to arrange, or if you use our booking system yourself).

Contact details of the data protection officer

E-mail

sales@eflytour.com

Phone

+359 89 555 5784

II. What personal data does E Fly Tour Ltd collect, process and store?

E Fly Tour Ltd is a controller of personal data and collects only the data of individuals that is necessary to provide the service, keeping it responsibly and lawfully. We collect the following data:

"Ordinary" personal data

• first name and surname;
• home address;
• date of birth / age;
• e-mail address, for example first.last@domain.com;
• identity card / passport number;
• Internet Protocol (IP) address;
• cookie identifier.

Our website https://eflytour.com uses cookies, without which no website could provide you with a correct service. By visiting our website you accept the use of cookies.

Types of cookies we use:

• Strictly necessary cookies
  • These cookies are needed for the website to function properly (for example between your device and the server).
• Analytics cookies
  • These cookies tell us how many visits our website receives and let us analyse whether visitors find it easy to use and whether we have answered the frequently asked questions (Google Analytics cookies). They give us no information about your personal data. They only show us whether you viewed more than one page of our website, how many times you visited certain pages, whether you use a mobile or a desktop device, and other anonymous data. For Google Analytics we also anonymise IP addresses with anonymizeIp. We keep analytics data in Google Analytics for at most 50 months.
• Functional cookies
  • These cookies let us provide a more personalised service (for example remembering your last search) so that you get the most out of the website. They do not store your personal information.
• Targeting cookies
  • These are dynamic cookies of Facebook, Google and others. We do not use such cookies, but if you click on advertisements on the website they may be set by our advertising partners. They do not store any personal information either.

You control the cookie settings for the cookies you receive from our website. To change them, open the settings of the browser you use and follow its instructions. Note that if you restrict certain types of cookies, you may also restrict the functionality of the website on your own device.

Special categories of data that we process

• Personal identification number (EGN) – where it is necessary to perform our contractual obligations or where the law requires it.
• Sensitive data: data about your health (when taking out medical insurance and/or when an insured event occurs during a trip, and sick-leave certificates if you are our employee).
• Family relationships (where necessary for the purposes of the contract – for example a minor child in your care, or use of a "honeymoon" promotion).

Source of the data

• From the data subject (that is, from you).
• From publicly accessible registers – the Commercial Register, the Property Register, the National Tourism Register of the Ministry of Tourism.
• From travel agents acting as processors for the purposes of the services we provide to you.
• From partner tour operators.
• From traders acting as processors (for example for corporate travel requests).

Purposes and principles of using the personal data we collect

We process your data in order to perform (and/or conclude) a contract for a travel service – a package holiday or a separate element of one, or a linked service (the identity card/passport is needed for hotel accommodation, your telephone number to reach you and/or a person named by you in the event of an insured event, your e-mail address to send the boarding pass and the airline ticket), on the basis of Article 6(1) of the Regulation, namely:

• Performance of the obligations of E Fly Tour Ltd under a contract with you (including protecting the rights and legitimate interests of you and/or the children you represent or the elderly people you assist, and so that we can protect your vital interests if an insured event occurs and you are unable to react at that moment).
• Compliance with a legal obligation that applies to E Fly Tour Ltd (please see the detailed information in the section on the grounds that entitle us to process your data).
• The legitimate interests of E Fly Tour Ltd.
• Your explicit consent as a customer.

E Fly Tour Ltd accepts and stores only the data that is necessary and relevant to the service provided. E Fly Tour Ltd does not accept or process personal data "by default", even when it is received from another controller following a transfer request, and does not store all data received. If the data received contains data of third parties, E Fly Tour Ltd keeps it under the control of the requesting data subject. Such data is managed only for their needs and not for other purposes of E Fly Tour Ltd.

If you are our employee

In addition to the purposes above (insofar as the contracts with customers are performed through you), also to protect your rights and our legitimate interests, as well as your rights and legitimate interests, for the purposes of labour, tax and social security legislation (the Labour Code, the Social Security Code, the Tax and Social Security Procedure Code) and for the purposes of the contractual relationship under your job description. Processing of data about your health is necessary for the purposes of preventive or occupational medicine and under the Medical Expertise Act and the Social Security Code (sick-leave benefits, maternity insurance, etc.).

The grounds that entitle us to process your data are

• Processing is necessary for compliance with our legal obligations:
  • The law obliges us to process your data for the purposes of your trip and/or the issue of a travel voucher and/or a booking form and/or hotel accommodation, airline tickets and/or related services, for example: the Tourism Act, the Convention on International Civil Aviation, the Civil Aviation Act, the Obligations and Contracts Act, the Commerce Act, the statutes and regulations of the International Air Transport Association (IATA), the International Convention concerning the Carriage of Passengers and Luggage by Rail (CIV), the Convention concerning International Carriage by Rail (COTIF), Regulation (EU) No 1177/2010, Regulation (EC) No 261/2004, Regulation (EC) No 2006/2004 and others.
  • Under the Insurance Code – to take out medical insurance for your trip and/or to notify the insurer of an insured event.
  • Under the Tax and Social Security Procedure Code and the VAT Act – for tax purposes (when issuing invoices).
  • Under the Civil Registration Act (the mandatory hotel registration at the place where you stay).
  • Under the Electronic Document and Electronic Trust Services Act (for payments through POS terminals). IMPORTANT: with a virtual POS the payment goes directly to the bank through the BORICA system. We do not process financial or banking information; only your bank and the BORICA system do. In this sense a payment through a virtual POS terminal is no different from a payment through a physical POS terminal.
  • Under the Banks and Banking Act (in connection with payments) and the Measures against Money Laundering Act.
• Processing of your data on the basis of the contract concluded with you.
• Processing based on your consent (when we make a booking for you, including when you use our services by telephone or another means of communication, and where none of the legal grounds above applies).
• For reasons of public interest in the area of public health (when an epidemic breaks out during a trip, and to protect you from the risk).
• For statistical purposes (in connection with the interest in a given travel product).
• For the establishment, exercise or defence of legal claims.
• When you instruct E Fly Tour Ltd to process the personal data of a third party for the purposes of using the service, E Fly Tour Ltd acts as a processor.
• Also when you book additional travel services for your trip or holiday through our hyperlink(s) without benefiting from the rights that apply to package travel under Directive (EU) 2015/2302. In that case E Fly Tour Ltd acts solely on your instructions as the user of the service and only insofar as it can have control over the personal data you process. E Fly Tour Ltd has no control over the content and data that you, as the user of the service, choose to upload to the provider's service (including whether that data includes personal data). In that case E Fly Tour Ltd plays no part in deciding whether the user uses the service to process personal data, for what purposes and whether the data is protected. Accordingly, the liability of E Fly Tour Ltd in that case is limited to 1) following the instructions of the user of the service in accordance with the contract and the terms of the booking system and 2) providing information about the service and its features through its interface.

The legitimate interests pursued by us or by third parties working for us are, in general, the following

• We are a commercial company operating as a tour operator and agent – our legitimate interest is directly linked to our business activity, to carrying it out and to performing our contractual relationships – the provision of travel services (and related legal relationships).
• The interests of E Fly Tour Ltd and of third parties in the areas of commerce, legal certainty and tax policy derive from the nature of our business activity.
• We are not members of IATA.
• We are not an insurance agent.
• The third parties working for us are accountants, tour operators, agents, carriers, lawyers, tour guides, museum staff and insurers – their legitimate interest derives directly from their own business activity.

The following organisations/persons may receive your personal data

• Travel agents and members of BATA and ABTA entered in the National Tourism Register of the Ministry of Tourism and/or the corresponding tourism registers of another country (§ 6 of the transitional and final provisions of the Tourism Act).
• Hoteliers (the Civil Registration Act).
• Our accounting firm (the Accountancy Act).
• The authorities to which you apply for a visa.
• Air carriers and IATA members.
• Carriers (where required under an international treaty).
• A law firm / lawyer / legal adviser (to defend our legitimate interests).
• The insurance company.
• The National Revenue Agency.
• State authorities.

III. Processing principles

We observe the following principles when processing your data:

• lawfulness, fairness and transparency;
• purpose limitation;
• relevance to the purposes of processing and data minimisation;
• accuracy and currency of the data;
• storage limitation in view of the purposes;
• integrity and confidentiality of processing and an appropriate level of security of the personal data.

IV. Consent

By agreeing to this Privacy Notice (notice on the confidential treatment of personal data) you give us permission to process your personal data only for the purposes we have stated.

Consent is required so that we can process both kinds of personal data (ordinary and special), and it must be explicit.

Whenever we ask for consent for special (sensitive) personal data, we will always explain why and how that information will be used.

You can withdraw your consent at any time by submitting a withdrawal request in free text by e-mail (letter).

V. Transfer of personal data to a country outside the EU or to an international organisation

E Fly Tour Ltd will notify you if it intends to transfer some or all of your personal data to third countries or international organisations.

We do not intend to transfer your personal data to third parties without first obtaining your consent, unless this is required for the purposes of the contract (for example travel to a country with a visa regime).

VI. We do not sell your data to anyone!

E Fly Tour Ltd may, at its own discretion, pass some or all of your personal data to processors for the fulfilment of the processing purposes, in compliance with the requirements of Regulation (EU) 2016/679.

VII. Data retention period

E Fly Tour Ltd will store your personal data for the following periods:

• On legal grounds:
  • Under Article 91 of the Tourism Act – 2 years (plus 6 months for a legal file that has been "stayed" after the above period expires).
  • Until the general five-year limitation period for contractual relationships expires (for example Article 111 of the Obligations and Contracts Act in conjunction with §§ 60–68 of the additional provisions of the Tourism Act), extendable by up to 6 months for a legal file that has been "stayed" after the above period expires.
  • Under the Accountancy Act – 10 years and/or until a tax audit and/or cross-check by the National Revenue Agency is completed (if it has not been completed before the 10 years expire).
  • For employment and social security relationships – 50 (fifty) years.
  • For court proceedings – until 5 years after the case is archived by the court (in view of recovering costs). For related cases (for example where one is a preliminary matter for the other) the period for both cases expires with the fifth year of the later one – for example an unpaid airline ticket for a service used: a preliminary order-for-payment procedure followed by enforcement to recover unpaid costs.
• On contractual grounds (unless processing rests on a legal basis and the law obliges us to keep your data for longer):
  • When you buy an airline ticket and/or a hotel booking through us – your data is deleted from the system as soon as the ticket or voucher is received, insofar as we act as a processor between you and the controller that provides the final service, for example the air carrier. By exception your data may be kept if you have created a user account under your control to receive discounts in the system and/or if you have given consent for the purposes of the company's marketing – direct and/or indirect marketing. In that case you have the right to withdraw your consent at any time and, depending on the system – if you have a customer account – to delete the data yourself and/or to ask to be forgotten (and the data deleted) by filling in a form and/or writing to us in free text at the e-mail address given above, or by hand (please see your rights in section VIII of this notice).
  • Upon expiry of the period in which claims under the contract may be brought.
  • Your data will be stored on paper and electronically under a security policy and organisational measures in line with the Regulation.
• With your consent – for as long as necessary for the purposes for which it was given, or until the consent is withdrawn.

VIII. Your rights are the following

At any time while we store or process your personal data, you (in the terminology of the law, the data subject) have the following rights:

• the right to request a copy of your personal data from E Fly Tour Ltd and the right of access to your personal data at any time;
• the right to request your personal data from E Fly Tour Ltd in a form convenient for transfer to another controller, or to ask us to do so, without hindrance on our part;
• the right to request that E Fly Tour Ltd correct without undue delay personal data that is inaccurate or no longer current;
• the right to request that E Fly Tour Ltd erase your personal data without undue delay on any of the following grounds:
  • the personal data is no longer necessary for the purposes for which it was collected;
  • you have withdrawn your consent;
  • you have objected to the processing;
  • the processing is unlawful;
  • the personal data has to be erased to comply with a legal obligation under EU or Member State law that applies to us as controller;
  • the personal data was collected in connection with the offer of information society services.

NOTE: We may refuse to erase your personal data for the following reasons:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation on our part or for the performance of a task carried out in the public interest;
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing;
• for the establishment, exercise or defence of legal claims.

IX. You

• have the right to ask E Fly Tour Ltd to restrict the processing of your personal data, in which case the data will only be stored but not processed. Any refusal to restrict will be given explicitly, in writing only, and we must state the lawful reason for it;
• have the right to withdraw your consent to the processing of your personal data at any time by a separate request to the controller;
• have the right to object to certain types of processing, such as direct marketing (unsolicited messages);
• have the right to object to automated processing, including profiling;
• have the right not to be subject to a decision based solely on automated processing, including profiling;
• if we need to use your personal data for a new purpose not covered by this data protection notice, we will provide you with a new data protection notice and, when and where necessary, ask for your prior consent to the new processing.

All the requests above will be forwarded if a third party (recipients, including outside the EU, and international organisations) is involved in processing your personal data.

X. You have the right to lodge a complaint with the supervisory authority

If your rights under the above or under the applicable data protection legislation are infringed, you have the right to lodge a complaint with the Commission for Personal Data Protection, as follows:

Name

Commission for Personal Data Protection

Registered office

2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria

Correspondence address

2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria

Phone

+359 2 915 3 518

E-mail

kzld@government.bg, kzld@cpdp.bg

Website

www.cpdp.bg

If you wish to complain about the processing of your personal data by E Fly Tour Ltd (recipients, including outside the EU, and international organisations), you may do so at the contact details of E Fly Tour Ltd given above, or directly to the data protection officer (at the contact details given above).

You may exercise all your data protection rights through the forms attached to this information. These forms are, of course, not mandatory, and you may make your requests in any form that contains a statement to that effect and identifies you as the data subject.

Additional information to the Privacy Notice. What is personal data?

The General Data Protection Regulation defines personal data as:

"Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

Separate pieces of data which, when put together, can lead to the identification of a particular person also constitute personal data.

Personal data that has been anonymised in such a way that the person is not or can no longer be identified is no longer considered personal data. For data to be truly anonymised, the anonymisation must be irreversible. If it can be used to re-identify a person, it remains personal data and falls within the scope of the GDPR.

Which data is not personal?

Examples of data not considered personal data include:

• a company registration number;
• an e-mail address such as info@company.com;
• anonymised data.

Why does E Fly Tour Ltd collect and store personal data?

To provide you with travel services we need to collect personal data in order to perform (and/or conclude) a contract for a travel service – a package holiday or a separate element of one, or a linked service (the identity card/passport is needed for hotel accommodation, your telephone number to reach you and/or a person named by you in the event of an insured event, your e-mail address to send the boarding pass and the airline ticket), on the basis of Article 6(1) of the Regulation, namely:

• Performance of the obligations of E Fly Tour Ltd under a contract with you (including protecting the rights and legitimate interests of you and/or the children you represent or the elderly people you assist, and so that we can protect your vital interests if an insured event occurs and you are unable to react at that moment).
• Compliance with a legal obligation that applies to E Fly Tour Ltd (please see the detailed information in the section on the grounds that entitle us to process your data).
• The legitimate interests of E Fly Tour Ltd and your own legitimate interest (for example under an insurance policy) and/or with your consent.

We guarantee that the information we collect and use is necessary for this purpose and is not intended to intrude on your privacy.

For communication with advertising and marketing intent, E Fly Tour Ltd will ask you for additional consent.

How do you use my personal data?

This privacy notice sets out in detail the purposes and reasons for collecting and processing your personal data. The law obliges us to process your data for the purposes of your trip and/or the issue of a travel voucher and/or a booking form and/or hotel accommodation, airline tickets and/or related services: the Tourism Act, the Convention on International Civil Aviation, the Civil Aviation Act, the Obligations and Contracts Act, the Commerce Act, the statutes and regulations of the International Air Transport Association (IATA), the International Convention concerning the Carriage of Passengers and Luggage by Rail (CIV), the Convention concerning International Carriage by Rail (COTIF), Regulation (EU) No 1177/2010, Regulation (EC) No 261/2004, Regulation (EC) No 2006/2004 and others.

• Under the Insurance Code – to take out medical insurance for your trip and/or to notify the insurer of an insured event.
• Under the Tax and Social Security Procedure Code and the VAT Act – for tax purposes (when issuing invoices).
• Under the Civil Registration Act (the mandatory hotel registration at the place where you stay).
• Under the Electronic Document and Electronic Trust Services Act (for payments through POS terminals).
• Under the Banks and Banking Act (your names and personal identification number must be stated in connection with payments).
• When you book additional travel services for your trip or holiday through our hyperlink(s) without benefiting from the rights that apply to package travel under Directive (EU) 2015/2302.

Besides the legislation listed above, other related legislation also applies.

• Processing of your data on the basis of the contract concluded with you.
• Processing based on your consent (when we make a booking for you, including when you use our services by telephone or another means of communication, and where none of the legal grounds above applies). We need your consent for the following purposes:
  • Direct marketing (for example so that we can send you hot deals or last-minute offers).
  • Statistical purposes (so that we can judge which offer suits you best).
  • Profiling (customer account, loyalty points programme, etc.).
• Consent is also not required (apart from a legal basis) when we process your data for any of the following purposes:
  • For reasons of public interest in the area of public health (when an epidemic breaks out during a trip, and to protect you from the risk).
  • For statistical purposes (in connection with the interest in a given travel product, or for Google Ads).
  • For the establishment, exercise or defence of legal claims.

Will you forward or share my personal data with other organisations or persons?

We do not sell your data to third parties, nor will we pass it on for any gain.

E Fly Tour Ltd may pass your personal data to our sub-contracted service providers that have a contract with us.

All third parties that may receive your data are obliged to keep it secure and to use it only to fulfil their obligations towards us. When they no longer need your data to fulfil those obligations, they will have detailed instructions for destroying it in accordance with the procedures established by E Fly Tour Ltd.

When we intend to pass special (sensitive) personal data to a third party, we will do so only after obtaining your consent (the only exception being where the law obliges us to act otherwise).

Recipients of your data may also be state authorities, to which we provide it under specific and clear legal obligations.

How will you store and protect the personal data you collect?

E Fly Tour Ltd collects, stores and uses the information you provide in a manner compatible with the requirements of the General Data Protection Regulation (GDPR). We will strive to keep the information accurate and up to date.

We will not keep information about you for longer than is reasonably necessary to fulfil the specific purposes for which it was collected and of which you are informed here.

Some retention periods depend on legal obligations to keep documents and information for certain minimum periods (see section VII for details).

We have taken all foreseeable technical and organisational measures to protect your data from unauthorised access. We have an integrated information security system, namely personal access accounts, logins protected with a user name and password, and in addition:

• Mac workstations with encrypted disks, Sophos Antivirus for Mac and the Mac Application Firewall enabled.
• Windows workstations with encrypted disks, antivirus software and Windows Firewall.
• Communication with the server over an encrypted SSL/TLS channel.
• Data and database storage in Microsoft Azure cloud storage.
• A mechanism for notifying individuals of unauthorised access to their data.
• Employees use purpose-built software to administer the company's business processes. It requires authorisation.
  • The software DOES NOT STORE any data locally on employees' computers – all data is protected in the cloud (Microsoft Azure).
  • The software is built to the latest security standards and uses encrypted channels to the servers in Microsoft Azure (cloud) and encrypted channels to all third parties – partners and/or software services.
  • Each employee has limited access only to the information needed to perform their duties.
  • On a written and/or e-mail request from a customer, all their data is deleted and/or anonymised in the system.
  • The customer agrees to provide their data by ticking a box on the website at registration/booking.

The remaining details of the systems are a trade secret that may be disclosed only to officials of the Commission for Personal Data Protection, in the interest of your security.

Can I find out what personal data of mine you hold and process?

On your request E Fly Tour Ltd must tell you what information we hold about you and how it is processed. If we hold your personal data, you may request the following information:

• Contact details of the organisation that processes your data, or on whose behalf it is processed (in some cases this may be a representative in the EU).
• Contact details of the officer you can contact.
• The purposes of the processing.
• The legal basis for the processing.
• The categories of personal data concerned.
• The recipients or categories of recipients to whom the data has been or will be disclosed.
• Recipients in third countries or international organisations, if personal data is transferred to them, and the guarantees that the security of the data there will be at least at the EU level.
• If the processing is based on the legitimate interests of E Fly Tour Ltd or of a third party – information about those interests.
• The envisaged period for which the personal data will be stored.
• Details of your rights to request rectification or erasure of personal data or restriction of processing, and to object to such processing.
• Information about your right to withdraw consent at any time.
• Details of your right to lodge a complaint with a supervisory authority.
• Information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, whether you are obliged to provide the personal data and the possible consequences of failing to provide it.
• The source of your personal data, where it was not collected directly from you.
• All details and information on the existence of automated decision-making, such as profiling, meaningful information about the logic involved, and the significance and envisaged consequences of such processing.

How do I get access to my data that is being processed?

You need to fill in an access request or send a request to the contact details of E Fly Tour Ltd given here, or directly to the contact details of the data protection officer.

To prove your identity you must identify yourself unambiguously – identity documents, customer number, electronic card.

Location

Country

Bulgaria

Address

6 Simeonovsko Shose Blvd., Lozenets, 1113 Sofia, Bulgaria

Phone

+359 89 555 5784

E-mail

sales@eflytour.com

Website

https://eflytour.com

You can contact our data protection officer directly here:

E-mail

sales@eflytour.com

Phone

+359 89 555 5784

Information and requests are handled free of charge, except in the cases provided for by law in which the controller may charge a reasonable fee.

Consent

By agreeing to the Privacy Notice on our personal data processing policy, you explicitly consent to our processing your personal data for the stated purposes.

Processing of personal data

When you visit our website, our web servers store data about the browsers and operating systems you use, the pages you visit on our site, the date of your visit and, for seven days, the IP address assigned to you by your internet provider, for security purposes such as detecting attacks on our websites. Apart from the IP address, personal data is stored only when you provide it yourself, for example when registering, taking part in a survey or a prize competition, or for the performance of a contract.

Use and transfer of personal data and purpose limitation

E Fly Tour Ltd uses your personal data for the technical administration of the website, customer management, product surveys and marketing, only to the extent necessary for the purpose and where the customer has provided it explicitly and voluntarily. Personal data is passed to state institutions and authorities only within the mandatory provisions of the applicable law. Our employees are bound by a duty of confidentiality.

Newsletter

On our website you may subscribe to a newsletter if you wish. The data provided when subscribing will be used solely to send the newsletter. You can cancel the subscription at any time using the opt-out provided.

Notes on the use of cookies

Once activated, a direct connection is made to the server of the respective social network. The content of the toggle area is then transmitted directly from the social network to your browser, which embeds it in the website. Once the toggle area is activated, the social network may collect data regardless of whether you interact with it. If you are logged in to a social network, it may record your visit in your user account. A visit to other websites cannot be recorded by a social network before you have activated the respective toggle area there as well. If you are a member of a social network and do not want it to link the data collected during your visit to our website with your stored membership data, you must log out of that social network before activating the toggle areas. We have no influence over the amount of data that social networks record through their toggle areas. The purpose and extent of the data collection, its processing and use by the respective social networks, and your related rights and settings options for protecting your privacy, are described in the privacy notices of the respective social network.

Analysis of usage data

To recognise visitors' preferences for our online offers, we use products that let us tailor the content of our web pages and so improve our offers to you. To enable these functions you must explicitly confirm your consent. If you later do not want E Fly Tour Ltd to collect and analyse information about your visit, you can opt out at any time. To implement the opt-out technically, a marker is set to Off in your browser. This cookie serves solely to record your opt-out. Please note that for technical reasons the cookie can only be used for the browser in which it was set. If you delete cookies or use another browser or device, you must make your choice again.

Security

E Fly Tour Ltd takes technical and organisational security measures to protect the data we administer from manipulation, loss, destruction and access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Right to information

On request, E Fly Tour Ltd or your travel agent will tell you within the statutory period whether we hold personal data about you and what it is. If you are registered as a user, we also offer you the possibility to review the data yourself and to delete or change it if necessary. If, despite our efforts to keep the data accurate and up to date, incorrect information has been recorded, we will correct it at your request.