Data processing
Draft. This text is not in force yet. Items in [square brackets] are filled in before launch, and a lawyer reviews it first.
This page sets out the terms for the data we process for an agency as its processor (GDPR Art. 28). It applies to every agency account and forms part of the terms of service. A signed copy is available on request: hi@tourgram.app.
Details of the processing
| Controller | The agency |
|---|---|
| Processor | [Legal entity name] |
| Subject and purpose | Running the assistant for the agency: rates, contracts, bookings, quotes and documents, reminders, payment links, reports |
| Duration | As long as the agency account is open, then the deletion period below |
| People concerned | Agency staff, the agency's guests and customers, supplier contacts |
| Data types | Names, contact details, travel dates and bookings, payment status, contracts and rates, documents and messages the agency provides. Other data only if the agency uploads it |
What we commit to
- We process the data only on the agency's documented instructions, which include using the service as designed, unless the law requires otherwise.
- People who handle the data are bound by confidentiality.
- We apply the measures on the Security page (GDPR Art. 32).
- We use only the sub-processors listed, under written terms that give the same protection. We tell the agency before adding or replacing one, and the agency may object.
- We help the agency answer requests from guests about their data, and help with security duties, breach notices and impact assessments, as far as we can with what we hold.
- We tell the agency without undue delay after we learn of a personal data breach that concerns its data.
- When the account closes, the agency can export its data. We delete it within 30 days, unless the law requires us to keep it.
- We give the agency the information it needs to check our compliance and allow reasonable audits.
- If data goes outside the EEA, we do it under an adequacy decision or the EU Standard Contractual Clauses.