Privacy & Cookie Policy

What is the purpose of this privacy policy?

This privacy policy is to tell you what personal data we collect from you and why and what we will do with this data. It also tells you about some of the key rights which you have under data protection laws. From 25 May 2018 onwards, you and your personal data will be protected by the EU General Data Protection Regulation (which is otherwise known as GDPR) and a new UK Data Protection Act 2018. In this privacy policy, we refer to this legislation as data protection laws.

We will only process your personal data as set out in our privacy policy or otherwise notified to or agreed by you or as we are otherwise permitted to do in accordance with data protection laws.

When we refer to “you” in this privacy policy, we mean every person who communicates with us in respect of a booking, booking request, enquiry or for any other reason and all persons for whom a booking or booking request is made.

For the purposes of data protection laws, Leger Holidays Limited and Leger Air Holidays Limited trading as Arena Travel are data controllers in respect of the personal data we process. In this privacy policy, “we”, “us” and “our” means both of these companies as they are effectively operated together.

What is my personal data and what do you mean by process?

When we refer to personal data, we mean any information which relates to an identified or identifiable individual.

Where we refer to process or processing, we mean anything which we may do with your personal data including collecting, storing, using, disclosing to third parties and erasing it.

What personal data will we collect from you and why?

In order to respond to an enquiry, administer and fulfil your booking or send you a brochure or other promotional material, we need to process personal data we obtain from you. This personal data may be obtained from you directly or through any travel agency with whom you make your booking or booking enquiry.

Where you wish to make a booking, the personal data we need to collect and process is likely to include;

• names of all persons travelling
• contact details (such as telephone number, postal and e-mail addresses) of the person making the booking
• passport information of all persons travelling
• travel insurance details for all persons travelling
• dietary information where applicable
• date of birth
• loyalty membership details
• emergency UK contact / next of kin details (names and telephone numbers) for all persons travelling
• credit/ debit card or other payment information for the person making the booking
• information in respect of any medical condition, disability or reduced mobility which may affect you or anyone travelling with you – this comes within special categories of personal data (see below)

For an enquiry, the personal data we will need to process is likely to include the name and contact details of the person making the enquiry.

For a booking or booking enquiry, we will process your personal data (other than any data which comes within special categories of personal data - see below) on the basis that this is necessary for the performance of your contract with us or to enable us to take steps at your request prior to your entering into a contract with us. We may also need to do so to comply with a legal obligation to which we are subject or in order to protect your vital interests (for example, in an emergency situation).

If you wish to receive brochures or other promotional material from us, we will need your name and the contact details applicable to the form of communication you have consented to. For example, if you wish to receive information by e-mail, we will need your e-mail address.

What are special categories of personal data?

Personal data which concerns your health or which reveals your racial or ethnic origin, religious beliefs or sexual orientation are special categories of personal data. Other information also comes within special categories but this is unlikely to be relevant to the booking and provision of travel arrangements.

Generally speaking, the processing of special categories of personal data requires your explicit consent.

Accordingly, information concerning any disability, medical condition, restricted mobility or other health related issue as well as dietary restrictions which disclose your religious beliefs or any health concern are special categories of personal data. We will ask for your consent to our processing this information at the time you make your booking or your booking enquiry.

Who may we provide your personal data to?

Where you make a booking, appropriate personal data will be passed on to the relevant suppliers of your chosen arrangements together with any other third party who needs this information so that we can arrange for your holiday to be provided.

Suppliers and other third parties are likely to include the following depending on the arrangements booked;

• Airlines
• Transport operators
• Hotels and the providers of other forms of accommodation
• Overseas ground agents
• Tour managers and guides
• Excursion and activity operators
• Travel insurance providers
• Credit card companies / banks in respect of payments
• Google - we work with third party company Google to automatically collect information including: IP address; MAC (Media Access Control) address; unique identifier or other persistent or non-persistent device identifier; device software platform and firmware, mobile phone carrier and geo location data to help us understand your use of our app such as how often you return, what parts of the app you visit, how you use the app and how long you spend on the app. This third-party provider is prohibited from using our data for any other purposes. Go to www.google.com/analytics/terms/us.html to read Google Analytics Privacy Policy. We use the data we collect about your use of our website to analyse trends across the data set of all customers worldwide, and to enable us to offer a better service to you.
• Fulfilment & Distribution Houses - we work with a number of companies who help fulfil our direct mailing and distribution requirements, who may have access to some of your personal data to enable them to fulfil their responsibilities they have with us.
• Third party travel agents – If you book one of our holidays through a third-party travel agent, certain personal data (as applicable to your booking, such as your name, date of birth or any special requirements you have) will be passed to us to provide the services you have requested/booked.

The information may also be provided to government / public authorities such as customs or immigration if required by them, or as required by law.

We may also make personal data available to other companies who provide services on our behalf, such as mailing brochures and marketing material.

We only provide third parties with the personal data they require in order to deliver their services. Other than in relation to government / public authorities (over whom we have no control), we will take appropriate steps which are intended to ensure that anyone to whom we pass your personal data for any reason agrees to keep it secure, only uses it for the purposes of providing their services and does not collect any personal data from you in the course performing their services.

Where will we process your personal data?

Your personal data may be processed within the UK and/or any other country(ies) of the European Economic Area (EEA). EEA countries are all member states of the European Union together with Norway, Iceland and Liechtenstein.

We may also process personal data outside the EEA. Data protection laws may not be as strong outside the EEA as they are in the EEA. Personal data will not be transferred to a country outside the EEA unless (1) the country to which it is transferred is one which the European Commission considers to provide an adequate level of data protection or (2) the personal data is transferred to a company which is required by our contract with them only to deal with the data in accordance with our instructions and to maintain appropriate security to protect the personal data which we are satisfied they have or (3) we are obliged to provide the personal data to a government / public authority in order to provide your holiday.

How do we protect your personal data?

We take appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data, which is appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures.

Can we use your personal data to send you information about our holidays or other services in the future?

We will only retain and use your personal data for marketing purposes where you have specifically consented to this or we are legally permitted to do so (including as set out below).

We may send you e-mail marketing where we comply with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). PECR permits us to e-mail you information about the travel services we offer where you have previously provided us with your e-mail address in the course of entering into a contract with us for holiday / travel arrangements or negotiations for such arrangements and we wish to e-mail you marketing material about our similar services or products. You will of course be given the opportunity to opt out of receiving such e-mail marketing communications when you first provide us with your e-mail address and whenever we send you any e-mail marketing.

Where you have previously requested or agreed to receive information about our travel services from us by post, we may continue to send you such information in the same way until you ask us not to (which you can do by telephone, e-mail or post). Everything we send you will tell what you should do if you no longer wish to hear from us. We will send you this information as this is necessary for the purposes of our legitimate interests in communicating with you unless it is or becomes clear that our interests are overridden by your interests or fundamental rights and freedoms in which case we will cease communicating with you.

You may provide your consent to receiving marketing information from us by opting to receive marketing material either on-line or by telephone. You may also choose in what ways you are happy to receive communications from us. You may, for example, be happy to receive information and offers by post and e-mail but not by telephone.

Can you withdraw your consent to our processing your personal data?

Yes, you can withdraw your consent to receiving marketing material or other communications from us, either generally or in any particular way, at any time by e-mailing us at unsubscribe@leger.co.uk. Alternatively, you can telephone us.

How can you find out what information we are holding about you?

You are entitled to ask us (by letter or e-mail) what personal data of yours is being held or processed, for what purpose and to whom it may be or has been disclosed. No fee will be charged for responding to this request unless it is obviously unfounded or excessive or we have previously provided the same information. We promise to respond to your request without delay and in any event within 1 month unless the request is complex or you have made numerous requests in which case we may be able to extend our response time by a further 2 months.

What should you do if the personal data we are holding is inaccurate, out of date or incomplete?

If you believe this is the case, please tell us by e-mail as soon as possible. We will rectify the problem within 1 month or within 3 months if the rectification request is complex.

How long can we retain and process your personal data?

We will not process your personal data in a form which enables you to be personally identified for any longer than is necessary in order to fulfil the purpose for which it was originally collected or for any other legitimate business purpose.

Where your personal data has been provided for the purpose of the holiday arrangements or other services you have contracted, we are entitled to retain this data for a period of up to 6 years after those arrangements have been completed. In certain limited circumstances, we may be able to retain it for a longer period.

If you have consented to receiving marketing communications from us, we may continue to use your personal data for this purpose until you withdraw your consent or otherwise for as long as we reasonably consider your consent remains valid and effective.

Can you ask us to delete your personal data?

Yes, you can ask us to erase your personal data in certain circumstances, for example where you have withdrawn your consent to further marketing material where the data in question has only been processed for this purpose. However, this is not always the case. Please see the previous paragraph for further information on the period of time we may retain personal data.

Can this privacy policy be changed?

Yes, from time to time we may need to make changes to this privacy policy. These may be required as a result of changes in data protection laws or in the guidance issued by regulators such as the Information Commissioner’s Office (which is usually referred to as the ICO) or where we make changes to our procedures. The latest version of this privacy policy can be found on our website at www.leger.co.uk/data-protection

Does our website use cookies?

Yes, as is the common practice, our website uses cookies. A ‘cookie’ is a small data file which our website server stores on your computer in order to collect information about your visit and to remember you when you visit again at a later date. The main purpose of a cookie is to identify users and to personalise their visit by customising web pages for their use. We may also use third parties who will collect data which is not personally identifiable to analyse site visits and carry out other similar activities. In the course of doing so, they may place their own cookies on your computer so that they can collect information about your visit. You may if you wish disable or delete such cookies through your internet browser. However, doing so may mean you will be unable to access our website or parts of it, your experience of our website may be adversely affected and/or you may not receive information which is relevant to your personal interests.

What should I do if I have a complaint about the processing of my personal data?

If you have any complaint about the way in which your personal data has been dealt with, please let us know by e-mail to customer.relations@leger.co.uk. We will investigate and respond to you as soon as we reasonably can. If you remain dissatisfied, you may complain to the Information Commissioner’s Office. For further details, see www.ico.org.uk.

What are cookies and how do we use them?

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies are then sent back to originating website on each subsequent visit or to another website that recognises that cookie.

This Site uses cookies to distinguish you from other users. Some of these cookies are essential to make this Site work properly, allowing you to make your booking and enabling us to fulfil your purchase request. Other types of cookie help us to provide you with a good experience when you browse our Site, allow us to improve our Site or the way we provide our services to customers.

Cookies can be divided into four categories; strictly necessary cookies, performance cookies, functionality cookies and advertising cookies.

• Strictly necessary cookies - these cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.
• Performance cookies - these cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.
• Functionality cookies - these cookies allow the website to remember choices you make (such as your user name, language or the country you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
• Advertising cookies - These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

We use cookies in each of the above categories.

A summary of the cookies used on this Site are set out below:

• LaSID - Live Agent
• LaVisitorId - Live Agent
• LaVisitorNew - Live Agent
• PAPVisitorId - Post Affiliate Pro
• PAPVisitorId - Post Affiliate Pro
• __adal_ca - Adalyser
• __adal_cw - Adalyser
• __adal_id - Adalyser
• __adal_ses - Adalyser
• _fbp - Facebook
• _ga - Google Analytics
• _gac_UA-1379166-4 - Google Analytics
• _gaexp - Google Analytics
• _gcl_aw - Google Adsense
• _gid - Google Analytics
• _hjIncludedInSample - Hotjar
• _hjid - Hotjar
• _omappvp - OptinMonster
• _omappvs - OptinMonster
• _tsqmSaved - Core Functionality Cookie
• campaign - In-house Tracking Cookie
• selected-departure - Core Functionality Cookie
• tourSearchFormOptions - Core Functionality Cookie

viewedTours - Core Functionality Cookie

Can I opt out of cookies?

Yes, except where the cookie is strictly necessary to provide the services which you have requested. Consent is not required for the use of these cookies and we simply cannot provide these services without them.

You can opt out of cookies which are not strictly necessary. However, please remember that performance cookies only collect information about Site usage which is anonymous and functionality cookies remember the choices you make so as to improve your experience of our Site. Advertising cookies collect information about your browsing habits so as to enable us to target our advertising and make it more relevant for you and your interests.

How do I opt out of cookies?

You can set your browser to reject cookies or you can delete them yourself. You can also adjust your browser settings to your preferred level of protection. You can do so at any time by accessing the preference panels from your browser’s main menu (usually found under ‘Edit’, ‘Tools’ or ‘Options’). You can also find out more information about how cookies work and how to disable them here. However, if you choose to remove cookies parts of the Site may not work properly or your use of the Site may be impaired.