Privacy Policy

Avesta Travel and Tours Pvt Ltd, including all legal entities under the Avesta group (hereafter referred to as "Avesta" or "we") with an exception of AvestaTravel and Tours Pvt Limited (ATTPL), respects your (customers - hereafter referred as "you" or "user") privacy and values our relationship with our business partners, clients, third parties having contractual relationship with Avesta (hereafter referred to as "third party" or "service provider"), and any party who purchases/intend to purchase/inquire about any product(s) and/or service(s) made available by Avesta through any of Avesta' s customer interface channels including Website, mobile site, mobile app & offline channels including call centres and offices (collectively referred herein as "Sales Channels"). We are committed to protecting your personally identifiable information (hereafter referred as "information" or "personal information" or "personal data" or "special category of personal data") by handling it responsibly and safeguarding it using appropriate technical and organizational measures.

We want to assure you that we follow appropriate standards when it comes to protecting your privacy on our Sales Channel. This policy outlines the types of personal information collected on our Website, how this data is used/processed and safeguarded as well as how users may exercise their rights with respect to personal information.

This Privacy Policy applies to avestatravelsonline.com, Avesta company pages, communications, and services ("Services"), including off-site Services, such as our email services, customer care and support services and the "Contact us"; "Apply with Avesta" and "Share on" plugins on our digital properties.

By using or accessing the Website or other Sales Channels, the user hereby agrees with the terms of this Privacy Policy and the contents herein.

This Privacy Policy does not apply to any website(s), mobile sites and mobile apps of third parties, even if their websites/products are linked to our Website. User should take note that the information and privacy practices of Avesta's business partners, advertisers, sponsors, or other sites to which we provide hyperlink(s), may be materially different from this Privacy Policy. Accordingly, it is recommended that you review the privacy statements and policies of any such third parties.

Avesta for Business (Corporate): In the event Avesta is providing services to you as part of our agreement with your employer, contractor, business partner, affiliate or any other party who is having a contractual arrangement with Avesta, then the terms and conditions stipulated in such contractual arrangement shall prevail over this data privacy policy. Such agreement may involve sharing personal data they control as part of that engagement. Our services may also include processing personal data under our client's control on our hosted software applications. All such processing will be governed by Avesta's client privacy policy.

In case you book travel services on behalf of your family or a minor, you agree:

• To inform the individual about the content of this privacy policy
• To obtain any legally required consent, for the collection, use, disclosure, and transfer (including cross-border transfer) of individual's personal information, from the individual in accordance with the legal and regulatory requirements

In such a scenario, Avesta will be acting as data processors while your respective employer, contractor, business partner, affiliate shall be acting as the data controller. It will be the obligation of the data controller to seek consent of the end customer.

1.     What Personal Data shall we collect?

a. We collect the following personal and sensitive information from you when you transact through us:

• Name, gender, age and date of birth
• Contact information such as address, email, and mobile phone number
• Country of residence
• Payment Details like Credit Card/ Debit Card details along with their expiry date (billing address in case of international debit/credit card).
• Passport Number & frequent flyer number (wherever needed)
• Lifestyle and social circumstances (for example, your hobbies)
• Family details/information (for example, your marital status and dependents)
• Employment and education details (for example, the organization you work for, your job title and your education details)
• Financial and tax-related information (like your income, investments and tax residency)
• Postings or messages on any blogs, forums, platforms, wikis or social media applications of Avesta and Avesta' s third parties
• IP address, browser type and language, your access times
• Information in any complaints you make
• Details of how you use our products and services
• CCTV footage and other information we collect when you access our premises
• Recording of telephone calls to our representatives and call centres
• Details of how you like to interact with us (through email, SMS or WhatsApp) and other similar information relevant to our relationship
• Details shared by you over our chatbot - Yuva

b. The personal data we collect may also include 'sensitive' or 'special categories' of personal data such as details about your:

• Dietary requirements (for example, while providing your meal preference during flight/ hotel bookings)
• Health (so that we can make it easy for you to access our buildings, products and services, and/or any special assistance required by you)
• Sexual orientation (if you provide us with details of your spouse or partner)

If you choose not to provide, or object to us processing the information we collect, we may not be able to process your instructions or continue to provide some or all our services to you (including our clients) Personal information of other customers/users/travellers

If you provide personal information to us regarding individuals other than yourself, you agree

• To inform the individual about the content of this privacy policy
• To obtain any legally required consent, for the collection, use, disclosure, and transfer (including cross-border transfer) of individual's personal information, from the individual in accordance with the legal and regulatory requirements

c. Personal information of child

The Services are not intended for users under the age of 16 (Permissible Age), unless permitted under applicable local laws. We do not knowingly collect any personal information from you or the market to solicit information from anyone under the Permissible Age. If we become aware that a person submitting personal information is under the Permissible Age, we will delete the account and any related information immediately. If you believe we might have any information from or about you under the Permissible Age, please contact us at support@avestatravels.com

.

d. We use third party services/bots to capture the following additional information’s

• Analytics
• Infrastructure monitoring Geographic position, unique device identifiers for advertising
• Location-based interactions: Geographical locations
• Unique device identification: This Application may track Users by storing a unique identifier of their device, for analytics purposes or for storing Users' preferences.

2. What lawful reasons do we have for processing Personal Data?

We may rely on the following lawful reasons when we process your personal data to operate our business and provide our products and services:

a.Contract - We may process personal information in order to perform our contractual obligations to which you (data subject) or our client (data controller) is party. Please refer to the section - Avesta for Business (Corporate)

b. Consent - We may rely on your freely given, specific, informed and unambiguous consent at the time you provided your personal information to us for one or more specific purposes

c. Legitimate interests - We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable, and balanced

d. Legal obligations - We may process personal information where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, in particular where the data subject is a child.

.

3. With whom do we share your Personal Data?

In connection with any of the purposes outlined in the "How will we use/process the personal data" section above, we may disclose details about you to:

a. travel service providers such as travel wholesalers, tour operators, airlines, hotels, car rental companies, transfer handlers and other related service provides

b. suppliers of IT based solutions and products that assist us in providing services to you (such as any external data hosting and monitoring providers we may use, communication service providers)

c. Competent authorities (including auditors, courts and authorities regulating us for internal compliance and audit(s)) as required or authorized by applicable law, and to comply with our legal and regulatory obligations.

d. Credit reference agencies or other third-party organizations (CyberSource, Paypal) that help us make credit decisions or conduct risk checks to reduce the incidence of fraud

e. Other organizations to whom we may transfer our rights and/or obligations under the Terms agreed between Avesta and respective organization

f. Any other person or organization after a restructure, sale or acquisition of any member of the Avesta group, as long as they use your personal information for the same purposes we did

g.The analytics service providers which with whom the data may be shared are:

• Google Analytics, Appsflyer, Facebook Ads conversion tracking, Google Tag Manager, Datadog, Adara
• Crashlytics - Geographic position, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example) and various types of Data as specified in the privacy policy of the service

h. We share following data with MoEngage through their SDK which is used to send any personalized App Notification to the end user 

• Account Name
• Account Email Address
• Account Mobile Number
• Account User ID
• User's Location

4. How we protect your Personal Data?

We have implemented appropriate technical and organizational measures to safeguard and help prevent unauthorized access to your information and to maintain data security. These safeguards take into account the sensitivity of the information that we collect, process and store and the current state of technology. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. The third party with respect to payment gateway and payment processing are all validated as compliant with the payment card industry standard (generally referred to as PCI compliant service providers).

We assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access or other causes beyond our control. You play an important role in keeping your personal information secure. You should not share your user name, password, or other security information of your Avesta account with anyone. If we receive instructions using your registered email ID or username, we will consider that you have authorized the instructions.

5. How long shall we retain/ dispose your Personal Data?

We seek to ensure that we only keep your personal data for the longest of:

a. the period necessary for the relevant activity or services

b. any retention period that is required by law

c. the period in which litigation or investigations might arise in respect of the services

Please note: Even after your account is terminated, we retain your transactional data for as long as we have a legitimate purpose to do so (and in accordance with applicable law), including to assist with legal obligations, resolve disputes, and enforce our agreements. We may retain and disclose such data pursuant to this Privacy Policy after your account has been terminated.

6. Changes to this privacy statement:

From time to time we may update this statement. When we do, we will publish the changes on this Website. If you do not agree with these changes, you can discontinue your use of our website.