QUOTE & BOOK
St. Peter Port
Data Protection Officer
C/O Data Protection Officer
New Harbour Road South
Dorset, BH15 4AJ
Purpose for Processing
Condor Ltd, henceforth known as Condor, require your personal data to fulfil its contractual and legal obligations when you make a booking with us.
We use your personal data for the following purposes:
Condor upholds very high standards for the protection of your personal data. Without your personal data, Condor will not be able to fulfil any of our legal or contractual obligations to which we are bound when you travel with us.
Lawful Basis for Processing
Under the GDPR, Condor relies on the following lawful basis’ for processing your personal data for the purposes set out above:
Where stated and you submit your details for this purpose, we will process your personal and special category data under:
Article 6 (a) – Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
To fulfil our legal and contractual obligations with you, we will process your personal data and special category data in the event of requiring to do so under:
Article 6 (b) – Contract: the processing is necessary for a contract we have with the individual; or
Article 6 (c) – Legal Obligation: the processing is necessary to comply with the law relating to any activities Condor undertakes
Recipients of the Personal Data
All personal data you provide to us is held with very high regards to data privacy. Condor will only share your data with third party recipients of whom have met our stringent criteria for data protection in line with the General Data Protection Regulation and Data Protection Act 2018 and will not be shared outside of what is stated below.
The data you supply to us is shared with and in the following circumstances:
Transfers to countries outside of the EU
Condor is a company that has its primary functions based in Guernsey – Channel Islands and has operations in Jersey. Guernsey and Jersey are British Crown Dependencies, but do not share EU status. However, Guernsey and Jersey have an adequate status rating for data protection from the European Economic Area making them an adequate country for Data transfers. Your personal data is accessed by both our employees in each Island for the fulfilment of our contractual and legal obligations and are bound by the contractual and legal obligations.
Your details will be submitted to Jersey and Guernsey Customs and Immigration systems, if required, and is done so under a legal obligation.
No other personal data you provide to us is transferred or processed outside of the European Union (EU).
Retention period of the Personal Data Provided
Condor is legally required to keep certain sets of personal data for a specific retention period.
We will process your personal data provided for the period in which you have a valid booking with Condor.
If your booking has travelled, cancelled or passed without travelling, Condor will hold your Personal data relating to the booking for a 6-year period (+1 year) post the last travel date as to comply with relevant jurisdictional laws. Once this period has elapsed, this data will be anonymised or deleted.
Your special category data, in this case your health data if provided to us for legal operational reasons, will be processed in line with booking data (6 years +1 year).
If you contact our Customer Relations team to make a query or complaint (excluding any communications relating to a claim for any reason) will be retained for 12 months post closure of the communication.
If you contact out Customer Relations team to make a claim and the claim exceeds the retention period as stated above, relevant details will be retained for the duration of the incident.
Special Category Personal Data
In circumstances such as applying to work for Condor, personal data relating to criminal offices shall also be treated with a high degree of sensitivity and requires particularly careful handling.
Data considered "special category data" under current data protection legislation includes any of the following examples of information about an identifiable, living individual:
Processing this special category personal data requires a lawful basis plus a condition for processing. At Condor we rely on the following:
Condition for processing:
a. Explicit consent of the data subject,
b. Necessary for employment law or social security law purposes,
c. processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent, and
g. Processing is necessary for reasons of substantial public interest.
To find out more about how we process Specialist Category Data and the legal basis for doing so, please click here.
Your Rights regarding your Personal Data
Condor processes your data under the lawful basis stated in this Privacy Notice.
You have rights over how we use your personal data, in relation to the lawful basis in which we collected it, these include the following:
Right to Access: You have the right to request copies of the personal data we process about you.
Right to be informed: You have the right to be informed about what we do with your personal data. This is presented in this Privacy Notice.
Right to rectification: You have the right to request rectification of your personal data if you believe it to be incorrect or if it has changed since you provided the personal data.
Right to restrict processing: You have the right to request restriction of processing of personal data if you feel that we are not processing this lawfully or you may request to cease the nature of processing under the same circumstances.
Right to forget: You have the right to request to be forgotten, however, Condor has certain retention periods for personal data in accordance with legal and contractual obligations and may be required to refuse your request due to these circumstances.
Condor can, if necessary, refuse any of the above in certain circumstances.
Requests made in relation to the above rights will have a retention period of 12 months post closure of a request, after which time all information included in the request will be deleted or anonymised.
If you have a concern or complaint about our processing of personal data, you can contact our Data Protection Officer whose details are listed at the top of this notice. If, after raising your concern or complaint with our Data Protection Officer you are not satisfied and still have concerns about the processing of personal data, or you believe we are unlawfully processing your data, you have the right to complain to the relevant Data Protection Authority (namely the Information Commissioners Office) by calling +44 (0)303 123 1113 or by visiting their website www.ICO.org.uk
Right to withdraw consent
If, at any point, Condor requests your consent for the processing of your personal data, you may withdraw this consent at any time.
Processing of CCTV (closed circuit television)
Condor operates CCTV on all vessels in public passenger areas for crime prevention and detection. This is operated internally by Condor Ferries.
CCTV recordings are retained for a total of 7 days post capture and are removed permanently after this period.
In certain circumstances, CCTV recordings may be required for any legal proceedings in the event of any claims against the company. Government agencies may also request copies of recordings for certain purposes. Condor are under no obligation to notify any persons that may be included in the recordings when used for any claims or when requested by a Government Agency.
If a Subject Access Request is made by an individual, all imagery that can identify another person that does not belong to the individual will be redacted to ensure privacy of all other individuals.
Third Party Links
Our website may contain links to approved third party websites and services. Please remember that when you use a link to go from Condor to another website or you request a service from a third party, our privacy notice no longer applies.
Your browsing and interaction on any other website, or your dealings with any other third party service provider, is subject to that website’s or third party service provider’s own rules and policies.
We do not monitor, control, or endorse the privacy practices of any third parties.
We encourage you to become familiar with the privacy practices of every website you visit or third party service provider that you deal with and to contact them if you have any questions about their respective privacy policies and practices.
Changes to this Policy
This Policy was last updated on the 12th September 2019.