Privacy Notice

1. Who we are

BEST BUSINESS TRAVEL SRL is a company registered in Romania responsible for the management of Alice Tips & Travel Portal.

2. What personal data do we process

BEST BUSINESS TRAVEL SRL is a personal data controller. We collect the following types of personal data from you:

• Name, surname
• Email
• Birthdate
• ID Type
• ID Issuing Country
• Nationality
• ID Expiring Date
• Billing info
• Frequent Flyer
• Client ID
• Transaction ID
• Online activity

3. Why do we need them

We need your personal data to provide you with the following services:

On the legal basis of controller’s legitimate interest to answer your messages from our contact form:

• Name, surname – we use this data to personalize your answer.
• Email – we use this data to answer your message.
• Date and time for call/visit – you can detail your preferred time for an online/ in-person meeting with us.

On the legal basis of controller’s legitimate interest to create special offers for you:

• Birthdate – we will use this information to send you special offers for your birthdate.

On the legal basis of fulfilling our contractual obligations:

Creation of account, purchase, and delivery of services:

• Name, surname – we use this data to communicate with you and to process your orders.
• Email – we use this data to answer your email to communicate with you and to communicate your orders.
• Client ID – each user is assigned a Client ID on the platform that is used for processing transactions.
• Billing info – this information is required in order to issue an invoice for the services you are purchasing.
• Transaction ID – each transaction has a unique ID.
• Sum of purchased services – this is the sum that will be charged.

Searching reservations, presenting results

• Destinations – here you can enter the destinations of your trip.
• Departure and arrival dates – we will try to find the exact dates for your reservations.
• Name and group ages of persons in the reservation – this is needed in order to determine fare type.

Creating reservations

• Name, surname – in order to manage your reservations.
• Email – in order to manage your reservations.
• Phone number – needed for the reservation process.
• Birthdate – this information is needed for the reservation process.
• ID Type – all airlines require this information for the reservation process.
• ID Issuing Country – all airlines require this information for the reservation process.
• Nationality – all airlines require this information for the reservation process.
• ID Expiring Date – all airlines require this information for the reservation process.
• Seating preference – we will try to accommodate your requests.
• Special requests – we will try to accommodate your requests.

Important notice: if you are doing a reservation on behalf of another person, you act as a Data Controller for the personal data you are entering in Alice Tips & Travel portal.

With your consent, we would also like to make the following processing of personal data:

Account information

• Frequent Flyer number – if you have a preferred airline, you can enter the frequent flyer number in your account in order to make sure that miles are accrued based on your reservations.

Online behavior

• Browsing History – We share this information with our partners described in our cookie policy so that we can deliver you personalized offers. More information found in our cookies page at [link]

4. What we do with them

Your personal data is processed within BEST BUSINESS TRAVEL SRL company located in Romania. Hosting and storing your data take place at Microsoft Ireland Operations Limited in Azure Cloud on servers based in Ireland; Microsoft Ireland Operations Limited acts as a data processor for BEST BUSINESS TRAVEL SRL.

Your personal data is also processed by different software development companies who act as a data processors for BEST BUSINESS TRAVEL SRL handling maintenance of Alice Tips & Travel Portal.

Your personal data is also processed by Twilio Ireland Limited, a company registered in the Republic of Ireland. Twilio Ireland Limited act as a data processor for BEST BUSINESS TRAVEL SRL, offering transactional emails service.

Your personal data is also processed by our partner NETOPIA FINANCIAL SERVICES S.R.L., a payment processor in Romania which acts as a data controller managing electronic payments. BEST BUSINESS TRAVEL doesn’t process or store debit or credit card information.

Your personal data is also processed by hotel reservation portals – Stuba, Hotelbeds – who act as data processors for BEST BUSINESS TRAVEL SRL managing hotel reservations.

Your personal data is also processed by different airlines and hotels which operate your reservations, acting as Data Controllers. In case these airlines and hotels are located outside Europe, transfer of personal data is done based on Chapter V in GDPR - Transfers of personal data to third countries or international organisations, article 49 - Derogations for specific situations, namely for the performance of the reservations done on your behalf.

Your personal data is also processed by OMNIASIG or Mondial, companies that offer travel insurance policies, acting as Data Controllers.

Your personal data is also processed by Amadeus IT Group, S.A. of Spain, a company that acts as a data controller in order to process your reservations.

Your personal data for browsing history is transmitted to our partners described in the cookies policy, which act as joint controllers.

5. How long do we keep personal data

Your account data will be retained for three years since your last login on the platform under the legitimate interest of BEST BUSINESS TRAVEL SRL to maintain your account in case of inactivity.

Personal data that are contained in the financial-accounting documents or in documents that are attached to the financial-accounting documents (all data from your bookings are included), will be kept for 10 years according to the provisions of art. 38 of Annex 1 to Order no. 2634/2015 on financial-accounting documents, issued by the Ministry of Public Finance and will not be accessed for any purpose other than the legal purpose for which they are archived. After 10 years these data will be destroyed.

Personal data from cookies will be retained for the duration of the cookie or till you delete the cookie. For more information please visit our Cookie Policy page.

6. What are your rights?

If you have reason to believe that any personal data that we have about you is incorrect or incomplete, you have the right to ask to see your personal data, to correct it, to request to be deleted, to request restriction of processing or to object to the processing. You also have the right to data portability. To exercise these rights please contact us at dpo@bbtr.ro.

For the data in the account, you have the right to withdraw your consent. You can do this by sending an email to dpo@bbtr.ro or by deleting the data directly from the account.

If you want to file a complaint about how we process your personal data, please contact us at dpo@bbtr.ro. We will contact you to solve the problem raised.

You can also contact the Romanian National Supervisory Authority for the processing of personal data at www.dataprotection.ro and you can file a complaint.