“Controller” means Vodkatrain.
“Information Commissioner” means the relevant commissioner in charge of the state or territory where a Personal Data breach occurs.
“Overseas” means a state or country that is not located within Australia.
“Personal Data” means any information relating to an identified or identifiable person who has submitted personal information to Vodkatrain.
“Processor” means an individual or entity that processes the personal data on behalf of the Controller.
“Third Party” means an individual or entity (located in Australia or Overseas), other than Vodkatrain who under direct authority are authorised to process Personal Data.
Vodkatrain generally collects the following information that has been voluntarily submitted in order to process bookings. We have a lawful basis to retain Personal Data when bookings are made and will usually include:
In the event that you do not provide us with Personal Data, we will be unable to provide you with certain information specific to your request. In the event that we do not require any Personal Data from you in order to process a request or inquiry we will make this clear.
Vodkatrain collects Personal Data when you request a travel brochure or other information, enter competitions, make a travel booking with Vodkatrain or when you register on the Vodkatrain website. We do not collect Personal Data unless it has been submitted to us.
We take full responsibility for ensuring that proper security measures are in place to protect your information. Personal booking information is captured securely and will not be stored for longer than necessary. We may therefore delete your Personal Data after a reasonable and responsible period of time.
Personal and insurance information will be collected from all clients during the booking process. Once you have travelled, you will be asked to complete a client survey where we will collect further details about you and the tour you travelled on. You may also be asked to review your tour on trusted review websites or we may share these reviews with trusted review websites on your behalf.
Vodkatrain collects and uses Personal Data for several purposes. These purposes are:
Vodkatrain intend to keep track of the domains from which people visit its website and will analyse this data for trends and statistics.
If you make use of any Vodkatrain social media features, either on our website, an App or otherwise through a social media provider, we may access information about you via that social media provider in accordance with their policies. When using a social media feature and if you have chosen to include it in your social media account, we may access information such as your name, profile picture, gender, birthday, email address, town or district and any other information you have chosen to make available. Depending on the privacy settings of you and your friends, we may access information that you provide to a social media provider regarding your respective locations (“Location Data”) to provide you with relevant content. Please note that your Location Data may also be shared with your friends on a social media provider in accordance with your privacy settings for that social media provider. We may also access information from social media providers about your use of an App that we run on their website.
When on tour, employees, agents and/or other travellers of Vodkatrain may from time to time take photographs or make recordings of you and tour activities that may identify you. Vodkatrain reserves the right to use any or all photographs and/or recordings made on tour for promotional reasons in printed materials, on the Internet or other media. In using such images, Vodkatrain undertakes not to reveal your name, contact details or other personal information. You consent to the use of such images or recordings by Vodkatrain and you acknowledge that you will not be entitled to payment or other compensation for the giving of consent or for the use of such images or recordings. Vodkatrain may keep such images or recordings of you on record. If you do not wish for images or recordings of you to be collected, stored or used you must advise Vodkatrain to that effect at the time of booking. Additionally, any photographs, video and text sent to Vodkatrain must be the client’s own and by sending it, the client agrees that Vodkatrain can use it for advertising and marketing purposes.
Feedback supplied to Vodkatrain may also be used in print and online for marketing and advertising purposes. This includes but is not limited to, third party review sites and questionnaires supplied to us pre or post-tour.
Vodkatrain may provide your Personal Data to the following third parties:
Vodkatrain will take reasonable and responsible steps to protect any Personal Data that it holds about you from misuse and loss and from unauthorised access, modification and disclosure and will not disclose your Personal Data to organisations outside Vodkatrain for any purpose (other than as outlined in this policy) without your express consent.
In accordance with Article 46 of the GDPR, the Controller or Processor has appropriate safeguards with any third party in order to protect your Personal Data. This may be by way of the following:
It is possible that your Personal Data will be transferred to an Overseas third party, who is located in a jurisdiction where you will not be able to seek redress under your local data protection laws and the Overseas third party does not have an equivalent level of protection for your Personal Data. To the extent permitted by local data protection laws, we will not be liable for how these Overseas third parties handle, store and process your Personal Data.
We strongly suggest that you review any third parties’ privacy policies.
Copies of relevant safeguard documents can be made available upon request. Please see clause 9 below for our contact details.
We are committed to protecting Personal Data and implementing the strictest security measures to ensure all Personal Data provided by you is not unlawfully or accidentally disclosed. Vodkatrain regularly reviews our security procedures to ensure your Personal Data is protected at all times.
Once your Personal Data is no longer required by us, it will be destroyed.
In the event there is a Personal Data breach, Vodkatrain (if required by the APP or GDPR) will notify the relevant Information Commissioner within 72 hours of the breach and shall at least:
After the Information Commissioner has been notified of a breach we will then notify all affected individuals in writing at their last known email address.
Any requests for the above rights will be addressed within thirty (30) days.
Phone: +61 3 9672 5300
Address: Level 1, 51 Queen Street, Melbourne, Victoria 3000 Australia
Email: firstname.lastname@example.org (Attention: Liz Anderson)
email@example.com (Attention: Liz Anderson)
Upon receiving your request in writing, we will endeavour to reply within thirty (30) days. There is no charge for making a request. In the event your request is unable to be responded to within thirty (30) days, we will contact you and advise of an approximate time to respond. In some limited circumstances we may be legally required to share certain Personal Data, which might include yours, if we are involved with any legal proceedings or required to comply with legal obligations.
Your privacy is of the upmost important to us and in order to fulfil your requests, we have the right to use or disclose any information as needed to satisfy any law, regulation or legal request, to protect the integrity of the site, to fulfil your requests, or to cooperate in any legal investigation.