1. Data Protection – The Travel Corner
1.1
This Privacy Policy explains how The Travel Corner collects, uses, stores and protects personal data relating to you.
This Privacy Policy applies to customers and potential customers, individuals who browse or use our website, and individuals outside our organisation with whom we interact.
If you are an employee, contractor, consultant, or otherwise engaged to work for us, or if you are applying to work for us, a separate privacy notice may apply to you.
This Privacy Policy is not intended for children, and we do not knowingly collect personal data relating to children.
1.2
Throughout this Privacy Policy, we refer to this information as “personal data”. Section 3 explains in more detail the categories of personal data that we may collect.
1.3
We may update this Privacy Policy from time to time. We recommend that you check this page regularly to ensure that you are aware of any changes.
This Privacy Policy was last updated on 22 September 2026.
2. How to Contact Us
2.1 Data Controller and Contact Details
2.1.1
For the purposes of applicable data protection legislation, we are a data controller in respect of the personal data that we process about you. As a data controller, we are responsible for ensuring that your personal data is processed in accordance with applicable data protection laws and this Privacy Policy.
2.1.2
If you wish to request correction of personal data that we hold about you, withdraw consent where consent is the legal basis for processing, opt out of receiving marketing communications, or change your marketing preferences, please contact us using the details below.
2.1.3
If you have any questions about how we process your personal data, or wish to exercise any of your data protection rights, please contact us at:
Email: [email protected]
Company/legal name: The Travel Corner
Registered/business address: Kassiopi, Corfu, Greece, 49081
3. Categories of Personal Data We Collect
3.1
The categories of personal data about you that we may collect, use, store, share and transfer include the following:
3.1.1 Advertising and Marketing Data
This includes information relating to your advertising and marketing preferences, such as your preferences regarding receiving marketing communications from us and your communication preferences.
3.1.2 Information Technology Data
This includes information relating to your use of our website and technology, such as your Internet Protocol (IP) address, login data, traffic data, weblogs and other communication data, browser type and version, time-zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices that you use to access our website.
3.1.3 Identity Data
This includes information relating to your identity, such as your first name, middle name, last name, username or similar identifier, title, date of birth, place of birth, passport number and gender.
We only collect such information where it is necessary for a particular purpose, such as making or administering a booking or complying with legal or operational requirements.
3.1.4 Account and Profile Data
This includes information relating to your account or profile on our website, such as your username and password, proposals and bookings made by you, your interests and preferences, feedback and survey responses.
3.1.5 Usage and Operational Data
This includes information relating to your use and operation of our website, products and services, including information about how you interact with our website and services.
3.1.6 Economic and Financial Data
This includes financial information that is necessary to process your bookings and payments, comply with applicable payment-security requirements, and prevent and detect fraud.
Where appropriate, payment information may be processed directly by third-party payment service providers. Where this occurs, the relevant provider's own privacy policy and terms may also apply.
3.1.7 Enquiry and Transaction Data
This includes information relating to enquiries and transactions that you have made with us, such as details of payments to and from you, subscriptions to our services or publications, and details of products and services that you have purchased from us.
3.1.8 Audio Data
This includes personal data that may be collected through recording systems at our locations, where such systems are used and where permitted by applicable law.
3.1.9 Market Research Data
This includes information collected for market research purposes, such as price comparison information and responses to surveys or other research activities.
3.1.10 Health Data
This includes information that may be provided for health and safety purposes, such as information contained in an accident report or claim, or information you provide about allergies, medical conditions, dietary requirements or other health-related needs during the booking process or when visiting one of our locations.We will only process health data where permitted by applicable data protection law and where an appropriate legal basis applies.
3.1.11 Communication Data
This includes information relating to how we communicate with you, such as your billing address, delivery address, email address and telephone number.
3.2
We may also create personal data about you.
For example, if you contact us by telephone to make a complaint about our services or products, we may create a written record of relevant details of the conversation so that we can investigate and address your complaint.
3.3
We may also collect and use aggregated data, such as statistical or demographic data, for various purposes (“Aggregated Data”).
Aggregated Data may be derived from your personal data but should not directly or indirectly reveal your identity. For example, we may aggregate Operational Data to calculate the percentage of users accessing a particular feature of our website.
If we combine or reconnect Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined information as personal data and process it in accordance with this Privacy Policy.
3.4 Special Categories of Personal Data
In certain circumstances, we may process special categories of personal data, including information concerning health, religious beliefs and sexual orientation.
We will only process special categories of personal data where permitted by applicable data protection law and where an appropriate condition for processing such information applies.
Further information is provided in section 5.2.
3.5 Criminal Convictions and Offences
We do not routinely collect information about criminal convictions or offences.
Where such information is required for a particular legal, regulatory or safety-related purpose, we will only process it where permitted by applicable law.
4. Sources from Which We Collect Your Personal Data
4.1
We may obtain personal data about you from the following sources.
4.1.1 Directly from You
We may collect personal data directly from you when you contact us or use our services, including through our website, by telephone or by email.
This may include personal data that you provide when you:
(a) make or enquire about a booking;
(b) provide information required to arrange or manage your booking;
(c) contact us by telephone or email regarding a booking, enquiry or our services; or
(d) otherwise provide information to us in connection with your travel arrangements.
4.1.2 Automated Technologies
We may collect certain information automatically through technologies such as call recording systems, cookies, server logs and similar technologies.
For further information about cookies and similar technologies, please see our separate Cookies Policy.
4.1.3 Third Parties
We may receive personal data from third parties, including:
(a) analytics providers;
(b) advertising networks;
(c) search information providers;
(d) providers of technical, payment and delivery services;
(e) data brokers or aggregators;
(f) business partners and other organisations with which we have partnerships; and
(g) travel agents and other travel-related service providers.
Where we receive personal data from third parties, we will process that information in accordance with applicable data protection law.
5. How We Use Your Personal Data and Our Lawful Basis for Processing
5.1 Processing Other Than on the Basis of Consent
We may rely on one or more lawful bases when processing your personal data.
The lawful basis that applies will depend on the purpose for which we are processing your information and the circumstances in which we obtained it.
5.1.1 Managing Your Booking
We may use information provided by you to manage and fulfill your booking and to provide our products and services.
This may include booking holidays, tours, transportation and car hire, and issuing tickets.
Where applicable, the lawful basis for processing is that the processing is necessary for:
(a) the performance of a contract to which you are a party; or
(b) taking steps at your request before entering into a contract.
5.1.2 Marketing and Recommendations
We may use your personal data to make suggestions and recommendations about our products and services that may be of interest to you, to determine and measure the effectiveness of promotional campaigns and advertising, and to help ensure that our marketing communications are relevant to you.
Where applicable, we may rely on our legitimate interests as the lawful basis for this processing, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
Where applicable law requires consent for particular marketing activities, we will obtain your consent before carrying out those activities.
5.1.3 Enquiries and Service Communications
We may process your personal data to:
- respond to your enquiries;
- provide information that you have requested;
- provide important real-time information about products or services that you have ordered from us; and
- notify you about changes to bookings, including changes to times or locations caused by unforeseen circumstances.
Depending on the circumstances, we may rely on:
(a) the performance of a contract or taking steps at your request before entering into a contract;
(b) our legitimate interests; or
(c) another lawful basis where required by applicable law.
5.1.4 Development and Improvement of Our Services
We may process personal data for the development, delivery and improvement of our products and services, customer relationships and customer experiences.
Where applicable, we may rely on our legitimate interests for this processing, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
5.1.5 Recruitment
Where you submit a job application, we may retain your details for a reasonable period for recruitment purposes and may consider your application for other suitable positions.
Where permitted by applicable law, we may also contact you about future job opportunities.
The lawful basis may include our legitimate interests in managing recruitment and maintaining appropriate recruitment records.
5.1.6 Website Development, Research and Administration
We may process personal data to help us develop and maintain our website and make it more useful to you and our customers. This may include identifying usage trends and carrying out research, analysis, testing, monitoring, customer communication, risk management and administrative activities.
We may also use information to help us understand different types of customers, keep our website updated and relevant, and develop our marketing strategy.
Where applicable, we may rely on our legitimate interests for these purposes.
5.1.7 Security, Fraud Prevention and Business Reorganisation
We may process personal data to:
- protect our rights or property, including our website;
- administer and improve our IT services;
- maintain network and information security;
- prevent and detect fraud;
- protect our business and customers; and
- facilitate a business reorganisation, restructuring, merger, acquisition or similar corporate transaction.
Where applicable, we may rely on our legitimate interests for these purposes.
5.1.8 Legal and Regulatory Obligations
We may process your personal data where necessary to comply with our legal or regulatory obligations, including health and safety requirements, or to assist with an investigation by a competent authority, such as the police.
The lawful basis may be that processing is necessary for compliance with a legal obligation to which we are subject. 5.1.9 Vital Interests
In an emergency or life-or-death situation where it is not possible to obtain your consent in advance, we may process your personal data where necessary to protect your vital interests or those of another individual.
For example, this may apply where personal information needs to be provided to medical personnel following an accident or medical emergency.
5.1.10 Public Interest and Official Authority
We may process your personal data where this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, where such a lawful basis applies.
5.2 Special Categories of Personal Data
Special categories of personal data receive additional protection under applicable data protection law.
Where we process special categories of personal data, we will ensure that both a lawful basis under the applicable data protection legislation and an appropriate additional condition for processing special category data apply.
5.2.1 Health Information
We may need to process health information to provide services or make arrangements that you have requested. For example, this may include arranging special assistance, taking account of dietary requirements, or dealing with health and safety matters.
Where necessary and permitted by law, health information may also be processed to protect your vital interests or those of another individual.
5.2.2 Health and Emergency Situations
We may disclose or process special categories of personal data where this is necessary and permitted by applicable law, including in connection with a serious public health situation, illness, injury or other emergency.
For example, we may need to record an accident or injury that occurs at one of our locations or provide relevant information to medical personnel so that appropriate assistance can be provided.
We will take appropriate measures to protect your rights and the confidentiality of such information.
5.2.3 Religious Beliefs and Sexual Orientation
We may need to process information concerning your religious beliefs or sexual orientation where you voluntarily provide such information and it is necessary to provide a service that you have requested.
For example, religious information may be provided to enable appropriate meal arrangements to be made, such as halal or kosher meals.
Information concerning sexual orientation may be processed where it is necessary to provide a particular holiday or service that you have requested.
Where required by applicable law, we will obtain your explicit consent before processing such information.
You may withdraw consent at any time where consent is the legal basis for processing. However, if the information is necessary to fulfil your booking or provide a service that you have requested, withdrawing consent may mean that we are unable to provide that service or may need to cancel or amend your booking.
5.2.4 Minimisation
We will seek to minimise the amount of sensitive or special category personal data that we collect and use, and will only process such information where there is an appropriate lawful basis and a genuine need to do so.
6. Who Receives Your Personal Data
6.1
We may disclose your personal data to the following categories of recipients where necessary for the purposes described in this Privacy Policy or where otherwise permitted or required by law:
6.1.1
Our third-party suppliers and subcontractors who process personal data on our behalf to enable us to provide our services.
6.1.2
Our group companies, affiliates and third-party data processors who process personal data on our behalf or support our usual business activities. 6.1.3
HM Revenue & Customs (HMRC), regulators, government bodies and other competent authorities where disclosure is required or permitted by law.
6.1.4
External professional advisers, such as accountants, bankers, insurers, auditors and lawyers.
6.1.5
Law enforcement agencies, courts, immigration authorities, customs authorities and other relevant organisations where necessary for the establishment, exercise or defence of legal rights or where required by law.
6.1.6
Third parties where disclosure is necessary for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties.
6.1.7
Third parties involved in a proposed or actual sale, acquisition, merger, restructuring, dissolution or liquidation of our business or assets.
6.1.8
Third parties operating plugins, social media features or other content on our website, such as Facebook, Instagram or other platforms, where you choose to interact with those features.
Please also refer to our Cookies Policy for further information about cookies and similar technologies.
7. Personal Data About Other People That You Provide to Us
7.1
If you provide us with personal data about another person, you must ensure that you are entitled to provide that information to us and that we may collect, use and disclose it as described in this Privacy Policy.
7.2
You should ensure that the individual concerned is aware of the matters described in this Privacy Policy as they relate to that person.
This includes our identity, how to contact us, how we collect and use personal data, our personal data disclosure practices, the individual's rights in relation to their personal data, their right to make a complaint about the handling of their personal data, and any consequences of failing to provide the requested information.
8. Accuracy of Your Personal Data
8.1
It is important that the personal data we hold about you is accurate and up to date.
We take reasonable steps to ensure that the personal data we hold is accurate, but we do not undertake to independently verify all personal data provided to us.
Please inform us if your personal data changes during your relationship with us so that we can keep our records up to date.
Where permitted by applicable law, we may not be responsible for losses arising from inaccurate, unauthentic, incomplete or deficient personal data that you have provided to us.
9. International Transfers of Personal Data
9.1
Some of our suppliers, service providers, business partners or other recipients of personal data may be located outside the United Kingdom, European Economic Area or other applicable jurisdiction.
Where necessary, we may transfer, store or process your personal data outside the UK or EEA, including where this is necessary to provide a holiday, travel service or other product that you have requested.
For example, where you book a holiday or travel service to a destination outside the UK or EEA, it may be necessary to provide relevant personal data to suppliers or service providers in that destination in order to fulfil your booking.
9.2
Where applicable data protection law restricts the transfer of personal data to another country, we will only make such a transfer where an appropriate legal mechanism or safeguard is available.
Depending on the circumstances, this may include:
9.2.1
A transfer to a country that has been recognised as providing an adequate level of data protection by the relevant competent authority;
9.2.2
The use of appropriate safeguards, such as applicable standard contractual clauses, the UK International Data Transfer Agreement (IDTA), the UK International Data Transfer Addendum, or other legally recognised safeguards;
9.2.3
A transfer to an organisation participating in an applicable recognised data-protection framework, such as the EU-US Data Privacy Framework or, where applicable, the UK Extension to that framework; or
9.2.4
Another exception or derogation permitted under applicable data protection law.
We will take appropriate steps to ensure that international transfers are carried out in accordance with applicable data protection requirements.
Where required, we will carry out appropriate assessments and implement appropriate safeguards before making a restricted transfer.
10. How Long We Will Store Your Personal Data
10.1
We will only retain your personal data for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, regulatory and reporting requirements.
We may also retain personal data where necessary to establish, exercise or defend legal claims.
10.2
In relation to personal data associated with bookings, our current retention period is 8 years from the departure date, subject to applicable legal and regulatory requirements and any need to retain information for the establishment, exercise or defence of legal claims.
10.3
In relation to personal data used for marketing purposes, our current retention period is 8 years from your last interaction with us, subject to applicable law and our review of whether continued retention remains appropriate.
10.4
We regularly review the personal data that we hold and will delete or securely dispose of personal data when it is no longer necessary to retain it, subject to applicable legal requirements.
11. Contractual or Statutory Requirements to Provide Personal Data
11.1
In certain circumstances, providing personal data may be necessary:
11.1.1
To comply with a legal or regulatory requirement; or
11.1.2
To enter into or perform a contract with you.
11.2
Where you are required to provide personal data to comply with the law, we will explain this at the relevant time where appropriate.
If you fail to provide personal data that is required by law, we may be unable to fulfil your request or provide the relevant product or service.
11.3
Where personal data is necessary to enter into or perform a contract, you may choose not to provide it. However, if you do not provide information that is necessary for us to perform the contract, we may be unable to provide certain products or services or may be unable to perform the contract with you.
For example, we may be unable to complete a booking or provide a particular service if we do not have the information necessary to make the required arrangements.
12. Your Rights in Relation to Your Personal Data
12.1
Subject to applicable law, you may have a number of rights in relation to the personal data that we hold about you.
These rights may include:
12.1.1 Right of Access
The right to request access to the personal data that we hold about you and information about how we process it.
12.1.2 Right to Rectification
The right to request correction of inaccurate personal data and, taking into account the purposes of the processing, completion of incomplete personal data.
12.1.3 Right to Erasure
In certain circumstances, the right to request that we erase your personal data.
12.1.4 Right to Restriction
In certain circumstances, the right to request that we restrict the processing of your personal data.
12.1.5 Right to Object
In certain circumstances, the right to object to the processing of your personal data, particularly where we rely on legitimate interests as our lawful basis.
You may also have an absolute right to object to direct marketing.
12.1.6 Right to Data Portability
In certain circumstances, the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that it is transferred to another controller.
12.1.7 Right to Withdraw Consent
Where we rely on your consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
12.1.8 Right to Complain
You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed unlawfully.
If you are in the UK, you can contact the Information Commissioner's Office (ICO).
Further information about making a complaint is available from the ICO's website.
If you are located elsewhere, you may contact the relevant data protection supervisory authority in your country.
12.2 Exercising Your Rights
If you would like to exercise any of the rights described above, please contact us using the contact details in section 2.
We may need to request additional information from you to verify your identity before responding to your request.
13. Links to Other Websites
13.1
Our website may contain links to other websites operated by third parties.
If you follow a link from our website to another website, you should read and understand that website's own privacy policy and terms before providing personal data.
This Privacy Policy applies only to the processing of personal data by us.
We do not control third-party websites and, subject to applicable law, we are not responsible for the privacy practices, content or processing of personal data carried out by third-party websites.
13.2
For information about how we use cookies and similar technologies on our own website, please see our separate Cookies Policy.
14. Relationship with Our Other Website Policies
14.1
This Privacy Policy should be read together with our other website policies and terms, where applicable, including:
- Terms & Conditions
- Guest Refund Policy
- Acceptable Usage Policy
- Cookies Policy
- Payment Methods
Each policy deals with different aspects of your relationship with us.
This Privacy Policy specifically explains how we collect, use, store, disclose and otherwise process personal data.
Where another policy contains provisions relating to a separate subject, such as bookings, cancellations, refunds, acceptable use of our website, cookies or payment methods, those provisions should be read alongside this Privacy Policy.
