We recognise the importance of protecting your privacy and your rights with regards to data protection. The Internet is a very powerful medium when it comes to transmitting personal information; for that reason, we and all other companies belonging to the lastminute.com group undertake the serious task of respecting the current laws regarding the protection of personal data and the security of the same, with the aim of guaranteeing secure, controlled and confidential navigation for its users who visit and/or use the Website (you as a “User”) .
It also informs you of how you can exercise Your Rights (including the right to object to some of the data handling we carry out). More information about your rights and how you can exercise them is set out in the section below.
When you visit the Website (you as a “User”) we collect the categories of personal data as follows:
2.1. Personal data provided by you
The provision of the above personal data, where requested, is necessary for the adequate performance of the requested service and to allow us to comply with our legal obligations except when we rely on consent as legitimate basis for processing and or our legitimate interest. Without it, we may not be able to provide you with all the requested services.
It is important that all the personal data you give us is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email) details at all times.
2.2. Personal data collected automatically from our Website, from communication we send, and/or from third parties
In general terms, we use your personal data to provide you with the services you request. More specifically:
On which legal basis? To fulfil a contract, or take steps linked to a contract
On which legal basis? To comply with the law (i.e. to share personal data with regulatory authorities)
On which legal basis? To pursue our legitimate interest (i.e. compliance with our terms and conditions, protection of our rights in the event of any dispute or claim)
Where we rely on legitimate interest as a basis for processing your personal information, we carry out an assessment to ensure that our interest in the use of your data is legitimate and that your fundamental rights of privacy are not outweighed by our legitimate interests (‘balancing test’). You can find out more information about the balancing test by contacting our Data Protection Officer at to firstname.lastname@example.org .
4.1. Categories of recipients of your data
The complete list of parties to which your personal data may be disclosed is available at our registered office and may be requested by writing to email@example.com.
4.2. International transfer of your data
Users’ personal data is processed in at the Data Controller’s registered office (see point 1), on the lastminute.com group servers, and at the offices of other entities to which data may be provided in order to provide the services requested of the Data Controller.
We also transfer your personal data to:
Should you want to obtain further details about the safeguards put in place, you can contact us by writing to firstname.lastname@example.org.
Account information :
– User, password
– Name and surname
From the date of the registration
DATA COLLECTED VIA TAG
Max 3 years
From the date of browsing on our websites
You can exercise the rights provided by the Regulation EU 2016/679 (Articles 15-22), including the right to:
Right of access – To receive confirmation of the existence of your personal data, access its content and obtain a copy.
Right of rectification – To update, rectify and/or correct your personal data.
Right to erasure/right to be forgotten and right to restriction – To request the erasure of your data or restriction of your data which has been processed in violation of the law, including whose storage is not necessary in relation to the purposes for which the data was collected or otherwise processed; where we have made your personal data public, you have also the right to request the erasure of your personal data and to take reasonable steps, including technical measures, to inform other data controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Right to data portability – To receive a copy of your personal data you provided to us for a contract or with your consent in a structured, commonly used and machine-readable format (e.g. data relating to your purchases) and to ask us to transfer that personal data to another data controller.
Right to withdraw your consent – Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes.
Right to object, at any time – You have the right to object at any time to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement , or where we are using your data for direct marketing.
Right not to be subject to a decision based solely on automated processing, including profiling – You can always request a manual decision- making process instead, express your opinion or contest decision based solely on automated processing, including profiling, if such a decision would produce legal effects or otherwise similarly significantly affect you. You can exercise the above rights at any time by:
– Contacting us via email at email@example.com
– As for direct marketing, please note that you can also object at any time by clicking the unsubscribe link which we provide in each communication sent to you
In case you exercise any of the above rights provided by GDPR, please note that we will attend your request considering the personal information held by LASTMINUTE.COM NV,
Your rights in relation to your personal data might be limited in some situations. For example, if fulfilling your request would reveal personal data about another person or if we have a legal requirement or a compelling legitimate ground we may continue to process your personal data which you have asked us to delete.
You also may have the right to make a complaint if you feel your personal information has been mishandled. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant Data Protection Supervisory Authority.
The contact details of the Data Controller of the data processing described hereinabove are:
LASTMINUTE.COM NV, business register no. 34267347CHE – 115.704.228 and with registered office at Basisweg 10, 1043 AP – Amsterdam, Netherlands.
Our Data Protection Officer (or “DPO”) is available at: