Training For Professionals
Working In Inclusive Tourism
We prioritize the privacy and security of our users' data, aligning our practices with the General Data Protection Regulation (GDPR) standards. This section details our commitment and approach to GDPR compliance, ensuring the protection of data for users within the European Union.
GDPR Compliance
Lawful Basis for Processing: We process personal data under the lawful bases of consent and
legitimate interest. We ensure that consent is freely given, specific, informed, and unambiguous, as
required by GDPR.
Data Minimization: We adhere to the principle of data minimization, collecting only the
data necessary for the purposes stated in this policy.
User Rights: In accordance with GDPR, users have the right to access, rectify, erase,
restrict processing, object to processing, and, where applicable, the right to data portability. Users can
exercise these rights by contacting us directly.
Data Protection Office: We have established a Data Protection Office to oversee compliance
with GDPR and to be a point of contact for data protection matters. The DPO can be reached at dpo@equaltourism.eu
Data Breach Notification: In the unlikely event of a data breach, we are committed to
notifying the relevant supervisory authority within 72 hours, where feasible, and affected individuals
without undue delay if the breach is likely to result in a high risk to the rights and freedoms of
individuals.
Data Transfer Outside the EU: Any transfer of data outside the European Union is carried
out in compliance with the legal frameworks that ensure the security of the transferred data, such as the
adequacy decisions by the European Commission or the use of Standard Contractual Clauses.
Enchanced Security Measures
To align with GDPR requirements, we have implemented enhanced data protection and security measures,
including:
Encryption of data in transit and at rest.
Regular Security Assessments to identify and mitigate risks to the personal data we
process.
Employee Training on data protection principles and the importance of safeguarding personal
data.
Vendor Assessment to ensure that third parties processing personal data on our behalf also
comply with GDPR requirements.
Commitment to Privacy
Our commitment to privacy extends beyond GDPR compliance. We strive to maintain transparency,
accountability, and integrity in all our data handling practices. This policy reflects our dedication to
safeguarding personal data and respecting the privacy rights of our users.
Updating Our Practices
We regularly review and update our data handling and safeguarding practices to ensure ongoing compliance
with GDPR and other relevant data protection laws. We will notify users of significant changes to our
policies and practices that affect how we handle personal data.
Contact and Queries
For any inquiries regarding our GDPR compliance, data protection practices, or if you wish to exercise your
rights under the GDPR, please contact our Data Protection Office at dpo@equaltourism.eu.
Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor EACEA can be held responsible for them.