GDPR Compliance

Last Updated: January 2024

About This Page

This page provides additional information for individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland regarding their rights under the General Data Protection Regulation (GDPR) and similar data protection laws.

Data Controller

mellow-saga is the data controller responsible for your personal data. Our contact details are:

mellow-saga
34 Harbour View Road
Paternoster, Western Cape, 7381
South Africa
Email: [email protected]

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the travel services you have requested or inquired about.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality, provided these interests do not override your fundamental rights.
• Consent: Where you have given explicit consent to receive marketing communications or for other specified purposes.
• Legal Obligations: Processing necessary to comply with legal requirements.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

International Data Transfers

As we are based in South Africa, data transferred from the EEA to our systems constitutes an international data transfer. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Ensuring data is processed in accordance with GDPR requirements

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two months, in which case we will inform you.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your member state. For South African residents, complaints may be filed with the Information Regulator.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.