===== PAGE 1 =====
<div style="text-align: center;"><img src="imgs/img_in_image_box_315_301_1765_517.jpg" alt="Image" width="58%" /></div>


# GDPR Privacy Statement & Factsheet:

Who we are: We are World Travel Centre Ltd. trading as WTC, Selective Travel Management & Etravel from the registered offices below:

GDPR Policy: Our detailed data protection policy is available from our GDPR homepage: http://www.worldtravelcentregroup.com/gdpr/

This document is a simple summary of why & how we process personal data as outlined in the FAQs below:

## Do we hold personal data?

Yes, we receive personal data from data subjects to enable us to book travel transactions on their behalf.

## What type of personal data do we hold?

Typically, we store Full Passport Name, email address & mobile number. We may also hold details such as date of birth, photo ID details (passport or driving licence), postal address, land line numbers and airline or hotel reward scheme details.

The following table outlines where and why data may be transferred to third parties.


<table border=1 style='margin: auto; word-wrap: break-word;'><tr><td style='text-align: center; word-wrap: break-word;'>Data Sharing</td><td style='text-align: center; word-wrap: break-word;'>WTC Group</td><td style='text-align: center; word-wrap: break-word;'>Third Party</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Sensitive Data</td><td style='text-align: center; word-wrap: break-word;'>Yes. With their consent, we will process information about a Data Subject&#x27;s health condition or disability as necessary for the purposes of arranging travel in accordance with their needs. Yes. With their consent, we will process information about a Data Subject&#x27;s criminal record as necessary for the purposes of assisting them (at their request) with a visa application.</td><td style='text-align: center; word-wrap: break-word;'>Yes. With their consent, we will process information about a Data Subject&#x27;s health condition or disability as necessary for the purposes of arranging travel in accordance with their needs. Yes. With their consent, we will process information about a Data Subject&#x27;s criminal record as necessary for the purposes of assisting them (at their request) with a visa application.</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Marketing Purposes</td><td style='text-align: center; word-wrap: break-word;'>Yes</td><td style='text-align: center; word-wrap: break-word;'>No</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>EU/UK Travel Purposes</td><td style='text-align: center; word-wrap: break-word;'>Yes</td><td style='text-align: center; word-wrap: break-word;'>Yes. Only where we are required to do so to complete a travel request such as when requested by airlines, hotels, and car hire companies or for visa purposes i.e. only where it is necessary to enable the data subject to avail of the travel service booked.</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Non EU/UK Travel Purposes</td><td style='text-align: center; word-wrap: break-word;'>Yes</td><td style='text-align: center; word-wrap: break-word;'>Yes. Only to a verified travel supplier or service provider who may be situated outside the EEA and only for the expressed purpose of enabling a travel</td></tr></table>

Dublin:

World Travel Centre Ltd

Belfast:

43 Pearse Street

Dublin 2

D02 W085

World Travel Centre Ltd.

6th Floor

14-18 Great Victoria Street

BT2 7BA

===== PAGE 2 =====
Selective Travel Management

<div style="text-align: center;"><img src="imgs/img_in_image_box_842_304_1761_514.jpg" alt="Image" width="37%" /></div>



<table border=1 style='margin: auto; word-wrap: break-word;'><tr><td style='text-align: center; word-wrap: break-word;'>Data Sharing</td><td style='text-align: center; word-wrap: break-word;'>WTC Group</td><td style='text-align: center; word-wrap: break-word;'>Third Party</td></tr><tr><td style='text-align: center; word-wrap: break-word;'></td><td style='text-align: center; word-wrap: break-word;'></td><td style='text-align: center; word-wrap: break-word;'>transaction. For example, non-EU airlines or US government for APIS purposes.</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Strong Customer Authentication (SCA2)</td><td style='text-align: center; word-wrap: break-word;'>Yes. Data is collected by WTCG for the purposes of authenticating card payments by Payment Services Providers (PSPs)</td><td style='text-align: center; word-wrap: break-word;'>Yes. This data is submitted securely by card holders and passed to our PSPs. It is not stored or held by our servers at any stage.</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Other Purposes</td><td style='text-align: center; word-wrap: break-word;'>Yes. Only where the data subject has submitted the data to us and consents to its retention for future use.</td><td style='text-align: center; word-wrap: break-word;'>No</td></tr></table>

## Do we hold sensitive data?

Yes. In the very limited circumstances referenced in the table above.

## Do we share data with third parties?

Yes, but only where we are required to do so to complete a travel request such as when required by airlines, hotels, car hire companies or for visa purposes. i.e. only where it is necessary to enable the data subject to avail of the travel service booked.

## Do we transfer data out of the UK/EEA?

Yes, but only to a verified travel supplier or service provider who may be situated outside the UK/EEA and only for the expressed purpose of enabling a travel transaction. For example, non-EU airlines or US government for APIS purposes.

## Do we store data for other processing?

We may, but only where the data subject has submitted the data to us and consents to its retention for future use.

Do we share data with other third parties for marketing or other purposes?

No, never. We protect it against unauthorised disclosure or processing.

## How long do we retain data?

Data can be retained for a little as 48 hours and up to 3-5 years depending on the nature of the data and individual circumstances. Our data retention policies are set out in detail in our data protection policy including the commercial & legal rationale.

In each case we have carefully considered the best interests of our clients, both individuals and corporate.

## Do we use data for marketing purposes?


<table border=1 style='margin: auto; word-wrap: break-word;'><tr><td style='text-align: center; word-wrap: break-word;'>Dublin:</td><td style='text-align: center; word-wrap: break-word;'>Belfast:</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>World Travel Centre Ltd</td><td style='text-align: center; word-wrap: break-word;'>World Travel Centre Ltd.</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>43 Pearse Street</td><td style='text-align: center; word-wrap: break-word;'>6th Floor</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Dublin 2</td><td style='text-align: center; word-wrap: break-word;'>14-18 Great Victoria Street</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>D02 W085</td><td style='text-align: center; word-wrap: break-word;'>BT2 7BA</td></tr></table>

===== PAGE 3 =====
<div style="text-align: center;"><img src="imgs/img_in_image_box_317_302_1761_514.jpg" alt="Image" width="58%" /></div>


We do not use contact details of corporate clients for any marketing or promotional activity. We may send relevant travel related material to our clients as part of our travel management obligations.

We occasionally contact our leisure department customers through SMS / email with offers related to travel services they have purchased from us in the past.

All such contacts contain simple and immediate opt-out options.

## What about consent?

When we process your personal data as submitted by or on your behalf on the basis of your consent, you are free to withdraw that consent at any time. You can withdraw your consent by contacting us using the contact details at the bottom of this notice.

Please note that if you withdraw your consent we may not be able to continue providing you with the service to which the consent related.

## Rights under GDPR of our data subjects:

You have various rights under data protection law, subject to certain exemptions, in connection with our processing of your personal data:

Right to access the data - You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.

Right to rectification – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.

Right to erasure – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.

Right to restriction of processing or to object to processing – You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.

Right to data portability – You have the right to request us to provide you, or a third party, with a copy of your personal data in a structured, commonly used machine readable format.

In order to exercise any of the above rights, please contact us using the details below.

## BREXIT & UK GDPR:


<table border=1 style='margin: auto; word-wrap: break-word;'><tr><td style='text-align: center; word-wrap: break-word;'>Dublin:</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>World Travel Centre Ltd</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>43 Pearse Street</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>Dublin 2</td></tr><tr><td style='text-align: center; word-wrap: break-word;'>D02 W085</td></tr></table>

Belfast: World Travel Centre Ltd.

6th Floor

14-18 Great Victoria Street

BT2 7BA

===== PAGE 4 =====
<div style="text-align: center;"><img src="imgs/img_in_image_box_844_302_1761_507.jpg" alt="Image" width="36%" /></div>


The EU GDPR does not apply in the UK after the end of the Brexit transition period on 31 December 2020.

The UK's DPA 2018 has already enacted the EU GDPR's requirements into UK law and, with effect from 1 January 2021, the DPPEC (Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit)) Regulations 2019 amended the DPA 2018 and merged it with the requirements of the EU GDPR to form a new, UK-specific data protection regime that works in a UK context after Brexit as part of the DPA 2018.

This new regime is known as the 'UK GDPR'.

Where appropriate we have aligned our GDPR documentation with the requirements of the UK GDPR and to reflect the UK's independent jurisdiction and the specific scope and wording of the UK GDPR.

Where our UK registered entity offers services to EU residents we continue to comply with the EU GDPR.

## Questions:

If you have any queries in connection with our processing of personal data, you can get in touch with us using the following contact details:

compliance@worldtravelcentregroup.com

Dublin:

World Travel Centre Ltd