RGPD Policy
We want to protect our customers from personal data breaches,
, which is why we have chosen to integrate the ‘Privacy by Design’ concept into the design of our IT tools.
Our RGPD policy
Respecting your personal data is a priority
Travel Planet / Makitizy undertakes to process all information made available to it as part of the service in accordance with the LIL: Respect for the protection of personal data (law no. 78-17 of 6 January 1978, and its amendments) as well as regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 applicable from 25 May 2018.
More specifically, the system built from 2017 is privacy by design and complies with all the recommendations linked to the RGPD of May 2018.
Travel Planet / Makitizy undertakes to implement the necessary measures to comply with the RGPD.
⦁ Implement technical and organisational security measures for pseudonymisation, encryption of personal data, in order to guarantee the Confidentiality / Integrity / Availability / Resilience of processing systems, to restore the availability of personal data (DCP) in the event of a physical or technical incident, to carry out test/analysis/evaluation procedures on the effectiveness of technical and organisational measures to ensure the security of processing.
⦁ Not to apply processing to DCP to which the data processor has access, unless there is a documented instruction from the Customer or an obligation under Union law or the law of the Member State to which it is subject, in which case the data processor must inform the Customer, unless a prohibition is imposed for reasons of public interest.
⦁ Ensure that the confidentiality of personal data is respected by those authorized to process it.
⦁ Help the Client to fulfill the obligation to respond to requests from individuals concerning their personal data, in particular to enable them to provide their response within one month.
⦁ Delete personal data or return it to the Client by deleting copies, unless there are legal data retention requirements, at the end of the service, at the Client’s choice.
⦁ Provide the Client with all necessary information to enable audits to be carried out by the data controller or another auditor appointed by the Client.
⦁ Inform the Client if, in the Client’s opinion, an instruction constitutes a violation of the GDPR or other legal provisions relating to data protection.
⦁ Notify the Client of the occurrence of any security breach having direct or indirect consequences on the processing, as well as any complaint addressed to it by any individual concerned by the processing carried out under the Contract. This communication must be made as soon as possible and no later than forty-eight hours after the discovery of the security breach or following receipt of a complaint.
Discover our GDPR policy regarding our Click and Control tool HERE.
The aim of the General Data Protection Regulation (GDPR) is to increase user protection regarding personal data and their access to it.
The GDPR applies regardless of the size of your business, whether your contacts are private companies or public bodies, in B2B (activities between professionals) or B2C (activities with non-professional clients) and regardless of your annual turnover.
Under the GDPR, financial penalties can be as high as €20 million, or, in the case of a company, up to 4% of its annual global turnover. These penalties can be made public.
OUR CERTIFICATIONS
Recognized standards that prove we keep our commitments
ISO 9001
Since 2014, Travel Planet has been ISO 9001 certified, a global benchmark standard in terms of quality management. With this standard we demonstrate our ability to provide quality products and services to satisfy our customers. We are also committed to continuous improvement.
ISO 14001
ISO14001 defines the criteria for an environmental management system and is suitable for certification. It provides a framework that companies or organizations can use to implement an effective environmental management system.
Cyber Essential
The Cyber Essentials program is a leading, cost-effective insurance mechanism for businesses of all sizes.
It helps demonstrate to customers and other stakeholders that the most critical cybersecurity controls have been implemented. The system includes five security controls that, according to the UK government, could prevent “around 80% of cyberattacks.”
ISO 9003
The ISO 9003:2018 standard is intended for companies wishing to implement a quality assurance system for control and testing carried out at the end of production.
ISO 27001
This standard means that our information security management system applies to customer data, information assets across all business areas, and to all employees and partners, in accordance with the applicability statement version 1.0 dated 19 May 2022. All our systems, policies, procedures and processes are regularly reviewed, tested and optimised to ensure their effectiveness.
