This policy covers all users or those who may register to use the FBM Holidays website. It is not necessary to register in order to gain access to the search facilities of the site, but we may restrict access to certain areas, which will be referred to below and throughout this policy where applicable. We are committed to protecting your privacy when you are using our online services. To protect your privacy and cover how we use them in the topics listed below.
General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law which comes into effect on data protection and privacy for all individuals within the European Union and the European Economic Area on 25th May, 2018. As a company, FBM Holidays are fully on board with the spirit of the GDPR for a safe and more secure internet. We aspire to embrace your privacy by design and, whenever possible, we do not collect or store personally identifiable information without purpose. For the personal data we do collect, we are committed to your right to privacy and to being transparent about how and why we store your data.
What information do we collect?
During our registration or booking process, we ask for personal information, which both identifies you and enables us to communicate with you. We also ask you for certain information in order to offer you our best attention.
We collect information about you when you register with us, book a property for holiday or use a particular service that we are responsible for carrying out. We also collect information when you voluntarily complete customer surveys, provide feedback and participate in competitions, if we run them. Website usage information is collected using cookies. This information is shared with a small group of third party service providers.
How will we use your information?
We collect information about you to process your booking, manage your account and, to email you about other products and services we think may be of interest to you, including special offers or discounted rates for future bookings. FBM Holidays will retain your information for future reference until you as the consumer deem our requirement to maintain it as elapsed.
We use your information collected from the website to personalise your repeat visits to our website as best we can. If you agree, we shall pass on your personal information to our group of companies so that they may offer you their products and services.
To summarise, we will use the information you provide only for the following purposes:
- To send updates regarding the status of your booking.
- To send you newsletters and details of offers and promotions in which we believe you will be interested
- To improve the content, design and layout of the FBM Holidays website and to facilitate knowledge management
- To understand the interests and booking behaviour of our users
- To perform other such general marketing and promotional activities focused on our products and services
We would like to send you information about special offers and discounts in relation to our properties, or products and services of ours and other businesses which we feel would enhance your stay whilst visiting the area, and therefore, may be of interest to you. If you have consented to receive communications or marketing, you may opt out at a later date.
You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other members of the FBM Group. If you no longer wish to be contacted for marketing purposes, please contact us on 01834 844565.
Access to your information
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us at the following address. We may make a small charge for this service:
St. Julian Street
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
Under new EU legislation, you have the following rights under law, with the introduction of The General Data Protection Regulation (GDPR) (EU) 2016/679.
— The right to be informed
— The right of access
Individuals have the right to access their personal data in most cases. As a consumer, you maintain the right to obtain a copy of your personal data as well as other supplementary information in order to clarify your level of comfort or accuracy of the information we hold on file. Any request which is made for information on some or all of your personal data will be provided to you in no more than 28 days from date of request, unless we deem in any reasonable capacity that we cannot provide this to you, whereby written justification for our decision will be submitted to you in lieu of the requested data.
— The right to rectification;
You have the right to have inaccurate personal data rectified, or completed if it is incomplete. Any request which is made for information on some or all of your personal data will be provided to you in no more than 28 days from date of request, unless we deem in any reasonable capacity that we cannot provide this to you, whereby written justification for our decision will be submitted to you in lieu of confirmation of the requested changes.
— The right to erasure
Also referred to as ‘the right to be forgotten’, and introduced under GDPR, this provision introduces a right for individuals to have personal data erased. Please note that the right to be forgotten is not absolute and only applies in certain circumstances.
When does the right to erasure not apply?
The right to erasure does not apply if processing is necessary for one of the following reasons:
- To exercise the right of freedom of expression and information.
- To comply with a legal obligation.
- For the performance of a task carried out in the public interest or in the exercise of official authority.
- For archiving purposes in the public interest, scientific research historical research or statistical purposes where erasure is likely to render impossible or seriously impair the achievement of that processing; or for the establishment, exercise or defence of legal claims.
The GDPR also specifies two circumstances where the right to erasure will not apply to special category data:
- if the processing is necessary for public health purposes in the public interest (eg protecting against serious cross-border threats to health, or ensuring high standards of quality and safety of healthcare and of medicinal products or medical devices); or
- If the processing is necessary for the purposes of preventative or occupational medicine (eg where the processing is necessary for the working capacity of an employee; for medical diagnosis; for the provision of health or social care; or for the management of health or social care systems or services). This only applies where the data is being processed by or under the responsibility of a professional subject to a legal obligation of professional secrecy (eg a health professional).
— The right to restrict processing
As an alternative to the right to be forgotten, an individual can request the restriction of data for a temporary period. This is also seen by way of a specific request that data is not erased at all, and that it is held on file in its entirety without edit, update or deletion unless specific written or verbal request is given. Any request which is made in order to restrict the use of data will be confirmed in writing to you in no more than 28 days from the date of the request, and a period of temporary restriction will be agreed with you at this time. You will also be informed by writing before this restriction is lifted.
— The right to data portability
The right to data portability allows individuals to not only obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment or database to another in a safe and secure way, without affecting its usability. The individual can ask that we as a company directly transfer data to a new controller.
— The right to object
A user has the right to object to the processing of personal data in certain circumstances, including the absolute right to put a stop to data processing for direct marketing purposes. In certain circumstances, we will legally be bound to hold onto some or all of your data if it relates to lawful business practice.
Any request made in relation to an objection will be responded to in no more than 28 days from the date of the request. If we deem in any reasonable capacity that we cannot commit to the cessation of all or some of your data, written justification for our decision will be submitted to you in lieu of confirmation of the requested changes.
Any requests made in regards to the cessation of the use of data in relation to direct marketing will be treated with the utmost urgency. In relation to requests for the cessation of data used in relation to direct marketing, unless it is received at the same time as a separate and legitimate request under the user’s right to erasure, your data will be suppressed from processing on the grounds of marketing within 28 days.
— The right not to be subject to automated decision-making including profiling
Both automated individual decision-making (making a decision solely by automated means without any human involvement); and profiling (automated processing of personal data to evaluate certain things about an individual) can be restricted under GDPR. Profiling can be part of an automated decision-making process, typically coupled with direct marketing and remarketing. Whilst closely related to direct marketing, it is a stand-alone action and you can request that these processes be split up, continue to receive direct marketing but be exempt from any process where your data is used to profile and have decisions made on the basis of that information.
This website is not intended for children and we ask that no one under the age of 18 submits personal information to us or uses the site without supervision of a parent or guardian. Unless it is provided to us willingly by a parent or guardian, we will not ask or request any specific data on children at all, or specifically ask that names, gender or precise ages are collected about children.
Due to restrictions of children or infants in certain properties, it may be deemed as reasonable for us to obtain clarification that any party members not over the age of 18 fall within particular parameters sufficient to allow us to continue with a booking. This clarification will allow us to maintain the safety of minors in properties that don’t accept children or infants, or if they don’t accept them between certain ages, and is carried out under obligation, based on the wishes of the property owners and done so without discrimination.
Cookies are text files placed on your computer, mobile device or tablet and used to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
FBM Holidays cannot be held responsible for other website or organisation’s use of your personal data.
Should it be the case or requirement that we need to pass on your information to a tradesman, cleaner or other vendors - essentially, to anyone who would perform a specific or vital service for you, be that directly or indirectly as part of ongoing property maintenance - we would maintain that this data is transferred in a secure and private manner, and sufficient monitoring of data and your privacy are carried out.
How to contact us
By emailing: firstname.lastname@example.org
By Phone: 01834 844565
By writing to us at FBM Holidays, Slate House, St. Julian Street, Tenby, Pembrokeshire, SA70 7AS