Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
flux-socket is fully committed to complying with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take our responsibility to protect your personal data seriously and have implemented appropriate measures to ensure compliance.
flux-socket is the data controller for the personal data we collect. Our contact details are:
flux-socket Travel
47 Deansgate
Manchester, M3 2AY
United Kingdom
Email: [email protected]
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond to your request within one month.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, such as when:
You can request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for this purpose immediately.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making in our services.
We implement appropriate technical and organisational measures to protect your personal data, including:
We process personal data for the following purposes:
We share your data with third parties who process it on our behalf, including:
All our processors are contractually bound to process data only as instructed and to maintain appropriate security measures.
Some of the travel services we arrange involve transferring your data to countries outside the UK and EEA. When this is necessary, we ensure adequate protection through:
We retain personal data only for as long as necessary for the purposes for which it was collected. Our standard retention periods are:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. If the breach is likely to result in a high risk to you, we will also notify you directly.
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
Post: Data Protection, flux-socket Travel, 47 Deansgate, Manchester, M3 2AY
We will respond to your request within one month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.
If you are not satisfied with how we handle your data or respond to your requests, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk