Article 1: Your privacy
The Good Tourism Institute (hereafter referred to as GTI) is committed to protecting and respecting your privacy.
GTI processes personal information about individuals who are:
- GTI’s direct users or customers;
- individuals for whom a purchase or booking has been made by a third party;
- individuals who have been named in a purchase by a customer;
- individuals who have been named in interaction with GTI and;
- where GTI customers are businesses or representatives.
This policy applies to GTI’s website, course platform and your interactions with GTI. Before accessing GTI’s website, using the course platform or interacting with them, please ensure you have read and understood how GTI processes your personal information as described in this policy.
By accessing GTI’s website, course platform or interacting with GTI, to the extent permitted by law, you are consenting GTI to process your personal information in accordance with this policy. Please ensure you have received the consent of any individual before naming then in a purchase or interaction with GTI.
GTI complies to the European General Data Protection Regulation (GDPR).
Article 2: Personal information we may collect
GTI collects personal information about you when you provide this information directly to GTI (or someone gives GTI information about you) when you access GTI’s website, course platform or interact with GTI. This can include information you provide to GTI when you purchase an online course, download a document, fill in a form, correspond with GTI via its website (including comments or material posted, uploaded or stored on GTI’s website), telephone, text, email or otherwise, subscribe to GTI’s mailing lists, or other forms of marketing communications, engage in competitions or promotions, respond to surveys or use some other feature of GTI’s website or course platform as available from time to time.
If you choose not to provide personal information, GTI may not be able to provide all services or interact with you or the services or GTI’s interactions may be limited.
GTI also automatically collects some personal information about you when you access GTI’s website. This includes information about how you access and use GTI’s website and provided services, and information about the device you use to access GTI’s website and course platform.
GTI may also record and share information that you post publicly on social media platforms such as Facebook, Instagram, LinkedIn and Twitter. For example, if you tag @goodtourisminstitute or use #goodtourisminstitute in an Instagram post, GTI may share your image and caption with GTI’s followers.
GTI does not rent, swap or sell your personal information to other organisations for them to use in their own commercial activities.
Article 3: How we use your personal information
GTI defines two categories of personal information and has different use for:
1. Personal information provided by you
- Contact information and basic personal details (such as your full name, postal address, email address and telephone number).
- Payment details (such as your credit card information, account information, billing address and related information). Please note that GTI does not retain your credit card details after completion of your payment.
- When you contact GTI directly, such as by email, telephone, text, mail, when you post on message boards, blogs, or social media or complete an online form or provide quality survey input, feedback or testimonials, GTI will record your comments and opinions.
Note: GTI uses this personal information to communicate with you for a variety of reasons. For example, in relation to a purchase or booking (such as sending purchase or booking receipts, confirmations, statements, invoices, payment reminders and purchase status updates), sending you news, alerts, newsletters, marketing communications and general (non-marketing) commercial communications and following-up on abandoned carts or failed bookings); to supply you with purchased goods or provide booked courses or expeditions; to collect payments from you for purchases or bookings; to address questions from you; to carry out or support promotions; to deal with complaints made by or about you relating to the Services; for authentication purposes; to create customer accounts and operate, maintain and provide to you the features and functionality of GTI’s website and course platform.
Note: GTI uses this personal information to facilitate and collect payment for purchases or bookings and to detect and prevent fraud.
Note: GTI uses this personal information to communicate with you for a variety of reasons. For example, for purposes such as those noted in (a) above); to address your comments, questions, issues and concerns and improve its services; to determine, provide, improve and develop features, products, content and services that may be of interest to you; and to send you news, alerts and marketing communications in accordance with your marketing preferences. GTI may also post customer testimonials on its website or re-post social media material that is related or relevant to GTI.
2. Information collected automatically
Information from your devices (computers, mobile phones, tablets, etc.) and about your visits to and use of this website. The IP address used to access GTI’s website will be logged along with the dates and times of access. Please note that any recorded IP addresses are not linked to personally identifiable information.
GTI uses this information to:
- analyse trends, administer its website, track users movement and gather broad demographic information for internal use;
- enable GTI’s website and course platform to be properly presented to you on your device;
- determine products and services that may be of interest to you for marketing purposes; and to
- operate, maintain and provide to you the features and functionality of GTI’s website and course platform.
Article 4: Processing personal information
To the extent that GTI’s processing of your personal information is subject to the General Data Protection Regulation (GDPR), the legal basis GTI relies on to process your personal information in any particular case will depend upon the circumstances for which it is being processed but will fall into one of the following categories:
- where you have given your consent for GTI to process your personal information in such manner;
- where the processing is necessary for the performance of GTI’s contract with you or to take steps prior to entering into a contract (e.g. to provide a quote or further information to you);
- where the processing is necessary for GTI’s legitimate interests, namely in running a commercial enterprise. In pursuance of GTI’s legitimate interests, GTI only processes personal information in ways a customer or user would reasonably expect, unless GTI has a good reason to do otherwise; or
- where the processing is necessary for GTI to comply with the law.
Article 5: Cookies and other tracking technology
When you use GTI’s website, some information is collected about you automatically. This information is typically collected through a variety of tracking technologies, including cookies, and may include web beacons, embedded scripts, flash objects and similar technology.
Cookies are used as part of a normal business procedure to track patterns of behaviour of GTI’s website visitors by saving your information (such as your internet protocol (IP) address and other preferences (including the kind of content viewed or clicked on and the frequency and duration of your activities)).
Cookies help GTI improve its website and to deliver a better and more personalised service to you. A cookie is an element of data that GTI’s website sends to your browser which is then stored on your system. The cookies GTI uses are designed to help you get the most from GTI’s website but if you do not wish to receive cookies, most browsers allow you to set your browser to prevent this happening. If you select this setting, however, you may be unable to access certain parts of GTI’s website. These settings will typically be found in the “options” or “preferences” menu of your browser.
GTI may collect analytics data, or use third-party analytics tools such as Google Analytics, to help measure traffic and usage trends for GTI’s website and to understand more about the demographics of its users. You can learn more about Google’s practices at policies.google.com/technologies, and view its currently available opt-out options at tools.google.com/dlpage/gaoptout.
Article 6: Marketing and advertising
From time to time, GTI may contact you with relevant information about its services. Most of these messages will be sent by email. For some messages, GTI may use personal information collected about you to help GTI determine the most relevant information to share with you.
If you no longer wish to receive such messages, you may opt-out by clicking on the unsubscribe link at the bottom of GTI emails at any time.
Article 7: Disclosure of personal information
GTI may disclose your personal information to the following, as relevant:
- GTI employees, representatives and contractors (who are under a duty of confidentiality to GTI);
- third party vendors and other service providers that perform services for GTI or on its behalf, which may include (but is not limited to) providing ecommerce and booking platforms, sales fulfilment services, mailing or email services, messaging platforms, tax and accounting services, payments processing, data enhancement services, cloud based storage platforms, fraud prevention, web hosting, or providing analytic services. Important: Your Personal Information is never transferred to any third-party for the purposes of re-marketing to you;
- third parties in connection with a business transaction or potential business transaction, such as a merger, sale of assets or shares, reorganisation, financing, change of control or acquisition of all or a part of GTI’s business activities;
- third parties as required by law or if GTI reasonably believes that such action is necessary (a) to comply with the law or the reasonable requests of law enforcement; (b) to enforce GTI’s Terms & Conditions or to protect the security or integrity of GTI’s website and other services; (c) to prevent any illegal activity (including for the purposes of fraud protection and credit risk reduction); and (d) in connection with any legal proceedings or prospective legal proceedings;
- any person who GTI reasonably believes may apply to a court or other competent authority for disclosure of that personal information where, in GTI’s reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information; and
- in order to establish, exercise, protect or defend the rights, property, or personal safety of GTI, its customers, users or others.
Except as provided in this policy, GTI will not provide your personal information to third parties. Moreover, GTI does not rent, swap or sell personal information with any third party for its own commercial activities.
Article 8: Retention of personal information
GTI will retain your personal information for as long as is necessary to perform their contract with you, meet its legitimate interests or its legal obligations or in accordance with your consent, as relevant.
Article 9: Safekeeping of personal information
GTI implements appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change or damage.
- all personal information you provide to GTI is stored on secure servers;
- any online payment transactions will be encrypted using SSL technology;
- where GTI has provided you (or where you have chosen) a password that enables you to access certain parts of GTI’s website or course platform, you are responsible for keeping this password confidential. GTI asks you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although GTI will use reasonable endeavours to protect your personal information, GTI cannot guarantee the security of data transmitted to GTI’s website, so any transmission is at your own risk.
Article 10: International transfer of personal information
The personal information that GTI collects from you may be transferred to, and stored at, a destination outside the country you are in where GTI and or third party service providers have operations.
If you are located in the European Union (the EU), your personal information may be processed outside of the EU. Where it takes place, the international processing of personal information is necessary for the provision of GTI’s website and course platform (including, without limitation, for the processing and fulfilment of your purchase or booking, the processing of your payment details, fraud and security checks and the provision of support services).
By submitting your personal information, you agree to this transfer and processing of your personal information. GTI will take reasonable organisational and technical precautions to ensure that your personal information is treated securely and in accordance with this policy when such a transfer and processing takes place.
Article 11: Your control and rights of personal information
If you are located in the EU, you have the following rights in respect of your personal information that GTI holds the:
- right to rectification: you have a right to request the rectification of your personal information by GTI where the personal information is inaccurate or incomplete. You can also review or edit the personal information you have supplied to GTI in respect of a purchase by accessing your online member account on the GTI course platform;
- right to object: where GTI processes your personal information based on its legitimate interests, you have a right to object to such Processing, in whole or part;
- right to withdraw consent: where GTI processes your personal information based on your consent, you have a right to withdraw your consent in whole or part. If you withdraw your consent to the processing of your personal information, GTI might not be able to provide you with all (or any) of its services. In certain cases, GTI may continue to process your personal information after you have withdrawn consent if GTI has a legal basis to do so, or if your withdrawal of consent was limited to certain processing activities. For example, GTI may keep personal information if GTI needs to do so to comply with a legal obligation or to resolve disputes;
- right to deletion: you can request that GTI deletes your personal information, unless the processing is being done pursuant to a legal obligation;
- right of access: you have the right to get confirmation of whether GTI is processing your personal information and to obtain a copy of your personal information in an easily accessible format;
- right to transfer: where GTI processes your personal information based on your consent or contract, you have a right to request that GTI transfers some of your personal information to third parties; and
- right to restriction of processing: you have the right to request GTI to restrict the processing of your personal information under certain circumstances, such as where you think that the personal information GTI processes about you is incorrect or unlawful or where GTI no longer needs the personal information but you need GTI to keep it in order to establish, exercise or defend a legal claim.
GTI will help you exercise these important rights and will carry out your request unless certain exceptional reasons arise permitting GTI to keep certain personal information about you. Please contact GTI (see contact details below) for assistance in exercising any of these rights.
Article 13: Protecting children’s privacy
You must be at least 18 years of age to use our website and to purchase an online course. Or if you are under 18 years of age, have the permission of your parent or guardian to use our website or purchase an online course. We do not knowingly collect, use or share information that could reasonably be used to identify children under the age of 16 without prior parental or guardian consent or consistent with applicable law. If you learn that someone younger than 16 has provided us with personal information, please contact us and we will takes steps to delete such data.
Article 14: Third party links
GTI’s website and course platform can contain links to and from websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that GTI does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to those websites.
Article 16: Contact
Questions, comments and requests regarding this policy are welcomed and can be addressed to firstname.lastname@example.org.