Privacy Policy

1. Who is the controller of your personal data?

• When this Privacy Policy mentions “Company”, “we,” “us,” “our” or “Data Controller”, it refers to: 

  LASTMINUTE.COM NV  business register no. 34267347and with registered office at Basisweg 10, 1043 AP – Amsterdam, Netherlands which is responsible for the processing of Users’ and/or Customers’ personal data under this Privacy Policy (hereinafter, referred to as the “Company”, “we”, “us”, “our”, “Data Controller”). 

• 2.1. Personal data provided by you 

  • The personal data that you share with us when you register to our “Email Alerts” service  or access to the service called “Contact Us”. 

  The provision of the above personal data, where requested, is necessary for the adequate performance of the requested service and to allow us to comply with our legal obligations except when we rely on consent as legitimate basis for processing and or our legitimate interest. Without it, we may not be able to provide you with all the requested services. 

  It is important that all the personal data you give us is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email) details at all times. 

• 2.2. Personal data collected automatically from our Website, from communication we send, and/or from third parties 

  • We collect information about your visits to and use of the Website, such as information about the device and browser you are using, your IP address or domain names of the computers connected to the Websites, uniform resource identifiers for requests made, the time of request, the method used to submit the request to the server, the size of the archive obtained as a response, the numerical code indicating the status of the response given by the server (correct, error, etc.) and other parameters relative to the operating system and the computer environment used, the date and time that you visited, the duration of your visit, the referral source and website navigation paths of your visit and your interactions on the Website.

3. Why do we collect your data?

• In general terms, we use your personal data to provide you with the services you request. More specifically:

  • To create and maintain the contractual relation established for the provision of the service requested by you in all its phases and by way of any possible integration and modification or to take steps at your request in relation to the contract prior to entering into contract . 

• On which legal basis? To fulfil a contract, or take steps linked to a contract

  ************** 

  • To meet the legal, regulatory and compliance requirements and to respond to requests by government or law enforcement authorities conducting an investigation. 

• On which legal basis? To comply with the law (i.e. to share personal data with regulatory authorities) 

   ************* 

  • To verify compliance with our terms and conditions and for the establishment, exercise or defence of legal claims. 

• On which legal basis? To pursue our legitimate interest (i.e. compliance with our terms and conditions, protection of our rights in the event of any dispute or claim)  

  Where we rely on legitimate interest as a basis for processing your personal information, we carry out an assessment to ensure that our interest in the use of your data is legitimate and that your fundamental rights of privacy are not outweighed by our legitimate interests (‘balancing test’). You can find out more information about the balancing test by contacting our Data Protection Officer at to dpo.en@lastminutegroup.com .

4. Who sees, receives and uses your data and where?

• 4.1. Categories of recipients of your data 

  We share your personal data, for the purposes described in this Privacy Policy, to the following categories of recipients: 

  • Our authorised employees and/or collaborators that assist and advise us on administration, legal affairs, and information systems, as well as those in charge of maintaining our network and hardware/software equipment; 
  • Our third-party service providers (including other entities of the lastminute.com group), which process your personal data on our behalf and under our instructions for the purposes described hereinabove acting as data processors, such as those providing us with IT and hosting services, analytics and administration services etc. 
  • Competent authorities when we are required to do so by the current law. 
  • Competent authorities and Law and enforcement third parties when this is necessary so that we can enforce our terms of use and protect and defend our rights or property or the rights or property of any third party. 
  • Third parties that receive the data (e.g. business consultants, professionals for delivering due diligence services or assess value and capabilities of the business) when it is necessary in connection with any sale of our business or its assets (in which case your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners. 

  The complete list of parties to which your personal data may be disclosed is available at our registered office and may be requested by writing to privacy.en@lastminutegroup.com. 

• 4.2. International transfer of your data 

  Users’  personal data is processed in at the Data Controller’s registered office (see point 1), on the  lastminute.com group servers, and at the offices of other entities to which data may be provided in order to provide the services requested of the Data Controller. 

  We also transfer your personal data to: 

  • non-European Economic Area (EEA) countries offering an adequate level of data protection such as Switzerland in accordance with the “Adequacy decisions” of the EU Commission that recognises some countries as providing adequate protection; 

  Should you want to obtain further details about the safeguards put in place, you can contact us by writing to privacy.en@lastminutegroup.com.