Data Privacy Notice

Personal data we process

Depending on the transaction with CTI, we may collect your:

• (1) Basic personal information (e.g. Name, Data of Birth, Gender, Address).
• (2) Contact Details (e.g. email address, mobile phone number, office number).
• (3) Passport Information – bio page, arrival stamp, departure stamp, immigration status.
• (4) Other Travel Document/Information – Visa, Reduced Travel Tax Certificate, Travel Exemption Certificate, etc.

Purpose of processing

CTI, its authorized personnel and third-party vendors process your personal data for the purposes of providing you with the travel-related services you avail, assisting you through our customer service, performing data analyses and profiling to improve our services, sending you updates though our marketing activities, complying with regulation and ensuring the security of our premises.

Lawful Bases

We process your personal information based on your consent or to fulfill the contract with you. Further, in certain situations, we may process your personal information when it is necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.

Storage & Data Transfer

Physical records containing your personal data are securely stored within company premises while digital records containing your personal data are stored in our computers and hosted in a secured server facility in the Philippines or in other countries where our third-party vendors have facilities. When we transfer your information to other countries, we comply with the requirements of DPA Legislation or relevant regulations.

We may share your personal information to our service providers and other third parties we engage to support our business, and other authorized personnel in relation to the Purpose declared in this Privacy Notice. We may also share your personal data in compliance applicable laws or when required by a competent court, relevant government office or agency pursuant to DPA legislation and other applicable rules and regulations pertaining to data privacy.

Retention

We will keep your personal information for a maximum of three (3) years from the transaction date unless certain government regulations (e.g. BIR) require us to keep your data for a longer period.

Risk

Risk is a chance that a harmful incident may happen. In the context of personal data, risk refer to the chance that someone might collect, use, disclose, or access hour personal data in an unauthorized manner or in a way that may cause you harm. Nonetheless, we have implemented security measures to minimize, monitor and control the risk of exposure of your personal information.

How we protect your Personal Data

We implement technical, organizational, and physical measured designed to protect the confidentiality, integrity, and availability of your Personal Data. These include among others, appointing a Data Protection Officer, conducting data privacy training, instituting policies for data protection, storing physical records in a locked and secured place accessible only to authorized personnel, performing reviews of access rights, deploying firewall equipment and similar network devices to protect our systems and networks, regularly running vulnerability scans and using only secure channels for transmission.

Disposal

Physical records are shredded for disposal, while electronic files are securely erased. We will make sure that the personal information is destroyed in a way that prevents unauthorized people from accessing, processing, or retrieving it.

Methods used for Automated Access

CTI does not make us of automated access when processing personal data within the office premises.

Your Data Privacy Rights

You have the right to be informed, to access, update or correct your personal data, withdraw your consent, request the disposal of your data subject to regulatory limitations, request a copy of your data in an electronic format, claim damages for violation of your data privacy rights, and raise data privacy concerns. If you intend to exercise any of your data privacy rights, feel free to reach our to our Data Protection Officer through: