Bokun is an online booking software service that provides users with access to a day-to-day management and sales system, including booking engines for the facilitation of tours and activities bookings. The Bokun website (including any mobile properties and related applications) and services (collectively, our "Services") are owned and provided by TripAdvisor LLC ("TripAdvisor", "we", "our", "us").
We understand that providing information online involves a great deal of trust on your part. We take this trust very seriously, and make it a high priority to ensure the security and confidentiality of the personal data you provide us when you use our Services.
Personal data means any information about an individual from which that person can be directly or indirectly identified. It does not include data where the identity has been removed or otherwise anonymized (anonymous data).
In the course of our business, we collect and process personal data in different ways. We may collect personal data you give us directly but we also collect data by logging how you interact with our services. For example by using cookies on our websites. We also receive personal data from third party businesses who use our Services.
The personal data we collect about you may include, but is not limited to: your name, email address, postal address, phone number, payment information, survey responses, booking details and other information you may provide about yourself through use of our Services, and your IP address and web browser software.
You can choose not to provide us with your personal data. However, in general you need to provide us with certain information about you in order to take advantage of many features of the Services. We also collect personal data for security purposes.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
You may receive marketing messages from us if you have given your consent, if you have requested to receive them, or if you have purchased goods or services from us and if you have not opted out of receiving marketing messages.
Each time you receive an email of this type, you will be able to tell us if you no longer wish to receive them by clicking on the unsubscribe link that you will find at the bottom of each communication you receive from us, or by e-mailing firstname.lastname@example.org with your request.
Please note that we may continue to send you service communications, such as service and administrative messages about your account or transactional messages related to your bookings. It is not possible to unsubscribe from these service communications.
TripAdvisor may share your information with other parties, including other group companies and the types of third parties listed below. For instance, if we sell or divest our business or any part of it, and your personal data relates to such sold or divested part of our business, or if we merge with another business, we will share your personal data with the new owner of the business or our merger partner, respectively.
Separately, if we are legally obliged to do so, we will share personal data to protect our customers, the site, as well as our company and our rights and property.
We also may share your information if we believe, in our sole discretion, that such disclosure is necessary:
Other than as set out above, you will be notified when personal data about you will be shared with third parties, and you will have an opportunity to choose not to have us share such information.
We also may share aggregate or anonymous information with third parties, including advertisers and investors. For example, we may tell our advertisers the number of visitors our website receives. This information does not contain any personal data and is used to develop content and services we hope you will find of interest.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or statutory reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure or your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements.
We may retain certain information subsequent to the closing of your account with us, for example if it is necessary to fulfil our legal obligations or to exercise, to maintain security, to prevent fraud and abuse and to defend or enforce our rights.
We may collect information via cookies and other similar technologies (such as web beacons). Cookies are small text files that are automatically placed on your computer or mobile device when you visit a website. They are stored by your internet browser. Cookies contain basic information about your use of the internet. Your browser sends these cookies back to our website every time you visit it, so it can recognise your computer or mobile device and personalise and enhance your browsing experience.
You can find out more information about cookies in general, including how to see what cookies are installed on your (mobile) device and how to manage and delete them at websites such as www.allaboutcookies.org and www.youronlinechoices.com/uk.
In accordance with applicable law, you may have the right of access, the right of rectification, the right to erasure, the right to restrict processing, the right to data portability and the right to object. Please find below more details and information on how and when you can exercise your rights. We will respond to your request within one month, but have the right to extend this period with two months.
In accordance with applicable law, you may have the following rights with regard to your personal data:
To exercise any of the aforementioned rights, you can e-mail email@example.com.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. In an effort to speed up our response, we may also contact you to ask you for further information in relation to your request.
We want you to feel confident about using our Services, and we are committed to protecting the personal data we collect. While no website can guarantee perfect security, we have implemented and maintain appropriate physical, administrative, technical, and organisational measures to protect the personal data you provide us against unauthorised or unlawful access, use of disclosure and against accidental loss, damage, alteration or destruction.
For example, only authorised employees are permitted to access personal data, and they may do so for permitted business functions. In addition, we use encryption when transmitting your personal data between your system and ours, and between our system and those of the parties with whom we share sensitive information, and we employ firewalls and intrusion detection systems to help prevent unauthorised persons from gaining access to your personal data.
Bokun is a general audience site and does not offer services directed to minors. We do not knowingly collect data relating to minors. If a person whom we know is under 13 years of age sends us personal data, we will delete or destroy this information as soon as reasonably possible.
Whenever we store or transfer your personal data outside the European Economic Area, we will do so in accordance with applicable law and we will ensure a similar degree of protection is afforded to it by implementing appropriate safeguards. Transfers of personal data are made:
To exercise your other rights you can file a request by e-mailing firstname.lastname@example.org. You may also have the right to lodge a complaint to the supervisory authority about the way we process your personal data. We would, however, appreciate the chance to address your concerns before you approach the supervisory authority, so please contact us in the first instance.
Our full details are:
400 1st Avenue
Needham, MA 02494, USA
Attn: Privacy Officer/Legal Department
In accordance with applicable data privacy law, we have appointed a representative within the European Union. The contact details of our representative are:
7 Soho Square
Attn: Privacy Officer
TripAdvisor Limited’s role in this respect is limited solely to being a contact person for questions on data protection from EU citizens and data protection supervisory authorities. For the avoidance of doubt, TripAdvisor Limited cannot field other communications or legal process on behalf of TripAdvisor LLC.
Call Recording and Monitoring
Copyright © 2018 Bokun. all rights reserved.