EU Safe Harbor Policy
Policy Statement and Scope
“Agent”: Means a third party that processes or otherwise uses Personal Data on behalf of and under the instructions of Scott’s Cheap Flights.
“EU Employee Data”: Means personally identifiable human resource data about individuals who are employed or otherwise engaged by Scott’s Cheap Flights or our affiliates, subsidiaries or business partners in the EU.
“Personal Data”: Means any information that identifies an individual, whether collected online or offline and regardless of format. Personal Data does not include information that is aggregated, pseudonymized, encoded or rendered anonymous, or publicly available personal information that has not been combined with non-public personal information, or information that pertains to a specific individual, but from which that individual could not reasonably be identified.
“Sensitive Personal Data”: Means personal information that is not EU Employee Data and that reveals the individual’s race, ethnic origin, political opinions, religious beliefs, criminal record or that concerns the individual’s own health or sex life.
Safe Harbor Principles
Scott’s Cheap Flights has adopted the seven Safe Harbor Principles of notice, choice, onward transfer, access, security, data integrity and enforcement with respect to Data that is collected in and transferred from countries in the EU to Scott’s Cheap Flights in the United States.
2. Choice. Before Scott’s Cheap Flights uses Personal Data or EU Employee Data for a purpose that is incompatible with the purposes for which the Personal Data or EU Employee Data was originally collected or subsequently authorized, or transfers Personal Data or EU Employee Data to a non-Agent third party for the purpose of allowing the non-Agent third party to exercise independent control over the Personal Data or EU Employee Data, the affected individuals will be given an opportunity to decline (opt out) having their Personal Data or EU Employee Data so used or transferred. The same choice principle shall apply to Sensitive Personal Data, but in the event that the Data is Sensitive Personal Data, the affected individual’s explicit consent (opt in) will be obtained prior to such use or transfer.
3. Onward Transfer. Scott’s Cheap Flights may transfer Data to its Agents once it obtains assurances that the relevant Agents will adequately safeguard the Data that is transferred to them. Such assurances may take the form of a contract obligating the Agent to provide at least the same level of protection as is required by the relevant Safe Harbor Principles, Safe Harbor certification by the Agent, or the Agent being subject to an EU data protection directive or adequacy finding. If Scott’s Cheap Flights learns that an Agent is using or sharing Data in a way that is contrary to the assurances obtained, we will take reasonable steps to prevent or stop such activity. Scott’s Cheap Flights may transfer Personal Data to a non-Agent third party where such transfer is consistent with the notice and choice principles detailed above or as otherwise set forth in this Policy.
4. Access. For those individuals who duly request it, Scott’s Cheap Flights will provide such individuals with reasonable access to Data that it holds about them, except in those circumstances that are set forth in the Safe Harbor Principles, such as when the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy or when the rights of persons other than the Data subject’s would be violated and except in those instances where the access being requested relates to Employee Data and the person making the request is not otherwise entitled to such access under the local labor or employment laws governing such person’s employment. For those individuals who receive access, Scott’s Cheap Flights will take reasonable steps to permit such individuals to correct, amend or delete information that is demonstrated to be inaccurate or incomplete.
5. Security. Scott’s Cheap Flights will take reasonable administrative, technical, and physical precautions to protect Data in its possession from loss, misuse and unauthorized access, disclosure, alteration, and destruction.
6. Data Integrity. Scott’s Cheap Flights will take reasonable steps to ensure that Data that is stored on its servers is used, processed, and maintained in a condition that is compatible with the purposes for which it has been collected or subsequently authorized, subject to any deficiencies in the condition of the Data that existed at the time Scott’s Cheap Flights received such Data.
There shall be no authority for any claims to be arbitrated on a class or representative basis, and the arbitrator may not consolidate or join the claims of other persons or parties who may be similarly situated. The arbitrator shall not have the power to award punitive damages against you, Scott’s Cheap Flights. If any part of this arbitration provision is deemed to be invalid, unenforceable or illegal, or otherwise conflicts with the rules of JAMS, then the balance of this arbitration provision shall remain in effect and shall be construed in accordance with its terms as if the invalid, unenforceable, illegal or conflicting provision were not contained herein. If, however, the provision above prohibiting the arbitration of on a class or representative basis is found to be invalid, unenforceable or illegal, then the entirety of this arbitration provision shall be null and void, and neither you nor Scott’s Cheap Flights shall be entitled to arbitrate their dispute.
How to Contact Us
Scott’s Cheap Flights has a privacy officer (“Privacy Officer”) who is responsible for Scott’s Cheap Flights’ compliance with and enforcement of this Policy. Scott’s Cheap Flights’ Privacy Officer is available to any of its customers or others who may have questions concerning this Policy. Relevant contact details are as follows:
1942 Broadway St., STE 314C, Boulder, CO 80302, United States
Limitation on Scope of Principles
Scott’s Cheap Flights may disclose Data as necessary in connection with the sale or transfer of all or part of its business. Adherence by Scott’s Cheap Flights to these privacy principles may be limited to the extent required for Scott’s Cheap Flights to meet its legal, governmental, national security or public interest obligations or as otherwise permitted under the Safe Harbor Principles.