Privacy Statement
This privacy statement describes our responsibilities as a Data Controller in compliance with the Data Protection Act 2018.
Privacy Notice
You are giving your personal data to Firth Attractions Ltd, trading as Dolphin Spirit, as the Data Controller.
Your Personal Data
You are being asked to supply your name, email address, contact telephone number, home address and payment card information. Your IP address will also be recorded as part of the booking transaction. Your payment card details are processed by a 3rd party and are not stored in our system. Your contact information and transaction details will be retained until the end of the financial year in which the booking is made.
Purpose
The purpose of processing the personal data we ask for is to administer your booking for a Dolphin Spirit cruise or RIB trip.. The legal basis for this processing is the performance of a contract between us. Your personal data will not be used for any other purpose.
If you do not provide the personal data requested, we cannot enter into a booking contract with you.
Data Subjects
Personal data processing is carried out for the following data subject categories:
- Prospective customers
- Existing Customers
- Lapsed Customers
And for the following services:
- Dolphin Spirit Cruise
- Dolphin Mischief RIB trip
Lawful Reasons For Processing
Processing Purpose: Administration of bookings
Lawful Reason: Fulfillment of Contract.
Sharing Your Personal Data
Your personal data will only be shared with our contracted data processors who will only process your data according to written instructions provided by us.
The purpose of the sharing is processing necessary to complete your booking with us and for no other purpose.
It may be necessary to otherwise share your personal data in order to comply with a legal obligation or in order to protect your vital interests or those of another data subject.
Data Transfers
For the payment of online bookings we use two data partners. One located in the EEA (Paypal), the other located in the USA (Stripe). This means your personal data is retained within the EEA or is processed lawfully outside the EEA using the US-EU Privacy Shield. Booking transactions are carried out online using a server and website system located in the UK.
Your Rights
The GDPR gives you rights over your personal data. These include the right to object to any aspect of our processing and the right to complain to the Information Commissioner’s Office (ICO) in the UK.
Under the Data Protection Act 2018 you have the following rights:
- The right to be informed.
- The right to access (your personal data)
- The right to rectification.
- The right to erasure.
- The right to restrict processing
- The right to object to processing.
- The right to data portability.
- Rights in relation to automated decision-making.
If you with to invoke any of your rights, including for the purpose of a Subject Access Request (SAR), send your written request to: Yvette Hogan at Dolphin Spirit, Inverness, Marina, Stadium Road, Inverness, IV1 1FF. Or by email at: admin@dolphinspirit.co.uk.
You may also advise us of a data breach notification using the same contact information.
You can contact the Information Commissioner’s Office (ICO) as the regulator in the UK at:
Website: www.ICO.org.uk
Address: Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
(Privacy Notice last updated 3rd November 2019)
Cookies
When we provide services, we want to make them easy, useful and reliable. This sometimes involves placing small amounts of information on your computer. These are called ‘cookies’.
These cookies cannot be used to identify you personally and are used to improve services for you, for example through:
– Letting you navigate between pages efficiently
– Enabling a service to recognise your computer so you don’t have to give the same information during one task
– Recognising that you have already given a username and password so you don’t need to enter it for every web page requested
– Measuring how many people are using services, so they can be made easier to use and that there is enough capacity to ensure they are fast.
To learn more about cookies, see:
– www.allaboutcookies.org
– www.youronlinechoices.eu
– www.google.com/policies/technologies/cookies/
Users typically have the opportunity to set their browser to accept all or some cookies, to notify them when a cookie is issued, or not to receive cookies at any time. The last of these options, of course, means that personalised services cannot be provided and the user may not be able to take full advantage of all of a website’s features. Refer to your browser’s Help section for specific guidance on how it allows you to manage cookies and how you may delete cookies you wish to remove from your computer.
Multiple cookies may be found in a single file depending on which browser you use.
The cookies used on this website have been categorised based on the categories found in the ICC UK Cookie guide, as follows:
Category 1: strictly necessary cookies
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like shopping baskets or e-billing, cannot be provided.
Category 2: performance cookies
These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.
Category 3: functionality cookies
These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a website may be able to provide you with local weather reports or traffic news by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as a live chat session. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
Category 4: targeting cookies or advertising cookies
These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.
5.1.1 The list below shows the cookies that we use, other than those that are strictly necessary to this service. If you have any queries about these, or would like more information, please contact our Data Protection Manager at Firth Attractions Ltd t/a Dolphin Spirit, Caley Marina, Canal Road, Inverness IV3 8NF, or email us at admin@dolphinspirit.co.uk.
Cookie Name and Description
civicAllowCookies
Used only when consent is granted to use cookies on the website.
__utma 3rd party Google Analytics cookie
Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics.
__utmb 3rd party Google Analytics cookie
Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics. Expires after 30 minutes
__utmc 3rd party Google Analytics cookie
Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit. Expires upon end of browser session.
__utmz 3rd party Google Analytics cookie
Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics. Expires 6 months from set/update.
__utmt 3rd party Google Analytics cookie. Used to throttle request rate. Expires 10 minutes after browser session ends.
resprocart 1st party cookie used by the ticket purchase shopping cart.
By using this website, you agree that we can place these types of cookies on your device.