GDPR Privacy Notice

GDPR Privacy Notice – WinkTravelDeals

Effective Date:17 Sept 20025

Introduction

This GDPR Privacy Notice (“Notice”) supplements the Privacy Policy of WinkTravelDeals.com, owned and operated by Holiay Breakz Group LLC, and describes how we handle the personal data of individuals located in the European Economic Area (EEA) and the United Kingdom (UK) (collectively “EEA/UK Individuals,” “you,” or “your”).

Capitalized terms not defined in this Notice have the same meaning as in our Privacy Policy or, where applicable, the General Data Protection Regulation (GDPR). This Notice prevails for EEA/UK Individuals if there is any conflict between this Notice and other sections of our Privacy Policy.

Please refer to our general Privacy Policy if you reside outside the EEA or UK.

Data Controller

Holiay Breakz Group LLC, with its principal office at 5380 North Valentine Ave, Apt 102, Fresno, CA 93711, United States, is the controller of your personal data collected via our website as well as booking systems, customer service and related services.

Data Storage & Cross Border Transfers

Personal data collected from EEA/UK users is securely stored on servers located in the United States.

We participate in and comply with:

  • EU–U.S. Data Privacy Framework (EU–U.S. DPF)
  • UK Extension to the EU–U.S. DPF
  • Swiss–U.S. Data Privacy Framework (Swiss–U.S. DPF)

If these frameworks cease to apply, we will rely on Standard Contractual Clauses or other lawful safeguards to protect your data during transfers from the EEA/UK.

Transfers to travel suppliers outside the EEA/UK (airlines or hotels) may occur where necessary to complete a booking or at your request with respect to the GDPR Article 49.

Data Retention

We retain personal data only for as long as needed to:

  • Process bookings and manage loyalty programs.
  • Provide customer service and resolve disputes.
  • Improve services through analytics.
  • Meet legal as well as regulatory and fraud prevention requirements.

Data will be securely deleted or anonymized once no longer required.

Security Measures

We safeguard your personal data using technical and organizational controls, including:

  • PCI-DSS compliant payment systems.
  • SSL encryption for sensitive transmissions.
  • Secure infrastructure aligned with ISO 27001.
  • System monitoring (IP logs or browser info) for threat detection.

Legal & Regulatory Disclosures

We may disclose personal data when required by law, including to government or regulatory authorities.

Business Transfers

If Holiay Breakz Group LLC is involved in a merger, acquisition, or sale, your personal data may be transferred to the successor entity, which will honor this Notice.

Your GDPR Rights (EEA/UK Residents)

You have the right to:

  • Access, correct, or delete personal data we hold about you.
  • Restrict or object to certain processing.
  • Receive a portable copy of your data.
  • Withdraw consent where applicable.

To exercise these rights, email support@winktraveldeals.com with “GDPR Privacy Request” in the subject line.

Transactional messages (e.g., booking confirmations) are not considered marketing and cannot be unsubscribed from.

Marketing & Legitimate Interest

You may object to:

  • Processing based on our legitimate interests (unless we demonstrate overriding grounds).
  • Direct marketing at any time by clicking “unsubscribe” in our emails or emailing support@winktraveldeals.com.

Complaints

You may lodge a complaint with your local Data Protection Authority: EU Authorities Directory

You may also pursue remedies under any SCCs we rely upon.

Data Privacy Framework Compliance

We comply with the EU–U.S. Data Privacy Framework Principles, the UK Extension, and the Swiss–U.S. DPF Principles, as enforced by the U.S. Federal Trade Commission (FTC).

Certification: https://www.dataprivacyframework.gov/

If unresolved concerns remain, contact: BBB National Programs – DPF Services

Binding arbitration may be available in specific circumstances.

Onward Transfers

We may share your data with carefully selected service providers (e.g., hosting, analytics, customer support) who act on our behalf under strict contractual obligations.

Transfers to our corporate affiliates may occur for operational purposes. Sensitive data will only be shared with your explicit consent.

To opt out of onward transfers to third parties not acting as our agents, email support@winktraveldeals.com.

Minors

WinkTravelDeals.com is intended for users aged 18 and above. We do not knowingly collect data from children.

Changes to This Notice

We may update this Notice if our practices change. Any revisions will be posted with an updated Effective Date, and where required by law, you will be informed in advance.

Contact Us

For questions or to exercise your GDPR rights:

Holiay Breakz Group LLC
5380 North Valentine Ave, Apt 102, Fresno, CA 93711, United States
Email: support@winktraveldeals.com
Phone: +1-866-579-8033

Please avoid sending sensitive payment information via email.

popup_winktraveldeals
X