Last updated: August 2026
Our Commitment to GDPR
hazy-atoll is committed to ensuring that all personal data we process is handled in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page outlines how we comply with these regulations and explains your rights as a data subject.
Data Controller
hazy-atoll acts as the data controller for personal information collected through this website and our travel services. As the data controller, we are responsible for deciding how and why your personal data is processed.
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: Processing necessary for the performance of a contract with you, such as arranging travel bookings.
- Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights.
- Consent: Where you have given clear consent for us to process your data for specific purposes.
- Legal Obligation: Processing necessary to comply with legal requirements.
Your Rights Under GDPR
Under the GDPR, you have the following rights:
Right to Access
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the way we use your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though this may be extended by two further months for complex requests.
Data Protection Officer
While we are not required to appoint a formal Data Protection Officer, we have designated a privacy contact who handles all data protection matters. For any concerns or questions regarding your personal data, please contact us.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Contact Us
For any questions about this GDPR notice or to exercise your rights, please contact:
hazy-atoll
45 Royal Mile
Edinburgh, EH1 2PB
United Kingdom