Data Processing Agreement (DPA)
Last Updated: [March 2025]
This Data Processing Agreement (“Agreement”) is entered into between:
- Travel China (“Company,” “we,” “our,” “us”), operating the website travelchina.co, and
- The User (“you,” “your”), who accesses or uses our services,
This Agreement outlines how we collect, process, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Definitions
- “Personal Data”: Any information relating to an identified or identifiable individual.
- “Processing”: Any operation performed on Personal Data, including collection, storage, modification, and deletion.
- “Controller”: The entity that determines the purposes and means of processing Personal Data.
- “Processor”: The entity that processes data on behalf of the Controller.
- “Data Subject”: The individual whose personal data is being processed.
2. Scope and Purpose of Data Processing
Travel China processes personal data for the following purposes:
- Providing travel-related content and services.
- Managing user inquiries and support requests.
- Improving website performance and user experience.
- Compliance with legal obligations and security measures.
We process data only to the extent necessary for the specified purposes and do not use it for unauthorized activities.
3. Types of Personal Data Collected
We may collect the following categories of personal data:
- Contact Information: Name, email address, phone number.
- Technical Data: IP address, browser type, cookies, device identifiers.
- User-Provided Data: Any information voluntarily submitted through forms or support requests.
We do not process sensitive data (e.g., health information, political opinions) unless explicitly required and consented to.
4. Data Retention and Deletion
- We retain personal data only as long as necessary for the purposes stated in this Agreement.
- Users can request the deletion of their data at any time by contacting info@travelchina.co.
- Upon request, we will delete or anonymize data unless legally required to retain it.
5. Data Security Measures
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. These measures include:
- Encryption of sensitive data.
- Secure access controls and authentication.
- Regular security audits and monitoring.
6. Data Sharing and Third-Party Processors
We do not sell personal data. However, we may share data with trusted third-party service providers, such as:
- Hosting providers (e.g., website and cloud storage services)
- Analytics tools (e.g., Google Analytics, to improve user experience)
- Marketing platforms (e.g., email newsletters, if the user has opted in)
All third-party processors comply with GDPR requirements and use data only for agreed purposes.
7. User Rights under GDPR
As a data subject, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data.
- Right to Restriction: Request to limit processing under certain conditions.
- Right to Object: Object to data processing based on legitimate interests.
- Right to Data Portability: Receive a copy of your data in a structured format.
To exercise your rights, contact us at info@travelchina.co.
8. Data Transfers Outside the EU
If we transfer personal data outside the European Economic Area (EEA), we ensure:
- The destination country has adequate data protection laws, or
- We use Standard Contractual Clauses (SCCs) approved by the EU Commission.
9. Changes to This Agreement
We may update this Data Processing Agreement periodically. Any changes will be posted on this page with an updated “Last Updated” date.
10. Contact Us
If you have any questions about this Data Processing Agreement, please contact us at:
- Email: info@travelchina.co
- Website: www.travelchina.co