Effective Date: 14 May 2025
Rawfares.com, operated by Reservation Centre LLC, values the privacy of individuals located in the European Economic Area (“EEA”). This notice outlines how we collect as well as use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) 2016/679.
GDPR Privacy Notice
The GDPR privacy notice (this “Notice”), which encompasses both this “General GDPR Notice” and the “Sales GDPR Notice,” is included in our Privacy Policy and applies to the ‘personal data,’ as defined in the General Data Protection Regulation (the “GDPR”), of natural persons located in the European Economic Area or UK processed by Reservation Centre LLC (collectively, for simplicity, “EEA Individuals,” “you,” or “your”).
Any capitalized terms or other terms not defined herein shall have the meaning ascribed to them in the Privacy Policy or, if not defined herein or in the Privacy Policy, the GDPR. To the extent of any conflict between this Notice and the rest of our Privacy Policy, this Notice shall control only with respect to EEA Individuals and their personal data. Please see our Privacy Policy here if you are located elsewhere.
Controller Details
Reservation Centre LLC, operating Rawfares.com, is the controller of personal data collected regarding EEA Individuals through the website, mobile applications, contact centers, or other services provided (collectively, the “Services”).
This Notice outlines our general privacy and security practices regarding your personal data and explains how we collect, use, and protect such information in compliance with the GDPR.
Data Storage
Reservation Centre LLC, stores EEA Individuals’ personal data in its U.S. data centers. You acknowledge that your personal data may be transferred to as well as processed and stored in the United States, which may have different data protection laws than your country of residence by using our services.
Data Transfer
We are self-certified under the EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework. You may have specific rights in relation to these frameworks (see the Data Privacy Framework section below). In the event that any of these frameworks are invalidated as a valid data transfer mechanism, Rawfares will rely on Standard Contractual Clauses to ensure appropriate safeguards for transferring personal data to the United States.
Transfers of personal data to non EEA travel suppliers for the purpose of fulfilling your bookings or purchases (such as flights, hotels, or car rentals) may also be based on the following GDPR Article 49 derogations, as applicable:
- Performance of a contract: When necessary for the performance of a contract between you and Rawfares, or to implement pre contractual measures at your request (Article 49(1)(b)).
- In the interest of the data subject: When necessary for the conclusion or performance of a contract concluded in your interest between Rawfares.com and another natural or legal person (Article 49(1)(c)).
Sales and Marketing
Please refer to our Sales GDPR Notice here for information regarding how Rawfares.com uses personal data for sales as well as marketing and promotional activities. This notice provides details on the types of personal data we process for marketing purposes along with the legal bases for processing and your rights in relation to receiving or opting out of marketing communications.
Data Retention
We retain your personal data for as long as necessary to support our relationship with you, provide and improve our Services, and comply with applicable legal obligations. The factors used to determine retention periods include:
- Account Activity: Whether you have an active Rawfares.com account, how often you make bookings, log in, or hold loyalty points or gift cards.
- Service Improvement: The need to analyze historical travel and booking trends to provide the most relevant deals and offers.
- Marketing Interactions: Whether you have opted in for marketing communications and your engagement with such communications.
- Security & Fraud Prevention: Personal data needed to protect the integrity of our Services, including cybersecurity and fraud detection measures.
- Transaction Support: Information required to handle the transaction, like refunds and chargebacks, cancellations, customer service questions and disputes, and keep the records associated with it.
- Legal & Regulatory Compliance: Data retention that is mandated by law, such as record keeping and statutes of limitation.
- Legal Claims: Data reasonably required in the exercise of the legal claim and defense or enforcement of legal claims, regulatory inquiry, or proceedings of this sort.
Rawfares.com regularly reviews retention periods to ensure they remain necessary, proportional, and aligned with our operational and legal obligations.
Information Security
Reservation Centre LLC takes the protection of your personal data seriously and develops various technical and organizational strategies to guarantee its safety. These will help to avoid unauthorized access to it and also identify possible threats and protect against cyberattacks or other crimes that will compromise our systems or your information.
Key security practices include:
- Encryption: All sensitive payment information, such as credit card details, is encrypted using Secure Sockets Layer technology to protect data during transmission.
- Industry Standards Compliance: To maintain a secure infrastructure, we adhere to recognized security standards and frameworks, including PCI-DSS for payment data and generally accepted industry practices like ISO 27001.
- System Monitoring: Rawfares logs technical information such as your IP address, requested page, time of access, referrer URL, browser type and request status (404 errors). This data helps monitor website and app performance, prevent system downtime, and detect or mitigate malicious activity.
- Fraud Prevention: Security monitoring also enables the identification and prevention of potential fraud, unauthorized access, or other threats to the integrity of our Services.
While we take these measures seriously, no system is completely immune to breaches. Users are encouraged to safeguard their account credentials and immediately report any suspicious activity.
Governmental Access Requests
Reservation Centre LLC may be required to disclose personal data in response to lawful requests from public authorities, including for purposes related to national security as well as law enforcement or other legal obligations.
We may provide personal information to government agencies or other third parties when compelled by law, regulation, or legal process, including but not limited to court orders, subpoenas, or similar requests.
Whenever legally permissible, Rawfares will seek to notify users of any governmental request for access to their personal data or provide transparency about the request.
Corporate Restructuring
In the event of a merger as well as reorganization, dissolution or similar corporate event, or the sale of all or substantially all of Rawfares assets, the personal data we have collected may be transferred to the surviving or acquiring entity.
Any such transfer will remain subject to Rawfares.com’s commitments regarding the privacy and confidentiality of personal data as outlined in our Privacy Policy.
Your GDPR Rights
You have the right to:
- Ask us to share your personal information and provide you with a copy of it.
- Ask for correction or updating of your personal information in case of inaccuracy or incompleteness.
- Ask to have your personal data erased, in accordance with your legal requirements.
- Stop the processing of your personal data for specific purposes, and such direct marketing is one of them.
- Ask to have your personal information limited in its handling in certain situations.
- Ask to receive a copy of your personal data, or to have it sent to someone else who is also a controller of data, in structured, commonly used and machine readable format.
We request you to use the subject GDPR Notice and address us at support@rawfares.com to request any of these rights.
Objecting to Legitimate Interest / Direct Marketing
You may object to the processing of your personal data by Reservation Centre LLC, where such processing is based on our legitimate interest. If you do so, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing or if it is necessary for the establishment, exercise, or defense of legal claims.
You may also object at any time to the use of your personal data for direct marketing purposes. If you do, your personal data will no longer be used for such marketing. For email marketing or similar channels (e.g., push notifications), you can exercise this right directly through the ‘Unsubscribe’ link or your device settings. You may also contact us at support@rawfares.com with the subject line: “GDPR Notice” to exercise this right.
Please note that opting out of direct marketing will not prevent Rawfares.com from sending you important administrative messages, such as booking confirmations or service updates, which are necessary for providing our services.
Right to Lodge a GDPR Complaint
In accordance with GDPR Article 77, you have the right to lodge a complaint regarding Reservation Centre LLC, processing of your personal data with a competent supervisory authority. This may be in the EU member state of your habitual residence, your place of work, or the location where an alleged GDPR infringement occurred, as applicable.
Additionally, where applicable, you may exercise any third-party beneficiary rights under Reservation Centre LLC, Standard Contractual Clauses for data transfers.
For contact information for EU data protection authorities, please visit:
EU Data Protection Authorities
Use of Our Services by Minors
Reservation Centre LLC, services are not directed to individuals under the age of eighteen (18). We request that minors do not provide any personal data to Reservation Centre LLC through our websites, apps, or any other means.
Updates to this Notice
If, in the future, we intend to process your personal data for a purpose other than the purpose for which it was originally collected. We will provide you with information about that purpose and any other relevant details at a reasonable time before such processing occurs. Following this, the relevant information regarding the new processing activity will be revised or added to this Privacy Policy or other related notices, and the Effective Date at the top of the page will be updated accordingly.
Data Privacy Framework
Note: This Data Privacy Framework section applies only to personal data processed pursuant to the EU-US Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively, the “DPF”).
Important Notice for Individuals of the European Economic Area and Switzerland
The Reservation Centre LLC meets the DPF requirements as provided by the U.S. Department of Commerce. Rawfares.com is a certified company by the U.S. Department of Commerce that complies with the EU-U.S. DPF Principles with regard to the processing of personal data received by the company concerning the European Union in reliance on the EU-U.S. DPF, and about the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.
Rawfares.com has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the policies in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification page, please visit https://www.dataprivacyframework.gov/.
Reservation Centre LLC is subject to the investigatory and enforcement powers of the Federal Trade Commission (“FTC”).
EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF Complaints
In compliance with the DPF Principles, Rawfares.com commits to resolving complaints about your privacy and our collection or use of your personal data transferred to the United States pursuant to the DPF Principles. Individuals located in the European Union, United Kingdom, or Switzerland with inquiries or complaints regarding this Privacy Policy should first contact Rawfares.com at support@rawfares.com with the subject line, “Data Privacy Framework.”
We have further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, the JAMS Alternative Dispute Resolution (ADR) under the Data Privacy Framework. Located in the United States, JAMS is the world’s largest private ADR provider. If you do not receive a timely acknowledgment of your complaint or if your complaint is not satisfactorily addressed, please visit https://www.jamsadr.com/submit/ for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for residual claims not resolved by other redress mechanisms. For more information, see Data Privacy Framework Annex 1 at https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.
Onward Transfer to Third Parties
Like many businesses, we hire other companies to perform certain business-related services. We may disclose personal data to certain types of third-party companies, but only to the extent needed to enable them to provide these services on our behalf as our “agents” (as defined under the Data Privacy Framework, DPF).
The types of companies that may receive personal data and their functions include: hosting services, technical assistance, database management/back-up services, information security and fraud detection services, analytics and marketing providers, and contact centers. All such third parties act as our agents, performing services at our instruction and on our behalf pursuant to contracts requiring them to provide at least the same level of privacy protection as implemented by Rawfares.com, and to notify us if they are unable to maintain such protections. We will take reasonable remedial steps in such cases.
We may also disclose personal data to our affiliates to support marketing, sales and delivery of services or other business operations as described in this Privacy Policy. We may be required to disclose personal data in response to lawful requests by public authorities, including for national security or law enforcement purposes.
Reservation Centre LLC remains responsible and liable under the DPF Principles if third-party agents process personal data in a manner inconsistent with the Principles, unless we can demonstrate that we are not responsible for the event causing the issue.
Opt-In and Opt-Out for Certain Onward Transfers
Individuals have the opportunity to opt out of sharing their personal data with third parties other than our agents, or before we use it for purposes other than those originally collected or authorized. To limit the use or disclosure of your personal data, submit a written request to support@rawfares.com, with the subject line “Data Privacy Framework.”
We will not disclose your sensitive personal data to any third party without first obtaining your opt-in consent. You may provide consent by sending an email to support@rawfares.com.
Please allow a reasonable time for Rawfares.com to process your request.
Your DPF Rights
We will confirm whether we are processing your personal data under the DPF and provide access to such data within a reasonable time upon request to support@rawfares.com with the subject line Data Privacy Framework.
You have the right to access as well as correct, amend or delete personal data processed under the DPF where it is inaccurate or processed in violation of our privacy disclosures, except where:
- The burden or expense of providing access is disproportionate to the privacy risk, or
- The rights of others would be violated.
We may charge a reasonable fee to cover expenses for processing your request. Please allow a reasonable time for us to respond.
Retention of Personal Data
We retain personal data processed under the DPF in a form that identifies you, in accordance with our general retention policy. Personal data may be processed for longer periods if reasonably necessary for purposes such as:
- Archiving in the public interest,
- Journalism, literature, and art,
- Scientific or historical research,
- Statistical analysis.
After such periods, we may delete the data or retain it in a de-identified form.
How We Protect Your Data
Reservation Centre LLC takes the security and privacy of personal data very seriously. We implement reasonable and appropriate security measures to protect your personal data from loss as well as misuse, unauthorized access, disclosure, alteration and destruction, in compliance with applicable laws and regulations.
Contacting Us
If you have any questions regarding our privacy practices or your personal data, please contact us via email at support@rawfares.com with the subject line “GDPR Notice”
Email communications are not always secure. Please do not include credit card or other sensitive information in your emails to us.
