This Privacy Policy explains how BYRD ehf (“BYRD”, “we”, “us”, or “our”) collects, uses and protects personal information when you use BYRD, including our mobile application, website and related services (the “Service”).
BYRD is designed to bring essential travel information and services together in one place. Depending on how you use BYRD, information may be provided directly by you, by the travel company arranging your journey, or generated through your use of the Service.
Information we collect
We may collect and process the following types of information.
Personal and account information
Name, email address, contact details and account information where applicable.
Travel and booking information
Information related to your journey, such as itineraries, flights, accommodation, activities, bookings, travel documents and other information provided by you or your travel provider.
Usage and device information
Device type, operating system, IP address, app screens viewed, timestamps and diagnostic information used to operate, secure and improve BYRD.
Location information
With your permission, BYRD may use location information to provide location-based features and relevant information during your journey. You can control location permissions through your device settings.
Communications
Information you provide when contacting BYRD, using support services, submitting feedback or interacting with features such as Ask BYRD.
How we use your information
We use personal information where necessary to provide and operate BYRD, including to:
- Deliver your itinerary, travel documents and journey information.
- Provide relevant travel information and services.
- Enable booking-related features.
- Provide real-time information and notifications.
- Enable maps and location-based features.
- Support Ask BYRD and other assistance features.
- Communicate important updates and support messages.
- Maintain the security and reliability of the Service.
- Understand how BYRD is used and improve the user experience.
- Comply with applicable legal and regulatory requirements.
Legal basis for processing
Where the General Data Protection Regulation (GDPR) applies, we process personal information on one or more appropriate legal bases, including:
- Performance of a contract or providing the Service requested.
- Your consent, where consent is required.
- Compliance with legal obligations.
- Our legitimate interests in operating, securing and improving BYRD, provided those interests do not override your rights and freedoms.
Where processing is based on consent, you may withdraw that consent at any time.
Travel companies and service providers
BYRD may receive travel information from travel agencies, DMCs, tour operators or other travel companies providing services related to your journey.
Depending on the service and relationship involved, those companies may act as independent data controllers or BYRD may process information on their behalf.
We may also share information with trusted service providers where necessary to operate BYRD or provide a service requested by you, including technology, hosting, analytics, communications, payment and travel-service providers.
We only share information necessary for the relevant purpose and do not sell your personal information.
Bookings and third-party services
BYRD may provide access to bookings, travel services and information supplied by third parties.
When you choose to use a third-party service, information necessary to complete or manage that service may be shared with the relevant provider.
Third-party providers may process your information under their own privacy policies and terms.
Data retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including providing the Service, maintaining appropriate business records and meeting legal, accounting or regulatory obligations.
Retention periods may vary depending on the type of information and the service involved.
Security
We use appropriate technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.
No electronic system or method of transmission can be guaranteed to be completely secure, but we continuously work to maintain appropriate safeguards for the information processed through BYRD.
Your rights
Depending on applicable law, you may have the right to:
- Access your personal information.
- Correct inaccurate or incomplete information.
- Request deletion of your information.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Request portability of certain personal information.
- Lodge a complaint with the relevant data protection authority.
To exercise your rights, contact us using the details below.
International data transfers
Some of the technology and service providers used by BYRD may process information outside Iceland or the European Economic Area.
Where personal information is transferred outside the EEA, we use appropriate safeguards as required by applicable data protection law, such as adequacy decisions or approved contractual safeguards.
Children’s privacy
BYRD may be used in connection with travel involving families and groups.
We do not knowingly require children to create independent accounts or provide personal information beyond what is necessary to deliver relevant travel services.
Where information relating to a child is processed, we take appropriate measures in accordance with applicable data protection laws and the circumstances of the service.
Cookies and similar technologies
Our website and certain parts of the Service may use cookies or similar technologies for essential functionality, security, analytics and improving the user experience.
Where required by law, non-essential cookies or tracking technologies are used only with appropriate consent.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to BYRD, our services or applicable legal requirements.
The latest version will always be available on our website and the “Last updated” date will indicate when the Policy was most recently revised.
Contact us
If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact us.
- Byrd ehf., Hörðalandi 4, 108 Reykjavík, Iceland
