Last updated: October 7, 2026
Aura-voyage is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals whose personal data we process. This page outlines how we meet GDPR requirements and how you can exercise your rights.
For the purposes of GDPR, the data controller is:
Aura-voyage
42 Donegall Quay
Belfast BT1 3EG
United Kingdom
Email: dataprotection@aura-voyage.com
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
You can request that we correct any inaccurate or incomplete personal data we hold about you.
You can request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.
You can request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You can object to the processing of your personal data in certain circumstances, particularly when we process data based on legitimate interests.
You have the right not to be subject to decisions based solely on automated processing that significantly affects you. We do not currently engage in automated decision-making.
To exercise any of your GDPR rights, please contact us using the following methods:
Please include sufficient information to allow us to verify your identity and specify which right you wish to exercise.
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
We process data primarily within the United Kingdom. If we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
When we engage third-party service providers to process personal data on our behalf, we ensure they are bound by appropriate data processing agreements that comply with GDPR requirements.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk
We regularly review and update our data protection practices to ensure ongoing compliance with GDPR. Any significant changes will be communicated through our website and, where appropriate, directly to affected individuals.