WTM USA, INC.
Effective Date: 01-01-2025

1. Introduction

WTM USA, INC. is an independent travel advisory service that connects clients with third-party travel agencies. As part of our business operations, we facilitate communication and recommendations; however, we do not directly process, store, or manage personal data. All personal data handling, including collection, processing, and storage, is performed by the respective third-party travel agencies that provide the services.

2. Scope

This policy applies to the personal data that WTM USA, INC. transmits to third-party travel providers. It does not apply to the processing of personal data performed by the external travel agencies, which operate under their own GDPR-compliant policies.

3. WTM USA, INC.’s Role in Data Processing

WTM USA, INC.:

• Does not collect, store, or manage personal data beyond basic inquiries.
• Acts solely as an intermediary, assisting clients in finding suitable travel agencies.
• Relies on third-party travel agencies to process and manage personal data according to GDPR regulations.

4. Personal Data Handling Process

Since personal data is managed by third-party providers, WTM USA, INC.:

• Transfers inquiry details (name, contact information, travel preferences) to the relevant agency only with client consent.
• Ensures that all recommended agencies follow GDPR compliance standards.
• Does not store personal data after an inquiry is forwarded.

Clients should refer to the privacy policies of the chosen travel agency for information on data processing, storage, and protection measures.

5. Data Subject Rights

As WTM USA, INC. does not process personal data, clients should exercise their GDPR rights directly with the respective travel agency, including:

• Right to access: Request details of personal data collected by the agency.
• Right to rectification: Correct inaccurate personal information.
• Right to erasure: Request deletion of data under applicable GDPR conditions.
• Right to data portability: Obtain and transfer data to another provider.
• Right to object: Challenge the use of personal data for marketing or profiling.

6. Third-Party Data Processing Responsibility

WTM USA, INC. works exclusively with travel agencies that are obligated to comply with GDPR requirements. Personal data processing responsibilities, including security measures, retention periods, and data breach handling, fall under the respective agency’s legal obligations.

7. Data Protection and Security Measures

Although WTM USA, INC. does not store personal data, we implement security measures to protect information transmission, including:

• Secure channels for forwarding inquiries to travel agencies.
• Verification of GDPR compliance before recommending any travel service providers.
• Immediate disposal of inquiry data once forwarded to an agency.

8. Data Breach Responsibility

Since personal data is handled by third-party agencies, WTM USA, INC. is not responsible for potential data breaches within these agencies. Clients should report any privacy concerns directly to the agency responsible for processing their data.

9. Contact Information

For inquiries regarding GDPR compliance or third-party travel agency privacy policies, please contact us:

WTM USA, INC.
677 N. Washington Blvd. #57
Sarasota, FL 34236 U.S.A.
Email: info@worldtravelmaster.com
Phone: +36-30-9923190

This GDPR policy clarifies WTM USA, INC.’s intermediary role, ensuring that data protection responsibility falls on the third-party travel agencies that handle client information. If you need further refinements or additions, let me know!