If you use the Sites or Services, you may voluntarily submit to Onyx certain personal information including without limitation your name, IATA number, address, telephone number, and e-mail address (“Personal Information”). If you sign up for electronic deposits from Oynx, this Personal Information will include your bank information and your account number. Onyx may use such Personal Information to provide the Services to you, to respond to your requests, and for related business purposes. From time to time, Onyx may refer to Personal Information to better understand its customers’ needs and how Onyx can improve the Sites and Services. Onyx may also enhance or merge Personal Information with data obtained from third parties for the same purposes. Onyx may use Personal Information to email you about our current or upcoming products and services and other promotional information that may interest you.
If you provide Onyx any Personal Information about other people, you represent and warrant that you have any and all necessary permissions and rights to submit any such third party Personal Information to Onyx for the uses permitted hereunder.
Customers who contract with Onyx for the Services may provide Onyx with Personal Information of third party travelers, guests, and other individuals (“Guest Data”). In this context, the customer is the “data controller” and Onyx is the “data processor,” as those terms are used in applicable law regarding data and privacy rights. Onyx only processes such Personal Information in accordance with the applicable customer contract, for purposes of providing the Services.
Information Regarding Children
The Sites and Services are not intended to be used by anyone under 18 years old, and Onyx does not knowingly collect information regarding any individuals under 18 years old. If Onyx discovers that it has information regarding such individuals, it will promptly take reasonable steps to delete such information.
Correction and “Opt Out” Procedures
To access, review, or update your Personal Information, you may do so by visiting your account or profile page (if applicable) or by contacting Onyx directly. Onyx also offers the opportunity to opt-out of whether your Personal Information may be aggregated, or used for a purpose other than the purpose for which it was originally collected or subsequently authorized by you. To request such access, update, or opt-out, please email Onyx at firstname.lastname@example.org. To stop receiving promotional emails, follow the unsubscribe or opt-out instructions in the email and we will take reasonable measures to promptly process your request. For third party Personal Information provided by our customers in our role as a data processors, we may have to refer your questions or requests to the applicable customer who is the data controller.
Onyx uses Guest Data only as instructed by the applicable customer who is the data controller for such Guest Data, and will not use or disclose such Guest Data except as necessary to fulfill such instructions and provide the relevant Services.
Disclosure to Others
Onyx will not sell or rent your Personal Information to third parties for their own marketing or other business uses.
Disclosure By Law
In rare circumstances where national, state, or company security is at issue, Onyx reserves the right to share Personal Information with the appropriate governmental authorities. You understand and agree that Onyx may disclose your Personal Information if required to by the order of any court or similar tribunal or any other governmental body or agency of appropriate jurisdiction, or if Onyx, in Onyx’s sole discretion, believe that the disclosure of some or all of such information is warranted to protect the rights, property, or safety of Onyx or a third party, or to comply with any applicable laws.
Onyx may aggregate and de-identify databases containing Personal Information to derive non-personally identifiable data sets, and Onyx or its systems may automatically collect technical, non-personal information from you or your devices used to access the Sites or Services (including without limitation information about the user’s device, operative system, browser, page views, or clicks). Any non-personal data derived or collected by Onyx may be used by Onyx or disclosed to non-agent third parties by Onyx for any purpose whatsoever.
Onyx uses appropriate and reasonable, market-accepted, security measures to help protect information from unauthorized access and disclosure by or to other individuals or third parties. Onyx takes protecting information very seriously; however, no system can be considered entirely secure. Therefore, you should not expect, and Onyx does not warrant or guarantee, that your information will remain protected and private.
Onyx further commits to cooperate with the panel established by the EU data protection authorities (DPAs) and/or the Swiss Federal Data Protection and Information Commissioner, and comply with the advice given by the panel and/or Commissioner, with regard to data transferred from the EU and/or Switzerland. EU and Swiss residents may, under certain conditions, invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. For more information, see Annex I: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
Onyx may be liable for onward transfers of Personal Information from the EU or Switzerland to third parties. The Federal Trade Commission has jurisdiction over Onyx’s compliance with the Privacy Shield.