| Supplier Name |
Location |
Transfer mechanism |
Service |
| Capita India |
India |
UK Capita internal business processing agreement |
Visa applications |
| CMAC |
UK |
UK GDPR |
Taxi service provider |
| Concur |
EU Cloud (service dependent) |
UK GDPR |
Online booking tool |
| Conferma |
UK |
UK GDPR |
Hotel booking and payment card delivery technologies |
| Cvent |
EEA |
UK GDPR |
Event booking platform, website creation and delegate registration |
| Evolvi |
UKk |
UK GDPR |
Rail booking platform |
| Freshworks |
Germany |
UK GDPR |
Contact management and support ticketing solution |
| Holiday Extras |
UK |
UK GDPR |
Solution for booking airport parking, lounge, fast track services |
| Microsoft Azure |
EU West |
UK GDPR |
Cloud supplier for platform as a service for hosting provision |
| Mimecast |
UK |
UK GDPR |
Email virus scanning and email signature management |
| Safe computing |
UK |
UK GDPR |
Finance solution |
| Trainline |
UK |
UK GDPR |
Rail booking platform |
| Travelport |
UK (US-based datacentre) |
UK GDPR (Travelport UK complete onward transfers to Travelport US via an intracompany agreement) |
Travel content provider |
| Umbrella |
Switzerland |
UK GDPR |
Traveller profiles |
| Unlocked Data |
UK |
UK GDPR |
Data analytics |
| Vibe Systems |
UK |
UK GDPR |
Online booking tool |
Technology sub-processors are third-party businesses engaged to provide supporting functions, which enable us to deliver travel and event services to our customers.
We've put contractual obligations in place with our sub-processors to establish ongoing data protection requirements. They are also subjected to annual information security reviews to make sure that appropriate technical and organisational measures are in place. Where cross border transfers occur, we have put in place the appropriate transfer mechanisms to safeguard the transfers.
We may use the technology sub-processors (listed below), to assist in providing contracted services to our customers, the data controllers.