Privacy Policy & GDPR Standards.
We hold your personal data with utmost discretion. Passport details required for China High-Speed rail and National Park ticketing are transmitted via TLS encryption and purged post-trip.
1. Data Controller & Contact
ChinaTravelSky operates as the primary data controller for personal information collected via chinatravelsky.com. For questions regarding data processing or to exercise your GDPR rights, contact our Data Protection desk at [email protected].
2. Why We Collect Passport Information
Under Chinese national law, real-name registration is mandatory for:
- High-speed bullet train electronic ticket issuance (12306 National Railway system);
- Forbidden City (Palace Museum) and National Park entry permits;
- Tourist hotel check-in registration with local public security bureaus.
Passport numbers, full legal names, and dates of birth are collected solely to issue these mandatory tickets. We never sell, lease, or share your information with commercial marketing brokers or third parties.
3. Automatic 30-Day Post-Tour Data Purge
Passport copies and sensitive identity documents transmitted to our ticketing team are stored in encrypted, access-restricted vaults and are automatically permanently purged thirty (30) days following the conclusion of your tour, retaining only basic financial invoice records as required by international accounting standards.
4. Cookie Preferences & Web Analytics
We utilize essential cookies to remember your preferred language selection (/es/, /fr/, etc.) and privacy choices. Analytical cookies (Google Analytics 4) are configured with IP Anonymization to evaluate website traffic trends without tracking identifiable personal behavior across third-party websites.
You may adjust or withdraw your cookie consent at any time via the cookie settings banner or your browser preferences.
5. Your Rights Under EU GDPR
If you reside in the European Union or United Kingdom, you have the right to:
- Access: Request a copy of the personal data held about you;
- Rectification: Request correction of inaccurate travel information;
- Erasure: Request the deletion of your personal contact records ('Right to be Forgotten');
- Restriction & Objection: Object to specific data processing or withdraw consent at any time.
Request Immediate Personal Data Deletion
Your privacy is inviolable. Contact our compliance desk to review or immediately delete any passport copies or travel preferences on file.