The Privacy Policy is part of the General Terms and Conditions governing this Website.
Who is responsible for processing your data?
You may contact us in any way you wish to do so.
We reserve the right to change or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any changes.
WEBSITE OR EMAIL CONTACTS
What data do we collect via the Website?
We may process your IP address, the operating system or browser you use, and even the length of your visit in an anonymous manner.
If you provide us with data on the contact form, you will be identified so that we can contact you if needed.
For what purposes will we process your personal data?
- To respond to your inquiries or requests.
- To manage the requested service or respond to or process your request.
- To provide information via electronic means concerning your request.
- To provide commercial or event information via electronic means, provided that you have expressly consented to this.
- To perform analyses and to make improvements to the Website and our products and services. To improve our commercial strategy.
What are the legal grounds for processing your data?
The acceptance and consent of the user: In cases where making a request requires filling in a form and clicking on the ‘send’ button, doing so will necessarily indicate that you have been informed and have expressly given your consent to the content of the clause attached to said form or to the acceptance of the privacy policy.
All of our forms have the * symbol next to mandatory fields. If you do not fill in these fields or do not check the box accepting the privacy policy, the information cannot be sent. It is usually worded as follows: ‘□ I am over 14 years old and have read and accept the Privacy Policy’.
NEWSLETTER CONTACTS
What data do we collect through the newsletter?
On the Website, you can subscribe to our newsletter by providing us with an email address to which it will be sent.
We will only store your email address in our database and will send you periodic emails until you unsubscribe or we stop sending emails.
You will always have the option to unsubscribe in all communications.
For what purposes will we process your personal data?
To manage the requested service.
To provide information via electronic means concerning your request.
To provide commercial or event information via electronic means, provided that you have expressly given consent.
To conduct analyses and to make improvements to how we send emails to improve our commercial strategy.
What are the legal grounds for processing your data?
The acceptance and consent of the user: When you subscribe, you will need to check a checkbox and click on the send button. This necessarily indicates that you have been informed and have expressly given your consent to receive the newsletter.
If you do not check the checkbox to accept the privacy policy, the information cannot be sent. It is usually worded as follows: ‘□ I am over 14 years old and have read and accept the Privacy Policy’.
SOCIAL MEDIA CONTACTS
For what purposes will we process your personal data?
- To respond to your inquiries or requests.
- To manage the requested service or respond to or process your request.
- To engage with you and to create a community of followers.
What are the legal grounds for processing your data?
The acceptance of a contractual relationship within the relevant social network and in accordance with its privacy policies:
Facebook – http://www.facebook.com/policy.php?ref=pf
Instagram – https://help.instagram.com/155833707900388
Twitter – http://twitter.com/privacy
Linkedin – http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest – https://about.pinterest.com/es/privacy-policy
Google* – http://www.google.com/intl/es/policies/privacy/
*(Google+ y Youtube)
How long will we keep your personal data?
We can only view or delete your data in a restricted manner if you have a specific profile. We will process your data for as long as you continue following us, remain friends, or click ‘like’, ‘follow’, or similar buttons.
Any corrections to your data or restrictions on information or posts must be made through your profile or user settings on the social network itself.
Do we include third parties’ personal data?
No, generally, we only process the data provided to us by the data subjects. If you provide us with third-party data, you must first inform those individuals and request their consent; otherwise, you exempt us from any liability for failing to comply with this requirement.
What about minors’ data?
We do not process data of minors under 14 years old. Thus, please refrain from providing data if you are under 14, or, where applicable, from providing data concerning third parties who are under said age. Turismo shall not be held liable for failure to comply with this provision.
Will we communicate via electronic means?
- We will only use them to handle your request, as long as it is one of the contact methods you have provided us.
- Any commercial communications we send you will have been previously and expressly authorised by you.
What security measures do we implement?
You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle and have implemented all technical means and measures at our disposal, in line with the state of technology, to prevent the loss, misuse, alteration, unauthorised access, and theft of Personal Data.
To whom will your data be disclosed?
Your data will not be shared with third parties, except for when required by law. Specifically, they will be disclosed to the Spanish Tax Agency (Agencia Estatal de la Administración Tributaria) and to banks and financial institutions for the purpose of collecting payment for the service provided or product purchased and to the data processors necessary for the execution of the agreement.
In the case of a purchase or payment, if you choose an application, website, platform, bank card, or any other online service, your data will be shared with that platform or processed within its environment, always with the utmost security.
When authorised by us, the web development and maintenance company, or the hosting provider, will have access to our website. They will have signed a service provision agreement that requires them to maintain the same level of privacy as us.
Any international data transfer when using US applications will be subject to the Privacy Shield framework, which ensures that US software companies comply with European data protection policies regarding privacy.
What are your rights?
- To know if we are processing your data.
- To access your personal data.
- To request the correction of your data if it is incorrect.
- To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
- To request the restriction of the processing of your data in certain instances, in which case we will only retain it in accordance with current regulations.
- To transfer your data, which will be provided to you in a structured, commonly used, and machine-readable format. If you prefer, we can send the data to the new data controller you designate. This can only be done in specific circumstances.
- To lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the competent supervisory authority if you believe that we have not handled your request properly.
- To withdraw your consent to any processing you previously agreed to, at any time.
If any of your data changes, please let us know so that we can keep them up to date.
Would you like a form to exercise your rights?
- We have forms for exercising your rights. You may request them by email or, if you prefer, you may use the ones provided by the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or third parties.
- These forms must be signed electronically or accompanied by a photocopy of your national identity card.
- If you are represented by someone else, you must attach a copy of their ID card or have them sign with their electronic signature.
- Forms may be submitted in person, sent by mail, or emailed to the address of the Data Controller at the beginning of this text.
How long will it take for us to reply to your request to exercise your rights?
It depends on the right, but we will respond within a maximum of one month from your request and two months if the matter is very complex and we notify you that we need more time.
Do we process cookies?
If we use cookies other than those that are strictly necessary, you can view them in our cookie policy.
How long will we keep your personal data?
- Personal data will be kept for as long as you continue to have a connection with us.
- Once there is no longer a connection, personal data processed for each purpose will be kept for the periods required by law, including any time during which a judge or court may request them, in line with the statute of limitations for legal claims.
- The processed data will be kept until the aforementioned legally required periods have passed. If there is a legal obligation to keep the data or no such period exists, they will be kept until the data subject requests their deletion or withdraws their consent.
- We will keep all information and communications regarding your purchase or the provision of our service for the duration of the product or service warranties to handle any possible claims.