Privacy Policy

1. Information for the user

Who is the controller of your personal data?

Conecta Turismo S.L. acts as the controller of personal data in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December on Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Why do we process your personal data?

Data is processed to maintain a commercial relationship through the following operations:

• Sending commercial and advertising communications by email, SMS, MMS, social media or other means relating to our own products and services or those of partners with whom we have a promotion agreement
• Carrying out market research and statistical analysis
• Handling orders and requests, and answering user enquiries
• Sending the newsletter with news, offers and promotions

On what grounds may we process your personal data?

Article 6 of the GDPR provides the legal basis for processing as follows:

• User consent: for commercial communications and the newsletter
• Legitimate interest: for market research, statistical analysis and the handling of requests

How long will we keep your personal data?

Data is kept only for as long as necessary to fulfil the purposes of the processing or while there are legal retention obligations. It is then deleted using security measures that guarantee its anonymisation or complete destruction.

Who do we share your personal data with?

Data is not disclosed to third parties except where necessary to fulfil the purposes of the processing. In such cases, we work with communications service providers under confidentiality and data processing agreements in accordance with current legislation.

What are your rights?

The user has the following rights:

• To withdraw consent at any time
• To access, rectify, port and erase data
• To restrict or object to processing
• To lodge a complaint with the supervisory authority (www.aepd.es)

Contact details for exercising your rights

2. Mandatory or optional nature of the information

By ticking the relevant boxes, users accept that the data marked with an asterisk (*) is required to deal with their request, and that the rest is optional. Each user guarantees that the data provided is accurate and undertakes to report any changes.

All the data requested is necessary to provide an optimal service. If it is not provided in full, we cannot guarantee that the information and services will be fully tailored to the user's needs.

3. Security measures

Conecta Turismo S.L. complies with the provisions of the GDPR and the LOPDGDD, applying the principles of Article 5 of the GDPR: lawfulness, fairness, transparency, adequacy, relevance and limitation to what is necessary.

Appropriate technical and organisational policies, as established by the GDPR and the LOPDGDD, have been implemented to protect the rights and freedoms of users.