Privacy Policy

WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

- Company name: VOANDO VOU VIAXES S.L.

- Tax ID (CIF): B-13688437

- Address: Avenida de Peregrina No. 15, Bajo 5, 15220-Ames (A Coruña)

- Telephone: 881947225

As the data controller responsible for your personal data, we inform you that such data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on how we obtained your personal data via the website, we will process it confidentially to fulfill the following purposes:

- Processing of data collected via our email address or WhatsApp:

We process the information provided by interested parties in order to handle their requests and, where applicable, to send promotional communications, including by electronic means (Art. 6.1.b GDPR and Art. 6.1.a GDPR; Art. 21 LSSICE).

You may object to the sending of commercial information at any time by notifying us via email.

RETENTION OF YOUR PERSONAL DATA

We specify the retention periods based on the different data processing activities:

-Processing of data collected via our email address or WhatsApp: Data will be retained for the time necessary to resolve inquiries, provided the data subject does not request their deletion.

Your personal data will be retained for the periods stated above to fulfill the purpose of the processing or to comply with legal requirements regarding their custody; once no longer necessary for these purposes, they will be deleted using appropriate security measures to ensure data anonymization or complete destruction.

RECIPIENTS OF YOUR PERSONAL DATA

Your personal data will be kept under strict security measures that guarantee their confidentiality and safety. Your data will not be transferred to third parties unless communication is required with other tourism sector entities—strictly necessary for managing the tourism services contracted by the user—or if there is a legal obligation to do so.

The entities to which your data may be communicated include:

-Insurance Companies: For the formalization of insurance policies and coverage of risks associated with the contracted trip.

-Domestic and Foreign Suppliers: For the management and organization of the contracted trip.

-Airlines and Transport Companies: For the reservation, purchase, and sale of tickets.

-Hotel Establishments: For accommodation reservations.

INTERNATIONAL TRANSFERS

We may transfer your data internationally outside the European Economic Area when strictly necessary to manage the tourism services contracted by the user, and always subject to the contractual restrictions regarding confidentiality and data security contained in laws and regulations concerning personal data protection. Under no circumstances will your personal data be transferred to third parties not authorized to process them or who do not guarantee the full protection of your data.

PRINCIPLES APPLICABLE TO THE PROCESSING OF YOUR PERSONAL DATA

-Principle of lawfulness, fairness, and transparency: User consent will be required at all times, following fully transparent information regarding the purposes for which personal data is collected.

-Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.

-Principle of data minimization: The personal data collected will be limited to what is strictly necessary in relation to the purposes for which they are processed.

-Principle of accuracy: Personal data must be accurate and kept up to date.

-Principle of storage limitation: Personal data will only be kept in a form that allows for user identification for as long as is necessary for the purposes of processing.

-Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.

-Principle of accountability: The data controller is responsible for ensuring compliance with the aforementioned principles.

WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

As the data subject who has provided us with personal data, you have the full right to exercise the rights recognized by data protection regulations, in accordance with the provisions thereof.

Right of Access

The data subject has the right to request and obtain, free of charge, information regarding their personal data undergoing processing, the origin of said data, and any disclosures made or planned regarding such data. When the data subject submits the request by electronic means, and unless otherwise requested, the information shall be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.

Right to Restriction of Processing

The data subject shall have the right to obtain from the controller the restriction of data processing. Where the processing of personal data has been restricted, such data shall, with the exception of storage, only be processed with the data subject's consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of public interest. Any data subject who has obtained the restriction of processing shall be informed by the company before the restriction is lifted.

Right to Object

The data subject shall have the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them (based on public interest or legitimate interest), including profiling based on those provisions. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

In the event that any of their rights have been infringed, the data subject has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at Calle Jorge Juan No. 6, 28001-Madrid, or via the AEPD’s electronic office: http://www.aepd.es. CONTACT DETAILS FOR EXERCISING YOUR RIGHTS

- Company name: VOANDO VOU VIAXES S.L.

- Tax ID (CIF): B-13688437

- Address: Avenida de Peregrina No. 15, Bajo 5, 15220-Ames (A Coruña)

- Telephone: 881947225

- Email: reservas@voandovouviaxes.com

MANDATORY OR OPTIONAL NATURE OF INFORMATION PROVIDED BY THE USER

By submitting their data via WhatsApp, the user expressly, freely, and unequivocally accepts that their data is necessary for the data controller to process their request. The user guarantees that the personal data provided is accurate and assumes responsibility for communicating any changes to said data.

All data requested via the website is mandatory, as it is necessary to provide an optimal service to the user. Failure to provide all the requested data means there is no guarantee that the information and services provided will be fully tailored to the user's needs.

SECURITY MEASURES

The Data Controller guarantees the implementation of all appropriate technical and organizational policies to apply the security measures established in Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD), in order to protect the rights and freedoms of users and ensure they have been provided with the appropriate information to exercise them. Furthermore, we comply with the principles set out in Article 5 of the GDPR, whereby data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.