1. Data Controller.
The personal data that you provide us will be processed by the entity Baleares Consignatarios Tours S.L.U., Ctra. Porto Pi, Núm. 8, planta 6, puerta C, 07015, Palma (Illes Balears), CIF: B-07915101, contact email address viajesalsa@alsa.es, Data Controller of the personal data provided through the website www.spaintransferservices.com.
2. Types of personal data processed.
In general, the company processes the personal data that the user provides when contracting our services, collecting the personal data of the buyer and/or the personal data of the traveler; either through the online data collection forms, call center and/or any sales channels enabled by the company.
However, on many occasions, our clients' personal data is provided by third parties such as travel agencies or other individuals who request or contract, on your behalf, the products and/or services that we offer through our different sales channels.
The categories of data processed are generally identifying data such as name, surname, ID, email, contact telephone number, payment data, purchase history, login data as a registered user, payment or card data or a PayPal account to make subsequent purchases quickly, connection data, geolocation and navigation (in case you interact with us from your mobile device).
The personal data required is necessary to be able to provide you with the contracted service and to serve you appropriately. If you do not provide the required data, the company will not be able to process your request since the required personal data is mandatory to be able to comply with our legal and/or contractual obligations.
If you interact with us through mobile devices, we will process connection, geolocation and navigation data under the terms established in this privacy policy. Likewise, if you use our online chat or through social networks, we will record your communication with us.
3. Purposes of processing personal data.
In general, the collection and processing of personal data has the following purposes:
A) Based on the contractual relationship:
i. To be able to contact the user to send status updates and communications about the contracted transport service.
ii. To respond to and appropriately manage queries, comments, incidents, complaints or suggestions submitted.
iii. To manage basic administration tasks.
iv. To respond to and appropriately manage requests for quotes sent to us through this means.
v. To satisfactorily manage the contracted services.
vi. To respond to and appropriately manage requests for issuing invoices received.
vii. Facilitate the use of other available features or services, such as access and use of the Wi-Fi network of our services.
viii. Manage payment through the Web if you choose the feature of saving your card details for future contracts.
B) Based on a legal obligation:
i. Comply with any legal obligations that apply to us, as well as communicate your personal data to the State Security Forces and Corps and other bodies with jurisdiction in the matter, when so required.
ii. In order to correctly manage emergency situations, catastrophes or cases of force majeure, it may be necessary to communicate your personal data to bodies or entities with jurisdiction in the matter.
C) Based on the consent of the interested party:
i. Comprehensive management of the registration process, administration and management of your user account (including when you decide to interact with us by registering with your profile on social networks).
ii. Keep you informed, either by electronic means or mobile devices (push notifications), or by any other means that has been provided and facilitated, of personalized offers and discounts from Baleares Consignatarios Tours S.L.U. or our partners that may be of interest to you.
We inform you that the consent granted for each treatment described may be revoked at any time without the withdrawal of consent affecting the legality of the treatment carried out previously. You may revoke consent by email to viajesalsa@alsa.es and/or by clicking on the "unsubscribe" button included in the commercial communication itself.
D) Based on the legitimate interest of Baleares Consignatarios Tours S.L.U.:
i. To respond to and appropriately manage queries, comments, incidents, complaints or suggestions submitted.
ii. To provide added services, improvements to our services and to the customer's experience when using the Website.
iii. Statistical analysis of visits to the Website and the behaviour of its Users on the Website. These data processing operations are carried out in an aggregated manner (that is, in a way that does not identify you) or, where appropriate, in a pseudo-anonymous manner.
iv. To appropriately manage navigation through this website.
v. To carry out analytical work and market studies on the contracted services.
These data processing operations are carried out in an aggregated manner (that is, in a way that does not identify you) or, where appropriate, in a pseudo-anonymous manner.
vi. In the event that you have given us your consent for Baleares Consignatarios Tours S.L.U. to process your data for marketing, promotional and/or advertising purposes, we will retain your purchase history and use details of the services you have previously purchased to suggest other services that we believe may also interest you.
vi. Control, analyse and manage risk situations, fraud or incidents in order to prevent potential fraud. If we consider that the operation may be fraudulent, this processing may result in blocking the transaction.
vii. Carry out quality actions and surveys aimed at finding out the level of satisfaction of our clients and users and detecting those areas in which we can improve.
We consider that we have a legitimate interest since the processing of this data is also beneficial for you as it allows us to serve you adequately, provide you with a better service that adapts to your needs, expectations and level of satisfaction as a customer, as well as to benefit and guarantee security in operations.
Regarding the processing of your data for marketing, promotional and/or advertising purposes, the interested party will be provided, together with the corresponding data collection form, with the appropriate, simple and free procedure so that they can freely give their consent for this purpose. The consent granted may be revoked at any time without the withdrawal of consent affecting the legality of the processing carried out previously. You may revoke consent by email to viajesalsa@alsa.es and/or by clicking on the “unsubscribe” button included in the commercial communication itself.
The processing of data for marketing, promotional and/or advertising purposes involves the analysis of your customer profile to determine your preferences and therefore which Baleares Consignatarios Tours S.L.U. products and services best fit your profile. To do this, we will use information that you provide us based on your purchase and browsing history. We consider that we have a legitimate interest in performing a customer profile analysis with the information we have about you (purchase history, browsing, preferences, etc.) and the personal data that you have provided us during the purchase or registration process on the website. We understand that the processing of this data is also beneficial for the user or customer by allowing you to improve your experience as a user and to be able to receive information about Baleares Consignatarios Tours S.L.U. products and services that best fit your preferences.
In relation to the sending of advertising, we expressly inform you that we do not make automated decisions that affect you.
We have carried out a weighing of interests and concluded that the company has a legitimate interest in adapting the strategy and commercial offer of Baleares Consignatarios Tours S.L.U. based on the information obtained from the transactions carried out in the different sales channels, as well as in obtaining information that allows us to understand the market in which Baleares Consignatarios Tours S.L.U. operates and its evolution, all with the aim of organizing resources in the most efficient way possible in the process of selling our services.
4. Legitimacy.
The legal bases that legitimize the indicated treatments are the execution of the vehicle rental contract with driver, the consent of the user, compliance with a legal obligation and the legitimate interest of Baleares Consignatarios Tours S.L.U. as set out in point 5.3. The analysis of the weighting of interests is also specified in point 5.3.
5. Recipients of personal data.
The recipients of the information provided will be BALEARES CONSIGNATARIOS TOURS S.L.U. as well as the companies that form part of its business organization for internal administrative purposes, in accordance with current legislation on data protection.
In order to fulfil the purposes set out in this Privacy Policy, we need to give access to your personal data to third parties who support us in the services we offer and which we detail below:
• Financial institutions
• Technology service providers
• Transport service providers.
The recipients of the information provided undertake to respect the confidentiality of the data provided and to use it for the purposes previously authorized.
The personal data of users will be communicated to the company that provides the service contracted by the user. This communication is essential in order to provide the contracted service based on our legal and contractual obligations.
International data transfers are not carried out. We work with external providers such as technology service providers or providers of services related to marketing and advertising, who are always required to work with servers located in the European Economic Area that guarantee an adequate level of protection in the processing of data. In the event that we work with external providers who do not offer the same level of protection because they are located outside the European Economic Area, they are required to provide adequate guarantees by subscribing to the corresponding Binding Corporate Rules (BCR) in accordance with current data protection regulations as a guarantee of the correct management of your personal data, as well as the subscription of Standard Contractual Clauses adopted by the European Commission.
6. Rights of interested parties.
The data subject may exercise their rights of access, rectification, erasure, and data portability, as well as the right to restrict and object to processing, and the right not to be subject to decisions based solely on automated processing of their data, where applicable, by contacting Baleares Consignatarios Tours S.L.U. through a request sent to our postal address: Baleares Consignatarios Tours S.L.U., Legal Advisory Department, Calle Josefa Valcárcel, 20, 28027, Madrid, specifying the right they wish to exercise. Likewise, any data subject has the right to obtain confirmation regarding the processing of their data by the company.
Any data subject may, at any time, in accordance with the provisions of the applicable data protection regulations, revoke the consent given, without such withdrawal affecting the lawfulness of processing carried out prior to its revocation.
The data subject has the right to file a complaint or claim with the Spanish Data Protection Agency (www.aepd.es).
The user shall, in any case, be responsible for the accuracy of the data provided, and Baleares Consignatarios Tours S.L.U. reserves the right to exclude from its services any user who has provided false data, without prejudice to any other legal actions that may apply. The user is responsible for communicating any modifications to the personal data provided.
7. Data retention period.
We only store users' personal data to the extent that we need it in order to be able to use it for the purpose for which it was collected, and according to the legal basis for its processing. We will keep the personal data as long as there is a contractual and/or commercial relationship with the user and as long as the user does not exercise the right to delete, cancel and/or limit the processing of personal data.
In these cases, we will keep the data duly blocked, without giving it any use, as long as it may be necessary for the exercise or defense of claims or some type of judicial, legal or contractual liability may arise from its processing, which must be addressed and for which its recovery is necessary.
BALEARES CONSIGNATARIOS TOURS S.L.U. will comply with the provisions of current regulations regarding the obligation to cancel personal information that is no longer necessary for the purpose or purposes for which it was collected, blocking it, in order to be able to meet possible liabilities arising from the processing of the data, and only during the limitation periods of said liabilities. Once said periods have elapsed, said information will be permanently deleted using secure methods.
8. Information we collect from visits to the website.
We collect and store limited personal information and anonymous global statistics from all users who visit our website, whether the user actively provides it to us or simply browses our website. The information we collect includes the Internet Protocol (IP) address of the device used by the user, the browser used, the operating system, the date and time of access, the Internet address of the website through which the user accesses it, and also information about how you use our website.
We use this information to find out how long it takes to load our website, how it is used, the number of visits, and the type of information that the user consults most. This information helps us to identify whether the website is working correctly, and if we detect any faults or errors in its operation, to fix them and improve the performance of our website, in order to offer a better service to all users.
In light of the above, we collect usage and browsing data for statistical and advertising purposes, to monitor the use of our website and to improve our knowledge of the User's interests.
9. Processing of data collected on Social Networks.
If you register as a user through social profiles, the company will process certain information associated with you. If you do not agree with the processing of the type of data we will collect, you should not continue the registration process with your social profile and you can choose to register via the traditional method by completing the form provided for this purpose.
The data from your social profile that you decide to share with BALEARES CONSIGNATARIOS TOURS S.L.U. will also be processed for the purpose of enriching our databases and creating/debugging commercial profiles in order to have a better and more detailed knowledge from a commercial point of view of individual users and as a group (needs, tastes, preferences, etc.) in order to design, plan and personalize our products and services and our commercial and marketing actions. Notwithstanding the above, we inform you that no automated decisions will be made based on said commercial profile.
If you expressly accept this during the registration process, your data will be used to send you personalized commercial communications, as explained in this Privacy Policy.
The categories of data that BALEARES CONSIGNATARIOS TOURS S.L.U. will obtain and process when you register as a user through a social profile are the following:
• “Public Profile” data (this category of data is mandatory): information that you have provided to the social network with which you wish to register on our website when you completed your social profile and specifically that section. It includes: name and surname, gender, user identifier on the social network (ID-account number), profile photo, cover photo and networks, age range, language and country.
• Other data from the social profile that you have decided to share with BALEARES CONSIGNATARIOS TOURS S.L.U. , for example, other contact information, images, personal characteristics, social circumstances, academic and professional data, employment details, etc.
• Data generated by the use of the social network that you have decided to share with BALEARES CONSIGNATARIOS TOURS S.L.U. , (for example likes and comments).
• Email (required)
The personal data marked as mandatory must necessarily be provided in order to complete the registration with your social profile. If you do not agree with this, you should not continue the registration process with your social profile and you can choose to register on our website via the traditional method by completing the form provided for this purpose.
We also inform you that we also use marketing tools from Facebook and Instagram when marketing our products and services. We use email addresses of customers who have agreed to receive commercial communications to find similar people in the Facebook and Instagram user base and target those new users with campaigns on the Facebook and Instagram platform. We also use the parameters offered by Facebook and Instagram to create audiences for marketing campaigns based on user data from those Social Networks. Facebook and Instagram offer possibilities for you to control the ads you see on their platform. You can configure your ad preferences on Facebook and Instagram. The data collected and processed by Facebook and Instagram are governed by their privacy policies, which you should always consult.
10. Minors.
The processing of data of minors under 14 years of age will require the consent of parents or guardians. Minors under 14 years of age must not send any personal information without the consent of their parent or guardian. BALEARES CONSIGNATARIOS TOURS S.L.U. is not responsible for any personal information sent by minors under 14 years of age without the appropriate authorization.
11. Security measures.
BALEARES CONSIGNATARIOS TOURS S.L.U. has adopted the levels of security for the protection of personal data required by current regulations, depending on the type of information processed, and has implemented other additional technical means and measures within its reach to prevent unauthorized alteration, loss, processing or access to the personal data provided. BALEARES CONSIGNATARIOS TOURS S.L.U. guarantees that it has adopted the appropriate security measures to guarantee the security of the information and the confidentiality of the data that you send us over the Internet. To do this, we use Secure Socket Layer (SSL) security technology, a system that allows the encryption of the information you send us, preventing it from being read even if it is intercepted inappropriately. The BALEARES CONSIGNATARIOS TOURS S.L.U. server is certified, so that your browser can confirm the identity of BALEARES CONSIGNATARIOS TOURS S.L.U. before any transmission is sent. This certificate guarantees the identity of the destination computer to which your data is being sent. You can recognize that SSL security is operational by the appearance of a padlock icon at the bottom edge of most browsers. If you click on this icon, the certificate associated with the security connection will appear. Notwithstanding the above, the user must be aware that security measures on the Internet are not impregnable.
12. Cookies.
Access to this website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that can be used later. This information allows us to identify you as a specific user and to save your personal preferences, as well as technical information such as visits or specific pages you visit.
Users who do not wish to receive cookies or want to be informed before they are stored on their computer can configure their browser to this effect. For more information, see our Cookies Policy.