Basic information regarding data protection
correYvuela Bot S.L. Corporate Tax ID B-66810078 with registered address at calle Sant Elies 29-35 Esc. B, 6º 1ª 08006 Barcelona
Purpose Of The Processing And Retention
The appropriate organisation and/or provision and/or dissemination of the services we offer via Facebook Messenger, Telegram, our App or via the chat website providing flight and hotel information and booking.
Conduct marketing via direct email for services similar to those purchased by you, unless you have opted not to accept said processing initially or in subsequent communications, to achieve the legitimate interests of promoting products and services in which you may reasonably be assumed to be interested.
The personal data supplied will be retained for so long as the data subject continues to have a contractual relationship with us and does not request the erasure for a period of 2 years from the most recent confirmation of his or her interest in maintaining the relationship with us.
Subsequently, the data will be erased in accordance with data protection regulations, which meant they will be blocked and will be available solely at the request of Judges and Courts of law, the Ombudsman’s Office, the Prosecution Service or the competent agencies of the Public Administration, during the statute of limitations period of the actions that may arise therefrom, and, once this period has elapsed, the data will be completely erased.
Legal Grounds That Justify The Processing
The grounds for processing your personal data is the performance of the contract and of the services provided by correYvuela Bot S.L., as well as the fulfilment of a legal obligation.
The processing for marketing purposes is also necessary to achieve the legitimate aim of the data controller of its commercial proposals. You may object to the data processing at any time by sending an email to: firstname.lastname@example.org
Providing personal data for these purposes is optional, but not providing said data will mean that it will not be possible to activate the Services requested.
Data Transfer Recipients
The personal data which is necessary to provide the service will be shared by our suppliers when so required for the activity, in which case you will be informed as to the recipients, the purpose and the period your data will be kept, and if this is required to comply with a legal obligation by the Department of Justice and the Spanish Data Protection Agency.
The full list of Data Processors may be obtained upon request from the Customer Service Department which can be contacted at: email@example.com
Transfer of personal data:
Some of your personal data may be shared with recipients that may be located outside the European Economic Area.
correYvuela guarantees that the processing of personal data by these recipients is conducted in accordance with the Regulation EU 2016/679 on Personal Data Protection. The transfers may be based on an adaptation decision or on the standard contractual clauses approved by the European Commission.
Rights Of Interested Parties
The data subjects have the right to exercise the rights to access, rectify or erase the personal data we collect, free of charge. They also have the right to restrict or object to the processing of their data at any time and to request the portability of the data by sending a written request to the Data Protection Officer of correYvuela Bot S.L. Via email to the address: firstname.lastname@example.org
Source Of The Data
The data we process have been supplied to us directly by you.
For further information, go to: https://www.aepd.es/
By means of this notice we inform you about our Personal Data Protection Policy, about how we treat your personal data when you use our services and about how you can give your express, voluntary, informed and conscious consent.
By means of the different sections of the CORREYVUELA BOT, S.L. website from where we collect your personal data, you are informed in accordance with EU Regulation 2016/679 (hereinafter: the “Regulation”), to be read by you before providing the requested data.
The information and data provided by you or acquired during your registration or enrolment in the services of CORREYVUELA, BOT. S.L. (e-mail address, identification data, DNI, date of birth, telephone number, postal address, or any other information required for the purpose of providing our services), will be treated in accordance with the rules of the Regulation and with the confidentiality obligations of CORREYVUELA BOT, S.L. Your personal data will be treated in accordance with the principles of legality, confidentiality, purpose and limits of data retention, data minimisation, correction, transparency, accuracy and integrity indicated in the Regulation.
1.- Data Controller and Data Protection Officer
The person responsible for data handing is CORREYVUELA BOT S.L. (hereinafter, correYvuela) with address at c/ Sant Elies 29-35 Esc. B, 6º 1ª 08006 Barcelona.
correYvuela has a Data Protection Officer (DPO), who is available for any information you may require regarding the processing of personal data. You can contact the DPO designated for this purpose by writing to email@example.com
2.- Handling of Personal Data.
“Handling of personal data” means any operation or set of operations carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
In particular, the Personal Data processed by correYvuela are the following:
2.1. Data provided by the interested party:
Personal data that you share with us when you open an account and use our services, or send messages to our Customer Service or via Live Chat. We will use personal data only and strictly to the extent necessary to fulfil your request.
When using the services of correYvuela, it may occur that personal data of third parties sent by you be processed. In this case, you must have authorisation from the person in question, assuming all legal obligations and liabilities. We may collect and use information of minors only if it has been provided by their parents or guardians or with their consent. Otherwise, we reserve the right to delete such information.
In this regard, you agree to hold correYvuela harmless in connection with any dispute, claim, request for compensation due to data handling that may reach correYvuela from third parties whose personal data have been handled through your use of our services, in violation of applicable regulations on personal data protection. In any case, if you provide or otherwise handle personal data of third parties when using the service, you guarantee that the handling always has an appropriate legal basis (such as the consent of the data subject) in accordance with the Regulation, which legitimises the handling of the information in question.
The personal data mentioned is requested when it is necessary for the proper fulfilment of the contract on our part and, in turn, so that we can observe our legal obligations. Without them, we may not be able to provide you with the services you request.
It is important that all personal data you provide when you register as a User or at any other time while using the Site or sending us an email or SMS message are correct and accurate.
2.2.- Browsing Data:
This is Personal Data the transmission of which is considered implicit in the use of Internet communication protocols that computer systems and software procedures use to operate the Site correYvuela. This information is not collected to be associated with identified or identifiable persons, but could, through processing and association with data held by third parties, allow users to be identified. This type of data may include: IP addresses, domain names of devices connecting to the Site, addresses in the Uniform Resource Identifier (URI), the time and method used to send the request to the server, the size of the file obtained in response, the response status code given by the server and other data on the operating system and the environment of the user’s device. The purpose is to have anonymous statistical information on the use of the Site, verify its operation, identify anomalies or abuses, and the data are erased after processing. The data may also be used to determine liability in the event of possible computer crimes against the Site or third parties.
2.3.- Interaction with social networks:
You can fill out the registration form through our Site to contract our Services, but you can also register for the Services if you have a profile, through Facebook, Telegram, Instagram, LinkedIn, Twitter, SMS (hereinafter SN). In these cases, the SN will automatically send to correYvuela some of your personal data, specified in the pop-up window that is displayed at the time of the request.
- Legal basis.
3.1.- To create and/or maintain the contractual relationship established for the provision of the Service requested by you in all its phases, as well as to send you information (by e-mail, telephone, SMS, SN) regarding the contractual relationship established.
3.2.- To observe the legal, regulatory and compliance requirements and respond to requests from Judges and Courts, the Ombudsman, the Public Prosecutor’s Office or the competent Public Administrations carrying out an investigation.
3.3.- To carry out statistical analyses in order to see how our Site or our services are used and to be able to measure the development of correYvuela’s business.
3.4.- According to our legitimate interest, for improvement of our Site, its functionalities and our services.
3.5.- According to our legitimate interest, to comply with our terms and conditions, protect our rights in case of dispute or claim.
3.6.- When permitted by law – unless expressly denied – to communicate promotions (by email, SMS or other electronic communication equivalent) relating to products and services similar to those you have purchased with us.
3.7.- With your prior consent, to send you (by e-mail, SMS or other equivalent electronic communication) offers on products and services that we think could interest you and that are marketed by us or our commercial partners in the following sectors: tourism, free time, leisure.
3.8.- To ensure the security of our Site and systems and to prevent or detect fraud, security incidents or other crimes.
3.9.- To customise marketing communications and on-line promotions that we offer you according to the information about how you use our Site, our products and services and other Sites collected through cookies.
4.- Data recipients.
4.1.- Our employees and/or authorised collaborators who provide assistance and consultancy services in the areas of administration, products, legal advice, Customer Service and computer systems, as well as those in charge of the maintenance of our network and hardware and software equipment, commercial consultants, professionals who provide legal auditing services or evaluate the value and capabilities of the business, when it is needed for a sale of our company or its goods.
4.2.- Our ancillary service providers who, as data processors, handle your personal data, such as customer service providers, computer technology and web hosting providers, analysis services.
4.3.- Airline companies, hotels, as well as any other third party who must receive your personal data to provide the requested service, who will act as the data controller.
We inform you that airlines are required by law in the United States of America and other states to notify customs and border authorities of access to personal data of passengers on their flights.
We may have to communicate the data collected on passengers included in the reservation to the competent authorities of the countries included in the customer’s travel itinerary if required by applicable law.
4.4.- Payment service providers and financial institutions in their capacity as data controllers, since correYvuela does not access the data that you disclose to these providers through their digital gateways.
4.5.- The social networks when you log on through these social networks.
4.6.- The competent authorities when they demand it from us in compliance with the regulations in force. Also in the event that we need to enforce our rights or those of a third party, we can communicate this to the authorities or security agencies.
4.7.- International data transmission
The personal data of Users and/or Clients of correYvuela are processed on AMAZON servers within the European Economic Area (EEA). Therefore, the processing of your data by these service providers does not have the condition of international transmission.
Reservations for services such as airlines and hotels are made through the communication of your data to those responsible for the corresponding data processing (through their gateways, platforms, forms) who may process your data outside the EEA in order to receive the services requested. It is recommended that prior to giving your consent to the processing of your data, you review their privacy policies.
5.- Data conservation period.
6.- Rights you can exercise and how to exercise them.
-. Right of access.
-. The right to receive information about the existence of your personal data and to obtain a copy.
-. The right to update, rectify and/or correct your personal data.
-. The right of suppression and the right of limitation.
-. The right to the portability of your personal data in a machine-readable, commonly used and structured format and to request us to transmit such data to another data controller.
-. The right to withdraw your consent unless we may have other legal grounds for processing such data.
-. The right to object at any time to the handling of your personal data in certain circumstances.
You may exercise the above rights by contacting us by e-mail at firstname.lastname@example.org
-. Direct marketing communications.
You may object at any time at email@example.com or by clicking on the “unsubscribe” link included in the communications we send you.
You have the right to file a complaint with the AEPD if you believe that your personal data has not been properly handled, although we recommend that you consult us beforehand through the DPO at the following address firstname.lastname@example.org.