Basic information on data protection

Data controller

correYvuela Bot S.L. Tax ID number ES-B66810078 with business address at Carrer Sant Elies 29-35 Esc. B, 6º 1ª 08006 Barcelona

Purpose of processing and storage

Proper organisation and/or provision and/or dissemination of the services we offer via Facebook Messenger, Telegram, our app or the information web chat and booking of flights and hotels.

To carry out direct email marketing regarding services similar to those you commissioned, unless you oppose to said processing initially or in following communications, to pursue the legitimate interest of promoting products and services you may reasonably be interested in.

The personal data provided will be stored for as long as the data subject is tied to us through a contractual relationship and does not request the data be deleted, and for 2 years from the latest confirmation of their interest to remain with us.

After that, the data will be deleted in accordance with the provisions of the data protection regulation, which implies blocking the data so it is only available to the Courts, Spanish Ombudsman, Tax Ministry or competent Public Administrations until the state of limitations runs out for any actions that may stem from the data and, after this period, it will be eliminated completely.

Lawful basis for processing

The lawful basis for processing your personal data is the performance of the contract and provision of services by correYvuela Bot S.L., as well as fulfilment of a legal obligation.

Additionally, processing for marketing purposes is necessary for the legitimate commercial purposes of the data controller. You may oppose to the processing by contacting us by email at

Providing personal data for these purposes is optional, but not providing it may make it impossible to activate the services requested.

Recipients of communications or disclosures

The personal data needed to provide the service will be shared with our suppliers when the activity requires it, in which case data subjects will be notified of the recipients, purpose and term of safekeeping of their data; and when it is required to fulfil a legal obligation by the Judiciary or the Spanish Data Protection Agency.

The full list of Data Processors is available upon request addressed to the Customer Service Department at

Communication of personal data:

Some of your personal data may be shared with recipients outside of the European Economic Area.

correYvuela ensures that the data processing carried out by these recipients is done in compliance with Regulation (EU) 2016/679 on the protection of personal data. Communications may be based on a ruling or the standard contract clauses approved by the European Commission.

Rights of data subjects

Data subjects have the right to freely exercise their rights to access, rectification or erasure of the personal data we compile. They also have the right to request limitation or oppose to the processing of their personal data at any time, and to request the portability of their data, in writing to the correYvuela Bot S.L. Data Protection Officer at the following email address:

Origin of data

The data we process has been provided directly by the data subject.

Additional information

More detailed information on Data Protection is available at


By means of this notification, we hereby inform you of our Data Protection Policy, of how we process your personal data when you use our services and of how you can grant your express, voluntary, informed, aware consent.

By means of the various sections of the CORREYVUELA BOT, S.L. website from which we compile your personal data, you will be informed of the fulfilment with Regulation (EU) 2016/679 (hereinafter: the “Regulation”), for you to read before providing the data requested.

The information and data you provide or that is acquired through the registration process or by signing up for the services of CORREYVUELA, BOT S.L. (email address, personal details, ID number, date of birth, phone number, post address or any others required to provide our services), will be processed according to the provisions of the Regulation and the confidentiality obligations of CORREYVUELA BOT, S.L. Your personal data will be processed in accordance with the principles of lawfulness, fairness and transparency; purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability established in the Regulation.

1.- Data Controller and Data Protection Officer

The Data Controller is CORREYVUELA BOT S.L. (hereinafter correYvuela) with business address at c/ Sant Elies 29-35 Esc. B, 6º 1ª 08006 Barcelona.

correYvuela has a Data Protection Office (DPO), who is available for any information regarding the
processing of personal data that you may require. You can contact the DPO in writing to

2.- Processing of Personal Data.

“Processing of personal data” shall be understood as any operation or series of operations carried out with or without the help of automated processes and applied to personal data or groupings of personal data, just as compiling, logging, organising, structuring, storing, adapting or modifying, extracting, consulting, using, communicating through transfer, dissemination or any other sort of disclosure, comparing or contrasting, limiting, cancelling or destroying.

Specifically, the Personal Data that will be processed by correYvuela is as follows:

2.1. Data provided by the subject:

The personal data you share with us when you open an account and use our services, or send messages to our Customer Service or the Live Chat. We will use your personal data solely and exclusively to the extent necessary to fulfil your request.

In using correYvuela services, the data of third parties sent to us by you may be processed. In this case, you must have consent from the data subject(s) in question and you must assume all legal liabilities and obligations. We may collect and use information from minors only when provided by their parents or guardians, or with their consent. Otherwise, we reserve the right to eliminate it.

In this regard, you undertake to hold correYvuela harmless in any dispute, claim or request for compensation for damages stemming from processing that may reach correYvuela from third parties whose personal data has been processed as a result of the use you have made of our services, infringing on applicable laws and regulations on the protection of personal data. In any case, if you provide or in any other way process the personal data of third parties in using the service, you guarantee that the processing always has an appropriate lawful basis (such as consent from the data subject) in accordance with the Regulation, which makes the processing of the information in question lawful.

The personal data mentioned shall be requested when necessary for you to properly fulfil the contract and, at the same time, so we can fulfil our legal obligations. Without it, it could be impossible for us to provide the services you are requesting.

It is important for all personal data you provide in registering as a User or at any other time when you are using the Website or sending us emails or SMS messages to be correct and accurate.

2.2.- Browsing Data:

This is the Personal Data transferred as an implicit part of using the Internet communication protocols that computer systems and software procedures use to run the correYvuela Website. This information is not collected in order to be associated with identified or identifiable individuals, but it could, through processing and in association with data held by third parties, make it possible to identify users. This type of data may include: IP addresses, domain names of the devices used to connect to the Website, addresses on the Uniform Resource Identifier (URI), the time and method in which a request is sent to the server, the size of the file obtained in response, the status code of the response given by the erver and other data on the operating system and environment of the user’s device. The purpose is to have anonymous statistical information on the use of the Website, to verify it works, to identify anomalies or misuse, and it is eliminated after processing. This data may also be used to determine responsibility in cases of computer crimes against the Website or third parties.

2.3.- Interaction with social media:

You may fill in the registration form on our Website to commission our Services, but you could also register for the Services, if you have a profile, on Facebook, Telegram, Instagram, LinkedIn, Twitter, SMS
(hereinafter, jointly, Social Media). In these cases, the Social Media sites will automatically send some of your data to correYvuela, specified in the pop-up window shown at the time of the request.

You may choose to link your correYvuela account to your Social Media accounts, if you have them. If you do link, connect or log in to your account with a service like social media, said service may send us data such as registration and profile information (username, ID of user associated with the account on social media, photo, email address) and all the other information the social media network is allowed to share with third parties. The data we receive depends on your privacy settings on each social media network. You can always review and change your privacy settings on third-party websites and services before linking them to our Website. For more information, please see our Cookies Policy.

3.- Lawful basis.

3.1.- To start and/or maintain the contractual relationship established to provide the Service you requested in all its phases, as well as to send you information (by email, phone, SMS, Social Media) regarding the contractual relationship established.

3.2- To comply with legal requirements, regulations and to fulfil and respond to requests from Courts, Spanish Ombudsman, Tax Ministry or competent Public Administrations carrying out an investigation.

3.3.- To carry out statistical analyses for the purposes of understanding how our Website and our services are used and to measure correYvuela business development.

3.4.- For the purposes of our legitimate interest to improve the Website, its functions and our services.

3.5.- For the purposes of our legitimate interest, in compliance with our terms and conditions, to protect our rights in case of dispute or claims.

3.6.- When permitted by law, except when consent is expressly denied, to notify you of promotions (by email, SMS or other equivalent electronic means of communication) on products and services similar to those you have previously acquired from us.

3.7.- To send you, with your prior consent (by email, SMS or other equivalent electronic means of communication) offers on products and services we believe could be of interest to you and are sold by us or
our commercial partners in the following sectors: tourism, recreation, free time.

3.8.- To ensure the safety of our Website and systems and to prevent or detect fraud, security incidents or other crimes.

3.9.- To personalise the online marketing communications and promotions we offer you based on information on how you use our Website, our products and services and other websites compiled using cookies.

4.- Recipients of the data.

4.1.- Our employees and/or authorised collaborators that provide assistance and consulting services in the areas of administration, product, legal advisory, customer service and computer systems, as well as those in charge of maintaining our network and the hardware and software, commercial consultants, professionals that provide legal auditing services or assess the value and capacities of the business, when necessary to sell our company or its assets.

4.2.- Our providers of accessory services that, as data processors, process your personal data, such as customer service providers, information technology and web hosting, and analysis services.

4.3.- Airlines, hotels and any other third parties that your details must be disclosed to in order to provide the service requested, which will act as data controllers.

We hereby inform you that airlines are obliged, by the laws of the United States of America and other States, to give customs and border authorities access to the personal data of the passengers on their flights.

We may have to communicate the data on the passengers on the booking to the competent authorities in the countries on the client’s travel itinerary if required by applicable law.

4.4.- Payment service providers and financial entities as data controllers, as correYvuela does not access the data you communicate to these providers via their digital platforms.

4.5.- Social media networks when you log in through them.

4.6.- The competent authorities when required by current law. Also, if we need to do so in order to exercise our rights or those of a third party, we may communicate them to the security authorities or bodies.

4.7- International transfer of data

The personal data of correYvuela Users and/or Clients is processed on AMAZON servers in the European Economic Area (EEA). As such, processing of your data by these service providers is not considered international transfer of data.

Bookings for services such as airlines and hotels are done by communicating your data to the corresponding data controllers (via their platforms, forms, etc.), which may process your data outside of the EEA in order to receive the services requested. We recommend you review their privacy policies before consenting to the processing of your data.

5.- Term of data storage.

We will store your personal data for as long as required to carry out the activities listed in this Privacy Policy, comply with the goals and fulfil legal obligations.

6.- Rights you may exercise and how to do so.

-. Right to access.

-. Right to receive information on the existence of your personal data and to get a copy.

-. Right to update, correct and/or modify your personal data.

-. Right to erasure and right to limitation.

-. Right to portability of your personal data in a structured, commonly used machine-readable format and to request the transfer of said data to another data controller.

-. Right to revoke consent, except when there is another lawful basis for processing said data.

-. Right to oppose, at any time, to the processing of your personal data in some circumstances.

You may exercise the aforementioned rights by contacting us by email at

-. Direct marketing communications.

You may oppose at any time by contacting or clicking on the “unsubscribe me” link that we include in every communication we send.

You have the right to lodge a claim with the AEPD if you believe your personal data has not been processed properly, although we recommend you contact us first through the DPO at

7.- Cookies.

Using our Website allows correYvuela to compile certain information considered personal data under the Regulation (an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier) so, by using cookies installed on your computer when you visit our Website, we can compile certain personal information. For more information, please see our Cookies Policy.

8.- Versions of the Privacy Policy.

correYvuela reserves the right to modify this Privacy Policy at any time, in which case we will publish the updated text on our Website.

Back to top

Utilizamos cookies propias y de terceros para mejorar nuestros servicios, elaborar información estadística, analizar sus hábitos de navegación y con ello personalizar el contenido que ofrecemos y mostrarle publicidad relacionada con sus preferencias. Al clicar en Aceptar o al continuar navegando se entenderá que acepta su uso. Puede configurar o rechazar la instalación de cookies consultando en el apartado Desactivación o eliminación de cookies.