Privacy Policy

The following Privacy Policy refers to the policy applicable to this website (www.todotours.com, hereinafter the “Website”), owned by TODO TOURS GESTION SL (hereinafter “Todo Tours”), with Tax Identification Number B67952341 and registered office at Calle José Antonio de Armona, 12, 28012, Madrid, Spain, with e-mail address hola@todotours.com.

At Todo Tours we understand and respect the importance of the privacy of the information you provide us. That is why protecting the privacy of your data is a responsibility that we prioritise.

We also inform you that Todo Tours is responsible for the processing of your personal data. Although we are not subject to the obligation to designate a Data Protection Officer, for any query, request or clarification regarding the processing of your personal data, you can make your requests to the email and postal addresses indicated above.

We recommend that you carefully read all the terms and conditions described below.

1. REGULATIONS TO WHICH THIS WEBSITE IS SUBJECT TO

Todo Tours has adapted this website to the requirements of Spanish Ley Orgánica 15/1999, of 13 December, on the Protection of Personal Data (LOPD), and Real Decreto 1720/2007, of 21 December, known as the Regulations for the development of the LOPD.

Your data will be stored in our files in compliance with the regulations of the Spanish Data Protection Agency.

The website also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (RGPD), as well as with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE or LSSI).

2. ORIGIN OF YOUR DATA

The personal data processed on this website comes from:

• Newsletter Registration Form.
• Booking Form.
• Contact Form.
• Reviews and Comments Form.

3. PURPOSE OF THE PROCESSING OF YOUR DATA

Along with the purpose of informing the user about news and offers of the company’s products and services, and to obtain the necessary registration of data for the performance of the activities carried out by us and to inform of complementary activities carried out by Todo Tours, the following are the purposes of processing your personal data:

• To process and manage the provision of the service offered through our Website.
• Manage service payments.
• Request opinions and ratings of services.
• Manage your doubts or queries.
• Develop surveys, promotions and statistical studies.
• To inform of relevant changes in Todo Tours or in the access conditions to our website.
• To comply with Todo Tours’ invoicing, accounting and auditing requirements.
• Make commercial communications by email about other services offered on our website and that Todo Tours considers could be of interest to you.
• In the event that our website allows registration, create a user account and allow your access as a registered user to our Todo Tours website and/or mobile application on future occasions.
• To communicate the data to our collaborators for the provision of the contracted service.

4. COMMUNICATION OF DATA TO THIRD PARTIES

For the necessary provision of the contracted services, you agree that Todo Tours, as an intermediary, communicates your personal data to third party companies (partners or service providers), including those of other persons on whose behalf you have made the reservation. You also accept that you have obtained the express consent of such third parties before communicating their data to Todo Tours.

The data we send to our partners will only be used for the purpose of guaranteeing the contracted service. We will provide your name, email and telephone number, and in those services with hotel pick-up, the details of your accommodation for pick-up. We will also provide passport details, ID, age, nationality and gender, in cases of specific services that require it. Todo Tours will not provide any other personal information to third party companies. These suppliers have signed confidentiality and data processing contracts with Todo Tours required by current legislation, applying the necessary guarantees and safeguards to preserve the privacy of your data.

Consequently, by accepting this Privacy Policy, you agree that our partner may use the data provided to contact you, exclusively for the purpose of ensuring the provision of the contracted service.

We may also use or disclose personal information to third parties, when we deem it necessary or appropriate, in the following instances:

(a) in accordance with applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public authorities or officials, including official authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our partners; (f) to protect our rights, privacy, safety and property; or (g) to allow us to pursue available remedies or limit the extent of any damages that we may suffer.

5. COMMUNICATION BY E-MAIL

By accepting this Privacy Policy, you agree that Todo Tours may send you emails regarding the contracted services and its evaluations, as well as regarding changes in our terms, conditions and policies.

In addition, by accepting this Privacy Policy, you expressly agree that Todo Tours may send you commercial communications by email about other activities that are marketed through our website and that Todo Tours considers that could be of your interest, related to the field of leisure: Travel and Tourism, Communication and entertainment.

If you are no longer interested in receiving email marketing communications from us, you can unsubscribe at any time by following the instructions provided in each marketing email or by emailing us at hola@todotours.com.

6. DATA RETENTION

The personal data provided will be preserved:

• As long as the business relationship is maintained.
• No request for its deletion is made by the data subject.

7. RIGHTS

Every person has the right to obtain confirmation as to whether or not Todo Tours is processing personal data concerning them.

Interested persons have the following rights:

• Right to request access to personal data relating to the data subject.
• The right to request its rectification or deletion.
• The right to request the restriction of its processing.
• Right to object to its processing.
• Right to data portability.

You may exercise your rights by sending an e-mail to the following address: hola@todotours.com.

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. Todo Tours will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims. They may also request the portability of their data.

Data subjects also have the right to effective judicial protection and the right to file a claim to the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them is in breach of the Regulation.

8. NAVIGATION DATA

When you access our websites, we may automatically (not through registration) collect information that is not personally-identifiable (e.g., the type of Internet browser and operating system employed; the domain name of the originating website; the number of visits, average time spent on our website, pages visited). We may use this information and share it within Todo Tours to measure the use of our websites and improve their content.

9. SECURITY

All Tours takes precautionary measures to ensure the security of your personal information and strives to carry this out strictly through risk analysis and an ongoing security review and data protection impact assessment. We protect your personal information from loss, destruction, falsification, manipulation and unauthorised access.

However Todo Tours cannot guarantee the absolute impregnability of the Internet network and therefore the violation of data through fraudulent access to them by third parties.

In the event of a detection of a breach in which the user suffers some kind of damage, such as identity theft or violation of the security of personal data, Todo Tours has established the corresponding protocols for notifying the Data Protection Authority (72 hours maximum) and, if necessary, the interested parties.

10. VERACITY OF DATA

As a user, you are solely responsible for the accuracy and correctness of the data you submit to Todo Tours exonerating Todo Tours from any liability in this regard. Users guarantee and respond, in any case, the accuracy, validity and authenticity of the personal data provided and undertake to keep them updated. The user agrees to provide complete and correct information in the contact or subscription form.

11. ACCEPTANCE

The user declares to have been informed of the conditions on the protection of personal data, accepting and consenting to the processing of the same by Todo Tours in the manner and for the purposes indicated in this privacy policy.

12. CHANGES TO THE PRIVACY POLICY

Todo Tours reserves the right to modify this policy to adapt it to new legislation or case law, as well as industry practices. In such cases, the Provider will announce on this page the changes introduced reasonably in advance of their implementation.

13. CONTACT

To exercise your user rights or ask questions about our Privacy Policy, you can email us at hola@todotours.com.