1.1. Andalusí Tours is the owner of the website located at the Internet address https://www.andalusitours.com/ and of its accounts in social networks (hereinafter, this Website).

1.2. Andalusí Tours is the holder of the following accounts in the social networks:

Facebook.
Twitter. YouTube.
Instagram.
LinkedIn.

1.3. The person who accesses this Web Site (hereinafter, the User), ensures that he or she is of the minimum legal age to give consent in relation to the services of the information society.

1.4. By accessing this Web Site, the User expressly accepts all the clauses of its legal information, this privacy policy, and its cookie policy, as well as all those particular conditions gathered for the use of certain services. If you do not accept any of these clauses, the User must refrain from accessing this Website. Processing of personal data as responsible.

2.1. Below is more information about the different treatments that Andalusi Tours carries out as the responsible. Data provided through the form "Contact"

Who is responsible for processing your data? Andalusí Tours (more information in point 1.1). For what purpose do we process your personal data? We will treat the information that you facilitate to us, or authorize the access, with the purpose of managing what is indicated in your communication, and in the case that you authorize it, to offer you information about offers and novelties.

How long will we keep your data? The personal data you provide will be kept while your communication is being managed or for the minimum time necessary to comply with legal obligations. What is the legitimacy for the processing of your data? The legal basis for the processing of your data is your freely given consent.

To which recipients will your data be communicated? No data will be passed on to third parties, unless required by law or with your prior consent. What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or deletion, or the limitation of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 6).

What data must be provided? You are obliged to provide the data marked with an asterisk (*), if you do not provide such data you will not be allowed to contact Andalusi Tours. Data provided through the form "Work with us"

Who is responsible for processing your data? Andalusí Tours (more information in point 1.1). For what purpose do we process your personal data? We will treat the information that you facilitate to us, or authorize the access, with the purpose of managing the candidates to opt for the job offers of our company, and in the case that you authorize it, to offer you information about offers and news. How long will we keep your data? The personal data you provide will be kept while your request is being processed or for the minimum time necessary to comply with legal obligations. What is the legitimacy for the processing of your data? The legal basis for the processing of your data is your freely given consent.

To which recipients will your data be communicated? No data will be passed on to third parties, unless required by law or with your prior consent. What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or deletion, or the limitation of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 6).

What data must be provided? You are obliged to provide the data marked with an asterisk (*), if you do not provide such data you will not be allowed to contact Andalusi Tours. Data provided through comments in the section "Newsletter"

Who is responsible for processing your data? Andalusí Tours (more information in point 1.1). For what purpose do we process your personal data? We will treat the information you provide, or authorize access, in order to manage the sending of commercial communications by e-mail about our services and our offers. How long will we keep your data? The personal data you provide will be kept until consent is revoked via the contact form. What is the legitimacy for the processing of your data? The legal basis for the processing of your data is your freely given consent.

To which recipients will your data be communicated? No data will be passed on to third parties, unless required by law or with your prior consent.

What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or deletion, or the limitation of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 6).

What data must be provided? You are obliged to provide the data marked with an asterisk (*), if you do not provide such data you will not be allowed to request the sending of the Andalusi Tours newsletter. Data provided via email

Who is responsible for processing your data? Andalusí Tours (more information in point 1.1). For what purpose do we process your personal data? We will treat the information you provide, or authorize access, in order to manage your communication How long will we keep your data? The personal data you provide will be kept while your communication is being managed or for the minimum time necessary to comply with legal obligations. What is the legitimacy for the processing of your data? The legal basis for the processing of your data is your freely given consent. To which recipients will your data be communicated? No data will be passed on to third parties, unless required by law or with your prior consent. What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or deletion, or the limitation of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 6).

What data must be provided? You are not obliged to provide any information to contact Andalusi Tours through email. Contact through social networks and WhatsApp

Who is responsible for processing your data? Andalusí Tours (more information in point 1.1). For what purpose do we process your personal data? We will treat the information you provide, or authorize access, for the purpose of managing contacts in social networks. How long will we keep your data? The personal data you provide will be kept while your communication is being managed, or for the minimum time necessary to comply with legal obligations. What is the legitimacy for the processing of your data? The legal basis for the processing of your data is your freely given consent.

To which recipients will your data be communicated? No data will be passed on to third parties, unless required by law or with your prior consent. What are your rights when you provide us with your data? You have the right to request access to your personal data, and its rectification or deletion, or the limitation of its processing, or to object to its processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 6).

What data must be provided? You are not obliged to provide any information to contact Andalusi Tours through your social network accounts. Processing of personal data as a manager.

3.1. The User who signs a contract for the provision of services with Andalusi Tours as the person in charge of the processing, authorizes him/her to process the personal data necessary to provide the requested service. 3.2. For the execution of the services derived from the fulfilment of the object of this order, the persons responsible for the treatment will make available to Andalusí Tours, the necessary personal data to provide the requested service. 3.3. This agreement shall be valid for the duration of the contractual relationship. Upon termination of the contractual relationship, Andalusi Tours shall return the personal data to the person responsible or transfer it to another person designated by the person responsible, and delete any copies in its possession. However, the data may be kept blocked to meet possible administrative or jurisdictional responsibilities. 3.4. Andalusí Tours and all its staff are obliged to:

To use the personal data being processed, or those collected for inclusion, only for the purpose of this assignment. Under no circumstances may you use the data for your own purposes.

Process the data in accordance with the instructions of the data controller.

Keep, in writing, a register of all categories of processing activities carried out on behalf of the controller, containing The name and contact details of the manager(s) and each manager on whose behalf the manager is acting.

The categories of treatment carried out on behalf of each person in charge.

An overview of the appropriate technical and organisational security measures you are implementing.

Do not communicate the data to third parties, unless you have the express permission of the data controller, in the legally admissible cases. If the person in charge wants to subcontract, he must inform the person in charge and ask for his previous authorization.

To maintain the duty of secrecy with regard to the personal data to which it has had access by virtue of this order, even after the end of the contract.

To ensure that the persons authorised to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.

Maintain at the disposal of the person responsible the documentation accrediting compliance with the obligation established in the previous section.

Ensure the necessary training in personal data protection for persons authorised to process personal data. When the affected persons exercise their rights of access, rectification, suppression and opposition, limitation of the treatment and portability of data before Andalusí Tours, they must communicate this by e-mail to the address of the person responsible. The communication must be done immediately and in no case beyond the working day following the reception of the request, together, if necessary, with other information that may be relevant to resolve the request. Notification of data security violations: Andalusí Tours will notify the person responsible for the processing, without undue delay and through his e-mail address, of any violations of the security of personal data in his charge of which he becomes aware, together with all relevant information for the documentation and communication of the incident. At least the following information shall be provided Description of the nature of the personal data security breach, including, where possible, the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records affected.

Contact person's details for more information.

Description of the possible consequences of the violation of personal data security.

Description of the measures taken or proposed to remedy the breach of security of personal data, including, where appropriate, measures taken to mitigate any negative effects. If and to the extent that it is not possible to provide the information simultaneously, the information shall be provided gradually without undue delay. Andalusí Tours, at the request of the person responsible, will communicate these data security violations to the data subjects as soon as possible, when the violation is likely to pose a high risk to the rights and freedoms of individuals. The communication must be made in a clear and simple language and must include the elements that in each case are indicated by the person responsible, at least:

The nature of the data breach. Details of the contact point of the person in charge or of the person in charge where more information can be obtained.

Describe the possible consequences of the violation of the security of personal data.

Describe the measures adopted or proposed by the controller to remedy the breach of security of personal data, including, where appropriate, the measures taken to mitigate any negative effects. Make available to the person responsible all the information necessary to demonstrate compliance with their obligations, as well as for the performance of audits or inspections carried out by the person responsible or another auditor authorised by him.

To implement the technical and organizational security measures necessary to guarantee the confidentiality, integrity, availability and permanent resilience of the treatment systems and services. To return to the person responsible for the processing the personal data and, if applicable, the media where they are recorded, once the service has been provided.

The return must involve the total erasure of the existing data on the computer equipment used by Andalusi Tours. However, Andalusi Tours can keep a copy, with the data properly blocked, while responsibilities may arise from the execution of the service. 3.5. It corresponds to the person responsible for the treatment:

Give the person in charge the necessary data to provide the service.

To ensure, in advance and throughout the processing, compliance with the General Data Protection Regulations by Andalusí Tours. Supervise the treatment.

Social networks

4.1. By accessing Andalusi Tours' accounts on social networks, the User accepts the treatment of his/her personal data by the same according to its privacy policies:

Facebook Privacy Policy.

Privacy policy of Twitter.

YouTube Privacy Policy. Privacy policy of Instragram.

LinkedIn Privacy Policy.

Warranty. 5.1. The User guarantees that the information provided is true, exact, complete and up-to-date, and is responsible for any direct or indirect damage that may be caused as a result of non-compliance with this obligation. 5.2. In the event that the data provided belongs to a third party, the User guarantees that he has informed the said third party and obtained their authorisation to provide their personal data to Andalusi Tours. Rights. 6.1. Right of access: The User shall have the right to obtain confirmation from Andalusi Tours whether or not personal data concerning him is being processed and, if so, the right to access the personal data. 6.2. Right of rectification: The User shall have the right to obtain without undue delay from Andalusi Tours the rectification of inaccurate personal data concerning him. Taking into account the purposes of the processing, the User shall have the right to have incomplete personal data completed, including by means of an additional declaration. 6.3. Right of suppression: The User shall have the right to obtain from Andalusi Tours without undue delay the suppression of the personal data concerning him, which shall be obliged to suppress without undue delay the personal data.

6.4. Right to limitation of treatment: The User shall have the right to obtain from Andalusi Tours the limitation of the treatment of the data. 6.5. Right to data portability: The User shall have the right to receive the personal data concerning him/her, provided to Andalusí Tours, in a structured format, of common use and mechanical reading, and to transmit them to another person responsible for the processing without being prevented by the person responsible to whom they were provided. 6.6. Right of opposition: The User has the right to object at any time, on grounds relating to his/her particular situation, to personal data concerning him/her being processed. Andalusí Tours will stop processing personal data, unless it proves legitimate and compelling reasons for the processing that prevail over the interests, rights and freedoms of the User, or for the formulation, exercise or defense of claims.

6.7. Automated individual decisions, including profiling: The User shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on him or significantly affects him in a similar way.

6.8. Right to Withdraw Consent: The User shall have the right to withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to withdrawal. Withdrawal of consent shall be as easy as giving it. 6.9. The User can exercise his rights before Andalusí Tours by means of e-mail info@andalusitours.com. 6.10. More information on these rights here.

Cookies

A cookie is a small text file that stores useful information on your computer's hard drive. Each time you visit this website, our server will recognize the cookie and provide us with information about your last visit. The following cookies are used on this website:

PROPER COOKIES

Cookies strictly necessary for the provision of certain services expressly requested by the user: if these cookies are deactivated, you will not be able to receive our contents and services correctly.

THIRD PARTY COOKIES

These are the cookies that are installed by a website that is not the one you are visiting at the moment, for example, the advertiser of a banner that is on a website you are visiting, or a "Like" button of a social network on a website you are visiting and that that social network will be able to track.

Analytical Cookies: are cookies that collect statistical data on website activity (Google Analytics).

Social cookies: they are necessary for external social networks (Facebook, Google+ and Twitter). Their function is to control interaction with social widgets within the page. This type of cookies are used in the domains "facebook.com", "google.com" and "twitter.com".

Affiliate cookies: these are the cookies that track visits from other websites with which we have an affiliation agreement (Trivago).

DEACTIVATE COOKIES

The user can choose and disable the cookies that he or she does not want to work on this website. Below you will find information on how to configure them in your respective browser.

Google Chrome - https://support.google.com/chrome/answer/95647?hl=es

Internet Explorer - http://windows.microsoft.com/es-es/windows7/how-to-manage-cookies-in-internet-explorer-9

Firefox - http://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-que-los-sitios-web

Safari - http://support.apple.com/kb/ph5042

Privacy and cookie policy

Cookies

PROPER COOKIES

THIRD PARTY COOKIES

DEACTIVATE COOKIES